last executing test programs: 2m30.119589298s ago: executing program 1 (id=10160): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040002006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 2m29.790563335s ago: executing program 1 (id=10166): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x1d) 2m29.5705301s ago: executing program 1 (id=10169): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000000)=r1, 0x4) 2m29.402137364s ago: executing program 1 (id=10173): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005700)=""/4135, 0x1027}], 0x1}, 0x10100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 2m29.255934987s ago: executing program 1 (id=10177): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0xc2, 0x24, 0xff, 0x5, 0x0, 0x0, 0x400, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7f, 0x80000000}, 0x11c060, 0x8, 0xfff, 0x2, 0x400, 0x6, 0xffc0, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x3, 0x80, 0xb4, 0x5, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x6}, 0x100, 0x1, 0xe, 0x2, 0xff, 0x8, 0x3, 0x0, 0xfffffff7, 0x0, 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x905, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x4}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = perf_event_open(&(0x7f0000001140)={0x5, 0x80, 0x2, 0x0, 0x1, 0xff, 0x0, 0x5, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x4, @perf_bp={0x0, 0x8}, 0x100610, 0x200, 0x3, 0x9, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000100100000d0000002a31137187683799d1b0fa2ad38bdf62776e338998933ceb35bccc419d34432e7fdfa89f4b5684019822d8dfeb2c6ca0256a9158fe13c210e64bf398272cbf061350b6e613f1e8f1f3a3a0e76f2b228605dc4566e55e4b9fe1e556fb370a20c3a88dd0f00d1e1af9f2be08e760e3b7e79900ba43aebe2f1cec8232f6f7f70336851069ec4e962008e357b6d16da247bda7"], 0x10}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013b9b7a7223399a7ab641832dde43d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m29.039828282s ago: executing program 1 (id=10182): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb9040a09000000000000e8fc55a10a0015000600142613600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f00000015c0)=""/310, 0x136}, {&(0x7f0000000780)=""/112, 0x70}], 0x5}, 0x2000) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001716c603e101383662d2ddc91c0000002000"/33, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000008018120800", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2m13.846686146s ago: executing program 32 (id=10182): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb9040a09000000000000e8fc55a10a0015000600142613600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f00000015c0)=""/310, 0x136}, {&(0x7f0000000780)=""/112, 0x70}], 0x5}, 0x2000) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001716c603e101383662d2ddc91c0000002000"/33, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000008018120800", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 24.377559228s ago: executing program 0 (id=11555): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x7f, 0x5, 0x6d, 0x0, 0x77d, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100200, 0x4, 0x8, 0x9, 0xffffffffffff0001, 0x4, 0x4d81, 0x0, 0xffff0001, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3b) 19.109842057s ago: executing program 0 (id=11568): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r1 = syz_clone(0x24050000, &(0x7f0000000380), 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)) perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_clone(0x51004600, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x8, 0x0, 0x4200003}, 0x0, 0xffffffffffffffff, r2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0), 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="2d68756765746c62202d68756765746c62202b70696473202d706572665f6576656e74202b637075736574202d696f202b6efa745f636c7320"], 0x39) 18.714189976s ago: executing program 0 (id=11571): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.50738453s ago: executing program 0 (id=11576): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="620427000cff00400300002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 18.323307965s ago: executing program 0 (id=11578): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x7f, 0x5, 0x6d, 0x0, 0x77d, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100200, 0x4, 0x8, 0x9, 0xffffffffffff0001, 0x4, 0x4d81, 0x0, 0xffff0001, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3b) 15.42677202s ago: executing program 0 (id=11587): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 7.631870037s ago: executing program 4 (id=11623): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.429857301s ago: executing program 4 (id=11626): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000080)="c63651118b1b19070800", 0xa}], 0x2}, 0x20040014) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7.382900822s ago: executing program 2 (id=11627): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4b, 0x5, 0x9, 0x20, 0x0, 0xf, 0x30061, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, @perf_bp={0x0}, 0x8, 0x4, 0x0, 0x6, 0x3, 0x9, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pI4 \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x484814eb}, [@ldst={0x0, 0x3, 0x3, 0x1, 0x6, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x76, &(0x7f0000000380)=""/118, 0x41100, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x5, 0xbc4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, r2, r3, r4, r5, r8, r9, r10], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESDEC=r11, @ANYRES16=r1, @ANYRES64=r11, @ANYRESOCT, @ANYRESOCT=r8, @ANYRES8], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000028000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(r13, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.093623219s ago: executing program 5 (id=11630): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x100b6) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.868129814s ago: executing program 4 (id=11631): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="a3", 0x1}], 0x2}, 0x8880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0xfffffff8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000040000007b00b7490000100000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c802, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)) r1 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000721d430a", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000007000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b50300000100000085000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8903, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 9) 6.781039896s ago: executing program 5 (id=11632): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x100, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001300)={'veth0_to_batadv\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000f0000000000000000000950f5bd0000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x28, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8044}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x31, &(0x7f0000000500)=ANY=[@ANYBLOB="180000003db50000000000009405000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002d34f4ff0000000018430000040000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYRES32, @ANYBLOB="0000000000000000800000000800000085000000a500e9c8b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000020000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018150000", @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000008500000048000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xf, r5, 0x8, &(0x7f0000000740)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x3, 0xcf, 0x5}, 0x10, r6, r4, 0x9, 0x0, &(0x7f0000000800)=[{0x4, 0x3, 0x4, 0x5}, {0x5, 0x2, 0x83a}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xb, 0x9}, {0x3, 0x1, 0x2, 0x5}, {0x1, 0x3, 0xa, 0x1}, {0x5, 0x1, 0x6, 0x1}, {0x5, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x8, 0xe}], 0x10, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 6.746701357s ago: executing program 2 (id=11634): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x7f, 0x5, 0x6d, 0x0, 0x77d, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100200, 0x4, 0x8, 0x9, 0xffffffffffff0001, 0x4, 0x4d81, 0x0, 0xffff0001, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3b) 6.433573534s ago: executing program 4 (id=11636): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x7f, 0x5, 0x6d, 0x0, 0x77d, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x100200, 0x4, 0x8, 0x9, 0xffffffffffff0001, 0x4, 0x4d81, 0x0, 0xffff0001, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3b) 6.228769349s ago: executing program 3 (id=11638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @ringbuf_query], &(0x7f0000000100)='GPL\x00', 0x5, 0xa6, &(0x7f0000000200)=""/166, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x3371}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x4, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x5}, {0x2, 0x4, 0x5}], 0x10, 0xfffeffff}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000006c0)=r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xb, [@var={0x2, 0x0, 0x0, 0xe, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x4}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @volatile={0x3}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x6}]}]}, {0x0, [0x41, 0x61, 0x30, 0x0, 0x30, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000940)=""/4096, 0x6f, 0x1000, 0x0, 0x4}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r1, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000001a00)=[0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001d00), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)='%pB \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x1c, 0x6, 0x220, 0x2, 0x1, 0x1, 0x47d376cb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x1a, 0xe, &(0x7f0000000700)=@raw=[@map_idx={0x18, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000780)='GPL\x00', 0xd, 0x11, &(0x7f00000007c0)=""/17, 0x41000, 0x63, '\x00', r2, @fallback=0x26, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x0, 0xf, 0x9, 0x5}, 0x10, r4, r1, 0x1, &(0x7f0000001ec0)=[r5, r6, r7, r8, r9, r10], &(0x7f0000001f00)=[{0x0, 0x1, 0x3, 0xc}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.596108799s ago: executing program 3 (id=11639): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffe, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xa038eea4719af03d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197, 0xc5}], 0x1}, 0x3062) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="fef56dc23c6a8230564f00795891d5b6b60ca2e50734165f60fd05994ee2deb8f8f0756edf73ce", 0x27}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="110000000000000000000000010000007f0000000000000014000000000000000000000001000000b900000000000000140000000000000000000000010000000010000000000000280000000000000000000000070000004410b580ffffc578771ccff2c237951e667e71f86b000000"], 0x88}, 0x4000044) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) 3.592985479s ago: executing program 2 (id=11648): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28) (async) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x80, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@sco, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="f69b00a0af3dbb21e542000f0bf00cc5053980c3c51e1826ef9ee161a5", 0x1d}, {&(0x7f0000000680)="7fd030675c99ab79ac2e7a1aee251f0effbd0c4f09a23f22e90b0afbdd7bb9397bfff1823cd107c88e5a564ada44494ef0d7fb3585f3efff6ca33f7c98d3d52cbe2a540cb5d07140388afc974109f855c30256afe6faa84b386cb35de73a5fa0a881b3bdd7c25457ef2aa4bb896515c74462bde7fb3965284dc120b6a817c37af2f7bfcc9bbd393fb711a9478fa52197593d19724c2397a79af8", 0x9a}, {&(0x7f00000008c0)="aba5ed527d3f3c5ba9c2c3ea16e373e6a3e43f6c553e7a8673337fffda322929cd399e66b21d81fed743897d552732592651af337d5ff342050d6b58220413", 0x3f}], 0x3}, 0x20008000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb90402200800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="93c6ebdcaba85ec173f6b65e62ed000324b85de2faec62bb877f7042aa17bc15045443f50594dbd88b199bc09cbb82b27067f982fa32f84a15b13c6a5735bcd4525819fc64747616df879b7eec2775945a4cac07eee0ec8d0ea1f221f2b5da69b3eab7d3fe561a24b1b637b6ffeaa257085d696759f12f66d110a602a78b979d7d45e2135fea13a25a99e7a228144a9ea658b247f9642eeaa5f2b11bc0ad8f15c761292a01ce4da4567c546cf922e5bd59c67cbc47be2844f28dd2fcbf90ef95808635eac869a0d89790db42c8be7c790b7b9bff69698f003d", 0xd9}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x110, 0x0, "f628a18e6a959675877026bd974297a91aa5b53133dc497d4b93e51019616e153ade0388216660d62fbbfa7908ececb6996b8678303721280c192913573e439f1d4943b47f481029e8ec7c60eeef6eb2c255f27a3ebbce9b788e027a0939a4e43e0345f32cf6a3d234ae578f2920c5f2cfcc60bacce5ccddff71c9e0409b075b842b09a775c84eb1e02e7669ba281337e117bbf3bf300cc2ecf907"}], 0xb0}, 0x40) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f0000000500)=""/42, 0x0, &(0x7f0000000780)="95d21d0a96710298a8357aa0fc4ed979382837c1c1bd54d6963d695df54a", 0x6}, 0x38) (async) r2 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000020000040000000300000000000c000000000000"], 0xffffffffffffffff, 0x3e, 0xb2, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)}, 0x844) 3.51307319s ago: executing program 3 (id=11640): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x3, 0x80, 0xb4, 0x5, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x6}, 0x100, 0x1, 0xe, 0x2, 0xff, 0x8, 0x3, 0x0, 0xfffffff7, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = perf_event_open(&(0x7f0000001140)={0x5, 0x80, 0x2, 0x0, 0x1, 0xff, 0x0, 0x5, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x4, @perf_bp={0x0, 0x8}, 0x100610, 0x200, 0x3, 0x9, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013b9b7a7223399a7ab641832dde43d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.51185856s ago: executing program 5 (id=11650): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffe, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xa038eea4719af03d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197, 0xc5}], 0x1}, 0x3062) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="fef56dc23c6a8230564f00795891d5b6b60ca2e50734165f60fd05994ee2deb8f8f0756edf73ce", 0x27}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="110000000000000000000000010000007f0000000000000014000000000000000000000001000000b900000000000000140000000000000000000000010000000010000000000000280000000000000000000000070000004410b580ffffc578771ccff2c237951e667e71f86b000000"], 0x88}, 0x4000044) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) 3.359639484s ago: executing program 2 (id=11641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000680)=0x1) r3 = syz_clone(0x28202f00, &(0x7f0000000440)="e2cbceeb416c01fe2c3764ea4c1d1300dc77ae75d9cd91eb9eb07e841d4fc5671013b3bffaad91a9112311b5d4d25a2cb65ae61b33e1c05bc6ba983716236d286ad6a677d5f700cf27387791bf8247af1afe2a8fd6fffe5bd451af76bc526079669bf238db0e05679af5b01576156ece714c904d", 0x74, &(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000580)="57863b1620edd225ff7f904298354a56d7ac07b8a91995de8dbf5a3b6d47ae3738be7e2a1196ae21c5dbb0204f2b48286ee08245fb5f8aeeb685b42e6582b618bd0b61722bd790a7b29157dac4dff3e6c893fd84108f3d206245aed74acebfc6e44f33f32153937cc024c6b79b3d5408971ad0ff8748f8ae1e7aeb80660d592dc72aa72c5aefa612ead6c4c996f9793d4d5ca84a06f7720d255b2bdca567398edb8e714082130782cfc313760bde663dc6c8819a27b20a41e07a97c1ef6073e1c6b1487e9155822667a79f989ffe1bb0c5475e11c4f1a878c1256fd33f2566e764850bfa40799deee9493fdf49330de7ee") perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x840, 0x0, 0x800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862, 0x0, 0xfffffffffffffffe}, r3, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="7b2501ed000000c84404c44d0d3413cbf48d433c22a351156814d5", @ANYRESDEC=r0], 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x2a928e5c}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r11) write$cgroup_int(r11, &(0x7f0000000200)=0x700, 0x12) openat$cgroup_int(r11, &(0x7f0000000380)='pids.max\x00', 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000040)="81408aa946b38ac2de9dee0e23cf938090250388919f4be7257764a8062b3700752df0fbc5285a49998030b61aa6cc594e3f323fa656b3755d97298e86520bcce14f3ef0b1534ae3dcf17458fa72f2d3d51e88e937831689f8cdbe9ec6ede34d21d2c291e7d9872f7812d610495fe98f85d5ff6c806916cc88a37e8420a20da1ec754ae87e2d0859816c8afd3bee97f8cbeeed99f4d34613e4070000000000000063adccf0371483aa5c9885a121c6745daee80500"/190, &(0x7f0000000100)=""/39, &(0x7f0000000140)="689f342f826658bf83b455da3360278ab5fe224dfe20256b3113311025c201", &(0x7f0000000180)="817668b3ed476dd9e9f5a850d986d81ea04c953a78c43df7a18d95f675884abb7d4457a221197dfc73af3bcd1d995c2d4fe4861c2f1c9faee3bc6b90d68b4c74267d1440045c1e33a6ce38c82f5d543ea70c68ba453321b111f94a77db315f18f1ea9c7594a1c50e7ed0e93a578efa0e7cd1823a612429f60b42f1adf2aa29db0e7f1e626a4abae33eb54580b697037becf784ef71bb5438b02e75c4", 0xc, r9, 0x4}, 0x38) 3.312556275s ago: executing program 5 (id=11642): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000080)="c63651118b1b19070800", 0xa}], 0x2}, 0x20040014) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.257521461s ago: executing program 4 (id=11643): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x30, 0x0, 0x5000) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b000240", 0x18}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.221439532s ago: executing program 3 (id=11644): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4b, 0x5, 0x9, 0x20, 0x0, 0xf, 0x30061, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, @perf_bp={0x0}, 0x8, 0x4, 0x0, 0x6, 0x3, 0x9, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pI4 \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x484814eb}, [@ldst={0x0, 0x3, 0x3, 0x1, 0x6, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x76, &(0x7f0000000380)=""/118, 0x41100, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x5, 0xbc4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, r2, r3, r4, r5, r8, r9, r10], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESDEC=r11, @ANYRES16=r1, @ANYRES64=r11, @ANYRESOCT, @ANYRESOCT=r8, @ANYRES8], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000028000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(r13, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 987.609038ms ago: executing program 5 (id=11645): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) close(r3) r5 = socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r7}, 0x20) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) sendmsg$sock(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000480)="707655aff8c5657f195ecb0314eba9b15487d4c2f6a4d24fdf7ec78fafb002e848b53432fa8a9bf6173323fbac41e029eec402b4e5d7a930bd6a26d3b72d1ad82cee5c273c3690c6f0a583df6e3896ffe5860fe6a28b44472216ec0fa7", 0x5d}], 0x2, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x74a}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}, 0x45) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x25, 0x0, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000080)="ff5ceeea40457723c97d5dc916ffb5945a4291de32fca9e07af3970533cea6b1badd12d0e65b56891cf829ba1e72083eff965ff876c1c1911ea81ddacf9833c73a69bd6cb94c48e32563576b62ed60e04e066288683fafcb7d52ee33c753b8d3370c8abe2a1107f39fbb32f2e509850f56cda9528236626d739368b514c693fcfd83a8c50c04afdbae3c3cd4f8dd309e026fa065fb9b3c9b6c9047f125cd1b5732f4c30d557425a697b77801cdf265178ad84032bc25d11b2ccb717cf24197f7a94c4336fec6c662b015a784", &(0x7f0000000400)=""/242, 0x4}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f00000014c0)=ANY=[@ANYBLOB="180800000800000000000000031f0000000000002020642500000000002020207b1cf8ff00000000000000000000000007010000f80000e2b56ccd426bc2c0b70c96bcf96704008500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) 974.265198ms ago: executing program 2 (id=11646): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0xc2, 0x24, 0xff, 0x5, 0x0, 0x0, 0x400, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7f, 0x80000000}, 0x11c060, 0x8, 0xfff, 0x2, 0x400, 0x6, 0xffc0, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000005c0)={0x3, 0x80, 0xb4, 0x5, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x100, 0x1, 0xe, 0x2, 0xff, 0x8, 0x3, 0x0, 0xfffffff7, 0x0, 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x905, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x4}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = perf_event_open(&(0x7f0000001140)={0x5, 0x80, 0x2, 0x0, 0x1, 0xff, 0x0, 0x5, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x4, @perf_bp={0x0, 0x8}, 0x100610, 0x200, 0x3, 0x9, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x11, 0x200000000000003, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000100100000d0000002a31137187683799d1b0fa2ad38bdf62776e338998933ceb35bccc419d34432e7fdfa89f4b5684019822d8dfeb2c6ca0256a9158fe13c210e64bf398272cbf061350b6e613f1e8f1f3a3a0e76f2b228605dc4566e55e4b9fe1e556fb370a20c3a88dd0f00d1e1af9f2be08e760e3b7e79900ba43aebe2f1cec8232f6f7f70336851069ec4e962008e357b6d16da247bda7"], 0x10}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013b9b7a7223399a7ab641832dde43d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 826.572491ms ago: executing program 3 (id=11647): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x18, 0x9, 0x101, 0x0, 0x6b200, r0, 0x1141, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r4, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6], 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 796.782442ms ago: executing program 4 (id=11649): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003800)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d00000000000000000200"/51], &(0x7f0000003740)=""/138, 0x3a, 0x8a, 0x1}, 0x28) close(r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, 0x0, 0x14) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b00000008000000020000843f49000009000000020000009100000001000000040000ca01000000005f3f5f615f2e00"], &(0x7f0000000680)=""/180, 0x47, 0xb4, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) 514.654748ms ago: executing program 2 (id=11651): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x100, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001300)={'veth0_to_batadv\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000f0000000000000000000950f5bd0000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x28, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8044}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x31, &(0x7f0000000500)=ANY=[@ANYBLOB="180000003db50000000000009405000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002d34f4ff0000000018430000040000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYRES32, @ANYBLOB="0000000000000000800000000800000085000000a500e9c8b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000020000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018150000", @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000008500000048000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xf, r5, 0x8, &(0x7f0000000740)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x3, 0xcf, 0x5}, 0x10, r6, r4, 0x9, 0x0, &(0x7f0000000800)=[{0x4, 0x3, 0x4, 0x5}, {0x5, 0x2, 0x83a}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xb, 0x9}, {0x3, 0x1, 0x2, 0x5}, {0x1, 0x3, 0xa, 0x1}, {0x5, 0x1, 0x6, 0x1}, {0x5, 0x1, 0x9, 0x2}, {0x2, 0x2, 0x8, 0xe}], 0x10, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 455.970549ms ago: executing program 5 (id=11652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3e1002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'pimreg0\x00', @local}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x100708, 0x7ff, 0x2, 0x8, 0x10001, 0x6, 0xd97d, 0x0, 0x7, 0x0, 0x7fff}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x4, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x600, 0x10000000}, 0x52cc) 0s ago: executing program 3 (id=11653): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffe, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xa038eea4719af03d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197, 0xc5}], 0x1}, 0x3062) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="fef56dc23c6a8230564f00795891d5b6b60ca2e50734165f60fd05994ee2deb8f8f0756edf73ce", 0x27}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="110000000000000000000000010000007f0000000000000014000000000000000000000001000000b900000000000000140000000000000000000000010000000010000000000000280000000000000000000000070000004410b580ffffc578771ccff2c237951e667e71f86b000000"], 0x88}, 0x4000044) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) kernel console output (not intermixed with test programs): : 55631 bytes leftover after parsing attributes in process `syz.4.10308'. [ 1544.085609][ T5934] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1544.119009][ T5937] FAULT_INJECTION: forcing a failure. [ 1544.119009][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.176504][ T5937] CPU: 0 PID: 5937 Comm: syz.4.10318 Not tainted syzkaller #0 [ 1544.184042][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1544.194245][ T5937] Call Trace: [ 1544.197804][ T5937] [ 1544.200786][ T5937] dump_stack_lvl+0x188/0x24e [ 1544.205501][ T5937] ? show_regs_print_info+0x12/0x12 [ 1544.210738][ T5937] ? load_image+0x410/0x410 [ 1544.215275][ T5937] ? __lock_acquire+0x7c40/0x7c40 [ 1544.220386][ T5937] should_fail_ex+0x390/0x4c0 [ 1544.225103][ T5937] _copy_from_user+0x2c/0x170 [ 1544.229823][ T5937] ___sys_sendmsg+0x1c3/0x360 [ 1544.234544][ T5937] ? __sys_sendmsg+0x2a0/0x2a0 [ 1544.239368][ T5937] ? __lock_acquire+0x7c40/0x7c40 [ 1544.244456][ T5937] __se_sys_sendmsg+0x1c3/0x2b0 [ 1544.249343][ T5937] ? ct_nmi_exit+0x145/0x1c0 [ 1544.253964][ T5937] ? __x64_sys_sendmsg+0x80/0x80 [ 1544.258956][ T5937] ? lockdep_hardirqs_on+0x94/0x140 [ 1544.264208][ T5937] do_syscall_64+0x4c/0xa0 [ 1544.268681][ T5937] ? clear_bhb_loop+0x60/0xb0 [ 1544.273355][ T5937] ? clear_bhb_loop+0x60/0xb0 [ 1544.278047][ T5937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.283963][ T5937] RIP: 0033:0x7f30fff9de99 [ 1544.288415][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.289955][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10317'. [ 1544.308025][ T5937] RSP: 002b:00007f3100df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.308055][ T5937] RAX: ffffffffffffffda RBX: 00007f3100225fa0 RCX: 00007f30fff9de99 [ 1544.308066][ T5937] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 1544.308076][ T5937] RBP: 00007f3100df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.308085][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.308094][ T5937] R13: 00007f3100226038 R14: 00007f3100225fa0 R15: 00007ffc329b17d8 [ 1544.308123][ T5937] [ 1544.381993][ T5935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1544.677142][ T5956] netlink: 'syz.2.10323': attribute type 10 has an invalid length. [ 1544.686102][ T5956] team0: Device hsr_slave_0 failed to register rx_handler [ 1544.724000][ T5959] netlink: 'syz.4.10324': attribute type 2 has an invalid length. [ 1545.203431][ T5984] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1545.223751][ T5981] netlink: 'syz.3.10333': attribute type 2 has an invalid length. [ 1545.369676][ T5991] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10335'. [ 1545.405932][ T5991] FAULT_INJECTION: forcing a failure. [ 1545.405932][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.442697][ T5991] CPU: 1 PID: 5991 Comm: syz.4.10335 Not tainted syzkaller #0 [ 1545.450226][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1545.460306][ T5991] Call Trace: [ 1545.463645][ T5991] [ 1545.466611][ T5991] dump_stack_lvl+0x188/0x24e [ 1545.471416][ T5991] ? show_regs_print_info+0x12/0x12 [ 1545.476635][ T5991] ? load_image+0x410/0x410 [ 1545.481160][ T5991] ? __might_sleep+0xd0/0xd0 [ 1545.485767][ T5991] ? __lock_acquire+0x7c40/0x7c40 [ 1545.490815][ T5991] should_fail_ex+0x390/0x4c0 [ 1545.495491][ T5991] should_failslab+0x5/0x20 [ 1545.499986][ T5991] slab_pre_alloc_hook+0x59/0x300 [ 1545.505011][ T5991] kmem_cache_alloc_node+0x5a/0x310 [ 1545.510205][ T5991] ? if_nlmsg_size+0x659/0x960 [ 1545.514988][ T5991] ? __alloc_skb+0xf9/0x7d0 [ 1545.519525][ T5991] __alloc_skb+0xf9/0x7d0 [ 1545.523865][ T5991] rtmsg_ifinfo_build_skb+0x80/0x190 [ 1545.529167][ T5991] rtnetlink_event+0xd1/0x1a0 [ 1545.533876][ T5991] raw_notifier_call_chain+0xcb/0x160 [ 1545.539247][ T5991] __netdev_upper_dev_unlink+0x202/0x7b0 [ 1545.544878][ T5991] ? netdev_upper_dev_unlink+0xe0/0xe0 [ 1545.550356][ T5991] ? __lock_acquire+0x7c40/0x7c40 [ 1545.555395][ T5991] ? netdev_upper_dev_unlink+0x88/0xe0 [ 1545.560855][ T5991] netdev_upper_dev_unlink+0x96/0xe0 [ 1545.566154][ T5991] ? netdev_master_upper_dev_link+0x100/0x100 [ 1545.572223][ T5991] ? dev_set_promiscuity+0x7d/0xe0 [ 1545.577353][ T5991] hsr_del_port+0x266/0x2a0 [ 1545.581969][ T5991] hsr_del_ports+0x2d/0x90 [ 1545.586397][ T5991] hsr_dellink+0x3f/0x70 [ 1545.590637][ T5991] ? hsr_newlink+0x6f0/0x6f0 [ 1545.595226][ T5991] rtnl_dellink+0x54c/0x830 [ 1545.599730][ T5991] ? rtnl_newlink+0x1f90/0x1f90 [ 1545.604636][ T5991] ? rtnl_newlink+0x1f90/0x1f90 [ 1545.609490][ T5991] rtnetlink_rcv_msg+0x863/0xfb0 [ 1545.614429][ T5991] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1545.619546][ T5991] ? rtnetlink_bind+0x80/0x80 [ 1545.624319][ T5991] ? __local_bh_enable_ip+0x136/0x1c0 [ 1545.629688][ T5991] ? lockdep_hardirqs_on+0x94/0x140 [ 1545.634886][ T5991] ? __local_bh_enable_ip+0x136/0x1c0 [ 1545.640250][ T5991] ? _local_bh_enable+0xa0/0xa0 [ 1545.645189][ T5991] ? __dev_queue_xmit+0x281/0x3810 [ 1545.650317][ T5991] ? __dev_queue_xmit+0x281/0x3810 [ 1545.655702][ T5991] ? __dev_queue_xmit+0x1d84/0x3810 [ 1545.660902][ T5991] ? __dev_queue_xmit+0x281/0x3810 [ 1545.666018][ T5991] ? ref_tracker_free+0x682/0x830 [ 1545.671135][ T5991] ? refcount_inc+0x70/0x70 [ 1545.675636][ T5991] ? memcpy+0x3c/0x60 [ 1545.679639][ T5991] ? __copy_skb_header+0x3ba/0x4f0 [ 1545.684765][ T5991] ? __skb_clone+0x446/0x6c0 [ 1545.689368][ T5991] netlink_rcv_skb+0x1ef/0x440 [ 1545.694131][ T5991] ? rtnetlink_bind+0x80/0x80 [ 1545.698808][ T5991] ? netlink_ack+0x1160/0x1160 [ 1545.703572][ T5991] ? netlink_deliver_tap+0x2e/0x1b0 [ 1545.708784][ T5991] netlink_unicast+0x7ad/0x920 [ 1545.713566][ T5991] netlink_sendmsg+0x8ad/0xbd0 [ 1545.718333][ T5991] ? netlink_getsockopt+0x550/0x550 [ 1545.723533][ T5991] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1545.729104][ T5991] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1545.734382][ T5991] ? security_socket_sendmsg+0x7c/0xa0 [ 1545.739832][ T5991] ? netlink_getsockopt+0x550/0x550 [ 1545.745058][ T5991] ____sys_sendmsg+0x5ed/0x9a0 [ 1545.749823][ T5991] ? __sys_sendmsg_sock+0x30/0x30 [ 1545.754862][ T5991] ? __import_iovec+0x306/0x510 [ 1545.759726][ T5991] ? import_iovec+0x6f/0xa0 [ 1545.764318][ T5991] ___sys_sendmsg+0x2a2/0x360 [ 1545.769000][ T5991] ? __sys_sendmsg+0x2a0/0x2a0 [ 1545.773778][ T5991] ? __lock_acquire+0x7c40/0x7c40 [ 1545.779006][ T5991] __se_sys_sendmsg+0x1c3/0x2b0 [ 1545.783855][ T5991] ? ct_nmi_exit+0x145/0x1c0 [ 1545.788458][ T5991] ? __x64_sys_sendmsg+0x80/0x80 [ 1545.793404][ T5991] ? lockdep_hardirqs_on+0x94/0x140 [ 1545.798619][ T5991] do_syscall_64+0x4c/0xa0 [ 1545.803045][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 1545.807720][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 1545.812397][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.818286][ T5991] RIP: 0033:0x7f30fff9de99 [ 1545.822694][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.842308][ T5991] RSP: 002b:00007f3100df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.850732][ T5991] RAX: ffffffffffffffda RBX: 00007f3100225fa0 RCX: 00007f30fff9de99 [ 1545.858703][ T5991] RDX: 0000000000044004 RSI: 0000200000000600 RDI: 0000000000000006 [ 1545.866681][ T5991] RBP: 00007f3100df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.874687][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1545.882661][ T5991] R13: 00007f3100226038 R14: 00007f3100225fa0 R15: 00007ffc329b17d8 [ 1545.890666][ T5991] [ 1545.898896][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.905364][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.914644][ T5991] device hsr_slave_1 left promiscuous mode [ 1546.246892][ T6011] netlink: 'syz.2.10341': attribute type 2 has an invalid length. [ 1546.353057][ T6014] FAULT_INJECTION: forcing a failure. [ 1546.353057][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.374931][ T6014] CPU: 1 PID: 6014 Comm: syz.0.10346 Not tainted syzkaller #0 [ 1546.382464][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1546.392545][ T6014] Call Trace: [ 1546.395849][ T6014] [ 1546.398802][ T6014] dump_stack_lvl+0x188/0x24e [ 1546.403529][ T6014] ? show_regs_print_info+0x12/0x12 [ 1546.408757][ T6014] ? load_image+0x410/0x410 [ 1546.413286][ T6014] ? __lock_acquire+0x7c40/0x7c40 [ 1546.418341][ T6014] should_fail_ex+0x390/0x4c0 [ 1546.423487][ T6014] _copy_to_user+0x2c/0x130 [ 1546.428003][ T6014] bpf_test_finish+0x4a2/0x600 [ 1546.432788][ T6014] ? convert_skb_to___skb+0x420/0x420 [ 1546.438179][ T6014] ? __build_skb+0x24b/0x3b0 [ 1546.442790][ T6014] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1546.448284][ T6014] ? cpu_online+0xa0/0xa0 [ 1546.452645][ T6014] bpf_prog_test_run+0x31c/0x390 [ 1546.457605][ T6014] __sys_bpf+0x62b/0x780 [ 1546.461865][ T6014] ? bpf_link_show_fdinfo+0x380/0x380 [ 1546.467258][ T6014] ? lock_chain_count+0x20/0x20 [ 1546.472121][ T6014] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1546.478162][ T6014] __x64_sys_bpf+0x78/0x90 [ 1546.482610][ T6014] do_syscall_64+0x4c/0xa0 [ 1546.487052][ T6014] ? clear_bhb_loop+0x60/0xb0 [ 1546.491774][ T6014] ? clear_bhb_loop+0x60/0xb0 [ 1546.496468][ T6014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.502371][ T6014] RIP: 0033:0x7f4a93d9de99 [ 1546.506794][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.526441][ T6014] RSP: 002b:00007f4a94cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1546.534869][ T6014] RAX: ffffffffffffffda RBX: 00007f4a94025fa0 RCX: 00007f4a93d9de99 [ 1546.542864][ T6014] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1546.550839][ T6014] RBP: 00007f4a94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.558810][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.566788][ T6014] R13: 00007f4a94026038 R14: 00007f4a94025fa0 R15: 00007ffdd5143b08 [ 1546.574797][ T6014] [ 1546.721197][ T6029] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1547.368156][ T6063] validate_nla: 2 callbacks suppressed [ 1547.368173][ T6063] netlink: 'syz.3.10359': attribute type 21 has an invalid length. [ 1547.381891][ T6063] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10359'. [ 1547.404822][ T6066] netlink: 'syz.4.10362': attribute type 2 has an invalid length. [ 1547.788973][ T6076] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1548.452929][ T6098] netlink: 'syz.4.10371': attribute type 2 has an invalid length. [ 1548.808634][ T6111] netlink: 'syz.0.10376': attribute type 2 has an invalid length. [ 1548.823635][ T6109] netlink: 'syz.4.10377': attribute type 10 has an invalid length. [ 1549.126642][ T6127] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1549.649759][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1549.669574][ T6148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.727819][ T6150] netlink: 'syz.4.10390': attribute type 2 has an invalid length. [ 1549.860923][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10392'. [ 1549.881448][ T6154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1550.464474][ T6178] netlink: 'syz.0.10401': attribute type 2 has an invalid length. [ 1550.565255][ T6186] netlink: 'syz.2.10404': attribute type 2 has an invalid length. [ 1550.598760][ T6176] FAULT_INJECTION: forcing a failure. [ 1550.598760][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.653687][ T6176] CPU: 1 PID: 6176 Comm: syz.3.10400 Not tainted syzkaller #0 [ 1550.661217][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1550.671297][ T6176] Call Trace: [ 1550.674606][ T6176] [ 1550.677565][ T6176] dump_stack_lvl+0x188/0x24e [ 1550.682291][ T6176] ? show_regs_print_info+0x12/0x12 [ 1550.687529][ T6176] ? load_image+0x410/0x410 [ 1550.692065][ T6176] ? __lock_acquire+0x7c40/0x7c40 [ 1550.697116][ T6176] ? snprintf+0xe5/0x140 [ 1550.701354][ T6176] should_fail_ex+0x390/0x4c0 [ 1550.706031][ T6176] _copy_to_user+0x2c/0x130 [ 1550.710616][ T6176] simple_read_from_buffer+0xe3/0x150 [ 1550.716003][ T6176] proc_fail_nth_read+0x1a6/0x220 [ 1550.721059][ T6176] ? proc_fault_inject_write+0x310/0x310 [ 1550.726724][ T6176] ? fsnotify_perm+0x248/0x550 [ 1550.731512][ T6176] ? proc_fault_inject_write+0x310/0x310 [ 1550.737161][ T6176] vfs_read+0x2db/0x960 [ 1550.741327][ T6176] ? kernel_read+0x1e0/0x1e0 [ 1550.745944][ T6176] ? __fget_files+0x28/0x460 [ 1550.750556][ T6176] ? __fget_files+0x3fc/0x460 [ 1550.755244][ T6176] ? __fdget_pos+0x2ae/0x360 [ 1550.759840][ T6176] ? ksys_read+0x70/0x260 [ 1550.764181][ T6176] ksys_read+0x14d/0x260 [ 1550.768429][ T6176] ? vfs_write+0x9a0/0x9a0 [ 1550.772849][ T6176] ? lockdep_hardirqs_on+0x94/0x140 [ 1550.778054][ T6176] do_syscall_64+0x4c/0xa0 [ 1550.782560][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 1550.787275][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 1550.791955][ T6176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1550.797856][ T6176] RIP: 0033:0x7f250515e6ce [ 1550.802270][ T6176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1550.821897][ T6176] RSP: 002b:00007f250604ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1550.830311][ T6176] RAX: ffffffffffffffda RBX: 00007f25060506c0 RCX: 00007f250515e6ce [ 1550.838284][ T6176] RDX: 000000000000000f RSI: 00007f25060500a0 RDI: 0000000000000005 [ 1550.846264][ T6176] RBP: 00007f2506050090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.854776][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.862750][ T6176] R13: 00007f2505426038 R14: 00007f2505425fa0 R15: 00007ffe275ac668 [ 1550.870736][ T6176] [ 1551.107945][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10407'. [ 1551.133994][ T6199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1551.308160][T23339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1551.323368][T23339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1551.332743][T23339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1551.342429][T23339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1551.351488][T23339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1551.360466][T23339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1551.658566][ T6206] netlink: 'syz.3.10410': attribute type 10 has an invalid length. [ 1551.953155][ T6227] netlink: 'syz.0.10417': attribute type 2 has an invalid length. [ 1551.978001][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 1552.070918][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.078318][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.094806][ T6202] device bridge_slave_0 entered promiscuous mode [ 1552.131622][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.139579][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.151949][ T6202] device bridge_slave_1 entered promiscuous mode [ 1552.212286][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.237066][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.344860][ T6202] team0: Port device team_slave_0 added [ 1552.353278][ T6202] team0: Port device team_slave_1 added [ 1552.405414][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.412421][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.505447][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.535712][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10422'. [ 1552.560774][ T6241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1552.586118][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.598135][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.653557][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.734153][ T6202] device hsr_slave_0 entered promiscuous mode [ 1552.747556][ T6202] device hsr_slave_1 entered promiscuous mode [ 1552.867143][ T6259] validate_nla: 2 callbacks suppressed [ 1552.867257][ T6259] netlink: 'syz.3.10430': attribute type 10 has an invalid length. [ 1552.915696][ T6261] netlink: 'syz.0.10429': attribute type 2 has an invalid length. [ 1553.294073][ T6202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1553.313167][ T6202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1553.338469][ T6202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1553.415056][T23339] Bluetooth: hci5: command 0x0409 tx timeout [ 1553.484566][ T6202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1553.662516][ T6280] netlink: 'syz.2.10437': attribute type 10 has an invalid length. [ 1553.758275][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.799770][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1553.813818][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1553.849564][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.876437][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10440'. [ 1553.895603][ T6290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1553.916028][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1553.937553][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1553.946933][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.954105][ T4663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.966188][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1553.994533][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.005174][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1554.017987][ T3145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.025157][ T3145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.039035][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1554.048531][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1554.094730][ T6298] netlink: 'syz.3.10443': attribute type 10 has an invalid length. [ 1554.103091][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1554.120184][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1554.137654][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1554.151068][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1554.166210][ T6293] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1554.182556][ T6202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1554.195870][ T6202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.210056][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1554.234695][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1554.264612][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1554.288447][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1554.317297][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.366319][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1555.232622][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10451'. [ 1555.272166][ T6326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.319015][ T6332] netlink: 'syz.0.10453': attribute type 10 has an invalid length. [ 1555.342851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1555.353347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1555.380850][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.483605][T23339] Bluetooth: hci5: command 0x041b tx timeout [ 1556.465657][ T6353] netlink: 'syz.0.10458': attribute type 10 has an invalid length. [ 1556.755695][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1556.767408][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.792833][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1556.886763][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1556.912361][ T6202] device veth0_vlan entered promiscuous mode [ 1556.926411][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1556.957254][ T6371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1556.982398][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.992580][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1557.031351][ T6202] device veth1_vlan entered promiscuous mode [ 1557.060745][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1557.072635][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1557.081518][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1557.093171][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1557.108544][ T6202] device veth0_macvtap entered promiscuous mode [ 1557.134107][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10467'. [ 1557.164700][ T6377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1557.183811][ T6202] device veth1_macvtap entered promiscuous mode [ 1557.210814][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.226590][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1557.238145][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1557.247087][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1557.257440][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1557.271444][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.280872][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.300890][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1557.325259][ T6202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.344289][ T6202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.353046][ T6202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.375273][ T6202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.505320][ T6386] netlink: 'syz.3.10472': attribute type 10 has an invalid length. [ 1557.562539][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.573626][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 1557.596311][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.630991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1557.678781][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.694630][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.716355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1558.029136][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10478'. [ 1558.050864][ T6403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.069456][ T6405] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10408'. [ 1558.079625][ T6405] device hsr_slave_0 left promiscuous mode [ 1558.099695][ T6405] device hsr_slave_1 left promiscuous mode [ 1558.442286][ T6423] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1558.779507][ T6433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10488'. [ 1558.802089][ T6433] device caif0 entered promiscuous mode [ 1558.821283][ T6433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.884127][ T6440] netlink: 'syz.3.10487': attribute type 10 has an invalid length. [ 1559.644126][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 1559.663071][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.670668][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.732118][ T6472] device bridge_slave_1 left promiscuous mode [ 1559.766257][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.793304][ T6472] device bridge_slave_0 left promiscuous mode [ 1559.831336][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.998148][ T6483] netlink: 'syz.4.10506': attribute type 21 has an invalid length. [ 1560.063950][ T6483] netlink: 'syz.4.10506': attribute type 6 has an invalid length. [ 1560.072829][ T6483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1560.235171][ T6490] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1560.593372][ T6501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10515'. [ 1560.622585][ T6501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1560.713725][ T6507] netlink: 'syz.5.10518': attribute type 2 has an invalid length. [ 1561.806503][ T6555] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1561.891146][ T6554] netlink: 'syz.5.10535': attribute type 2 has an invalid length. [ 1561.940318][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10534'. [ 1561.965533][ T6552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.275035][ T6594] netlink: 'syz.5.10548': attribute type 2 has an invalid length. [ 1563.324518][T23339] Bluetooth: hci2: command 0x0406 tx timeout [ 1563.363062][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10549'. [ 1563.434185][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.849654][ T6619] netlink: 'syz.3.10555': attribute type 6 has an invalid length. [ 1563.896056][ T6619] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1564.161340][ T6621] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1564.327663][ T6629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10557'. [ 1564.366210][ T6629] device hsr_slave_0 left promiscuous mode [ 1564.384034][ T6629] device hsr_slave_1 left promiscuous mode [ 1564.850733][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.041642][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.190446][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.271515][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.462235][ T6644] netlink: 'syz.2.10562': attribute type 10 has an invalid length. [ 1565.645316][ T6651] netlink: 'syz.3.10564': attribute type 2 has an invalid length. [ 1566.196811][ T6673] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1566.534111][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1566.561732][ T6681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1566.731539][ T6686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10575'. [ 1566.795018][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1566.851332][ T6688] netlink: 'syz.4.10576': attribute type 10 has an invalid length. [ 1567.120738][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10579'. [ 1567.131943][ T6694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1567.163817][ T6695] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1567.495430][ T6718] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1568.057764][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10588'. [ 1568.087153][ T6730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.233741][ T6740] netlink: 'syz.2.10592': attribute type 10 has an invalid length. [ 1568.252703][ T6742] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1568.313756][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10589'. [ 1568.354751][ T6739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.893962][ T6760] netlink: 'syz.0.10607': attribute type 10 has an invalid length. [ 1569.767884][ T6784] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1570.310706][ T6795] netlink: 'syz.2.10605': attribute type 10 has an invalid length. [ 1570.382069][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10606'. [ 1570.457681][ T6797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.568893][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10610'. [ 1570.585432][ T6802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.674193][ T6807] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1571.120130][ T6814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10613'. [ 1571.134773][ T6814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.472959][ T6833] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10619'. [ 1571.523441][ T6834] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1571.658710][ T6830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10620'. [ 1571.706652][ T6830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.756936][ T6837] netlink: 'syz.5.10621': attribute type 2 has an invalid length. [ 1571.906291][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10622'. [ 1571.986004][ T6841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.356968][ T6856] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10626'. [ 1572.404598][ T6856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.690280][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1572.725680][ T6870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.139862][ T6878] netlink: 'syz.0.10634': attribute type 2 has an invalid length. [ 1573.566118][ T6884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10635'. [ 1573.604360][ T6884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.967288][ T6897] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10641'. [ 1573.988351][ T6898] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1574.364143][ T6907] netlink: 'syz.4.10643': attribute type 6 has an invalid length. [ 1574.521573][ T6912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.046117][ T6930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.611885][ T6945] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1577.039738][ T6986] netlink: 'syz.0.10667': attribute type 10 has an invalid length. [ 1577.082832][ T6987] __nla_validate_parse: 3 callbacks suppressed [ 1577.082879][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10668'. [ 1577.156717][ T6987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1577.476042][ T7003] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1577.533015][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10683'. [ 1577.580287][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1577.795099][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10675'. [ 1577.855957][ T7013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1578.172198][ T7029] netlink: 'syz.0.10682': attribute type 10 has an invalid length. [ 1578.820525][ T7049] netlink: 'syz.4.10687': attribute type 10 has an invalid length. [ 1579.118341][ T7057] netlink: 'syz.4.10691': attribute type 10 has an invalid length. [ 1579.231002][ T7067] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1579.286289][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1579.339047][ T7066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1579.967792][ T7092] netlink: 'syz.2.10705': attribute type 10 has an invalid length. [ 1580.018356][ T7094] netlink: 'syz.5.10704': attribute type 10 has an invalid length. [ 1580.080858][ T7094] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1580.254628][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1580.279675][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1580.336604][ T7108] netlink: 'syz.2.10710': attribute type 10 has an invalid length. [ 1580.417740][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10713'. [ 1580.439711][ T7111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1580.487112][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10715'. [ 1580.505597][ T7113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1580.540091][ T7117] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1580.746098][ T7128] netlink: 'syz.0.10721': attribute type 10 has an invalid length. [ 1581.125626][ T7141] netlink: 'syz.5.10723': attribute type 10 has an invalid length. [ 1581.358687][ T7152] netlink: 'syz.0.10728': attribute type 10 has an invalid length. [ 1581.377771][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10730'. [ 1581.408408][ T7154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1581.626083][ T7162] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10733'. [ 1581.798856][ T7166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1581.959072][ T7172] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1581.995162][ T7171] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1582.528419][ T7197] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1582.633869][ T7206] netlink: 'syz.3.10746': attribute type 10 has an invalid length. [ 1582.906848][ T7216] __nla_validate_parse: 2 callbacks suppressed [ 1582.906883][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10749'. [ 1582.940156][ T7216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1583.020277][ T7224] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10752'. [ 1583.558406][ T7250] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1583.588139][ T7244] netlink: 'syz.4.10759': attribute type 10 has an invalid length. [ 1583.727009][ T7254] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1584.018698][ T7266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10766'. [ 1584.044232][ T7266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1584.084360][ T7269] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10767'. [ 1584.578617][ T7293] netlink: 'syz.5.10776': attribute type 10 has an invalid length. [ 1584.724378][ T7299] netlink: 'syz.3.10777': attribute type 10 has an invalid length. [ 1585.123393][ T7314] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1585.357013][ T7323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10784'. [ 1585.367446][ T7323] device hsr_slave_0 left promiscuous mode [ 1585.382409][ T7323] device hsr_slave_1 left promiscuous mode [ 1585.680561][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1585.715628][ T7334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1585.782108][ T7340] netlink: 'syz.3.10791': attribute type 10 has an invalid length. [ 1585.806545][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10793'. [ 1585.819412][ T7343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1586.114519][ T7346] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10794'. [ 1586.165798][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10797'. [ 1586.205549][ T7355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1586.343443][ T7367] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1586.537276][ T7377] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1586.759858][ T7385] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10805'. [ 1586.841450][ T7390] netlink: 'syz.3.10807': attribute type 2 has an invalid length. [ 1587.445179][ T7408] netlink: 'syz.3.10810': attribute type 19 has an invalid length. [ 1590.151446][ T7426] netlink: 'syz.4.10821': attribute type 2 has an invalid length. [ 1590.159702][ T7432] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1590.256173][ T7440] __nla_validate_parse: 2 callbacks suppressed [ 1590.256193][ T7440] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10823'. [ 1590.346888][ T4284] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 1590.414507][ T7449] netlink: 'syz.5.10826': attribute type 10 has an invalid length. [ 1590.835321][ T7472] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1590.958660][ T7478] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10839'. [ 1591.220342][ T7483] netlink: 'syz.4.10840': attribute type 10 has an invalid length. [ 1591.597846][ T7483] bond0: (slave hsr_slave_0): Enslaving as an active interface with an up link [ 1591.672025][ T7496] netlink: 'syz.3.10843': attribute type 10 has an invalid length. [ 1592.467111][ T7521] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10854'. [ 1592.537269][ T7534] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1592.874250][ T7542] netlink: 'syz.0.10859': attribute type 10 has an invalid length. [ 1593.411069][ T7559] FAULT_INJECTION: forcing a failure. [ 1593.411069][ T7559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.429439][ T7559] CPU: 1 PID: 7559 Comm: syz.0.10866 Not tainted syzkaller #0 [ 1593.437003][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1593.447084][ T7559] Call Trace: [ 1593.450401][ T7559] [ 1593.453356][ T7559] dump_stack_lvl+0x188/0x24e [ 1593.458084][ T7559] ? show_regs_print_info+0x12/0x12 [ 1593.463329][ T7559] ? load_image+0x410/0x410 [ 1593.467881][ T7559] ? __lock_acquire+0x7c40/0x7c40 [ 1593.472953][ T7559] should_fail_ex+0x390/0x4c0 [ 1593.477716][ T7559] _copy_from_user+0x2c/0x170 [ 1593.482471][ T7559] ___sys_sendmsg+0x1c3/0x360 [ 1593.487180][ T7559] ? __sys_sendmsg+0x2a0/0x2a0 [ 1593.491965][ T7559] ? trace_call_bpf+0xbf/0x6b0 [ 1593.496755][ T7559] __se_sys_sendmsg+0x1c3/0x2b0 [ 1593.501702][ T7559] ? perf_trace_preemptirq_template+0x268/0x320 [ 1593.508033][ T7559] ? __x64_sys_sendmsg+0x80/0x80 [ 1593.512982][ T7559] ? lockdep_hardirqs_on+0x94/0x140 [ 1593.518181][ T7559] do_syscall_64+0x4c/0xa0 [ 1593.522621][ T7559] ? clear_bhb_loop+0x60/0xb0 [ 1593.527299][ T7559] ? clear_bhb_loop+0x60/0xb0 [ 1593.531972][ T7559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1593.537882][ T7559] RIP: 0033:0x7f4a93d9de99 [ 1593.542298][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.561902][ T7559] RSP: 002b:00007f4a94cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.570315][ T7559] RAX: ffffffffffffffda RBX: 00007f4a94025fa0 RCX: 00007f4a93d9de99 [ 1593.578281][ T7559] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1593.586273][ T7559] RBP: 00007f4a94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.594236][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.602201][ T7559] R13: 00007f4a94026038 R14: 00007f4a94025fa0 R15: 00007ffdd5143b08 [ 1593.610187][ T7559] [ 1593.946105][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10872'. [ 1594.066551][ T7572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.087175][ T7578] netlink: 'syz.2.10873': attribute type 10 has an invalid length. [ 1594.109537][ T7565] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10869'. [ 1594.232900][ T7581] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1595.019886][ T7615] netlink: 'syz.5.10884': attribute type 2 has an invalid length. [ 1595.412701][ T7619] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10886'. [ 1595.704306][ T7630] netlink: 'syz.4.10889': attribute type 10 has an invalid length. [ 1595.738792][ T7632] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1595.828669][ T7634] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10891'. [ 1595.853995][ T7634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1596.061076][ T7643] FAULT_INJECTION: forcing a failure. [ 1596.061076][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.099017][ T7643] CPU: 1 PID: 7643 Comm: syz.0.10894 Not tainted syzkaller #0 [ 1596.106544][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1596.116700][ T7643] Call Trace: [ 1596.119974][ T7643] [ 1596.122891][ T7643] dump_stack_lvl+0x188/0x24e [ 1596.127581][ T7643] ? show_regs_print_info+0x12/0x12 [ 1596.132808][ T7643] ? load_image+0x410/0x410 [ 1596.137336][ T7643] ? __might_sleep+0xd0/0xd0 [ 1596.141924][ T7643] ? __lock_acquire+0x7c40/0x7c40 [ 1596.146958][ T7643] should_fail_ex+0x390/0x4c0 [ 1596.151662][ T7643] should_failslab+0x5/0x20 [ 1596.156179][ T7643] slab_pre_alloc_hook+0x59/0x300 [ 1596.161206][ T7643] ? mas_next_entry+0xde9/0xe90 [ 1596.166061][ T7643] kmem_cache_alloc+0x56/0x2f0 [ 1596.170824][ T7643] ? vm_area_dup+0x23/0x1a0 [ 1596.175329][ T7643] vm_area_dup+0x23/0x1a0 [ 1596.179657][ T7643] copy_mm+0xb13/0x1680 [ 1596.183816][ T7643] ? copy_signal+0x640/0x640 [ 1596.188408][ T7643] ? lockdep_init_map_type+0x98/0x8d0 [ 1596.193790][ T7643] ? __init_rwsem+0x11e/0x160 [ 1596.198490][ T7643] ? copy_signal+0x51f/0x640 [ 1596.203094][ T7643] copy_process+0x19a6/0x40c0 [ 1596.207803][ T7643] ? copy_process+0x974/0x40c0 [ 1596.212577][ T7643] ? idle_dummy+0x10/0x10 [ 1596.216909][ T7643] kernel_clone+0x24b/0x900 [ 1596.221452][ T7643] ? ksys_write+0x1ce/0x260 [ 1596.226001][ T7643] ? create_io_thread+0x170/0x170 [ 1596.231045][ T7643] __x64_sys_clone+0x1a7/0x220 [ 1596.235818][ T7643] ? __fget_files+0x3fc/0x460 [ 1596.240536][ T7643] ? __ia32_sys_vfork+0x140/0x140 [ 1596.245706][ T7643] ? lock_chain_count+0x20/0x20 [ 1596.250602][ T7643] ? lockdep_hardirqs_on+0x94/0x140 [ 1596.255813][ T7643] do_syscall_64+0x4c/0xa0 [ 1596.260235][ T7643] ? clear_bhb_loop+0x60/0xb0 [ 1596.264912][ T7643] ? clear_bhb_loop+0x60/0xb0 [ 1596.269594][ T7643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.275503][ T7643] RIP: 0033:0x7f4a93d9de99 [ 1596.279951][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.299594][ T7643] RSP: 002b:00007f4a94cc8fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1596.308038][ T7643] RAX: ffffffffffffffda RBX: 00007f4a94025fa0 RCX: 00007f4a93d9de99 [ 1596.316041][ T7643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000160480 [ 1596.324041][ T7643] RBP: 00007f4a94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.332129][ T7643] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1596.340215][ T7643] R13: 00007f4a94026038 R14: 00007f4a94025fa0 R15: 00007ffdd5143b08 [ 1596.348236][ T7643] [ 1596.358543][ T7649] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1596.587779][ T7658] netlink: 'syz.2.10897': attribute type 2 has an invalid length. [ 1596.674381][ T7663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10899'. [ 1596.694589][ T7663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1596.983857][ T7674] netlink: 'syz.4.10904': attribute type 10 has an invalid length. [ 1597.022523][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10902'. [ 1597.065172][ T7670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1597.343341][ T7687] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10906'. [ 1597.383341][ T7687] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1598.518794][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10914'. [ 1598.544085][ T7710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1598.589468][ T7716] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1598.768726][ T7715] netlink: 'syz.0.10916': attribute type 10 has an invalid length. [ 1598.822373][ T7719] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10917'. [ 1599.667336][ T7752] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10925'. [ 1599.701216][ T7753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10924'. [ 1599.764234][ T7753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1599.823353][ T7752] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1600.441748][ T7771] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10931'. [ 1600.502005][ T7767] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1600.578869][ T7776] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1600.760583][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10934'. [ 1600.800252][ T7790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1601.040088][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10937'. [ 1601.061683][ T7799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1601.099848][ T7801] netlink: 'syz.3.10938': attribute type 10 has an invalid length. [ 1601.240610][ T7806] netlink: 'syz.2.10940': attribute type 3 has an invalid length. [ 1601.256768][ T7806] netlink: 'syz.2.10940': attribute type 153 has an invalid length. [ 1601.277215][ T7806] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1601.321364][ T7807] netlink: 'syz.2.10940': attribute type 3 has an invalid length. [ 1601.340084][ T7807] netlink: 'syz.2.10940': attribute type 153 has an invalid length. [ 1601.363581][ T7807] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1601.586628][ T7819] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10945'. [ 1601.896502][ T7838] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1602.267717][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10953'. [ 1602.326537][ T7844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1602.378428][ T7846] netlink: 'syz.5.10954': attribute type 10 has an invalid length. [ 1602.614906][ T7854] netlink: 'syz.5.10958': attribute type 7 has an invalid length. [ 1602.622813][ T7854] netlink: 208404 bytes leftover after parsing attributes in process `syz.5.10958'. [ 1602.781217][ T7864] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10962'. [ 1602.962814][ T7870] FAULT_INJECTION: forcing a failure. [ 1602.962814][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.011992][ T7870] CPU: 1 PID: 7870 Comm: syz.5.10964 Not tainted syzkaller #0 [ 1603.019556][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1603.029645][ T7870] Call Trace: [ 1603.032954][ T7870] [ 1603.035918][ T7870] dump_stack_lvl+0x188/0x24e [ 1603.040641][ T7870] ? show_regs_print_info+0x12/0x12 [ 1603.045876][ T7870] ? load_image+0x410/0x410 [ 1603.050509][ T7870] ? __might_sleep+0xd0/0xd0 [ 1603.055125][ T7870] ? __lock_acquire+0x7c40/0x7c40 [ 1603.060172][ T7870] should_fail_ex+0x390/0x4c0 [ 1603.064865][ T7870] should_failslab+0x5/0x20 [ 1603.069386][ T7870] slab_pre_alloc_hook+0x59/0x300 [ 1603.074418][ T7870] ? trace_event_raw_event_lock+0x230/0x230 [ 1603.080315][ T7870] ? bpf_ctx_init+0xb2/0x190 [ 1603.084943][ T7870] __kmem_cache_alloc_node+0x4f/0x270 [ 1603.090324][ T7870] ? bpf_ctx_init+0xb2/0x190 [ 1603.094922][ T7870] __kmalloc+0xa3/0x240 [ 1603.099098][ T7870] bpf_ctx_init+0xb2/0x190 [ 1603.103529][ T7870] bpf_prog_test_run_xdp+0x297/0xf80 [ 1603.108910][ T7870] ? __lock_acquire+0x7c40/0x7c40 [ 1603.113968][ T7870] ? dev_put+0x80/0x80 [ 1603.118059][ T7870] ? dev_put+0x80/0x80 [ 1603.122132][ T7870] bpf_prog_test_run+0x31c/0x390 [ 1603.127107][ T7870] __sys_bpf+0x62b/0x780 [ 1603.131367][ T7870] ? bpf_link_show_fdinfo+0x380/0x380 [ 1603.136788][ T7870] ? lock_chain_count+0x20/0x20 [ 1603.141659][ T7870] __x64_sys_bpf+0x78/0x90 [ 1603.146083][ T7870] do_syscall_64+0x4c/0xa0 [ 1603.150504][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 1603.155184][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 1603.159881][ T7870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.165776][ T7870] RIP: 0033:0x7fd29ff9de99 [ 1603.170219][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.189831][ T7870] RSP: 002b:00007fd2a0d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1603.198261][ T7870] RAX: ffffffffffffffda RBX: 00007fd2a0225fa0 RCX: 00007fd29ff9de99 [ 1603.206238][ T7870] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1603.214210][ T7870] RBP: 00007fd2a0d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.222184][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.230155][ T7870] R13: 00007fd2a0226038 R14: 00007fd2a0225fa0 R15: 00007fff669a8c38 [ 1603.238167][ T7870] [ 1603.307862][ T7875] netlink: 'syz.0.10968': attribute type 10 has an invalid length. [ 1603.345830][ T7876] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1603.528365][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10969'. [ 1603.595250][ T7883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1604.482189][ T7914] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1604.879718][ T7939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1604.910174][ T7940] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1605.305637][ T7949] can: request_module (can-proto-3) failed. [ 1605.453676][ T7959] __nla_validate_parse: 4 callbacks suppressed [ 1605.454534][ T7959] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10993'. [ 1605.586165][ T7961] FAULT_INJECTION: forcing a failure. [ 1605.586165][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.601257][ T7961] CPU: 0 PID: 7961 Comm: syz.3.10994 Not tainted syzkaller #0 [ 1605.608760][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1605.618845][ T7961] Call Trace: [ 1605.622172][ T7961] [ 1605.625108][ T7961] dump_stack_lvl+0x188/0x24e [ 1605.629805][ T7961] ? show_regs_print_info+0x12/0x12 [ 1605.635011][ T7961] ? load_image+0x410/0x410 [ 1605.639526][ T7961] ? __might_sleep+0xd0/0xd0 [ 1605.644220][ T7961] ? __lock_acquire+0x7c40/0x7c40 [ 1605.649260][ T7961] should_fail_ex+0x390/0x4c0 [ 1605.653965][ T7961] should_failslab+0x5/0x20 [ 1605.658483][ T7961] slab_pre_alloc_hook+0x59/0x300 [ 1605.663522][ T7961] ? tomoyo_encode+0x28a/0x550 [ 1605.668294][ T7961] __kmem_cache_alloc_node+0x4f/0x270 [ 1605.673678][ T7961] ? tomoyo_encode+0x28a/0x550 [ 1605.678454][ T7961] __kmalloc+0xa3/0x240 [ 1605.682627][ T7961] tomoyo_encode+0x28a/0x550 [ 1605.687231][ T7961] tomoyo_realpath_from_path+0x578/0x5c0 [ 1605.692890][ T7961] ? tomoyo_domain+0xd2/0x120 [ 1605.697582][ T7961] ? tomoyo_path_number_perm+0x205/0x650 [ 1605.703216][ T7961] tomoyo_path_number_perm+0x22f/0x650 [ 1605.708685][ T7961] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1605.714155][ T7961] ? common_file_perm+0x171/0x1c0 [ 1605.719249][ T7961] ? __fget_files+0x28/0x460 [ 1605.723867][ T7961] security_file_ioctl+0x6c/0xa0 [ 1605.728814][ T7961] __se_sys_ioctl+0x48/0x170 [ 1605.733412][ T7961] do_syscall_64+0x4c/0xa0 [ 1605.737837][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 1605.742520][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 1605.747212][ T7961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.753128][ T7961] RIP: 0033:0x7f250519de99 [ 1605.757569][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.777181][ T7961] RSP: 002b:00007f2506050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.785611][ T7961] RAX: ffffffffffffffda RBX: 00007f2505425fa0 RCX: 00007f250519de99 [ 1605.793585][ T7961] RDX: 0000000000000000 RSI: 0000000080086601 RDI: 0000000000000004 [ 1605.801564][ T7961] RBP: 00007f2506050090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.809538][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.817515][ T7961] R13: 00007f2505426038 R14: 00007f2505425fa0 R15: 00007ffe275ac668 [ 1605.825627][ T7961] [ 1605.876361][ T7961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1606.128162][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11001'. [ 1606.170707][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1606.358119][ T7994] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1606.943170][ T8020] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11014'. [ 1607.067961][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1607.090321][ T8025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1607.122516][ T8031] netlink: 'syz.5.11018': attribute type 10 has an invalid length. [ 1607.213334][ T8034] netlink: 'syz.3.11019': attribute type 10 has an invalid length. [ 1607.325707][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.332102][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.457129][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11023'. [ 1607.494162][ T8041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1607.860064][ T8059] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1608.020968][ T8066] netlink: 'syz.2.11031': attribute type 10 has an invalid length. [ 1608.327995][ T8078] netlink: 'syz.3.11035': attribute type 2 has an invalid length. [ 1608.351783][ T8077] netlink: 'syz.2.11034': attribute type 10 has an invalid length. [ 1608.531265][ T8080] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1608.568076][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11038'. [ 1608.638128][ T8086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1608.660936][ T8091] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11040'. [ 1608.886764][ T8100] netlink: 'syz.5.11044': attribute type 10 has an invalid length. [ 1609.032862][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11046'. [ 1609.058928][ T8103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1609.096641][ T8107] netlink: 'syz.5.11049': attribute type 2 has an invalid length. [ 1609.313953][ T8110] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1609.456139][ T8119] netlink: 'syz.4.11053': attribute type 10 has an invalid length. [ 1609.634574][ T8124] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11054'. [ 1609.671851][ T8124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1609.822302][ T8131] netlink: 'syz.0.11059': attribute type 10 has an invalid length. [ 1609.918494][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11060'. [ 1610.054263][ T8141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1610.114106][ T8145] netlink: 'syz.2.11063': attribute type 2 has an invalid length. [ 1610.546962][ T8164] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1611.265326][ T8196] __nla_validate_parse: 2 callbacks suppressed [ 1611.265345][ T8196] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11084'. [ 1611.313103][ T8201] FAULT_INJECTION: forcing a failure. [ 1611.313103][ T8201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.347197][ T8201] CPU: 1 PID: 8201 Comm: syz.0.11086 Not tainted syzkaller #0 [ 1611.354718][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1611.364793][ T8201] Call Trace: [ 1611.368096][ T8201] [ 1611.371049][ T8201] dump_stack_lvl+0x188/0x24e [ 1611.375758][ T8201] ? show_regs_print_info+0x12/0x12 [ 1611.380987][ T8201] ? load_image+0x410/0x410 [ 1611.385517][ T8201] ? __lock_acquire+0x7c40/0x7c40 [ 1611.390628][ T8201] should_fail_ex+0x390/0x4c0 [ 1611.395340][ T8201] _copy_from_user+0x2c/0x170 [ 1611.400048][ T8201] __sys_bpf+0x2ea/0x780 [ 1611.404317][ T8201] ? bpf_link_show_fdinfo+0x380/0x380 [ 1611.409721][ T8201] ? lock_chain_count+0x20/0x20 [ 1611.414593][ T8201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1611.420685][ T8201] __x64_sys_bpf+0x78/0x90 [ 1611.425146][ T8201] do_syscall_64+0x4c/0xa0 [ 1611.429576][ T8201] ? clear_bhb_loop+0x60/0xb0 [ 1611.434268][ T8201] ? clear_bhb_loop+0x60/0xb0 [ 1611.438974][ T8201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.444902][ T8201] RIP: 0033:0x7f4a93d9de99 [ 1611.449334][ T8201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.469011][ T8201] RSP: 002b:00007f4a94cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1611.477443][ T8201] RAX: ffffffffffffffda RBX: 00007f4a94025fa0 RCX: 00007f4a93d9de99 [ 1611.485423][ T8201] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1611.493402][ T8201] RBP: 00007f4a94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.501390][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.509367][ T8201] R13: 00007f4a94026038 R14: 00007f4a94025fa0 R15: 00007ffdd5143b08 [ 1611.517364][ T8201] [ 1611.803337][ T8224] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1611.875433][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11093'. [ 1611.946402][ T8219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1611.972714][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11095'. [ 1612.002313][ T8228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1612.051299][ T8230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11094'. [ 1612.136338][ T8230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1612.360622][ T8243] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11100'. [ 1612.393759][ T8237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11107'. [ 1612.426867][ T8237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1612.726669][ T8253] validate_nla: 4 callbacks suppressed [ 1612.726709][ T8253] netlink: 'syz.4.11104': attribute type 10 has an invalid length. [ 1612.769490][ T8256] netlink: 'syz.0.11105': attribute type 2 has an invalid length. [ 1612.998632][ T8262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11108'. [ 1613.064100][ T8262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.411610][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11114'. [ 1613.455437][ T8283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.640813][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11117'. [ 1613.740983][ T8291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.759077][ T8294] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11118'. [ 1613.774131][ T8296] netlink: 'syz.3.11119': attribute type 2 has an invalid length. [ 1614.076266][ T8303] netlink: 'syz.2.11121': attribute type 10 has an invalid length. [ 1614.380474][ T8318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1614.664410][ T8323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1614.772252][ T8335] netlink: 'syz.5.11132': attribute type 2 has an invalid length. [ 1615.068761][ T8339] netlink: 'syz.2.11135': attribute type 10 has an invalid length. [ 1615.254894][ T8352] net_ratelimit: 1 callbacks suppressed [ 1615.254931][ T8352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1615.509443][ T8362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1615.625050][ T8375] netlink: 'syz.3.11149': attribute type 2 has an invalid length. [ 1618.408400][ T8388] netlink: 'syz.3.11155': attribute type 10 has an invalid length. [ 1618.557735][ T8408] netlink: 'syz.2.11161': attribute type 1 has an invalid length. [ 1618.569565][ T8408] netlink: 'syz.2.11161': attribute type 3 has an invalid length. [ 1618.619782][ T8408] __nla_validate_parse: 6 callbacks suppressed [ 1618.619802][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1618.620142][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1618.692761][ T8411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1618.708353][ T8412] netlink: 'syz.3.11163': attribute type 2 has an invalid length. [ 1618.716705][ T8408] netlink: 'syz.2.11161': attribute type 41 has an invalid length. [ 1619.132638][ T8426] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11168'. [ 1619.202845][ T8433] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1619.267271][ T8439] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1619.619706][ T8447] device hsr0 entered promiscuous mode [ 1619.792234][ T8449] netlink: 'syz.5.11174': attribute type 10 has an invalid length. [ 1619.820392][ T8452] netlink: 'syz.3.11175': attribute type 10 has an invalid length. [ 1619.866935][ T8455] netlink: 'syz.0.11177': attribute type 2 has an invalid length. [ 1620.533238][ T8493] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1620.563175][ T8495] netlink: 'syz.0.11190': attribute type 2 has an invalid length. [ 1620.593996][ T8497] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1620.603858][ T8496] netlink: 'syz.4.11189': attribute type 10 has an invalid length. [ 1620.799148][ T8504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11191'. [ 1621.241835][ T8523] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.11197'. [ 1621.982109][ T8549] FAULT_INJECTION: forcing a failure. [ 1621.982109][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.997035][ T8548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11205'. [ 1622.033954][ T8549] CPU: 0 PID: 8549 Comm: syz.2.11206 Not tainted syzkaller #0 [ 1622.041489][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1622.051562][ T8549] Call Trace: [ 1622.054844][ T8549] [ 1622.057772][ T8549] dump_stack_lvl+0x188/0x24e [ 1622.062474][ T8549] ? show_regs_print_info+0x12/0x12 [ 1622.067684][ T8549] ? load_image+0x410/0x410 [ 1622.072184][ T8549] ? __might_sleep+0xd0/0xd0 [ 1622.076765][ T8549] ? __lock_acquire+0x7c40/0x7c40 [ 1622.081800][ T8549] should_fail_ex+0x390/0x4c0 [ 1622.086477][ T8549] should_failslab+0x5/0x20 [ 1622.090973][ T8549] slab_pre_alloc_hook+0x59/0x300 [ 1622.095998][ T8549] kmem_cache_alloc_node+0x5a/0x310 [ 1622.101196][ T8549] ? __alloc_skb+0xf9/0x7d0 [ 1622.105720][ T8549] __alloc_skb+0xf9/0x7d0 [ 1622.110047][ T8549] netlink_sendmsg+0x654/0xbd0 [ 1622.114818][ T8549] ? netlink_getsockopt+0x550/0x550 [ 1622.120014][ T8549] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1622.125558][ T8549] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1622.130836][ T8549] ? security_socket_sendmsg+0x7c/0xa0 [ 1622.136288][ T8549] ? netlink_getsockopt+0x550/0x550 [ 1622.141484][ T8549] ____sys_sendmsg+0x5ed/0x9a0 [ 1622.146282][ T8549] ? __sys_sendmsg_sock+0x30/0x30 [ 1622.151321][ T8549] ? __import_iovec+0x306/0x510 [ 1622.156190][ T8549] ? import_iovec+0x6f/0xa0 [ 1622.160719][ T8549] ___sys_sendmsg+0x2a2/0x360 [ 1622.165416][ T8549] ? __sys_sendmsg+0x2a0/0x2a0 [ 1622.170187][ T8549] ? __lock_acquire+0x7c40/0x7c40 [ 1622.175250][ T8549] __se_sys_sendmsg+0x1c3/0x2b0 [ 1622.180116][ T8549] ? ct_nmi_exit+0x145/0x1c0 [ 1622.184720][ T8549] ? __x64_sys_sendmsg+0x80/0x80 [ 1622.189690][ T8549] ? lockdep_hardirqs_on+0x94/0x140 [ 1622.194884][ T8549] do_syscall_64+0x4c/0xa0 [ 1622.199307][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 1622.203986][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 1622.208662][ T8549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1622.214554][ T8549] RIP: 0033:0x7f09f319de99 [ 1622.218967][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.238844][ T8549] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.247255][ T8549] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1622.255222][ T8549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1622.263192][ T8549] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.271160][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.279130][ T8549] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1622.287138][ T8549] [ 1622.388223][ T8558] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1622.459330][ T8556] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11219'. [ 1622.538512][ T8556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1623.469983][ T8593] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11221'. [ 1623.625886][ T8593] device hsr_slave_1 left promiscuous mode [ 1623.690664][ T8600] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11222'. [ 1624.003784][ T8609] validate_nla: 4 callbacks suppressed [ 1624.003804][ T8609] netlink: 'syz.3.11226': attribute type 2 has an invalid length. [ 1624.090647][ T8618] netlink: 'syz.0.11227': attribute type 19 has an invalid length. [ 1624.098887][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11227'. [ 1624.110038][ T8620] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1624.130305][ T8617] FAULT_INJECTION: forcing a failure. [ 1624.130305][ T8617] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.165012][ T8617] CPU: 1 PID: 8617 Comm: syz.4.11229 Not tainted syzkaller #0 [ 1624.172550][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1624.182722][ T8617] Call Trace: [ 1624.186013][ T8617] [ 1624.188944][ T8617] dump_stack_lvl+0x188/0x24e [ 1624.193629][ T8617] ? show_regs_print_info+0x12/0x12 [ 1624.198915][ T8617] ? load_image+0x410/0x410 [ 1624.203428][ T8617] ? genl_rcv_msg+0x601/0x790 [ 1624.208115][ T8617] ? netlink_sendmsg+0x8ad/0xbd0 [ 1624.213063][ T8617] ? verify_lock_unused+0x140/0x140 [ 1624.218280][ T8617] should_fail_ex+0x390/0x4c0 [ 1624.222968][ T8617] should_failslab+0x5/0x20 [ 1624.227469][ T8617] slab_pre_alloc_hook+0x59/0x300 [ 1624.232496][ T8617] kmem_cache_alloc+0x56/0x2f0 [ 1624.237257][ T8617] ? skb_clone+0x1e7/0x370 [ 1624.241680][ T8617] skb_clone+0x1e7/0x370 [ 1624.245927][ T8617] __netlink_deliver_tap+0x3e4/0x7e0 [ 1624.251307][ T8617] ? netlink_deliver_tap+0x2e/0x1b0 [ 1624.256516][ T8617] netlink_deliver_tap+0x19c/0x1b0 [ 1624.261626][ T8617] netlink_sendskb+0x64/0x130 [ 1624.266407][ T8617] tipc_nl_compat_recv+0x8fc/0xaf0 [ 1624.271688][ T8617] ? ct_nmi_exit+0x145/0x1c0 [ 1624.276298][ T8617] ? tipc_netlink_compat_stop+0x20/0x20 [ 1624.281839][ T8617] ? __mutex_trylock_common+0x15c/0x260 [ 1624.287475][ T8617] ? tipc_nl_node_dump+0xc70/0xc70 [ 1624.292685][ T8617] ? tipc_nl_compat_link_dump+0x500/0x500 [ 1624.298411][ T8617] ? rcu_is_watching+0x11/0xa0 [ 1624.303182][ T8617] ? trace_contention_end+0x5f/0x170 [ 1624.308520][ T8617] genl_family_rcv_msg_doit+0x22f/0x350 [ 1624.314068][ T8617] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1624.320244][ T8617] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1624.326153][ T8617] ? memset+0x1e/0x40 [ 1624.330130][ T8617] ? genl_get_cmd+0x55f/0x8b0 [ 1624.334811][ T8617] genl_rcv_msg+0x601/0x790 [ 1624.339324][ T8617] ? genl_bind+0x360/0x360 [ 1624.343737][ T8617] ? tipc_netlink_compat_stop+0x20/0x20 [ 1624.349292][ T8617] netlink_rcv_skb+0x1ef/0x440 [ 1624.354063][ T8617] ? genl_bind+0x360/0x360 [ 1624.358479][ T8617] ? netlink_ack+0x1160/0x1160 [ 1624.363252][ T8617] ? down_read+0x1a8/0x2d0 [ 1624.367706][ T8617] genl_rcv+0x24/0x40 [ 1624.371690][ T8617] netlink_unicast+0x7ad/0x920 [ 1624.376459][ T8617] netlink_sendmsg+0x8ad/0xbd0 [ 1624.381234][ T8617] ? netlink_getsockopt+0x550/0x550 [ 1624.386442][ T8617] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1624.392017][ T8617] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1624.397298][ T8617] ? security_socket_sendmsg+0x7c/0xa0 [ 1624.402755][ T8617] ? netlink_getsockopt+0x550/0x550 [ 1624.407954][ T8617] ____sys_sendmsg+0x5ed/0x9a0 [ 1624.412725][ T8617] ? __sys_sendmsg_sock+0x30/0x30 [ 1624.417748][ T8617] ? __import_iovec+0x306/0x510 [ 1624.422603][ T8617] ? import_iovec+0x6f/0xa0 [ 1624.427110][ T8617] ___sys_sendmsg+0x2a2/0x360 [ 1624.431792][ T8617] ? __sys_sendmsg+0x2a0/0x2a0 [ 1624.436570][ T8617] ? __lock_acquire+0x7c40/0x7c40 [ 1624.441611][ T8617] __se_sys_sendmsg+0x1c3/0x2b0 [ 1624.446473][ T8617] ? __x64_sys_sendmsg+0x80/0x80 [ 1624.451421][ T8617] ? lockdep_hardirqs_on+0x94/0x140 [ 1624.456618][ T8617] do_syscall_64+0x4c/0xa0 [ 1624.461029][ T8617] ? clear_bhb_loop+0x60/0xb0 [ 1624.465701][ T8617] ? clear_bhb_loop+0x60/0xb0 [ 1624.470374][ T8617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.476264][ T8617] RIP: 0033:0x7f30fff9de99 [ 1624.480678][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.500379][ T8617] RSP: 002b:00007f3100df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.508891][ T8617] RAX: ffffffffffffffda RBX: 00007f3100225fa0 RCX: 00007f30fff9de99 [ 1624.516895][ T8617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1624.524862][ T8617] RBP: 00007f3100df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.532827][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1624.540971][ T8617] R13: 00007f3100226038 R14: 00007f3100225fa0 R15: 00007ffc329b17d8 [ 1624.549045][ T8617] [ 1624.848410][ T8632] netlink: 'syz.0.11232': attribute type 10 has an invalid length. [ 1624.919860][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11234'. [ 1624.934726][ T8636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1625.099599][ T8640] device dummy0 entered promiscuous mode [ 1625.186906][ T8648] netlink: 'syz.5.11240': attribute type 2 has an invalid length. [ 1625.519899][ T8664] FAULT_INJECTION: forcing a failure. [ 1625.519899][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.543378][ T8664] CPU: 0 PID: 8664 Comm: syz.4.11247 Not tainted syzkaller #0 [ 1625.550941][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1625.561017][ T8664] Call Trace: [ 1625.564319][ T8664] [ 1625.567272][ T8664] dump_stack_lvl+0x188/0x24e [ 1625.571978][ T8664] ? show_regs_print_info+0x12/0x12 [ 1625.577211][ T8664] ? load_image+0x410/0x410 [ 1625.581746][ T8664] ? __lock_acquire+0x7c40/0x7c40 [ 1625.586894][ T8664] should_fail_ex+0x390/0x4c0 [ 1625.591694][ T8664] _copy_from_user+0x2c/0x170 [ 1625.596399][ T8664] ___sys_sendmsg+0x1c3/0x360 [ 1625.601110][ T8664] ? __sys_sendmsg+0x2a0/0x2a0 [ 1625.605929][ T8664] ? __lock_acquire+0x7c40/0x7c40 [ 1625.611007][ T8664] __se_sys_sendmsg+0x1c3/0x2b0 [ 1625.615893][ T8664] ? __x64_sys_sendmsg+0x80/0x80 [ 1625.620887][ T8664] ? lockdep_hardirqs_on+0x94/0x140 [ 1625.626115][ T8664] do_syscall_64+0x4c/0xa0 [ 1625.630565][ T8664] ? clear_bhb_loop+0x60/0xb0 [ 1625.635274][ T8664] ? clear_bhb_loop+0x60/0xb0 [ 1625.639976][ T8664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1625.645886][ T8664] RIP: 0033:0x7f30fff9de99 [ 1625.650407][ T8664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1625.670219][ T8664] RSP: 002b:00007f3100df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.678658][ T8664] RAX: ffffffffffffffda RBX: 00007f3100225fa0 RCX: 00007f30fff9de99 [ 1625.686660][ T8664] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 1625.694657][ T8664] RBP: 00007f3100df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.702648][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.710622][ T8664] R13: 00007f3100226038 R14: 00007f3100225fa0 R15: 00007ffc329b17d8 [ 1625.718608][ T8664] [ 1625.732606][ T8671] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1625.756641][ T8667] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1625.845459][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11249'. [ 1625.865366][ T8674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1625.897956][ T8670] netlink: 'syz.5.11248': attribute type 10 has an invalid length. [ 1626.156577][ T8685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11250'. [ 1626.191710][ T8685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.326658][ T8692] netlink: 'syz.0.11254': attribute type 2 has an invalid length. [ 1626.476114][ T8700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11258'. [ 1626.491213][ T8695] device dummy0 entered promiscuous mode [ 1626.694196][ T8711] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11262'. [ 1626.722320][ T8711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.943915][ T8718] netlink: 'syz.0.11263': attribute type 10 has an invalid length. [ 1627.295766][ T8723] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1627.574414][ T8736] netlink: 'syz.0.11269': attribute type 2 has an invalid length. [ 1627.838921][ T8742] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1628.187324][ T8753] device dummy0 entered promiscuous mode [ 1628.366133][ T8762] netlink: 'syz.4.11276': attribute type 10 has an invalid length. [ 1628.476642][ T8766] netlink: 'syz.2.11278': attribute type 10 has an invalid length. [ 1628.503781][ T8766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11278'. [ 1628.528000][ T8766] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1628.570697][ T8777] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11280'. [ 1628.649536][ T8780] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1628.819894][ T8783] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11284'. [ 1629.105642][ T8794] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1629.457161][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11300'. [ 1629.489000][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1629.502867][ T8812] FAULT_INJECTION: forcing a failure. [ 1629.502867][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.544474][ T8812] CPU: 0 PID: 8812 Comm: syz.0.11291 Not tainted syzkaller #0 [ 1629.552007][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1629.562092][ T8812] Call Trace: [ 1629.565392][ T8812] [ 1629.568349][ T8812] dump_stack_lvl+0x188/0x24e [ 1629.573059][ T8812] ? show_regs_print_info+0x12/0x12 [ 1629.578288][ T8812] ? load_image+0x410/0x410 [ 1629.582825][ T8812] ? __lock_acquire+0x7c40/0x7c40 [ 1629.587882][ T8812] should_fail_ex+0x390/0x4c0 [ 1629.592558][ T8812] should_failslab+0x5/0x20 [ 1629.597065][ T8812] slab_pre_alloc_hook+0x59/0x300 [ 1629.602110][ T8812] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1629.608723][ T8812] ? bpf_test_init+0x9f/0x140 [ 1629.613423][ T8812] __kmem_cache_alloc_node+0x4f/0x270 [ 1629.618823][ T8812] ? bpf_test_init+0x9f/0x140 [ 1629.623518][ T8812] __kmalloc+0xa3/0x240 [ 1629.627780][ T8812] bpf_test_init+0x9f/0x140 [ 1629.632351][ T8812] bpf_prog_test_run_xdp+0x488/0xf80 [ 1629.637678][ T8812] ? __lock_acquire+0x7c40/0x7c40 [ 1629.642798][ T8812] ? dev_put+0x80/0x80 [ 1629.646906][ T8812] ? dev_put+0x80/0x80 [ 1629.650995][ T8812] bpf_prog_test_run+0x31c/0x390 [ 1629.655957][ T8812] __sys_bpf+0x62b/0x780 [ 1629.660208][ T8812] ? bpf_link_show_fdinfo+0x380/0x380 [ 1629.665599][ T8812] ? lock_chain_count+0x20/0x20 [ 1629.670458][ T8812] __x64_sys_bpf+0x78/0x90 [ 1629.674875][ T8812] do_syscall_64+0x4c/0xa0 [ 1629.679291][ T8812] ? clear_bhb_loop+0x60/0xb0 [ 1629.683963][ T8812] ? clear_bhb_loop+0x60/0xb0 [ 1629.688635][ T8812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1629.694527][ T8812] RIP: 0033:0x7f4a93d9de99 [ 1629.698942][ T8812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.718547][ T8812] RSP: 002b:00007f4a94cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.726955][ T8812] RAX: ffffffffffffffda RBX: 00007f4a94025fa0 RCX: 00007f4a93d9de99 [ 1629.734923][ T8812] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 1629.742912][ T8812] RBP: 00007f4a94cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.750877][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.758847][ T8812] R13: 00007f4a94026038 R14: 00007f4a94025fa0 R15: 00007ffdd5143b08 [ 1629.766854][ T8812] [ 1629.895387][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11292'. [ 1629.933596][ T8816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1630.100281][ T8823] validate_nla: 2 callbacks suppressed [ 1630.100298][ T8823] netlink: 'syz.2.11295': attribute type 2 has an invalid length. [ 1630.274078][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11296'. [ 1630.339766][ T8825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1630.544498][ T8827] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11297'. [ 1630.620130][ T8836] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1630.733396][ T8841] netlink: 'syz.2.11302': attribute type 10 has an invalid length. [ 1630.764857][ T8841] team0: Port device hsr_slave_0 added [ 1630.789464][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1631.200760][ T8864] netlink: 'syz.2.11309': attribute type 2 has an invalid length. [ 1631.224403][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1631.295881][ T8863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1631.371014][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11311'. [ 1631.412492][ T8868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1631.448643][ T8869] netlink: 'syz.3.11310': attribute type 10 has an invalid length. [ 1631.469848][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11310'. [ 1631.491314][ T8869] device dummy0 entered promiscuous mode [ 1631.502418][ T8869] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1631.722108][ T8876] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11314'. [ 1632.287526][ T8899] netlink: 'syz.2.11322': attribute type 2 has an invalid length. [ 1632.418237][ T8903] device syzkaller0 entered promiscuous mode [ 1632.452651][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11324'. [ 1632.543932][ T8906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1632.576437][ T8908] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1634.951817][ T8925] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.11329'. [ 1634.971273][ T8938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11333'. [ 1634.986799][ T8938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1635.114339][ T8942] netlink: 'syz.4.11335': attribute type 2 has an invalid length. [ 1635.217412][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11338'. [ 1635.234797][ T8949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1635.616141][ T8969] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.11344'. [ 1636.239102][ T8976] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1636.350301][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11346'. [ 1636.389034][ T8982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1636.443751][ T8984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11347'. [ 1636.466357][ T8989] netlink: 'syz.0.11349': attribute type 2 has an invalid length. [ 1636.760617][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11354'. [ 1636.796405][ T9003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1637.207954][ T9018] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11361'. [ 1637.295144][ T9026] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1637.384975][ T9030] netlink: 'syz.0.11363': attribute type 2 has an invalid length. [ 1637.509071][ T9036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11364'. [ 1637.565021][ T9036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1637.829108][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11368'. [ 1637.875374][ T9043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1638.273177][ T9068] netlink: 'syz.3.11376': attribute type 2 has an invalid length. [ 1638.305094][ T9070] FAULT_INJECTION: forcing a failure. [ 1638.305094][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.348672][ T9070] CPU: 1 PID: 9070 Comm: syz.2.11375 Not tainted syzkaller #0 [ 1638.356210][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1638.366295][ T9070] Call Trace: [ 1638.369591][ T9070] [ 1638.372531][ T9070] dump_stack_lvl+0x188/0x24e [ 1638.377246][ T9070] ? sctp_sendmsg+0x1686/0x2940 [ 1638.382122][ T9070] ? ___sys_sendmsg+0x2a2/0x360 [ 1638.386994][ T9070] ? show_regs_print_info+0x12/0x12 [ 1638.392213][ T9070] ? load_image+0x410/0x410 [ 1638.396755][ T9070] should_fail_ex+0x390/0x4c0 [ 1638.401461][ T9070] should_failslab+0x5/0x20 [ 1638.405982][ T9070] slab_pre_alloc_hook+0x59/0x300 [ 1638.411039][ T9070] ? sctp_add_bind_addr+0x89/0x350 [ 1638.416181][ T9070] __kmem_cache_alloc_node+0x4f/0x270 [ 1638.421581][ T9070] ? sctp_add_bind_addr+0x89/0x350 [ 1638.426719][ T9070] kmalloc_trace+0x26/0xe0 [ 1638.431160][ T9070] sctp_add_bind_addr+0x89/0x350 [ 1638.436120][ T9070] sctp_copy_local_addr_list+0x317/0x4d0 [ 1638.441788][ T9070] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1638.447531][ T9070] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1638.453625][ T9070] ? sctp_v4_is_any+0x31/0x50 [ 1638.458327][ T9070] ? sctp_copy_one_addr+0x93/0x660 [ 1638.463472][ T9070] sctp_bind_addr_copy+0xaf/0x3c0 [ 1638.468527][ T9070] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1638.474883][ T9070] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1638.480166][ T9070] ? __sctp_connect+0xd80/0xd80 [ 1638.485006][ T9070] ? __local_bh_enable_ip+0x136/0x1c0 [ 1638.490381][ T9070] ? _local_bh_enable+0xa0/0xa0 [ 1638.495241][ T9070] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1638.501053][ T9070] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1638.506860][ T9070] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1638.512409][ T9070] ? security_sctp_bind_connect+0x85/0xb0 [ 1638.518149][ T9070] sctp_sendmsg+0x1686/0x2940 [ 1638.522845][ T9070] ? sctp_getsockopt+0x8a0/0x8a0 [ 1638.527806][ T9070] ? __might_fault+0xa6/0x120 [ 1638.532499][ T9070] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1638.538920][ T9070] ? aa_sock_msg_perm+0x94/0x150 [ 1638.543889][ T9070] ? inet_sendmsg+0x7a/0x2a0 [ 1638.548502][ T9070] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1638.553805][ T9070] ? inet_send_prepare+0x250/0x250 [ 1638.558956][ T9070] ____sys_sendmsg+0x5ed/0x9a0 [ 1638.563753][ T9070] ? __sys_sendmsg_sock+0x30/0x30 [ 1638.568799][ T9070] ? __import_iovec+0x306/0x510 [ 1638.573695][ T9070] ? import_iovec+0x6f/0xa0 [ 1638.578321][ T9070] ___sys_sendmsg+0x2a2/0x360 [ 1638.583024][ T9070] ? __sys_sendmsg+0x2a0/0x2a0 [ 1638.587830][ T9070] ? __lock_acquire+0x7c40/0x7c40 [ 1638.592907][ T9070] __se_sys_sendmsg+0x1c3/0x2b0 [ 1638.597796][ T9070] ? __x64_sys_sendmsg+0x80/0x80 [ 1638.602795][ T9070] ? lockdep_hardirqs_on+0x94/0x140 [ 1638.608030][ T9070] do_syscall_64+0x4c/0xa0 [ 1638.612452][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 1638.617143][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 1638.621861][ T9070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1638.627778][ T9070] RIP: 0033:0x7f09f319de99 [ 1638.632216][ T9070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1638.651850][ T9070] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1638.660307][ T9070] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1638.668310][ T9070] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1638.676310][ T9070] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1638.684303][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1638.692310][ T9070] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1638.700353][ T9070] [ 1638.747067][ T9090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1639.726184][T13636] tipc: Subscription rejected, illegal request [ 1640.355169][ T9132] netlink: 'syz.2.11393': attribute type 2 has an invalid length. [ 1640.487704][ T9135] __nla_validate_parse: 3 callbacks suppressed [ 1640.487725][ T9135] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11394'. [ 1640.514697][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11395'. [ 1640.532352][ T9136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1640.645713][ T9146] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1641.349540][ T9170] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11404'. [ 1642.171918][ T9178] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1642.475071][ T9187] netlink: 'syz.0.11407': attribute type 2 has an invalid length. [ 1642.496606][ T9190] netlink: 'syz.4.11409': attribute type 27 has an invalid length. [ 1642.533902][ T9193] netlink: 'syz.4.11409': attribute type 27 has an invalid length. [ 1642.572217][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11410'. [ 1642.631686][ T9195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1643.503742][ T9227] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1643.527431][ T9224] netlink: 188 bytes leftover after parsing attributes in process `syz.5.11420'. [ 1643.535753][ T9228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11421'. [ 1643.652238][ T9235] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1643.770831][ T9239] netlink: 'syz.0.11423': attribute type 2 has an invalid length. [ 1644.197997][ T9248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11425'. [ 1644.214716][ T9248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1644.402636][ T9252] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11427'. [ 1644.505476][ T9255] FAULT_INJECTION: forcing a failure. [ 1644.505476][ T9255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.552709][ T9255] CPU: 1 PID: 9255 Comm: syz.2.11428 Not tainted syzkaller #0 [ 1644.560294][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1644.570433][ T9255] Call Trace: [ 1644.573750][ T9255] [ 1644.576718][ T9255] dump_stack_lvl+0x188/0x24e [ 1644.581460][ T9255] ? show_regs_print_info+0x12/0x12 [ 1644.586724][ T9255] ? load_image+0x410/0x410 [ 1644.591295][ T9255] ? __lock_acquire+0x7c40/0x7c40 [ 1644.596404][ T9255] should_fail_ex+0x390/0x4c0 [ 1644.601153][ T9255] _copy_from_user+0x2c/0x170 [ 1644.605896][ T9255] ___sys_sendmsg+0x1c3/0x360 [ 1644.610652][ T9255] ? __sys_sendmsg+0x2a0/0x2a0 [ 1644.615575][ T9255] ? __lock_acquire+0x7c40/0x7c40 [ 1644.620763][ T9255] __se_sys_sendmsg+0x1c3/0x2b0 [ 1644.625692][ T9255] ? __x64_sys_sendmsg+0x80/0x80 [ 1644.630766][ T9255] ? lockdep_hardirqs_on+0x94/0x140 [ 1644.636087][ T9255] do_syscall_64+0x4c/0xa0 [ 1644.640558][ T9255] ? clear_bhb_loop+0x60/0xb0 [ 1644.645286][ T9255] ? clear_bhb_loop+0x60/0xb0 [ 1644.650041][ T9255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1644.655989][ T9255] RIP: 0033:0x7f09f319de99 [ 1644.660452][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.680104][ T9255] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.688573][ T9255] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1644.696590][ T9255] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1644.704594][ T9255] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.712597][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.720602][ T9255] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1644.728668][ T9255] [ 1645.110026][ T9276] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11434'. [ 1645.264144][ T9279] netlink: 'syz.0.11436': attribute type 2 has an invalid length. [ 1645.463640][ T9287] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1645.528782][ T9285] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1645.589193][ T9290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11440'. [ 1645.616185][ T9290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1645.747982][ T9294] FAULT_INJECTION: forcing a failure. [ 1645.747982][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.788037][ T9294] CPU: 1 PID: 9294 Comm: syz.2.11441 Not tainted syzkaller #0 [ 1645.795600][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1645.805717][ T9294] Call Trace: [ 1645.809056][ T9294] [ 1645.812049][ T9294] dump_stack_lvl+0x188/0x24e [ 1645.816812][ T9294] ? show_regs_print_info+0x12/0x12 [ 1645.822090][ T9294] ? load_image+0x410/0x410 [ 1645.826702][ T9294] ? __lock_acquire+0x7c40/0x7c40 [ 1645.831828][ T9294] should_fail_ex+0x390/0x4c0 [ 1645.836626][ T9294] _copy_from_user+0x2c/0x170 [ 1645.841427][ T9294] iovec_from_user+0x143/0x360 [ 1645.846293][ T9294] __import_iovec+0x6c/0x510 [ 1645.851000][ T9294] import_iovec+0x6f/0xa0 [ 1645.855415][ T9294] ___sys_sendmsg+0x252/0x360 [ 1645.860145][ T9294] ? __sys_sendmsg+0x2a0/0x2a0 [ 1645.865006][ T9294] ? asm_sysvec_call_function_single+0x16/0x20 [ 1645.871300][ T9294] __se_sys_sendmsg+0x1c3/0x2b0 [ 1645.876204][ T9294] ? __x64_sys_sendmsg+0x80/0x80 [ 1645.881241][ T9294] ? lockdep_hardirqs_on+0x94/0x140 [ 1645.886496][ T9294] do_syscall_64+0x4c/0xa0 [ 1645.890944][ T9294] ? clear_bhb_loop+0x60/0xb0 [ 1645.895662][ T9294] ? clear_bhb_loop+0x60/0xb0 [ 1645.900366][ T9294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1645.906281][ T9294] RIP: 0033:0x7f09f319de99 [ 1645.910740][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.930390][ T9294] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.938843][ T9294] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1645.946842][ T9294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1645.954838][ T9294] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.962825][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.970829][ T9294] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1645.978874][ T9294] [ 1646.080505][ T9304] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11443'. [ 1646.373631][ T9314] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11448'. [ 1646.436944][ T9312] tun0: tun_chr_ioctl cmd 1074025675 [ 1646.453268][ T9312] tun0: persist enabled [ 1646.463305][ T9312] tun0: tun_chr_ioctl cmd 1074025675 [ 1646.480520][ T9312] tun0: persist enabled [ 1646.648863][ T9323] netlink: 'syz.2.11451': attribute type 2 has an invalid length. [ 1646.687586][ T9326] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11452'. [ 1646.850252][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11454'. [ 1646.894167][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1647.129698][ T9341] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1647.160700][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11455'. [ 1647.234381][ T9342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1647.405482][ T9343] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1647.724655][ T9366] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1648.031663][ T9376] netlink: 'syz.3.11465': attribute type 2 has an invalid length. [ 1648.332257][ T9392] netlink: 'syz.3.11468': attribute type 27 has an invalid length. [ 1648.355089][ T9392] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11468'. [ 1648.377063][ T9392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1648.473065][ T9390] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1648.528487][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11470'. [ 1648.602917][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11469'. [ 1648.659020][ T9393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1648.713754][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11472'. [ 1648.741537][ T9402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1649.358234][ T9410] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1650.764601][ T3145] wlan1: Trigger new scan to find an IBSS to join [ 1652.370461][ T9430] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11482'. [ 1652.393773][ T9440] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1652.428018][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1652.473678][ T9452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1652.517746][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11486'. [ 1652.530198][ T9454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1653.804869][T13636] wlan1: Trigger new scan to find an IBSS to join [ 1655.964056][ T9487] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.11497'. [ 1655.983610][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11499'. [ 1655.993488][ T9493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1656.016628][ T9500] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1656.148040][ T9509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11502'. [ 1656.180461][ T9509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1656.231260][ T9516] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1656.767496][ T9536] FAULT_INJECTION: forcing a failure. [ 1656.767496][ T9536] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.792151][ T9532] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11512'. [ 1656.843940][ T3145] wlan1: Trigger new scan to find an IBSS to join [ 1656.862611][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11514'. [ 1656.934648][ T9536] CPU: 0 PID: 9536 Comm: syz.2.11513 Not tainted syzkaller #0 [ 1656.942356][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1656.952439][ T9536] Call Trace: [ 1656.955828][ T9536] [ 1656.958789][ T9536] dump_stack_lvl+0x188/0x24e [ 1656.963504][ T9536] ? show_regs_print_info+0x12/0x12 [ 1656.968749][ T9536] ? load_image+0x410/0x410 [ 1656.973285][ T9536] ? __might_sleep+0xd0/0xd0 [ 1656.977901][ T9536] ? __lock_acquire+0x7c40/0x7c40 [ 1656.982957][ T9536] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1656.988624][ T9536] should_fail_ex+0x390/0x4c0 [ 1656.993336][ T9536] should_failslab+0x5/0x20 [ 1656.997865][ T9536] slab_pre_alloc_hook+0x59/0x300 [ 1657.002930][ T9536] kmem_cache_alloc_node+0x5a/0x310 [ 1657.008160][ T9536] ? __alloc_skb+0xf9/0x7d0 [ 1657.012777][ T9536] __alloc_skb+0xf9/0x7d0 [ 1657.017149][ T9536] __ip6_append_data+0x2b5e/0x3e30 [ 1657.022331][ T9536] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 1657.027669][ T9536] ? ip6_setup_cork+0xff0/0xff0 [ 1657.032559][ T9536] ? ip6_setup_cork+0xa4a/0xff0 [ 1657.037461][ T9536] ip6_append_data+0x1c8/0x3d0 [ 1657.042362][ T9536] ? rawv6_send_hdrinc+0x16a0/0x16a0 [ 1657.047703][ T9536] rawv6_sendmsg+0x1221/0x1710 [ 1657.052516][ T9536] ? compat_rawv6_ioctl+0x60/0x60 [ 1657.057759][ T9536] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1657.064266][ T9536] ? aa_sock_msg_perm+0x94/0x150 [ 1657.069240][ T9536] ? inet_sendmsg+0x7a/0x2a0 [ 1657.073870][ T9536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1657.079199][ T9536] ? inet_send_prepare+0x250/0x250 [ 1657.084345][ T9536] ____sys_sendmsg+0x5ed/0x9a0 [ 1657.089149][ T9536] ? __sys_sendmsg_sock+0x30/0x30 [ 1657.094208][ T9536] ? __import_iovec+0x306/0x510 [ 1657.099117][ T9536] ? import_iovec+0x6f/0xa0 [ 1657.103686][ T9536] ___sys_sendmsg+0x2a2/0x360 [ 1657.108418][ T9536] ? __sys_sendmsg+0x2a0/0x2a0 [ 1657.113287][ T9536] ? __lock_acquire+0x7c40/0x7c40 [ 1657.118383][ T9536] __se_sys_sendmsg+0x1c3/0x2b0 [ 1657.123308][ T9536] ? ct_nmi_exit+0x145/0x1c0 [ 1657.127922][ T9536] ? __x64_sys_sendmsg+0x80/0x80 [ 1657.132910][ T9536] ? lockdep_hardirqs_on+0x94/0x140 [ 1657.138135][ T9536] do_syscall_64+0x4c/0xa0 [ 1657.142691][ T9536] ? clear_bhb_loop+0x60/0xb0 [ 1657.147403][ T9536] ? clear_bhb_loop+0x60/0xb0 [ 1657.152117][ T9536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1657.158043][ T9536] RIP: 0033:0x7f09f319de99 [ 1657.162496][ T9536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.182224][ T9536] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1657.190757][ T9536] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1657.198799][ T9536] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 1657.206801][ T9536] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.214796][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.222789][ T9536] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1657.230796][ T9536] [ 1657.346692][ T9538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1657.601159][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11518'. [ 1657.649190][ T9553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1657.715391][ T9561] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11521'. [ 1658.024308][ T30] wlan1: Creating new IBSS network, BSSID 72:2c:52:53:c6:58 [ 1658.074899][ T9572] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11526'. [ 1658.393285][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11529'. [ 1658.831633][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1659.049240][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11533'. [ 1659.095564][ T9596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1659.140642][ T9600] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11535'. [ 1659.932285][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11545'. [ 1659.956295][ T9625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1660.184732][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11549'. [ 1660.195324][ T9641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1660.240645][ T9644] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11551'. [ 1660.501953][ T9649] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11553'. [ 1665.513661][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11562'. [ 1665.523080][ T9681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.539165][ T9685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11564'. [ 1665.559744][ T9685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.733190][ T9690] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11568'. [ 1665.764469][ T9696] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11566'. [ 1666.218255][ T9716] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1666.252056][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11575'. [ 1666.282445][ T9715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1666.361745][ T9718] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11573'. [ 1666.500493][ T9718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.519028][ T9718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.556160][ T9718] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1666.567256][ T9718] bond0 (unregistering): Released all slaves [ 1666.576556][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11577'. [ 1666.586688][ T9724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1668.768334][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.783978][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.227105][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1669.589464][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11590'. [ 1669.918078][ T9766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1669.971922][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11591'. [ 1670.015124][ T9767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1670.175345][ T9772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.214200][ T9772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.266889][ T9772] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1670.301668][ T9772] bond0 (unregistering): Released all slaves [ 1670.652187][ T9788] __nla_validate_parse: 1 callbacks suppressed [ 1670.652206][ T9788] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11599'. [ 1670.821936][T23339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1670.832284][T23339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1670.840968][T23339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1670.854272][T23339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1670.865460][T23339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1670.881303][T23339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1671.268977][ T9796] chnl_net:caif_netlink_parms(): no params data found [ 1671.371874][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.379516][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.388563][ T9796] device bridge_slave_0 entered promiscuous mode [ 1671.400962][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.412272][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.422687][ T9796] device bridge_slave_1 entered promiscuous mode [ 1671.459684][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.487504][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.536696][ T9796] team0: Port device team_slave_0 added [ 1671.605211][ T9796] team0: Port device team_slave_1 added [ 1671.659242][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.673478][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.722998][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.744134][ T9814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11605'. [ 1672.778876][ T9814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1672.829245][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.841752][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.931144][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.059233][ T9827] FAULT_INJECTION: forcing a failure. [ 1673.059233][ T9827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1673.079509][ T9827] CPU: 1 PID: 9827 Comm: syz.2.11609 Not tainted syzkaller #0 [ 1673.087062][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1673.097163][ T9827] Call Trace: [ 1673.100482][ T9827] [ 1673.103483][ T9827] dump_stack_lvl+0x188/0x24e [ 1673.108259][ T9827] ? show_regs_print_info+0x12/0x12 [ 1673.113518][ T9827] ? load_image+0x410/0x410 [ 1673.118082][ T9827] ? __lock_acquire+0x7c40/0x7c40 [ 1673.123179][ T9827] should_fail_ex+0x390/0x4c0 [ 1673.127916][ T9827] prepare_alloc_pages+0x1e1/0x5b0 [ 1673.133102][ T9827] __alloc_pages+0x130/0x4f0 [ 1673.137770][ T9827] ? zone_statistics+0x170/0x170 [ 1673.142801][ T9827] ? alloc_skb_with_frags+0xa7/0x710 [ 1673.148154][ T9827] ? alloc_pages+0x4dd/0x740 [ 1673.152844][ T9827] alloc_skb_with_frags+0x20b/0x710 [ 1673.158138][ T9827] sock_alloc_send_pskb+0x87f/0x9a0 [ 1673.163444][ T9827] ? sock_kzfree_s+0x50/0x50 [ 1673.164634][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1673.168062][ T9827] ? __lock_acquire+0x1465/0x7c40 [ 1673.179346][ T9827] ? dev_get_by_index+0x1e/0x2d0 [ 1673.184329][ T9827] ? dev_get_by_index+0x1e/0x2d0 [ 1673.189332][ T9827] packet_sendmsg+0x327d/0x4de0 [ 1673.194238][ T9827] ? aa_sk_perm+0x950/0x950 [ 1673.198811][ T9827] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1673.204514][ T9827] ? __might_sleep+0xd0/0xd0 [ 1673.209183][ T9827] ? trace_event_raw_event_lock+0x230/0x230 [ 1673.215138][ T9827] ? aa_sk_perm+0x81f/0x950 [ 1673.219721][ T9827] ? aa_af_perm+0x340/0x340 [ 1673.224310][ T9827] ? packet_getsockopt+0x980/0x980 [ 1673.229502][ T9827] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1673.235101][ T9827] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1673.240430][ T9827] ? security_socket_sendmsg+0x7c/0xa0 [ 1673.245946][ T9827] ? packet_getsockopt+0x980/0x980 [ 1673.251127][ T9827] ____sys_sendmsg+0x5ed/0x9a0 [ 1673.256059][ T9827] ? __sys_sendmsg_sock+0x30/0x30 [ 1673.261135][ T9827] ? __import_iovec+0x306/0x510 [ 1673.266056][ T9827] ? import_iovec+0x6f/0xa0 [ 1673.270703][ T9827] ___sys_sendmsg+0x2a2/0x360 [ 1673.275448][ T9827] ? __sys_sendmsg+0x2a0/0x2a0 [ 1673.280324][ T9827] ? __lock_acquire+0x7c40/0x7c40 [ 1673.285564][ T9827] __se_sys_sendmsg+0x1c3/0x2b0 [ 1673.290478][ T9827] ? __x64_sys_sendmsg+0x80/0x80 [ 1673.295527][ T9827] ? lockdep_hardirqs_on+0x94/0x140 [ 1673.300839][ T9827] do_syscall_64+0x4c/0xa0 [ 1673.305316][ T9827] ? clear_bhb_loop+0x60/0xb0 [ 1673.310047][ T9827] ? clear_bhb_loop+0x60/0xb0 [ 1673.314792][ T9827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1673.320757][ T9827] RIP: 0033:0x7f09f319de99 [ 1673.325220][ T9827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.344885][ T9827] RSP: 002b:00007f09f13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.353338][ T9827] RAX: ffffffffffffffda RBX: 00007f09f3425fa0 RCX: 00007f09f319de99 [ 1673.361324][ T9827] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 1673.369323][ T9827] RBP: 00007f09f13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.377339][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.385361][ T9827] R13: 00007f09f3426038 R14: 00007f09f3425fa0 R15: 00007ffed80c4738 [ 1673.393521][ T9827] [ 1673.420496][ T9796] device hsr_slave_0 entered promiscuous mode [ 1673.438993][ T9796] device hsr_slave_1 entered promiscuous mode [ 1673.627497][T13636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.667066][ T9834] netlink: 'syz.3.11611': attribute type 10 has an invalid length. [ 1673.710772][ T9834] team0: Port device netdevsim0 added [ 1673.727769][ T9838] netlink: 'syz.3.11611': attribute type 10 has an invalid length. [ 1673.797347][ T9838] team0: Port device netdevsim0 removed [ 1673.857062][T13636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.105933][T13636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.290457][ T9856] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11616'. [ 1674.547690][T13636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.718007][ T9866] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1675.248359][T23339] Bluetooth: hci0: command 0x041b tx timeout [ 1675.966385][T23339] Bluetooth: hci5: command 0x0406 tx timeout [ 1677.327046][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1677.386975][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11624'. [ 1677.399931][ T9883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1677.586004][ T9892] netlink: 'syz.4.11626': attribute type 10 has an invalid length. [ 1677.670258][ T9892] team0: Port device netdevsim0 added [ 1677.704837][ T9893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11628'. [ 1677.737472][ T9896] netlink: 'syz.4.11626': attribute type 10 has an invalid length. [ 1677.806680][ T9896] team0: Port device netdevsim0 removed [ 1677.816383][ T9896] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1678.170117][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11633'. [ 1678.190763][ T9920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.335877][ T9928] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1679.406821][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1683.409382][ T9796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1683.431895][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11640'. [ 1683.442989][ T9959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1683.465539][ T9965] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1683.507187][ T9964] netlink: 'syz.5.11642': attribute type 10 has an invalid length. [ 1683.532932][ T9964] team0: Port device netdevsim0 added [ 1683.551151][ T9966] netlink: 'syz.5.11642': attribute type 10 has an invalid length. [ 1683.586972][ T9966] team0: Port device netdevsim0 removed [ 1683.599705][ T9796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1683.677575][ T9796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1683.705275][ T9796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1683.991744][ T9979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11646'. [ 1684.004659][ T9979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1684.045910][ T9983] netlink: 'syz.3.11647': attribute type 10 has an invalid length. [ 1684.060224][ T9983] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.072603][ T9983] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.087924][ T9983] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.098812][ T9983] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.246156][ T9983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.355601][ T9983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.393937][ T9983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.424003][ T9983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.506942][ T9983] team0: Port device geneve1 added [ 1684.763728][ T28] INFO: task syz.1.10182:5599 blocked for more than 143 seconds. [ 1684.771570][ T28] Not tainted syzkaller #0 [ 1684.813330][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1684.853262][ T28] task:syz.1.10182 state:D stack:25648 pid:5599 ppid:2351 flags:0x00004002 [ 1684.894618][ T28] Call Trace: [ 1684.897976][ T28] [ 1684.900947][ T28] __schedule+0x107f/0x4030 [ 1684.934572][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 1684.939694][ T28] ? __sched_text_start+0x8/0x8 [ 1684.953511][ T28] ? task_work_cancel+0xa1/0x220 [ 1684.966099][ T28] ? task_work_cancel_func+0x210/0x210 [ 1684.978362][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1684.992368][ T28] schedule+0xb9/0x180 [ 1685.001042][ T28] ? _free_event+0x10d/0x1050 [ 1685.014447][ T28] _free_event+0x176/0x1050 [ 1685.024811][ T28] perf_event_release_kernel+0x7c4/0x850 [ 1685.043730][ T28] ? __might_sleep+0xd0/0xd0 [ 1685.048401][ T28] ? calc_timer_values+0x410/0x410 [ 1685.058096][ T28] ? __might_sleep+0xd0/0xd0 [ 1685.062755][ T28] ? perf_mmap+0x1470/0x1470 [ 1685.067458][ T28] perf_release+0x37/0x40 [ 1685.072000][ T28] __fput+0x20a/0x8b0 [ 1685.076234][ T28] task_work_run+0x1d0/0x260 [ 1685.080875][ T28] ? task_work_cancel+0x220/0x220 [ 1685.087545][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1685.092810][ T28] do_exit+0x9d5/0x2570 [ 1685.098439][ T28] ? lock_chain_count+0x20/0x20 [ 1685.103499][ T28] ? preempt_schedule_common+0xa5/0xd0 [ 1685.109114][ T28] ? put_task_struct+0x80/0x80 [ 1685.116925][ T28] ? preempt_schedule+0xbc/0xd0 [ 1685.121844][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1685.127600][ T28] do_group_exit+0x229/0x2e0 [ 1685.132498][ T28] __x64_sys_exit_group+0x3b/0x40 [ 1685.138677][ T28] do_syscall_64+0x4c/0xa0 [ 1685.143115][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1685.147845][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1685.152557][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1685.158662][ T28] RIP: 0033:0x7f2ae659de99 [ 1685.163112][ T28] RSP: 002b:00007f2ae754bf38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1685.171729][ T28] RAX: ffffffffffffffda RBX: 00007f2ae660a3f8 RCX: 00007f2ae659de99 [ 1685.180530][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1685.188565][ T28] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f2ae6826038 [ 1685.198310][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.206377][ T28] R13: 00007f2ae6826038 R14: 00007f2ae6825fa0 R15: 00007ffffe60df18 [ 1685.214472][ T28] [ 1685.228073][ T28] [ 1685.228073][ T28] Showing all locks held in the system: [ 1685.247961][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1685.253497][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1685.269317][ T28] 1 lock held by rcu_tasks_trace/13: [ 1685.282498][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1685.294793][ T28] 2 locks held by kworker/0:1/14: [ 1685.299929][ T28] #0: ffff8880b8e3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 1685.310914][ T28] #1: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x184/0x6d0 [ 1685.321427][ T28] 1 lock held by khungtaskd/28: [ 1685.326364][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1685.336599][ T28] 2 locks held by getty/4029: [ 1685.341291][ T28] #0: ffff88814d42c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1685.351206][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1685.361426][ T28] 3 locks held by kworker/u4:5/4301: [ 1685.366777][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.377922][ T28] #1: ffffc90003f77d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.388332][ T28] #2: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1685.397401][ T28] 2 locks held by kworker/0:4/4315: [ 1685.402612][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.413102][ T28] #1: ffffc90004017d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.424798][ T28] 3 locks held by kworker/u4:9/4663: [ 1685.430108][ T28] #0: ffff888143add138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.440903][ T28] #1: ffffc9000516fd00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.454858][ T28] #2: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xc8/0x610 [ 1685.465865][ T28] 5 locks held by kworker/u4:6/13636: [ 1685.471347][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.482434][ T28] #1: ffffc90003227d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.492910][ T28] #2: ffffffff8dd4bd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1685.503109][ T28] #3: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x51/0x290 [ 1685.513007][ T28] #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1685.524041][ T28] 3 locks held by kworker/1:1/2424: [ 1685.529280][ T28] #0: ffff88814d16e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.540445][ T28] #1: ffffc90004d57d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1685.552898][ T28] #2: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 1685.562372][ T28] 1 lock held by syz-executor/9796: [ 1685.567663][ T28] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1685.577149][ T28] 1 lock held by syz.4.11649/9987: [ 1685.582376][ T28] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1685.591454][ T28] 2 locks held by syz.2.11651/9996: [ 1685.596752][ T28] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1685.606559][ T28] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1685.617689][ T28] 1 lock held by syz.2.11651/10010: [ 1685.622904][ T28] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0xaf/0x470 [ 1685.632648][ T28] 1 lock held by syz.2.11651/10012: [ 1685.637933][ T28] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0xaf/0x470 [ 1685.647837][ T28] 1 lock held by syz.2.11651/10014: [ 1685.653035][ T28] #0: ffffffff8dd58c28 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54d/0xe80 [ 1685.661806][ T28] 1 lock held by syz.3.11653/10016: [ 1685.667060][ T28] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1685.676780][ T28] [ 1685.679255][ T28] ============================================= [ 1685.679255][ T28] [ 1685.688305][ T28] NMI backtrace for cpu 1 [ 1685.692657][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1685.699882][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1685.710057][ T28] Call Trace: [ 1685.713337][ T28] [ 1685.716274][ T28] dump_stack_lvl+0x188/0x24e [ 1685.720991][ T28] ? irq_work_queue+0xb8/0x140 [ 1685.725771][ T28] ? show_regs_print_info+0x12/0x12 [ 1685.730987][ T28] ? load_image+0x410/0x410 [ 1685.735485][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1685.740160][ T28] ? printk_sprint+0x460/0x460 [ 1685.744929][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1685.749865][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1685.756014][ T28] ? _printk+0xda/0x130 [ 1685.760162][ T28] ? load_image+0x410/0x410 [ 1685.764659][ T28] ? load_image+0x410/0x410 [ 1685.769153][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1685.775219][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1685.781392][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1685.787393][ T28] watchdog+0xf0e/0xf50 [ 1685.791551][ T28] ? watchdog+0x1ed/0xf50 [ 1685.795876][ T28] kthread+0x29d/0x330 [ 1685.799940][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1685.804958][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1685.809539][ T28] ret_from_fork+0x1f/0x30 [ 1685.813991][ T28] [ 1685.817695][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1685.822955][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 1685.828700][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1685.828715][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1685.828733][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1685.828743][ T28] Call Trace: [ 1685.828750][ T28] [ 1685.828758][ T28] dump_stack_lvl+0x188/0x24e [ 1685.828786][ T28] ? memcpy+0x3c/0x60 [ 1685.828803][ T28] ? show_regs_print_info+0x12/0x12 [ 1685.828824][ T28] ? load_image+0x410/0x410 [ 1685.828851][ T28] panic+0x2d3/0x710 [ 1685.828867][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1685.828891][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1685.828906][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1685.828932][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1685.828954][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1685.828977][ T28] watchdog+0xf4d/0xf50 [ 1685.828998][ T28] ? watchdog+0x1ed/0xf50 [ 1685.829019][ T28] kthread+0x29d/0x330 [ 1685.829034][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1685.829051][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1685.829068][ T28] ret_from_fork+0x1f/0x30 [ 1685.829097][ T28] [ 1685.831651][ T28] Kernel Offset: disabled [ 1685.945738][ T28] Rebooting in 86400 seconds..