last executing test programs: 13.235248725s ago: executing program 3 (id=4804): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x7fffffff}, 0x2006, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40022, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1c00000000000000010000000200000051e9ef673c8528aa84e25f59ff39a2980000a79f33eae0195f17250ccf5146a922ea8c707347b334f960504897024e8858fea8c3a312db147b1700d1143c9b6ed49a00de36cd41534287cc3103ba5d7decf43837dd1048c25899744fc90b6632d49907535be3ee8cbef8d6a57004cb6d94daaddcfe7c1671fd37baa2bc2c875d03be21c77b971e7aee98301b75d051d481087d9677e5", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0082ffee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 12.134191145s ago: executing program 3 (id=4811): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="15bdddebdd8db4100b1c1889f00e5e394ebfe72f9d95b96e80d40518a08ace67b9ee9c732c646fb2f6b0fc8ceb637e874414e7f652a07c004c7df39993ccc9442cbe314aece2606b29ffab2dd29939a00308490dd88f96791c69071a14e2b545f9d935bbdd21a24a29ba408b438ad628a56911ae37a11a27d71fa1af6254b6bb7fb16e070ffa01daaa68695bc3658bc6ce56bc712ac1d2a4f42e15526e557dcf675002da0f4de507cc48fbf537", 0xad}, {&(0x7f0000000100)="f70eae51221bb6599613a82f27923d0d5d0fd0b782c423eb6d222ed9958f8f72f4805b1a694144bdf557c80b9eb80b2e2a2ea0271049bf3827f03c2d8c91b512a4a91a0e8c64bf599395bfc3e35e268efc7df15d9627f7b053587d66507bce1286872467892c8e834a493926e1c110d1b42ae75a22840f95c66c9acb876d616fce279cadca", 0x85}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRESOCT, @ANYRESHEX, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 11.080980934s ago: executing program 3 (id=4817): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x5, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000100)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10}, 0x0, 0x800000000000ca, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0xff, 0x0, 0x480000000000000b, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x1, @perf_config_ext={0x76, 0x4d}, 0x11efa, 0x79, 0x7, 0x6, 0xffffffffffffffff, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="f1124b87c669655bc4bbecdec3b5d9d58672ad900206bc82a909eead492a1cdd14b2fa3a15c47aadf50b958be83e0a19b5e3a5b7c4ff89c6dba057687b068189b6d3d56c68e3cfdcc4ed67d700c621aa93e121a48ac23c20e03cd956ed42", @ANYRES32=r2, @ANYRES16=r7, @ANYBLOB="a1c6542e31e1c7a5948a3ea9481cc8d95e601d82d2f5c6250ed2def98febc514c5577fb06105ef700abc6125a2b4c88a71c176562e4f7af19fa83c63280bed0e1190cbf377297e58d03300a1d4f13cfab90ba8a11b388d2103b1297211bd744f91e3d3680b24cada7749b41784f44f517d1276689bc8ffae85faf8f298ed7044f35c837e97ac024280c456ba", @ANYRESDEC=r1, @ANYRESHEX, @ANYRES16=r5, @ANYBLOB="4b1c357a69326ece0556095e72fe62ffe0abadfa8b572ee95848189f42eef2599edd06c1caf92f6c3d73ce150dc7e424919418fed7a86bca180023390d1e9e9192c86870d176c04cc6b1ed659cdd172200ec99124900db0ed0c25c642872a994161923ef5e2f02f2dd672dea4a738b164af2c9d566e3dd4ee63bb8569a26858ef9847514f32bfeb400f278f59bc2cd9f9e66810acae72bb86c6e55fb04930cd3be41f5ab92a8cd0c318445050563a6e1175dda2ed68a15858e29308797bdb8f5cb27a2a8332f33"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x200f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80, 0x1, 0x43a1bd76, 0x2, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x2, 0x84) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 9.902168377s ago: executing program 3 (id=4822): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x5000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x448a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0xa42e11, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000cfba00000000000008000000911162000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000200)=0x1) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000f00)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x20fb, @private2={0xfc, 0x2, '\x00', 0x81}, 0x1ff, 0x3}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)="60f2f3da78db782c257c4f1fc6fd834a92d559182e340a9f9193dd97f3af628f5fb1055587ffab7786a3e60038ec54433f1b0392868d9189647b3c0339f4f19e31cd6ca28ee78dbac48644623c23911bac48506bbc103686b79f300399eca969b9d3bbed0f8862473cd906838bbd7c7d1d3f56231bfec2e758d024d74d", 0x7d}, {&(0x7f0000000640)="24a445743ee4c2ff4858c8ae9279b5aeab465565d1bde2aba5e55c8e79e86e817fcf", 0x22}, {&(0x7f00000007c0)="7c25e4a1252cc32c35222c036df3b41d99a872a157d3607003190885fe1c38b6e0cc8946d12b1648d87ec0f27aa328dd7eee1fd033ff389bd6e12eed506b9fdce098514f5478c9b28bb98d8de93c4af68dbd2a35a62f1efe4cf171747d45d7472e2484db4a567d6759750c3a75e8903e90916b186a0a4c3dfc3c7a2f9c77b8b32fda163632bf314d61513cbe7dfa15598f16a771b304659069aa1a5c4ff346911a7307668f230ad94245dd22ed25c2ecd8e1282e971f1f", 0xb7}, {&(0x7f0000000880)="634f1f4dc1e45b5ffb37175261417bd4e29797db6bd62634a23a10083cfc508fdaede8427319130f44905a385d44e6f30d3680f676022ecdce76b3b971a3766bdbe8d28eefd0bb977ef001407eb7c87eac1c1ffe990a4e59ce739794fc6a916bb181b8a1d011ff76fddd3a6caa7d79833e4e74e2bc70118827fc6f68db33b3918d0d7c80f01ed9e24b2702a9033049d3f919d4242e44eb29c883d62319549432d80a4a43f8b7c90533daab9870947c4ea02358c933e8b4ec1fc21a6a9c9c8bd7cb", 0xc1}, {&(0x7f0000000a40)="05ae4a793661f3a5f084d9afb4282d89c3a7bc26796a39cddc0021bb7964dda9d5ef260dbc57fbe5f8200e7b48337f14ba1159d8f7f6fff69ecc4dc0a6cf16c89e9d640406a57eb6e51c16d25439a8377cf5eefaf08e15af4610a30a34939ced636a819dbb45201140295193cef6f07ac800ab9d73c0cd5d7152368424daa222845d8fe89154ba15f69434911824383d4aff07424e1d2105d9", 0x99}, {&(0x7f0000000b00)="cfd4e7cece0212ba49769ca8e294e820a03210d180c41efb55e9623dd363e152ad01848731849023eb9eca53c9ec7fdbaa6acfcaeeaf99504e76c13646feff6192603ca68bad0c0873ad84d49e3f907f13b53e33f1ed30b3751b4cca46bcda8c839d6a4a69602b41c766089d0593cd65a43f0e76cde3037f67baaf4963a1289f63ad504362861ae3451180f0c578575be936ddb4424c7c5df8415afa1bb8a7062f2fcf1d71b0caf4e2599102f0b061eaacd00531224e46fca762e0c9", 0xbc}, {&(0x7f0000000bc0)="f280280f6f4a86a2a9d46cef1ee9370ce374b20403e3d737b49713a71200650e5d3fb8172974d9a87e5697e13772fa22a65e037966708246543f43c9cf5b43e234570fcfa6b0b6", 0x47}, {&(0x7f0000000c40)="c1fb71334bf5d0de187729065f57a03c84d229d80aea4e6e0186843935c171c0c44a0f6252b20e457f7589710347ec694be772c7868a290339426182ab03e1ba2742eee7cf106008", 0x48}], 0x8, &(0x7f0000000d40)=[{0xa8, 0x109, 0xd6, "9cdd3aa359c9636707a85a47c6acf86665e9924c13635c8a9a5f217129c11150cd08914cf1fc57149a92b993a699e06968e12beefbf7ae6094b1a3488fac4010d556a0ceade919e9d00d73abc9bd5651a866301016a04fce910db9307a7408a7d2496f6bef2b471e63db45a75b64a16d003d800b5443a6b0251c9f6f33a34865bc6ca904f982a385743de2beda9f027362"}, {0xe8, 0xff, 0x3, "8a6feeef11a14f918f15b792ea5e73d766bdbfae64d21255f0b7f0e0680517b7ecebfc4ca16e52d8458678b18d24615f754b5d677a370056419a2fcaf603d9e9824dad52ba50949c968f4a6ea91da1cbc07fd6a8f6bf99e1bc7ca365eaf043171acaa49ee447d72c1cf4b2a0001e9fce6731a29c33a26d5dffc2541e4cc9447cbd28195af9eaed1a16dc364ffb55ee280ef1056c7b2098f641e6414aced5d1d8b892082c40a50e6cd8fa036b5ce56850e3d90ec0f64e09488efe605e34359a5430855540f4bbf3cf913c5767b5d62f134d"}], 0x190}, 0x40) recvmsg$kcm(r4, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040) 9.879425117s ago: executing program 0 (id=4823): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x4ea}], 0x1}, 0x48800) sendmsg$inet(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0xb, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000}, 0x50) 9.681807842s ago: executing program 3 (id=4824): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x5, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x0, 0x4a}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400240, 0x0) 9.472595988s ago: executing program 3 (id=4825): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r6) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/114, 0x72}], 0x6, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) 9.471728848s ago: executing program 0 (id=4826): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000005c0)=""/258, 0x26, 0x102, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xc, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x4, '\x00', r2, r1, 0x9, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.312644933s ago: executing program 0 (id=4829): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x5dc}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000580)="1d5355f8a80762f2889d89f9ba66392271fb819c3edb6d17547bb858dafa95091b39f86c651c95315a3cd1d3a7c5be873e13c33434ed5e1cb49ac49a6a58d492850d9a82b61b8a6b859622f517a17fe20b5be3e085491464c6976dbeb121d094af4c3c1475d94c85295c57ef268b9119a4bcda12a19bdec4dd62f1cd31074fc8509f8042a7d492d2a7963fd4207ddaa40cae123ca09467c3f8ef236654d575ced88596ac82d01aee4c637965c1789988dc6c0b0e72a860bc4eebb47eb775125566998a", 0xc3}, {&(0x7f0000000680)="67fcbef2c34ab4c86eda80f6513b1a20b068eea30548ad3ba9ef050b2ee01d6f141db3bf597abe6d22e2fe254198b0ca7984bcf76947ad85804bf813d293e7f11757bac3f96648178754f3701422e2b85affc9b4d9d97a6d065b80ff84d5fede38d095f3bfcbb388cf0536c1b21f88f0da80a681071730bec2f412e7d40504d8170ed2a656e5a8ee54ab3218d3a5df6ee51fb81a1a985e6d119f87927cc7d460b1eae22acdec071cfdb1ff6060a2458052db", 0xb2}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f0000000180)="9b82a7e79d2519ebf7ccc6bfdab2ad1741c3a3bb783a4165ed54888f373c2736628503657d8677aa4af3ec3b93114cc6ef7824fe21e4e578474b164f031dda7f12c37e4a8dc1376241064428a07f2e87992f0e5efd14a5b19d3b7ff4a6d240e7c5a004bac1", 0x65}], 0x5, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x4008840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'wg1\x00', 0xe00}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x10, 0x1, 0x47, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@fallback=r0, r2, 0x22, 0x0, r2, @void, @value=r1, @void, @void, r7}, 0x20) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r4, &(0x7f00000000c0)=0xa7, 0x12) 6.033935013s ago: executing program 0 (id=4835): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3ff, 0x8, 0x40, 0x42, 0x1}, 0x4f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0, 0x0, 0x8000000}, 0x38) 5.665496893s ago: executing program 0 (id=4843): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd600664f7931fed6bd954b43370e9701", 0xd8}], 0x1}, 0x60044084) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f32288557b39864701b58ed1b7325cdc84870bf9ed766ce3f3e2e732faf954976d9ccbb0554fa383bdbdaf0c4915a7cbf315979cd8b7e54dbc8876bf343778425fd8f09978abb4f8681b286cc66ea0784f5d27218431830dc7591f1a55e29d004c2ffcb5460c1da7755604186e5c0e66362dca0497db4e838836f3e74371bc5390b842129f40dbfb3aac04ac2cdfbba4b12e1810d2e372df71be86d82e453656e7eb41af323c2e410d9698cf8566e3d4b29bbbf424602dabba4c43355413a4246a0aa211c8f47045cee6f9e2cedeb3dcf5863097211e88f81ae0c66d4f6b7e935739405770f13b3ca90b9624", 0xec}, {&(0x7f00000002c0)="cfb1ab8ad495d30aaa4d48234e9de21f250b2f70af6f614570f26d8d6b1d2870b97f052fb4845d1dfd22f5b59fb16b03bfd207c1494b82a784f640bfc1a77d7904109969ab9ab7a544222dc7ef96bd295a6fa1d07294539e2e21980a1ebca6476814c09b7e80bfa2cd6784fb1642b2ba27d46c77caeea28d", 0x78}], 0x2, &(0x7f0000000c40)=[{0xb0, 0x0, 0x7, "0743f9181ff34ad57bde32222cac109c69cdcd22aecdbbfa927a727661063266f6faa662edf05551d42aa0543796b2c81e0720dd17d0c71e1a4b8e7501e749dc9d0239e7c0a14957b5083e47c3f2067f9e77699d9a59783e0363179965ef92e37c3efd106e787d8a8a3d90c5c162d90176f35c49c43c1d1496401dfeb0f7347ac2dce43deaac1413e023b9707c776e4f6a796b00c50b7745943ced3bb4"}, {0x30, 0x0, 0x4, "b71cc98015701df1a14a06da101e38a395be39f28b1e5cccae9708d6"}, {0xd0, 0x107, 0x7, "67fe31de3edd141f0c76bebc733acab75b1eb805a0c13fe84d113c956f151d923a8a9c1517b70706a382f656b2489f8e3eaee06565415a85807004243428cc6375ea1b2516ecabc6b7d5cfff94ea23aa2538c448e9534f1b8aaa248cf0320bbdd14e529faa11aaf30e7e165c1bbf74a2efb15fb837faa215e73736eb1d00b84cdaa4fe9c8fe9baa9af3ec4b9b7b3c36f75748df69d5becfbf2d48e41bbb0c0b7a852a8023223573a37bc7324aa6945e141f3da72ace4e9d3ce084a144c5a"}, {0x30, 0x0, 0x6, "f2d4827b9a79c3f76b0c386c93af9725254d0941cc583960584657b878b6"}, {0x80, 0x108, 0xffff7a8f, "246308391969030da4711f76960c0607f912ceb8fdff35fa720f9c701289057311e7bf6d559a0c59565aefc28a8e67750106b0dbbb9ea7b29785d71140b9509974d40529993896071e4c5e6046702ab0e8e8de7cc030c5cbb1a1d1730e53c7bfce92efe9e59cbe9652137d1a"}, {0x1010, 0x13f, 0x2, "92e9d02069b4785b93792d9fce799c775c292aa6da873032d9716563e908059c4f669ba4d3e3d2c9a389993596e6e69c228529606b290ea9bf8f88d336223619ae840ef82cc9ba282812c4f9d40a9919d8a6a391b405c6ea9fcf692f97e84298ec32ce4469f0d7de931dd931a2b80abb5d12b80a0b1934bf7fc548453070d3c547d93a35b7b4ebabc2cba0242838f9b4c87d22b05f81accd76367d9a4ec26fcf6dca86c8e4de4fb9641112161e2c8019e881d870ec7ce88579ccdfa1954396a46a3b50d26c7d6ecc92d76828c808a3c8b38abf2baa930da8bf577188933ca82a0fdd780043f6da488e75bd5c997009cfa5ec91a4d4ed9f66a8a110f9610a6f9bd2cda8f71d253f8f78b824586628b4fe6da70187277058fb51e92c753e5cb84b57c18e6c016008a136fea58d304c7df0b8757d884f999aa898a31d8458410b1e606b6f7daf86b3b9ce4c80bbdef3f4856b4d2f20a320d8383e842d836e76fa4b7990de9e34c9edfe218aed69e7e4c3e79689c2b7ff12a016a34dd58df4122d7f4854b013f6060b094dc081f806e718256d4a0b5d8cf1eca81ee7750a6a0a7aed8e3a2906993350b5178b82d867e4c758c115313db802d1243ce0ab8cd916978c515415880811a2368ebb9938dbf59bddfb23b306ada9c7bce22dc1105cba6d47e9edf6e48eb3cd2711c26516f9b2b33e3615e5721212aed748c36f306c36e01c59ab60a28c935bf401b4fa675351cdfa2a3a42aafecd00fa2e206bbbde3d3af4b7be41765c2c9af133e7f14bc29cbdfebc81717754e0dcc9d1fcca562e02c08c4380344b1a3f837f45563a7098d65cd3279648ac6e2dc3d66e1195163552c5866f3b6d99d51c7b6bb26c23fbfd0bed5674a337b82664fbc66f86eed672ed80134d322e959ad1db439f3c826c73dbae500572b41b3c05b0cb98d693b81b3d00c7aa7c433827471a14bae3e049140323529432ccdd0c601def8581ba1ac1aa7db48b8f599a2d90e0654116114e44e4d1f59f095e20a13dd121fbd601c9a8aebbe3b635586abb99558a878352ea49566e36c50b9d56663b80445d8f5cb3d868812009bddec95062cb13e85ada8e5cec4fc99d311c4c1f7418d4c0e0568faae9f537357a0caf276c9993d1964933c48105ee7f77eaeb096ad55949a57084886bc7cddc3582b56d2f296a3e8e5963c737d26679d4250939b9a62b20554f9b7a07722ea1d08d66d1aebc3c8e926afb3fea50332d70c395092d17cd55dfe16258b5564517030f38182e0632c415131f23f0de3888caba7d2f347a73e6bdc1dbae7ffa0ebb74ef64a2f0bf7f18199272ac0fc26c14d99ce758ff805998e8664ebf0f4e9de273d000a6f95e3e7a72eaa2fe8591133e4d4658adcea684b217a3066172641a494f1c5526ad461fe27dcf07b1c1d4292dc293e55ca7427471fc8dbcf4c344fd71ee123789b7f197cfe068c498a0c143363bfa96cb228607f394e7b4a4f478a01db3b9245ec2aaa7905a19318546c6f05be881ba58ef287cc193a7a6ee31c9efdc755c789ed791e61cafbc69363ba9fee2c1a795c71c06712eaebec59aa8542b11d977b19d94ada7e01abda3ec48019c68e37a8c33d1a9eb5df94e48397ade08f16ee620c2a41f4bb5462aa4fe15b413c6897a6419f5f7d72f8f6b4121e37c21b8bd15d4bcb2b3bfca202d59b10a5221a504205e9165c72d91ae2fc8c4719531a782727103d36b33c5bce36359ad65c341192cf765a2bfcdc468485d907f98de456ce3e12a881146c1358416e10fc2698dfe6b595ad779dff67535ea44b1887ea570fabb2c76bbfc575245a2c01815d9303dcc1e97a7a676188afa296e15554cd28fd52827ac87c81d05e32b9875e917a97bd35b6130e3a67e9123c2e041297d26b3533c53ad79b0ff137df0fd5d688efa7accc2b41e1bef76786295d2b85cb3bbc18bf8f79330efcc083c1bb2e971f25c2d269726b5696e8736aa678ce28036167592a2f8cd657a82a62d12c93f685d7fdb5af08a97fd69f125cbb20fc6e29148493fe894425f366689f23379f34af6f6dec64e8e62ded4151abca8602339f4f1336af20d4ea256bffbaa6eb215a4c3a16b187c9f1ba0c112a71e3c19b0f27dc6515244266cd584e2d8876c4d6eb721a800e91215a4fcf80482103295db1e7ede7c620d4a1a5691f889e8e2fa061e9d57425752baadcf54e4bda105b10eb5f74c013e7317f5e620e9032df9aeff28939a19e883f6ce3039e0c00b449efc903367c6d1fa08a750c5244e98d483b46a573fba99b0e39521ebac8dcf71b3415bd97d0db1567aa5b6ebcfde3cfb3594fc92eeb557571a7e9a2484b3bde00f2a898ea516528559d15df9c8a16830ad53d3db1f982feb912149260e294d1c44932e45d3db54f8c71c7e1918ad8f02edb9c4c553efde06059ab38ee4254f8cdbcd1e5bcf6e8f64e33b0abeeed2bda9f161c0a2d76cbf9dc4b639ff500d43e3e8911d9632888bda20bf6655083c4b1d51cec4b90741b66b3a1d4405134e1aa84fca9070debed5a6c5c963c61832dbc13de8fdc482ffdbf4731147e73f2751ad539038c620cab45b2626e09411c820fab317d2f61078f8a415d7c3aa893261bd7847de6eff7dfb120c0714f26f64d7ed5461661d31d21f2cd18286463b5a38dd860c330fc83975c6269f92783df22f8f89c81b8b16492c48fe201ccf75c908ab108ae0ce21c4dd7f03a247b82967df5556f842330a7871b3b53d78dc8bec634871d7d0fa8f72d483990ad149398c1a4a79ac2128bfa09e0817e30bf5927b4361bb496c8086dee8d69a358a7f96204001764cbf7b89f605b61a4caa91f59939498b7198d7176a0eb86a2931bba67d1f0d2251ee9c718c7816721d28577bd3ef5be3345f0c0346294aad9953ab8e0681939c99c0864ea50d6309a49d78e0d5da3ce576ddeef7ecf1e942166706e2e99504c2f853d93138465376c6e8f23b2f043aaba695984762bd1e11eb5ca583109eae2c3068876ee99011b708ff18747f976dc872df449a94e0694628137ed0243c33e4a5aa8a52208b3073f6f47736def8e19e3fc0678c55bc443ee44105d3a2c2b7aa391e7be80947d44d34dc287934ac7d52e62baaf9db737a5a05039c2a23c1e6fddb2e0fb42823b719bbf67ed609fdce8bd5859e3670f719aececedad3ce7678f5b7db5b36de35035534590e325300502c00da6492db7b5f87774673325ecae79c5f4cb76f4755a0d9b44f40e5f39a63a05096c278c6854032f13740050ad5dc14a8fab3fce14d2fe5612738d0dd935c61bbf590f5de09f19f13638c4b9e7ecb9ea619b45bb789b59f7c16b71426cd7e95e08e8562bd136612dc1cf02f874d56086f609ddafecef83c55f070f49db9ee78bda04745439056da1acf184a5041d456c53661437589547b8d1053a621d290c31c6bcb54067bb157538b054057d9abf97035d1e085fad21c018fcb3834603bfe89a81ef8e31c53db62264b8d512100dfb9035d7d190744fce14c3ff6630148f330ebf6482aee4a57ab33337006988797a6609ce762b9f53aca9d44a4dc7a8603d685fd20145d39a59ded827612a957486f33e4dd038f319c0053d15f96a73bbf6d59dc2a43cbeeaaabfe89ccff3d130fc179566317ce9c233de6c9bb486c902681298191e4b8e8646fe0be5811de09a921367f86fa95233d49a5582684e7093d367d311f696ff4ded137bc353333efd0847d0012dad386843b3497c41ee2318b687c63e403487b9190007e76763155883844efec53a79afa7893b0ed258c274b33b42e4d355ecc6ae294f33d3b25958816f69c039b5af1783f46c735449184528e097d349ea30bbd78a712dcd6e28d6b6710160789f4d35cdb7b9bca24beea72befd9df25e834d6d10601c633396e5ed9ebb3e16d45a62404b236a1268e737c6570eedf1a4a7f7d97bd070e6679324bf22516e0767e8ab6e81c566b72290fc3d74192dc0507eea369f9d7df5207ca417ed7c0d044efbe4a9a129d592cacec9e89460afc75a307c6af218ba9831c1624802dd5f5fc7e80d1cbe7e131259610b098386c95b025a1d9b84bcd8b6f06c84698aeeec78740949a92e111cb0cf97d4406647f5c7971a0677bb7c3aa29afbf7d9851b784532322ddcb9c8d15c09d392117ec939cef64446ad5d05de4e6bf12bcd64e80fe5d7eafe488099a8190ababb75179c585a17016cce9530754e829b9af4b22ce37b0296df60aee89caf95c55b4a0bae565a98dfcfee2bf3c6eb0bf915b0a92041137cb2feda7d64063e35c35902586910449286b2b5cc5163c1eb14e0a7fc29ef72eb77c3f9684708a547a291ae68404a5224bbc30d94cc52b7d9226fb541d29747c7957bcb83de93e0f76870d503e4c538f3985290ddd499db2b51657049314812804f6a470836bc9612b8c539ce00fd73bd018dab0a41f425bcb0aa7a3d6864cdeb33f61dee561c6e5e2b2bf1c26619304363b4f4a7b8dd1ceee3a796b9bdaa0d96343e445d8538830f2b22790206ad5dfe1a979dbd7821e33a137cb448fd50346319829053b62b6336752f624a95077954ccc9cf803dcfdb4dfa8a3ff218ae332d9d86a8032df49431b42602701610e7c47e2870612c5f12e0eb4d948efb9ba90232d94882dce1eb7832454865d76e7672481de16e70a24264ca4c70f9f56dab9e84fff1fc9386a85370666fb17a5d8d15f7343ba07a23df88d50df8be7e48d447f7179f8830967776c3952eb3dec5f5cb15038c2ca042c776dd550f9041fb9a9255d99eb348e702c36218bd7f3622ecb97828e617791d23293778e78b3c07645b686f0e7071f816b6b8ed1f936b28b44bd56a96ba6c4c3ceb0243196ed06a672b280d551d7d4aa7eab8cc3cf66984043e139f315c181e694571732456626674450c37551bd18a7a45451d003b1159528e80b5074d2c6d1bd0badeb951370e7c839e75f8e19dee9e73213bf186e8df464e331441243ecf8e90288dab1ee95b421af25be138328869e573fccb5dc8ca91ed49e0374d602a4ddda300aa3075bd456171919e7b168aadfc1f3f640c524f85ad0b53942172e20943ed65189b95f66024f557e3243c29b9a4e31f19a714d9e0b316e643924e1ba2718b743e4ef4f241a7c9ef80f132de788bd0dfae78a1868e20450ba5f01709d217a40a15e66ea90e637c71912d1f1e64c5bbe5e028d68e2b201f7604dac328d239256d2ff22bb3f04ac7a1ed754e4d43a55cd846fe33085e007eb9eb2ab75976f95029156d3e7b0553a95aa76719ae30220aab412453d52476d2b741970ff6462af0c05b689fde4485859da35d699acb47fbaca11f6a6752df37921db0beb9dd811ab8f4ae31f5767b8d7872c75cc1dfb9b2a290b2cb46595cb28f18595915c37c622744c9adfc2dab70d934ed78c460c30c064a3f38ee12122b4011dc4af2d8a8875f327dbb857d2233b357c1160614bd69f0d52fab7cbbde4c65b810834f0aa4f177ae1442bedc138d5e681f743a94d5b6d4d916bc6b648ac5ab5ef193744242d740d9a3e64c24121f36073977bf5c437d14bb9044fcbf0598b8120b51fea639d2b4a45f70aad52337befe34713b9f95ce54200eb7207e054d54cd8db715c420fb6b6888face9bb3d91c6c3311ba1cd8120da84c8f2b357e7c8f7121853dd7689af2367d2cb8318ce5e128b28f26adfe180f53c691542919f01b5810a9a686ce8a151a718ad2927aec8db09afb66a4954d56ae5e333534891abed48ae5c606512dd7f8f318408c659308aae9e4d45a099a62625522ff"}, {0x30, 0x3a, 0x2, "a2c657814eb471b0882322afcae866fae378e61a5d02d3b13775d8"}, {0xc0, 0x29, 0xe72, "3a2e9eeb98ec347da1bdd577dfd4ac25f4c4acc84ac11838d560054ed302ccd51b6326757c407162823c4d2bf36bfa3065b458791c80024aa896af5186a420b45d7bdc4e350aa38959ec5bb839515eec097b514d5014ac2a0a0da21500f9c848f5ce45006c30a09400a9e30a0e88eee0be7f0d843ce4d1c1e327f417f59e8fb1f00dbd913fea03934e7b1a0c0c58d95103e9bcebdb625fd26c48017e79819ef1bbdd91a65dec4be2a6d1134e79"}, {0xd0, 0x10a, 0x8, "63c3edd93989dde3c226ee3916e811fc6efc4cc93db65f1dd59fbae02bff4ac9f5ca02336685104c04d490fb26db8fc843e5c2e9a094a942a5d4e168a86a80b2d7271710d37d6029aa3c3457705e4adfdcc7db05e44b483c5388f8005c6997a5e68683730c801cfe28b2248cab84253e20a03d3de614f8162d3f706854e9f9c1b4b909b0708d2ee4bd756f80303e6b3b7ec55bcd41836d1a168b5f9d3faf940108009e761565eb4b719ac688e4e962fee3245f8165838df353c0d974ae7278"}], 0x1430}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) 4.798256037s ago: executing program 1 (id=4839): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r6) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/114, 0x72}], 0x6, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) 3.788294555s ago: executing program 1 (id=4842): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x5000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x448a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0xa42e11, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000cfba00000000000008000000911162000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000200)=0x1) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000f00)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x20fb, @private2={0xfc, 0x2, '\x00', 0x81}, 0x1ff, 0x3}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)="60f2f3da78db782c257c4f1fc6fd834a92d559182e340a9f9193dd97f3af628f5fb1055587ffab7786a3e60038ec54433f1b0392868d9189647b3c0339f4f19e31cd6ca28ee78dbac48644623c23911bac48506bbc103686b79f300399eca969b9d3bbed0f8862473cd906838bbd7c7d1d3f56231bfec2e758d024d74d", 0x7d}, {&(0x7f0000000640)="24a445743ee4c2ff4858c8ae9279b5aeab465565d1bde2aba5e55c8e79e86e817fcf", 0x22}, {&(0x7f00000007c0)="7c25e4a1252cc32c35222c036df3b41d99a872a157d3607003190885fe1c38b6e0cc8946d12b1648d87ec0f27aa328dd7eee1fd033ff389bd6e12eed506b9fdce098514f5478c9b28bb98d8de93c4af68dbd2a35a62f1efe4cf171747d45d7472e2484db4a567d6759750c3a75e8903e90916b186a0a4c3dfc3c7a2f9c77b8b32fda163632bf314d61513cbe7dfa15598f16a771b304659069aa1a5c4ff346911a7307668f230ad94245dd22ed25c2ecd8e1282e971f1f", 0xb7}, {&(0x7f0000000880)="634f1f4dc1e45b5ffb37175261417bd4e29797db6bd62634a23a10083cfc508fdaede8427319130f44905a385d44e6f30d3680f676022ecdce76b3b971a3766bdbe8d28eefd0bb977ef001407eb7c87eac1c1ffe990a4e59ce739794fc6a916bb181b8a1d011ff76fddd3a6caa7d79833e4e74e2bc70118827fc6f68db33b3918d0d7c80f01ed9e24b2702a9033049d3f919d4242e44eb29c883d62319549432d80a4a43f8b7c90533daab9870947c4ea02358c933e8b4ec1fc21a6a9c9c8bd7cb", 0xc1}, {&(0x7f0000000a40)="05ae4a793661f3a5f084d9afb4282d89c3a7bc26796a39cddc0021bb7964dda9d5ef260dbc57fbe5f8200e7b48337f14ba1159d8f7f6fff69ecc4dc0a6cf16c89e9d640406a57eb6e51c16d25439a8377cf5eefaf08e15af4610a30a34939ced636a819dbb45201140295193cef6f07ac800ab9d73c0cd5d7152368424daa222845d8fe89154ba15f69434911824383d4aff07424e1d2105d96b61313780d80c0e226c95", 0xa4}, {&(0x7f0000000b00)="cfd4e7cece0212ba49769ca8e294e820a03210d180c41efb55e9623dd363e152ad01848731849023eb9eca53c9ec7fdbaa6acfcaeeaf99504e76c13646feff6192603ca68bad0c0873ad84d49e3f907f13b53e33f1ed30b3751b4cca46bcda8c839d6a4a69602b41c766089d0593cd65a43f0e76cde3037f67baaf4963a1289f63ad504362861ae3451180f0c578575be936ddb4424c7c5df8415afa1bb8a7062f2fcf1d71b0caf4e2599102f0b061eaacd00531224e46fca762e0c9", 0xbc}, {&(0x7f0000000bc0)="f280280f6f4a86a2a9d46cef1ee9370ce374b20403e3d737b49713a71200650e5d3fb8172974d9a87e5697e13772fa22a65e037966708246543f43c9cf5b43e234570fcfa6b0b6", 0x47}, {&(0x7f0000000c40)="c1fb71334bf5d0de187729065f57a03c84d229d80aea4e6e0186843935c171c0c44a0f6252b20e457f7589710347ec694be772c7868a290339426182ab03e1ba2742eee7cf106008", 0x48}], 0x8, &(0x7f0000000d40)=[{0xa8, 0x109, 0xd6, "9cdd3aa359c9636707a85a47c6acf86665e9924c13635c8a9a5f217129c11150cd08914cf1fc57149a92b993a699e06968e12beefbf7ae6094b1a3488fac4010d556a0ceade919e9d00d73abc9bd5651a866301016a04fce910db9307a7408a7d2496f6bef2b471e63db45a75b64a16d003d800b5443a6b0251c9f6f33a34865bc6ca904f982a385743de2beda9f027362"}, {0xe8, 0xff, 0x3, "8a6feeef11a14f918f15b792ea5e73d766bdbfae64d21255f0b7f0e0680517b7ecebfc4ca16e52d8458678b18d24615f754b5d677a370056419a2fcaf603d9e9824dad52ba50949c968f4a6ea91da1cbc07fd6a8f6bf99e1bc7ca365eaf043171acaa49ee447d72c1cf4b2a0001e9fce6731a29c33a26d5dffc2541e4cc9447cbd28195af9eaed1a16dc364ffb55ee280ef1056c7b2098f641e6414aced5d1d8b892082c40a50e6cd8fa036b5ce56850e3d90ec0f64e09488efe605e34359a5430855540f4bbf3cf913c5767b5d62f134d"}], 0x190}, 0x40) recvmsg$kcm(r4, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040) 3.635068349s ago: executing program 2 (id=4844): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x5dc}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000580)="1d5355f8a80762f2889d89f9ba66392271fb819c3edb6d17547bb858dafa95091b39f86c651c95315a3cd1d3a7c5be873e13c33434ed5e1cb49ac49a6a58d492850d9a82b61b8a6b859622f517a17fe20b5be3e085491464c6976dbeb121d094af4c3c1475d94c85295c57ef268b9119a4bcda12a19bdec4dd62f1cd31074fc8509f8042a7d492d2a7963fd4207ddaa40cae123ca09467c3f8ef236654d575ced88596ac82d01aee4c637965c1789988dc6c0b0e72a860bc4eebb47eb775125566998a", 0xc3}, {&(0x7f0000000680)="67fcbef2c34ab4c86eda80f6513b1a20b068eea30548ad3ba9ef050b2ee01d6f141db3bf597abe6d22e2fe254198b0ca7984bcf76947ad85804bf813d293e7f11757bac3f96648178754f3701422e2b85affc9b4d9d97a6d065b80ff84d5fede38d095f3bfcbb388cf0536c1b21f88f0da80a681071730bec2f412e7d40504d8170ed2a656e5a8ee54ab3218d3a5df6ee51fb81a1a985e6d119f87927cc7d460b1eae22acdec071cfdb1ff6060a2458052db", 0xb2}, {&(0x7f00000007c0)="f6bab203512a2053a1d81f729c9deb980ca8f3f29caf70352008a6c630cd820c5ca102da1c646b9106efb814e8a404cd29bc2d881505f1cf4f53fa052b423fe7d26cfa00f4c329de59c70e6284d3d3d3b3727c02f5ea88155449e732891b7b462cc87937c6f27bd2dff4b1d9533fd2fa3f7e1e17416684e1ba41c65519710157578343ee7857e7918b9facd41a31ec5e9c32de96f48b4d69c091b6d15bfbc2ff4d974ce1b16d43626eb59707180baff896253cc8dd5da25d0317497e5430fd6503ef160daf64e7d5cc984ac0e8e42a03941f5c2c74c89aacdd3670eed0a0920350d92db171fe87117cad42606ebd4113d4fe978f839a082ebba341", 0xfb}, {&(0x7f0000000180)="9b82a7e79d2519ebf7ccc6bfdab2ad1741c3a3bb783a4165ed54888f373c2736628503657d8677aa4af3ec3b93114cc6ef7824fe21e4e578474b164f031dda7f12c37e4a8dc1376241064428a07f2e87992f0e5efd14a5b19d3b7ff4a6d240e7c5a004bac1", 0x65}], 0x5, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x4008840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'wg1\x00', 0xe00}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x10, 0x1, 0x47, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@fallback=r0, r2, 0x22, 0x0, r2, @void, @value=r1, @void, @void, r7}, 0x20) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r4, &(0x7f00000000c0)=0xa7, 0x12) 3.514370992s ago: executing program 1 (id=4845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 2.8961061s ago: executing program 2 (id=4846): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev, 0x0, 0xfffbfffe}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000014c0)="2dcaa39e", 0x4}], 0x1}, 0x0) close(0x3) 2.786260843s ago: executing program 2 (id=4847): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x210}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0xfff5}, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911140000000000854f9c563b000000850000000500000095004800000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1, 0x0, 0x3f}, 0x20000042) 2.723042774s ago: executing program 2 (id=4848): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff1000000000000008c58d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xd, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900000000000600a56a88ca", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40), 0x1000000000000053}, 0x20004090) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f8482900", 0x16}, {&(0x7f00000000c0)="6ebbc8bb9819eebbb0f107ee724aa0c18ae8518e74aeb06b", 0x18}], 0x2}, 0xd0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000480), 0x42) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0xa}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x40020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r4, &(0x7f00000027c0)={&(0x7f0000000640), 0x6e, &(0x7f0000002600)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000022c0)=""/99, 0x63}, {&(0x7f0000002340)=""/232, 0xe8}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000002540)=""/169, 0xa9}], 0x6, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x95, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 1.017201821s ago: executing program 1 (id=4849): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x7fffffff}, 0x2006, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40022, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1c00000000000000010000000200000051e9ef673c8528aa84e25f59ff39a2980000a79f33eae0195f17250ccf5146a922ea8c707347b334f960504897024e8858fea8c3a312db147b1700d1143c9b6ed49a00de36cd41534287cc3103ba5d7decf43837dd1048c25899744fc90b6632d49907535be3ee8cbef8d6a57004cb6d94daaddcfe7c1671fd37baa2bc2c875d03be21c77b971e7aee98301b75d051d481087d9677e5", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0082ffee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 893.836025ms ago: executing program 2 (id=4850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10140) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1, 0x0, 0x50}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x27}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="7f035d933e7eed712c1aaccdfb", 0xd}, {&(0x7f00000004c0)="65dbc908502154b477c5b6240d113f6aeeb982aa91f971b5a210ba6bcf8a2b9149cd9475e080427235d86a42a0407289547e17705352e5e3dd7875d27404d065fe6a6c080ace7e71154e0f46eb409f46775c28e2c441c0a95ac9f8ae757dbda09ee633b2d4f1e1a504699f72badae824588310f86a37f04046d60eb705dd1116a0772f018eed3019ee91788536cd", 0x8e}, {&(0x7f0000000740)="585cb252ccaa40b74cdf818e7a1b359eb4f627edf4a50a200b60c05b67d709816704b15ea24558faef9d6a820e790f99d252a47cbf68293418261291365ec1c02f0ae5df35d2", 0x46}], 0x3, &(0x7f0000000800)=[{0x70, 0x10f, 0x7, "33b893ef9a2dfaea7a8fa8960e55e5633f7cc2ee138f1823dae91ef27601a7e3e50d2fab8cc8c4b071be361d5cbc35c511c462d0c226c287672d6d1b4051251d1ac8e54d39b8c6142dd9f1e723c7c11c6b399fe1c82a67e7d4d6"}, {0x60, 0xff, 0x1, "3af29123ba55df008b401e5d405e020006ec9ea8002c4d18a75e641689e441c6444c958ec51b900f4619373b613caf311f0a602c56fec9fcbecfa2a59e5b7a8796df702984c4dc6ea5"}], 0xd0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{0x28, 0x0, 0xc0, 0xfffff00c}, {0x6, 0x0, 0x8}]}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r0}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 570.740954ms ago: executing program 1 (id=4851): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073119a0000000000630a00ff000000009500000000000000b003000000e54d9a4320c267fb3605f6c3f687dcfe09064db290cb1e5db93406c6a38b2b345f8f3c747a79a06ef7917f53fef4d0e04e3b462e606c8bb1d523659dfd3f5e898b83540000c2c680a56b7cf106b2e1b6c8315202d1b30aa6ea5867dc08cc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18846, 0x0, 0x6, 0x7, 0x9, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r2, r3, 0x2f, 0x2028, 0x4, @void, @void, @value=r4}, 0x20) 445.291237ms ago: executing program 2 (id=4852): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r6) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/114, 0x72}], 0x6, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x22) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=@framed={{}, [@map_fd, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) 95.745877ms ago: executing program 1 (id=4853): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x4f4}], 0x1}, 0x48800) sendmsg$inet(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0xb, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000}, 0x50) 0s ago: executing program 0 (id=4854): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) (fail_nth: 2) kernel console output (not intermixed with test programs): gs_print_info+0x20/0x20 [ 1176.461955][T19269] ? load_image+0x420/0x420 [ 1176.466507][T19269] ? __might_fault+0xaa/0x120 [ 1176.471217][T19269] ? __lock_acquire+0x7d40/0x7d40 [ 1176.476292][T19269] should_fail_ex+0x39d/0x4d0 [ 1176.481054][T19269] _copy_from_user+0x2f/0xe0 [ 1176.485687][T19269] __sys_bpf+0x23e/0x890 [ 1176.489972][T19269] ? bpf_link_show_fdinfo+0x390/0x390 [ 1176.495397][T19269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1176.501604][T19269] __x64_sys_bpf+0x7c/0x90 [ 1176.506061][T19269] do_syscall_64+0x55/0xa0 [ 1176.510519][T19269] ? clear_bhb_loop+0x40/0x90 [ 1176.515230][T19269] ? clear_bhb_loop+0x40/0x90 [ 1176.519942][T19269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1176.525875][T19269] RIP: 0033:0x7fadbc19cdd9 [ 1176.530326][T19269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.549980][T19269] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1176.558437][T19269] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1176.566451][T19269] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000015 [ 1176.574452][T19269] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.582461][T19269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.590468][T19269] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1176.598493][T19269] [ 1177.126012][T19285] netlink: 'syz.2.4096': attribute type 10 has an invalid length. [ 1177.180854][T19285] macvlan1: entered allmulticast mode [ 1177.215931][T19285] veth1_vlan: entered allmulticast mode [ 1177.252271][T19285] macvlan1: entered promiscuous mode [ 1177.275995][T19285] team0: Port device macvlan1 added [ 1177.591311][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.597876][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.984648][T19298] __nla_validate_parse: 2 callbacks suppressed [ 1177.984686][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1178.261840][T19307] netlink: 'syz.2.4106': attribute type 10 has an invalid length. [ 1178.277810][T19307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1178.308888][T19307] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1178.317276][T19307] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.373385][T19307] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1178.406545][T19309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1178.414346][T19309] syzkaller1: linktype set to 786 [ 1178.422554][T19309] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4105'. [ 1178.872590][T19331] netlink: 'syz.0.4113': attribute type 21 has an invalid length. [ 1178.880712][T19331] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1178.891579][T19331] netlink: 'syz.0.4113': attribute type 5 has an invalid length. [ 1178.902201][T19331] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1180.422498][T19338] bridge0: port 3(team0) entered disabled state [ 1180.461812][T19338] bridge_slave_0: left promiscuous mode [ 1180.471686][T19338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.818136][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1181.061021][T19364] netlink: 'syz.1.4124': attribute type 21 has an invalid length. [ 1181.072304][T19364] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1181.081855][T19364] netlink: 'syz.1.4124': attribute type 5 has an invalid length. [ 1181.092855][T19364] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1181.149710][T19362] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1183.737939][T19404] À: port 1(vlan0) entered blocking state [ 1183.750280][T19404] À: port 1(vlan0) entered disabled state [ 1183.757428][T19404] vlan0: entered allmulticast mode [ 1183.762681][T19404] veth0_vlan: entered allmulticast mode [ 1183.781625][T19404] vlan0: entered promiscuous mode [ 1183.816402][T19402] À: port 1(vlan0) entered blocking state [ 1183.822605][T19402] À: port 1(vlan0) entered forwarding state [ 1184.220248][T19416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1184.604545][T19432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1184.817156][T19439] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1184.975875][T19443] netlink: 'syz.2.4152': attribute type 21 has an invalid length. [ 1184.991514][T19443] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1185.018806][T19443] netlink: 'syz.2.4152': attribute type 5 has an invalid length. [ 1185.028258][T19443] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1185.990050][T19459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1186.395369][T19473] netlink: 'syz.0.4169': attribute type 21 has an invalid length. [ 1186.403808][T19473] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1186.413206][T19473] netlink: 'syz.0.4169': attribute type 5 has an invalid length. [ 1186.421237][T19473] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1188.302161][T19510] FAULT_INJECTION: forcing a failure. [ 1188.302161][T19510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.317167][T19510] CPU: 1 PID: 19510 Comm: syz.2.4175 Not tainted syzkaller #0 [ 1188.324709][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1188.334873][T19510] Call Trace: [ 1188.338257][T19510] [ 1188.341236][T19510] dump_stack_lvl+0x18c/0x250 [ 1188.345980][T19510] ? show_regs_print_info+0x20/0x20 [ 1188.351244][T19510] ? load_image+0x420/0x420 [ 1188.355813][T19510] ? __might_fault+0xaa/0x120 [ 1188.360532][T19510] ? __lock_acquire+0x7d40/0x7d40 [ 1188.365611][T19510] should_fail_ex+0x39d/0x4d0 [ 1188.370353][T19510] _copy_from_user+0x2f/0xe0 [ 1188.374999][T19510] kstrtouint_from_user+0xde/0x170 [ 1188.380175][T19510] ? kstrtol_from_user+0x190/0x190 [ 1188.385379][T19510] proc_fail_nth_write+0x8f/0x250 [ 1188.390444][T19510] ? proc_fail_nth_read+0x260/0x260 [ 1188.395702][T19510] ? proc_fail_nth_read+0x260/0x260 [ 1188.400964][T19510] vfs_write+0x296/0x990 [ 1188.405277][T19510] ? file_end_write+0x250/0x250 [ 1188.410178][T19510] ? __fget_files+0x28/0x4b0 [ 1188.414815][T19510] ? __fget_files+0x28/0x4b0 [ 1188.419450][T19510] ? __fget_files+0x43d/0x4b0 [ 1188.424242][T19510] ? __fdget_pos+0x2a3/0x330 [ 1188.428892][T19510] ? ksys_write+0x75/0x260 [ 1188.433369][T19510] ksys_write+0x150/0x260 [ 1188.437758][T19510] ? __ia32_sys_read+0x90/0x90 [ 1188.442581][T19510] ? lockdep_hardirqs_on+0x98/0x150 [ 1188.447855][T19510] do_syscall_64+0x55/0xa0 [ 1188.452302][T19510] ? clear_bhb_loop+0x40/0x90 [ 1188.457044][T19510] ? clear_bhb_loop+0x40/0x90 [ 1188.461780][T19510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.467735][T19510] RIP: 0033:0x7f01e615d60e [ 1188.472219][T19510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1188.491878][T19510] RSP: 002b:00007f01e706cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1188.500424][T19510] RAX: ffffffffffffffda RBX: 00007f01e706d6c0 RCX: 00007f01e615d60e [ 1188.508447][T19510] RDX: 0000000000000001 RSI: 00007f01e706d0a0 RDI: 0000000000000004 [ 1188.516460][T19510] RBP: 00007f01e706d090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.524474][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.532481][T19510] R13: 00007f01e6416128 R14: 00007f01e6416090 R15: 00007ffcbdbe96c8 [ 1188.540554][T19510] [ 1188.940121][T19520] FAULT_INJECTION: forcing a failure. [ 1188.940121][T19520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.957258][T19520] CPU: 1 PID: 19520 Comm: syz.2.4180 Not tainted syzkaller #0 [ 1188.964830][T19520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1188.974926][T19520] Call Trace: [ 1188.978239][T19520] [ 1188.981221][T19520] dump_stack_lvl+0x18c/0x250 [ 1188.985952][T19520] ? show_regs_print_info+0x20/0x20 [ 1188.991190][T19520] ? load_image+0x420/0x420 [ 1188.995735][T19520] ? __might_fault+0xaa/0x120 [ 1189.000442][T19520] ? __lock_acquire+0x7d40/0x7d40 [ 1189.005599][T19520] should_fail_ex+0x39d/0x4d0 [ 1189.010339][T19520] _copy_from_iter+0x1d9/0x12e0 [ 1189.015238][T19520] ? __virt_addr_valid+0x18c/0x540 [ 1189.020406][T19520] ? __lock_acquire+0x7d40/0x7d40 [ 1189.025466][T19520] ? copyout_mc+0x70/0x70 [ 1189.029819][T19520] ? __virt_addr_valid+0x18c/0x540 [ 1189.034961][T19520] ? __virt_addr_valid+0x18c/0x540 [ 1189.040100][T19520] ? __virt_addr_valid+0x469/0x540 [ 1189.045245][T19520] ? __check_object_size+0x506/0xa20 [ 1189.050571][T19520] ip_generic_getfrag+0xfd/0x2f0 [ 1189.055537][T19520] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1189.060406][T19520] ? skb_page_frag_refill+0x199/0x310 [ 1189.065837][T19520] __ip_append_data+0x1f30/0x3d40 [ 1189.070919][T19520] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1189.075812][T19520] ? ip_setup_cork+0x860/0x860 [ 1189.080610][T19520] ? ip_setup_cork+0x530/0x860 [ 1189.085418][T19520] ip_make_skb+0x22b/0x440 [ 1189.089879][T19520] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1189.094765][T19520] ? ip_flush_pending_frames+0x250/0x250 [ 1189.100448][T19520] udp_sendmsg+0x1ade/0x23b0 [ 1189.105078][T19520] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1189.109949][T19520] ? udp_cmsg_send+0x350/0x350 [ 1189.114753][T19520] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1189.120757][T19520] ? lock_chain_count+0x20/0x20 [ 1189.125624][T19520] ? inet_sendmsg+0x14b/0x2f0 [ 1189.130320][T19520] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1189.135701][T19520] ? _local_bh_enable+0xa0/0xa0 [ 1189.140569][T19520] ? inet_sendmsg+0x14b/0x2f0 [ 1189.145264][T19520] ? inet_sendmsg+0x14b/0x2f0 [ 1189.149959][T19520] ? inet_send_prepare+0x260/0x260 [ 1189.155099][T19520] ____sys_sendmsg+0x5ba/0x960 [ 1189.159889][T19520] ? __lock_acquire+0x7d40/0x7d40 [ 1189.164956][T19520] ? __sys_sendmsg_sock+0x30/0x30 [ 1189.169998][T19520] ? __import_iovec+0x5f2/0x850 [ 1189.174895][T19520] ? import_iovec+0x73/0xa0 [ 1189.179417][T19520] ___sys_sendmsg+0x2a6/0x360 [ 1189.184120][T19520] ? get_pid_task+0x20/0x1e0 [ 1189.188743][T19520] ? __sys_sendmsg+0x2a0/0x2a0 [ 1189.193543][T19520] ? __lock_acquire+0x7d40/0x7d40 [ 1189.198627][T19520] __se_sys_sendmsg+0x1c2/0x2b0 [ 1189.203511][T19520] ? __x64_sys_sendmsg+0x80/0x80 [ 1189.208476][T19520] ? lockdep_hardirqs_on+0x98/0x150 [ 1189.213702][T19520] do_syscall_64+0x55/0xa0 [ 1189.218144][T19520] ? clear_bhb_loop+0x40/0x90 [ 1189.222845][T19520] ? clear_bhb_loop+0x40/0x90 [ 1189.227546][T19520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.233459][T19520] RIP: 0033:0x7f01e619cdd9 [ 1189.237892][T19520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.257521][T19520] RSP: 002b:00007f01e708e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.265986][T19520] RAX: ffffffffffffffda RBX: 00007f01e6415fa0 RCX: 00007f01e619cdd9 [ 1189.273983][T19520] RDX: 00000000600000a0 RSI: 0000200000001a40 RDI: 0000000000000004 [ 1189.281991][T19520] RBP: 00007f01e708e090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.290025][T19520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.298035][T19520] R13: 00007f01e6416038 R14: 00007f01e6415fa0 R15: 00007ffcbdbe96c8 [ 1189.306061][T19520] [ 1189.439865][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1189.590405][T19531] FAULT_INJECTION: forcing a failure. [ 1189.590405][T19531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.604642][T19531] CPU: 1 PID: 19531 Comm: syz.1.4185 Not tainted syzkaller #0 [ 1189.612186][T19531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1189.622270][T19531] Call Trace: [ 1189.625589][T19531] [ 1189.628588][T19531] dump_stack_lvl+0x18c/0x250 [ 1189.633342][T19531] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1189.639552][T19531] ? show_regs_print_info+0x20/0x20 [ 1189.644805][T19531] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1189.651001][T19531] should_fail_ex+0x39d/0x4d0 [ 1189.651043][T19531] _copy_from_user+0x2f/0xe0 [ 1189.651071][T19531] __sys_bpf+0x23e/0x890 [ 1189.664800][T19531] ? bpf_link_show_fdinfo+0x390/0x390 [ 1189.670226][T19531] ? lock_chain_count+0x20/0x20 [ 1189.675111][T19531] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1189.681150][T19531] __x64_sys_bpf+0x7c/0x90 [ 1189.685625][T19531] do_syscall_64+0x55/0xa0 [ 1189.690093][T19531] ? clear_bhb_loop+0x40/0x90 [ 1189.694813][T19531] ? clear_bhb_loop+0x40/0x90 [ 1189.699527][T19531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.705455][T19531] RIP: 0033:0x7fadbc19cdd9 [ 1189.709905][T19531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.729542][T19531] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1189.737990][T19531] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1189.745990][T19531] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1189.753972][T19531] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.761953][T19531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.769952][T19531] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1189.777965][T19531] [ 1189.897727][T19536] netlink: 'syz.2.4186': attribute type 29 has an invalid length. [ 1189.907211][T19535] netlink: 'syz.2.4186': attribute type 29 has an invalid length. [ 1189.915550][T19535] netlink: 'syz.2.4186': attribute type 29 has an invalid length. [ 1190.082930][T19541] netlink: 'syz.2.4188': attribute type 2 has an invalid length. [ 1190.108638][T19541] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 1190.133723][T19541] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4188'. [ 1191.130713][T19558] netlink: 'syz.1.4195': attribute type 21 has an invalid length. [ 1191.147580][T19559] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4195'. [ 1191.307523][T19568] netlink: 'syz.0.4197': attribute type 21 has an invalid length. [ 1191.322295][T19568] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1191.337317][T19568] netlink: 'syz.0.4197': attribute type 5 has an invalid length. [ 1191.345643][T19568] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1191.359269][T19570] TCP: TCP_TX_DELAY enabled [ 1191.938092][T19579] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1192.754130][T19587] netlink: 'syz.2.4203': attribute type 2 has an invalid length. [ 1192.763849][T19587] netlink: 'syz.2.4203': attribute type 8 has an invalid length. [ 1192.772389][T19587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1195.416105][T19596] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4205'. [ 1195.705388][T19608] netlink: 'syz.2.4211': attribute type 64 has an invalid length. [ 1195.713599][T19608] netlink: 'syz.2.4211': attribute type 64 has an invalid length. [ 1195.912152][T19621] FAULT_INJECTION: forcing a failure. [ 1195.912152][T19621] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.929395][T19621] CPU: 0 PID: 19621 Comm: syz.0.4215 Not tainted syzkaller #0 [ 1195.936951][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.947069][T19621] Call Trace: [ 1195.950394][T19621] [ 1195.953365][T19621] dump_stack_lvl+0x18c/0x250 [ 1195.958104][T19621] ? show_regs_print_info+0x20/0x20 [ 1195.963367][T19621] ? load_image+0x420/0x420 [ 1195.967931][T19621] ? __asan_memset+0x22/0x40 [ 1195.972579][T19621] should_fail_ex+0x39d/0x4d0 [ 1195.977366][T19621] should_failslab+0x9/0x20 [ 1195.981938][T19621] slab_pre_alloc_hook+0x59/0x310 [ 1195.987022][T19621] ? __debug_object_init+0xec/0x450 [ 1195.992276][T19621] kmem_cache_alloc+0x5a/0x2d0 [ 1195.997089][T19621] ? slab_build_skb+0x2b/0x3f0 [ 1196.001896][T19621] slab_build_skb+0x2b/0x3f0 [ 1196.006526][T19621] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1196.011932][T19621] ? __fget_files+0x28/0x4b0 [ 1196.016662][T19621] ? __fget_files+0x28/0x4b0 [ 1196.021317][T19621] ? __fget_files+0x43d/0x4b0 [ 1196.026048][T19621] ? cpu_online+0x60/0x60 [ 1196.030421][T19621] bpf_prog_test_run+0x321/0x390 [ 1196.035410][T19621] __sys_bpf+0x49d/0x890 [ 1196.039690][T19621] ? bpf_link_show_fdinfo+0x390/0x390 [ 1196.045141][T19621] ? lock_chain_count+0x20/0x20 [ 1196.050033][T19621] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1196.056089][T19621] __x64_sys_bpf+0x7c/0x90 [ 1196.060670][T19621] do_syscall_64+0x55/0xa0 [ 1196.065137][T19621] ? clear_bhb_loop+0x40/0x90 [ 1196.069865][T19621] ? clear_bhb_loop+0x40/0x90 [ 1196.074598][T19621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.080551][T19621] RIP: 0033:0x7f585259cdd9 [ 1196.085001][T19621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.104662][T19621] RSP: 002b:00007f58533f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.113132][T19621] RAX: ffffffffffffffda RBX: 00007f5852815fa0 RCX: 00007f585259cdd9 [ 1196.121150][T19621] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1196.129164][T19621] RBP: 00007f58533f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.137171][T19621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.145211][T19621] R13: 00007f5852816038 R14: 00007f5852815fa0 R15: 00007ffcb39efa48 [ 1196.153245][T19621] [ 1196.665867][T19628] netlink: 'syz.1.4217': attribute type 17 has an invalid length. [ 1196.689064][T19628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1196.713875][T19628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.932803][T19630] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4216'. [ 1200.212884][T19735] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4258'. [ 1203.348077][T19801] IPv6: …: Disabled Multicast RS [ 1203.403521][T19807] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1203.698778][T19809] netlink: 'syz.3.4283': attribute type 21 has an invalid length. [ 1203.731214][T19809] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4283'. [ 1204.310348][T19832] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1204.398796][T19830] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.4291'. [ 1204.444866][T19834] netlink: 'syz.3.4291': attribute type 7 has an invalid length. [ 1204.463578][T19834] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.4291'. [ 1204.742638][T19845] netlink: 'syz.2.4296': attribute type 21 has an invalid length. [ 1204.751346][T19845] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1204.780663][T19848] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1204.792856][T19848] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1205.023207][T19856] netlink: 'syz.2.4300': attribute type 5 has an invalid length. [ 1205.177677][T19862] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1205.265496][T19866] netlink: 'syz.3.4304': attribute type 10 has an invalid length. [ 1205.589822][T19874] netlink: 'syz.1.4307': attribute type 10 has an invalid length. [ 1205.734540][T19876] netlink: 'syz.1.4308': attribute type 8 has an invalid length. [ 1205.755322][T19876] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1205.928397][T19879] netlink: 'syz.1.4309': attribute type 21 has an invalid length. [ 1205.942608][T19879] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1207.031509][T19910] netlink: 'syz.3.4324': attribute type 21 has an invalid length. [ 1207.271854][T19917] netlink: 'syz.0.4325': attribute type 21 has an invalid length. [ 1207.360091][T19920] bridge_slave_0: entered allmulticast mode [ 1207.900921][T19939] FAULT_INJECTION: forcing a failure. [ 1207.900921][T19939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.917101][T19939] CPU: 0 PID: 19939 Comm: syz.3.4336 Not tainted syzkaller #0 [ 1207.924614][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.934711][T19939] Call Trace: [ 1207.938045][T19939] [ 1207.941016][T19939] dump_stack_lvl+0x18c/0x250 [ 1207.945760][T19939] ? show_regs_print_info+0x20/0x20 [ 1207.951008][T19939] ? load_image+0x420/0x420 [ 1207.955553][T19939] ? __might_fault+0xaa/0x120 [ 1207.960274][T19939] ? __lock_acquire+0x7d40/0x7d40 [ 1207.965342][T19939] should_fail_ex+0x39d/0x4d0 [ 1207.970077][T19939] _copy_from_user+0x2f/0xe0 [ 1207.974721][T19939] ___sys_sendmsg+0x1c7/0x360 [ 1207.979447][T19939] ? __sys_sendmsg+0x2a0/0x2a0 [ 1207.984286][T19939] __se_sys_sendmsg+0x1c2/0x2b0 [ 1207.989183][T19939] ? __x64_sys_sendmsg+0x80/0x80 [ 1207.994164][T19939] ? lockdep_hardirqs_on+0x98/0x150 [ 1207.999413][T19939] do_syscall_64+0x55/0xa0 [ 1208.003859][T19939] ? clear_bhb_loop+0x40/0x90 [ 1208.008560][T19939] ? clear_bhb_loop+0x40/0x90 [ 1208.013279][T19939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.019198][T19939] RIP: 0033:0x7f8e6fd9cdd9 [ 1208.023644][T19939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.043282][T19939] RSP: 002b:00007f8e70d0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.051738][T19939] RAX: ffffffffffffffda RBX: 00007f8e70015fa0 RCX: 00007f8e6fd9cdd9 [ 1208.059733][T19939] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 1208.067742][T19939] RBP: 00007f8e70d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.075788][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.083798][T19939] R13: 00007f8e70016038 R14: 00007f8e70015fa0 R15: 00007ffe0b2b3a68 [ 1208.091803][T19939] [ 1208.125791][T19936] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 1208.132915][T19936] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 1208.353886][T19954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1208.585693][T19958] __nla_validate_parse: 7 callbacks suppressed [ 1208.592730][T19958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4345'. [ 1208.841501][T19970] validate_nla: 5 callbacks suppressed [ 1208.841520][T19970] netlink: 'syz.3.4349': attribute type 10 has an invalid length. [ 1208.861109][T19970] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 1208.870258][T19970] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 1208.926274][T19970] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 1208.937763][T19970] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 1208.960068][T19970] team0: Port device wlan1 added [ 1209.214125][T19976] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1209.629930][T19982] pim6reg1: entered promiscuous mode [ 1209.635895][T19982] pim6reg1: entered allmulticast mode [ 1210.350413][T20003] netlink: 'syz.0.4359': attribute type 10 has an invalid length. [ 1210.358972][T20003] mac80211_hwsim hwsim24 wlan1: left allmulticast mode [ 1210.371975][T20003] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 1210.380006][T20003] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 1210.390898][T20003] team0: Port device wlan1 added [ 1210.483587][T20007] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1210.897859][T20018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1211.334506][T20030] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1211.976701][T20050] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1212.406981][T20062] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1212.981526][T20078] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4387'. [ 1213.006424][T20078] netlink: 'syz.0.4387': attribute type 10 has an invalid length. [ 1213.130708][T20082] netlink: 'syz.1.4389': attribute type 41 has an invalid length. [ 1213.262564][T20084] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1213.764347][T20094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.791183][T20094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.813973][T20094] bond0 (unregistering): Released all slaves [ 1214.069042][T20113] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1214.100901][T20111] FAULT_INJECTION: forcing a failure. [ 1214.100901][T20111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.115902][T20111] CPU: 1 PID: 20111 Comm: syz.2.4402 Not tainted syzkaller #0 [ 1214.123409][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1214.133485][T20111] Call Trace: [ 1214.136815][T20111] [ 1214.139766][T20111] dump_stack_lvl+0x18c/0x250 [ 1214.144493][T20111] ? show_regs_print_info+0x20/0x20 [ 1214.149740][T20111] ? load_image+0x420/0x420 [ 1214.154304][T20111] ? __might_fault+0xaa/0x120 [ 1214.159042][T20111] ? __lock_acquire+0x7d40/0x7d40 [ 1214.164101][T20111] should_fail_ex+0x39d/0x4d0 [ 1214.168829][T20111] _copy_from_user+0x2f/0xe0 [ 1214.173457][T20111] inet6_ioctl+0x1ad/0x2d0 [ 1214.177935][T20111] ? inet6_getname+0x650/0x650 [ 1214.182736][T20111] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1214.188246][T20111] sock_do_ioctl+0xfc/0x310 [ 1214.194380][T20111] ? sock_show_fdinfo+0xb0/0xb0 [ 1214.199308][T20111] sock_ioctl+0x5ba/0x7e0 [ 1214.203672][T20111] ? sock_poll+0x3e0/0x3e0 [ 1214.208126][T20111] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1214.213099][T20111] ? security_file_ioctl+0x80/0xa0 [ 1214.218251][T20111] ? sock_poll+0x3e0/0x3e0 [ 1214.222697][T20111] __se_sys_ioctl+0xfd/0x170 [ 1214.227322][T20111] do_syscall_64+0x55/0xa0 [ 1214.231760][T20111] ? clear_bhb_loop+0x40/0x90 [ 1214.236476][T20111] ? clear_bhb_loop+0x40/0x90 [ 1214.241204][T20111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1214.247160][T20111] RIP: 0033:0x7f01e619cdd9 [ 1214.251611][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.271242][T20111] RSP: 002b:00007f01e708e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.279682][T20111] RAX: ffffffffffffffda RBX: 00007f01e6415fa0 RCX: 00007f01e619cdd9 [ 1214.287685][T20111] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000c [ 1214.295681][T20111] RBP: 00007f01e708e090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.303712][T20111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.311716][T20111] R13: 00007f01e6416038 R14: 00007f01e6415fa0 R15: 00007ffcbdbe96c8 [ 1214.319740][T20111] [ 1214.331352][T20114] sit0: left allmulticast mode [ 1214.816622][T20129] Â: renamed from virt_wifi0 (while UP) [ 1215.006595][T20138] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1215.449344][T20144] sit0: entered promiscuous mode [ 1215.681812][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.835090][T20155] FAULT_INJECTION: forcing a failure. [ 1215.835090][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.858514][T20155] CPU: 1 PID: 20155 Comm: syz.1.4415 Not tainted syzkaller #0 [ 1215.866054][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1215.876152][T20155] Call Trace: [ 1215.879472][T20155] [ 1215.882431][T20155] dump_stack_lvl+0x18c/0x250 [ 1215.887185][T20155] ? show_regs_print_info+0x20/0x20 [ 1215.892431][T20155] ? load_image+0x420/0x420 [ 1215.896980][T20155] ? __lock_acquire+0x7d40/0x7d40 [ 1215.902077][T20155] should_fail_ex+0x39d/0x4d0 [ 1215.906817][T20155] should_failslab+0x9/0x20 [ 1215.911372][T20155] slab_pre_alloc_hook+0x59/0x310 [ 1215.916446][T20155] ? __lock_acquire+0x7d40/0x7d40 [ 1215.921523][T20155] kmem_cache_alloc+0x5a/0x2d0 [ 1215.926329][T20155] ? security_file_alloc+0x34/0x120 [ 1215.931591][T20155] security_file_alloc+0x34/0x120 [ 1215.936663][T20155] init_file+0x94/0x1f0 [ 1215.940878][T20155] alloc_empty_file+0xb7/0x1d0 [ 1215.945714][T20155] alloc_file+0x5c/0x600 [ 1215.950040][T20155] alloc_file_pseudo+0x184/0x210 [ 1215.955022][T20155] ? alloc_empty_backing_file+0xe0/0xe0 [ 1215.960627][T20155] ? alloc_fd+0x58f/0x630 [ 1215.965023][T20155] anon_inode_getfd+0xca/0x1c0 [ 1215.969833][T20155] map_create+0xf14/0x12f0 [ 1215.974286][T20155] __sys_bpf+0x651/0x890 [ 1215.978571][T20155] ? bpf_link_show_fdinfo+0x390/0x390 [ 1215.984008][T20155] ? lock_chain_count+0x20/0x20 [ 1215.988907][T20155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1215.994948][T20155] __x64_sys_bpf+0x7c/0x90 [ 1215.999417][T20155] do_syscall_64+0x55/0xa0 [ 1216.003881][T20155] ? clear_bhb_loop+0x40/0x90 [ 1216.008611][T20155] ? clear_bhb_loop+0x40/0x90 [ 1216.013352][T20155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.019296][T20155] RIP: 0033:0x7fadbc19cdd9 [ 1216.023769][T20155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.043526][T20155] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1216.052006][T20155] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1216.060032][T20155] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1216.068054][T20155] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.076086][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.084101][T20155] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1216.092138][T20155] [ 1216.450606][T20167] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1216.692481][T20175] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1217.207673][T20194] FAULT_INJECTION: forcing a failure. [ 1217.207673][T20194] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.240027][T20194] CPU: 1 PID: 20194 Comm: syz.2.4430 Not tainted syzkaller #0 [ 1217.247563][T20194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1217.257654][T20194] Call Trace: [ 1217.260977][T20194] [ 1217.264035][T20194] dump_stack_lvl+0x18c/0x250 [ 1217.268772][T20194] ? show_regs_print_info+0x20/0x20 [ 1217.274016][T20194] ? load_image+0x420/0x420 [ 1217.278580][T20194] ? __might_sleep+0xe0/0xe0 [ 1217.283246][T20194] ? __lock_acquire+0x7d40/0x7d40 [ 1217.288330][T20194] should_fail_ex+0x39d/0x4d0 [ 1217.293057][T20194] should_failslab+0x9/0x20 [ 1217.297612][T20194] slab_pre_alloc_hook+0x59/0x310 [ 1217.302696][T20194] ? xskq_create+0x56/0x170 [ 1217.307251][T20194] __kmem_cache_alloc_node+0x53/0x250 [ 1217.312677][T20194] ? __might_fault+0xaa/0x120 [ 1217.317413][T20194] ? xskq_create+0x56/0x170 [ 1217.322063][T20194] kmalloc_trace+0x2a/0xe0 [ 1217.326543][T20194] xskq_create+0x56/0x170 [ 1217.330937][T20194] xsk_init_queue+0xad/0x100 [ 1217.335586][T20194] xsk_setsockopt+0x4e5/0x760 [ 1217.340318][T20194] ? xsk_poll+0x680/0x680 [ 1217.344715][T20194] ? __fget_files+0x28/0x4b0 [ 1217.349356][T20194] ? __fget_files+0x28/0x4b0 [ 1217.354016][T20194] ? aa_sock_opt_perm+0x74/0x100 [ 1217.359017][T20194] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1217.364633][T20194] ? security_socket_setsockopt+0x7e/0xa0 [ 1217.370396][T20194] ? xsk_poll+0x680/0x680 [ 1217.374783][T20194] do_sock_setsockopt+0x175/0x1a0 [ 1217.379869][T20194] ? __fdget+0x180/0x210 [ 1217.384175][T20194] __x64_sys_setsockopt+0x182/0x200 [ 1217.389447][T20194] do_syscall_64+0x55/0xa0 [ 1217.393908][T20194] ? clear_bhb_loop+0x40/0x90 [ 1217.398710][T20194] ? clear_bhb_loop+0x40/0x90 [ 1217.403443][T20194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.409396][T20194] RIP: 0033:0x7f01e619cdd9 [ 1217.413859][T20194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.433527][T20194] RSP: 002b:00007f01e704c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1217.441999][T20194] RAX: ffffffffffffffda RBX: 00007f01e6416180 RCX: 00007f01e619cdd9 [ 1217.450014][T20194] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1217.458021][T20194] RBP: 00007f01e704c090 R08: 0000000000000004 R09: 0000000000000000 [ 1217.466029][T20194] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 1217.474045][T20194] R13: 00007f01e6416218 R14: 00007f01e6416180 R15: 00007ffcbdbe96c8 [ 1217.482083][T20194] [ 1217.802538][T20197] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4431'. [ 1218.917570][T20223] FAULT_INJECTION: forcing a failure. [ 1218.917570][T20223] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.931035][T20223] CPU: 0 PID: 20223 Comm: syz.3.4441 Not tainted syzkaller #0 [ 1218.938595][T20223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.948702][T20223] Call Trace: [ 1218.952018][T20223] [ 1218.954998][T20223] dump_stack_lvl+0x18c/0x250 [ 1218.959738][T20223] ? show_regs_print_info+0x20/0x20 [ 1218.964996][T20223] ? load_image+0x420/0x420 [ 1218.969550][T20223] ? __might_sleep+0xe0/0xe0 [ 1218.974194][T20223] ? __lock_acquire+0x7d40/0x7d40 [ 1218.979271][T20223] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1218.984978][T20223] should_fail_ex+0x39d/0x4d0 [ 1218.989734][T20223] should_failslab+0x9/0x20 [ 1218.994301][T20223] slab_pre_alloc_hook+0x59/0x310 [ 1218.999397][T20223] kmem_cache_alloc_node+0x60/0x320 [ 1219.004666][T20223] ? __alloc_skb+0x103/0x2c0 [ 1219.009322][T20223] __alloc_skb+0x103/0x2c0 [ 1219.013797][T20223] __ip_append_data+0x2b73/0x3d40 [ 1219.018927][T20223] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1219.023856][T20223] ? ip_setup_cork+0x860/0x860 [ 1219.028681][T20223] ? ip_setup_cork+0x530/0x860 [ 1219.033516][T20223] ip_make_skb+0x22b/0x440 [ 1219.037988][T20223] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1219.042896][T20223] ? ip_flush_pending_frames+0x250/0x250 [ 1219.048595][T20223] udp_sendmsg+0x1ade/0x23b0 [ 1219.053260][T20223] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1219.058162][T20223] ? udp_cmsg_send+0x350/0x350 [ 1219.062979][T20223] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1219.069010][T20223] ? lock_chain_count+0x20/0x20 [ 1219.073909][T20223] ? inet_sendmsg+0x14b/0x2f0 [ 1219.078648][T20223] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1219.084062][T20223] ? _local_bh_enable+0xa0/0xa0 [ 1219.088952][T20223] ? inet_sendmsg+0x14b/0x2f0 [ 1219.093693][T20223] ? inet_sendmsg+0x14b/0x2f0 [ 1219.098431][T20223] ? inet_send_prepare+0x260/0x260 [ 1219.103616][T20223] ____sys_sendmsg+0x5ba/0x960 [ 1219.108438][T20223] ? __lock_acquire+0x7d40/0x7d40 [ 1219.113524][T20223] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.118598][T20223] ? __import_iovec+0x5f2/0x850 [ 1219.123670][T20223] ? import_iovec+0x73/0xa0 [ 1219.128218][T20223] ___sys_sendmsg+0x2a6/0x360 [ 1219.132933][T20223] ? get_pid_task+0x20/0x1e0 [ 1219.137579][T20223] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.142419][T20223] ? __lock_acquire+0x7d40/0x7d40 [ 1219.147510][T20223] __se_sys_sendmsg+0x1c2/0x2b0 [ 1219.152407][T20223] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.157423][T20223] ? lockdep_hardirqs_on+0x98/0x150 [ 1219.162687][T20223] do_syscall_64+0x55/0xa0 [ 1219.167146][T20223] ? clear_bhb_loop+0x40/0x90 [ 1219.171868][T20223] ? clear_bhb_loop+0x40/0x90 [ 1219.176595][T20223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.182539][T20223] RIP: 0033:0x7f8e6fd9cdd9 [ 1219.186997][T20223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.206676][T20223] RSP: 002b:00007f8e70d0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.215149][T20223] RAX: ffffffffffffffda RBX: 00007f8e70015fa0 RCX: 00007f8e6fd9cdd9 [ 1219.223184][T20223] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1219.231196][T20223] RBP: 00007f8e70d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.239209][T20223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.247278][T20223] R13: 00007f8e70016038 R14: 00007f8e70015fa0 R15: 00007ffe0b2b3a68 [ 1219.255319][T20223] [ 1219.400662][T20229] syz.1.4442: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1219.426262][T20229] CPU: 1 PID: 20229 Comm: syz.1.4442 Not tainted syzkaller #0 [ 1219.433799][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1219.443903][T20229] Call Trace: [ 1219.447321][T20229] [ 1219.450299][T20229] dump_stack_lvl+0x18c/0x250 [ 1219.455039][T20229] ? show_regs_print_info+0x20/0x20 [ 1219.460312][T20229] ? load_image+0x420/0x420 [ 1219.464897][T20229] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1219.471380][T20229] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1219.477955][T20229] warn_alloc+0x246/0x340 [ 1219.482334][T20229] ? stack_trace_save+0xaa/0x100 [ 1219.487314][T20229] ? zone_watermark_ok_safe+0x230/0x230 [ 1219.492909][T20229] ? kasan_set_track+0x5f/0x70 [ 1219.497712][T20229] ? kasan_set_track+0x4e/0x70 [ 1219.502511][T20229] ? __kasan_kmalloc+0x8f/0xa0 [ 1219.507305][T20229] ? xsk_init_queue+0xad/0x100 [ 1219.512129][T20229] ? xsk_setsockopt+0x4e5/0x760 [ 1219.517060][T20229] ? do_sock_setsockopt+0x175/0x1a0 [ 1219.522292][T20229] ? __x64_sys_setsockopt+0x182/0x200 [ 1219.527698][T20229] __vmalloc_node_range+0x126/0x1330 [ 1219.533043][T20229] ? free_vm_area+0x50/0x50 [ 1219.537602][T20229] vmalloc_user+0x74/0x80 [ 1219.541967][T20229] ? xskq_create+0xbf/0x170 [ 1219.546498][T20229] xskq_create+0xbf/0x170 [ 1219.550858][T20229] xsk_init_queue+0xad/0x100 [ 1219.555482][T20229] xsk_setsockopt+0x4e5/0x760 [ 1219.560220][T20229] ? xsk_poll+0x680/0x680 [ 1219.564589][T20229] ? bpf_lsm_socket_getsockopt+0x10/0x10 [ 1219.570250][T20229] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1219.575822][T20229] ? security_socket_setsockopt+0x7e/0xa0 [ 1219.581569][T20229] ? xsk_poll+0x680/0x680 [ 1219.585941][T20229] do_sock_setsockopt+0x175/0x1a0 [ 1219.590999][T20229] ? __fdget+0x180/0x210 [ 1219.595280][T20229] __x64_sys_setsockopt+0x182/0x200 [ 1219.600516][T20229] do_syscall_64+0x55/0xa0 [ 1219.604954][T20229] ? clear_bhb_loop+0x40/0x90 [ 1219.609662][T20229] ? clear_bhb_loop+0x40/0x90 [ 1219.614377][T20229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.620325][T20229] RIP: 0033:0x7fadbc19cdd9 [ 1219.624774][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.644496][T20229] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1219.652952][T20229] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1219.660970][T20229] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1219.668976][T20229] RBP: 00007fadbc232d69 R08: 0000000000000004 R09: 0000000000000000 [ 1219.676969][T20229] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1219.684966][T20229] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1219.692976][T20229] [ 1219.708979][T20235] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4443'. [ 1219.738488][T20229] Mem-Info: [ 1219.742121][T20229] active_anon:7055 inactive_anon:0 isolated_anon:0 [ 1219.742121][T20229] active_file:19052 inactive_file:40280 isolated_file:0 [ 1219.742121][T20229] unevictable:768 dirty:516 writeback:0 [ 1219.742121][T20229] slab_reclaimable:10632 slab_unreclaimable:98555 [ 1219.742121][T20229] mapped:25085 shmem:1361 pagetables:578 [ 1219.742121][T20229] sec_pagetables:0 bounce:0 [ 1219.742121][T20229] kernel_misc_reclaimable:0 [ 1219.742121][T20229] free:1332322 free_pcp:13452 free_cma:0 [ 1219.816970][T20229] Node 0 active_anon:28220kB inactive_anon:0kB active_file:76208kB inactive_file:160916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100340kB dirty:2064kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10092kB pagetables:2212kB sec_pagetables:0kB all_unreclaimable? no [ 1219.853633][T20229] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1219.889680][T20229] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1219.920818][T20229] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1219.933439][T20229] Node 0 DMA32 free:1413772kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28176kB inactive_anon:0kB active_file:76208kB inactive_file:160100kB unevictable:1536kB writepending:2064kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:40516kB local_pcp:20600kB free_cma:0kB [ 1219.967747][T20229] lowmem_reserve[]: 0 0 0 0 0 [ 1219.993458][T20229] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1220.034975][T20229] lowmem_reserve[]: 0 0 0 0 0 [ 1220.040730][T20229] Node 1 Normal free:3900156kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13952kB local_pcp:6848kB free_cma:0kB [ 1220.088082][T20229] lowmem_reserve[]: 0 0 0 0 0 [ 1220.095340][T20229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1220.115607][T20229] Node 0 DMA32: 1118*4kB (UME) 1729*8kB (UME) 977*16kB (UME) 820*32kB (UME) 659*64kB (UME) 434*128kB (UME) 134*256kB (UME) 79*512kB (UM) 21*1024kB (UM) 12*2048kB (UME) 277*4096kB (UM) = 1413328kB [ 1220.144896][T20229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1220.164259][T20229] Node 1 Normal: 265*4kB (UME) 77*8kB (UME) 55*16kB (UME) 214*32kB (UME) 67*64kB (UE) 9*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3900156kB [ 1220.203166][T20229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.234597][T20229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1220.263369][T20229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1220.283254][T20229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1220.287616][T20253] netlink: 'syz.0.4449': attribute type 10 has an invalid length. [ 1220.292790][T20229] 60693 total pagecache pages [ 1220.309562][T20229] 0 pages in swap cache [ 1220.329609][T20229] Free swap = 124996kB [ 1220.340791][T20229] Total swap = 124996kB [ 1220.353183][T20229] 2097051 pages RAM [ 1220.357266][T20229] 0 pages HighMem/MovableOnly [ 1220.362057][T20229] 416927 pages reserved [ 1220.368447][T20229] 0 pages cma reserved [ 1220.584346][T20253] macvlan1: entered allmulticast mode [ 1220.617466][T20253] veth1_vlan: entered allmulticast mode [ 1220.643216][T20253] macvlan1: entered promiscuous mode [ 1220.654610][T20253] team0: Port device macvlan1 added [ 1220.772534][T20262] netlink: 192444 bytes leftover after parsing attributes in process `syz.2.4453'. [ 1221.416671][T20282] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1221.437604][T20282] netlink: 'syz.2.4459': attribute type 10 has an invalid length. [ 1221.667725][T20288] netlink: 'syz.3.4462': attribute type 10 has an invalid length. [ 1221.679774][T20288] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1221.790716][T20294] netlink: 'syz.2.4463': attribute type 21 has an invalid length. [ 1221.812393][T20294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1221.953959][T20293] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1222.538979][T20319] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.4472'. [ 1222.724882][T20321] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1222.810313][T20321] netlink: 'syz.3.4473': attribute type 10 has an invalid length. [ 1223.060698][T20324] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1223.511862][T20328] netlink: 'syz.3.4476': attribute type 21 has an invalid length. [ 1223.520922][T20328] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4476'. [ 1223.771336][T20335] FAULT_INJECTION: forcing a failure. [ 1223.771336][T20335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.785601][T20335] CPU: 1 PID: 20335 Comm: syz.1.4479 Not tainted syzkaller #0 [ 1223.793097][T20335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1223.803229][T20335] Call Trace: [ 1223.806551][T20335] [ 1223.809507][T20335] dump_stack_lvl+0x18c/0x250 [ 1223.814241][T20335] ? show_regs_print_info+0x20/0x20 [ 1223.819482][T20335] ? load_image+0x420/0x420 [ 1223.824022][T20335] ? __lock_acquire+0x7d40/0x7d40 [ 1223.829077][T20335] ? full_name_hash+0x92/0xe0 [ 1223.833810][T20335] should_fail_ex+0x39d/0x4d0 [ 1223.838533][T20335] _copy_to_user+0x2f/0xa0 [ 1223.842980][T20335] put_user_ifreq+0x78/0xb0 [ 1223.847525][T20335] sock_do_ioctl+0x268/0x310 [ 1223.852153][T20335] ? sock_show_fdinfo+0xb0/0xb0 [ 1223.857051][T20335] ? sock_ioctl+0x1c1/0x7e0 [ 1223.861591][T20335] sock_ioctl+0x5ba/0x7e0 [ 1223.865949][T20335] ? sock_poll+0x3e0/0x3e0 [ 1223.870417][T20335] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1223.875388][T20335] ? security_file_ioctl+0x80/0xa0 [ 1223.880535][T20335] ? sock_poll+0x3e0/0x3e0 [ 1223.884983][T20335] __se_sys_ioctl+0xfd/0x170 [ 1223.889623][T20335] do_syscall_64+0x55/0xa0 [ 1223.894109][T20335] ? clear_bhb_loop+0x40/0x90 [ 1223.898830][T20335] ? clear_bhb_loop+0x40/0x90 [ 1223.903538][T20335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1223.909476][T20335] RIP: 0033:0x7fadbc19cdd9 [ 1223.913919][T20335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.933559][T20335] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.942013][T20335] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1223.950004][T20335] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000026 [ 1223.957998][T20335] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.965995][T20335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.973987][T20335] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1223.982024][T20335] [ 1224.151798][T20339] FAULT_INJECTION: forcing a failure. [ 1224.151798][T20339] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.177788][T20339] CPU: 0 PID: 20339 Comm: syz.0.4481 Not tainted syzkaller #0 [ 1224.185427][T20339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1224.195545][T20339] Call Trace: [ 1224.198871][T20339] [ 1224.201856][T20339] dump_stack_lvl+0x18c/0x250 [ 1224.206588][T20339] ? show_regs_print_info+0x20/0x20 [ 1224.211842][T20339] ? load_image+0x420/0x420 [ 1224.216404][T20339] ? __lock_acquire+0x7d40/0x7d40 [ 1224.221475][T20339] should_fail_ex+0x39d/0x4d0 [ 1224.226191][T20339] should_failslab+0x9/0x20 [ 1224.230721][T20339] slab_pre_alloc_hook+0x59/0x310 [ 1224.235775][T20339] ? bpf_test_init+0x9f/0x140 [ 1224.240478][T20339] ? bpf_test_init+0x9f/0x140 [ 1224.245180][T20339] __kmem_cache_alloc_node+0x53/0x250 [ 1224.250582][T20339] ? bpf_test_init+0x9f/0x140 [ 1224.255301][T20339] __kmalloc+0xa4/0x230 [ 1224.259518][T20339] bpf_test_init+0x9f/0x140 [ 1224.264063][T20339] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1224.269476][T20339] ? dev_put+0x80/0x80 [ 1224.273582][T20339] ? dev_put+0x80/0x80 [ 1224.277679][T20339] bpf_prog_test_run+0x321/0x390 [ 1224.282645][T20339] __sys_bpf+0x49d/0x890 [ 1224.286915][T20339] ? bpf_link_show_fdinfo+0x390/0x390 [ 1224.292315][T20339] ? lock_chain_count+0x20/0x20 [ 1224.297201][T20339] __x64_sys_bpf+0x7c/0x90 [ 1224.301639][T20339] do_syscall_64+0x55/0xa0 [ 1224.306080][T20339] ? clear_bhb_loop+0x40/0x90 [ 1224.310789][T20339] ? clear_bhb_loop+0x40/0x90 [ 1224.315490][T20339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.321414][T20339] RIP: 0033:0x7f585259cdd9 [ 1224.325864][T20339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.345494][T20339] RSP: 002b:00007f58533f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1224.353933][T20339] RAX: ffffffffffffffda RBX: 00007f5852815fa0 RCX: 00007f585259cdd9 [ 1224.361935][T20339] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1224.369934][T20339] RBP: 00007f58533f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.377938][T20339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.385937][T20339] R13: 00007f5852816038 R14: 00007f5852815fa0 R15: 00007ffcb39efa48 [ 1224.393952][T20339] [ 1224.804473][T20348] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4484'. [ 1225.001320][T20354] netlink: 'syz.0.4485': attribute type 21 has an invalid length. [ 1225.032124][T20354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4485'. [ 1225.629170][T20362] netlink: 'syz.2.4488': attribute type 21 has an invalid length. [ 1225.643373][T20362] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4488'. [ 1226.305726][T20389] netlink: 'syz.2.4498': attribute type 10 has an invalid length. [ 1226.314903][T20389] veth1_vlan: left allmulticast mode [ 1227.034673][T20394] netlink: 'syz.1.4501': attribute type 21 has an invalid length. [ 1227.044263][T20394] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4501'. [ 1227.257041][T20399] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1228.515429][T20422] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1228.547926][T20420] netlink: 'syz.2.4512': attribute type 21 has an invalid length. [ 1228.561884][T20420] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1228.689996][T20427] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1230.045876][T20452] netlink: 'syz.3.4522': attribute type 21 has an invalid length. [ 1230.064249][T20452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4522'. [ 1230.135528][T20454] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4524'. [ 1230.168426][T20454] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1230.221782][T20456] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4524'. [ 1230.858351][T20482] netlink: 'syz.0.4530': attribute type 4 has an invalid length. [ 1230.893276][T20482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4530'. [ 1231.296016][T20495] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4536'. [ 1231.691728][T20498] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1232.083946][T20501] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1232.460802][T20507] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1232.491393][T20507] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1232.547245][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1232.558446][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1232.573185][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1232.585073][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1232.595906][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1232.609506][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1232.759780][T20518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1232.828779][T20518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1232.842551][T20518] netlink: 'syz.3.4543': attribute type 29 has an invalid length. [ 1232.874866][T20518] netlink: 'syz.3.4543': attribute type 29 has an invalid length. [ 1232.889371][T20518] netlink: 'syz.3.4543': attribute type 29 has an invalid length. [ 1233.038498][T14149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.147484][T20530] netlink: 'syz.3.4547': attribute type 21 has an invalid length. [ 1233.430273][T20508] chnl_net:caif_netlink_parms(): no params data found [ 1233.507844][T14149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.617350][T14149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.667173][T20541] netlink: 'syz.1.4551': attribute type 9 has an invalid length. [ 1233.800147][T14149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.826124][T20508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.835901][T20508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.844287][T20508] bridge_slave_0: entered allmulticast mode [ 1233.851810][T20508] bridge_slave_0: entered promiscuous mode [ 1233.879776][T20552] sit0: entered allmulticast mode [ 1234.120481][T20554] sit0: entered promiscuous mode [ 1234.574352][T20555] netlink: 'syz.0.4553': attribute type 64 has an invalid length. [ 1234.596652][T20508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.605048][T20508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.612402][T20508] bridge_slave_1: entered allmulticast mode [ 1234.625298][T20508] bridge_slave_1: entered promiscuous mode [ 1234.703311][ T5825] Bluetooth: hci3: command tx timeout [ 1234.738734][T20508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.754006][T20508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.914677][T20564] netlink: 'syz.3.4557': attribute type 21 has an invalid length. [ 1234.932892][T20508] team0: Port device team_slave_0 added [ 1234.946114][T20508] team0: Port device team_slave_1 added [ 1235.037464][T20508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.051686][T20508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.088630][T20508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.104379][T20508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.110078][T20570] FAULT_INJECTION: forcing a failure. [ 1235.110078][T20570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.111432][T20508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.111463][T20508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.194874][T20570] CPU: 1 PID: 20570 Comm: syz.1.4559 Not tainted syzkaller #0 [ 1235.202533][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1235.212662][T20570] Call Trace: [ 1235.215995][T20570] [ 1235.218966][T20570] dump_stack_lvl+0x18c/0x250 [ 1235.223731][T20570] ? show_regs_print_info+0x20/0x20 [ 1235.228990][T20570] ? load_image+0x420/0x420 [ 1235.233553][T20570] ? __might_fault+0xaa/0x120 [ 1235.238280][T20570] ? __lock_acquire+0x7d40/0x7d40 [ 1235.243344][T20570] ? unix_ioctl+0x261/0x670 [ 1235.247901][T20570] should_fail_ex+0x39d/0x4d0 [ 1235.252647][T20570] _copy_from_user+0x2f/0xe0 [ 1235.257292][T20570] sock_do_ioctl+0x190/0x310 [ 1235.261932][T20570] ? sock_show_fdinfo+0xb0/0xb0 [ 1235.266830][T20570] sock_ioctl+0x5ba/0x7e0 [ 1235.271179][T20570] ? sock_poll+0x3e0/0x3e0 [ 1235.275623][T20570] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1235.280580][T20570] ? security_file_ioctl+0x80/0xa0 [ 1235.285720][T20570] ? sock_poll+0x3e0/0x3e0 [ 1235.290162][T20570] __se_sys_ioctl+0xfd/0x170 [ 1235.294773][T20570] do_syscall_64+0x55/0xa0 [ 1235.299203][T20570] ? clear_bhb_loop+0x40/0x90 [ 1235.303917][T20570] ? clear_bhb_loop+0x40/0x90 [ 1235.308621][T20570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1235.314538][T20570] RIP: 0033:0x7fadbc19cdd9 [ 1235.318974][T20570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.338597][T20570] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.347067][T20570] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1235.355056][T20570] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 1235.363046][T20570] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.371041][T20570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.379025][T20570] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1235.387021][T20570] [ 1235.448676][T20508] hsr_slave_0: entered promiscuous mode [ 1235.455605][T20508] hsr_slave_1: entered promiscuous mode [ 1235.462020][T20508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.471004][T20508] Cannot create hsr debugfs directory [ 1236.532490][T20606] netlink: 'syz.3.4567': attribute type 21 has an invalid length. [ 1236.569800][T20606] __nla_validate_parse: 6 callbacks suppressed [ 1236.569840][T20606] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1236.702442][T20599] sit0: left allmulticast mode [ 1236.783411][ T5825] Bluetooth: hci3: command tx timeout [ 1237.686609][T20632] FAULT_INJECTION: forcing a failure. [ 1237.686609][T20632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.709379][T20632] CPU: 1 PID: 20632 Comm: syz.1.4572 Not tainted syzkaller #0 [ 1237.716921][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.727117][T20632] Call Trace: [ 1237.730460][T20632] [ 1237.733463][T20632] dump_stack_lvl+0x18c/0x250 [ 1237.738296][T20632] ? show_regs_print_info+0x20/0x20 [ 1237.743554][T20632] ? load_image+0x420/0x420 [ 1237.748092][T20632] ? __might_fault+0xaa/0x120 [ 1237.752786][T20632] ? __lock_acquire+0x7d40/0x7d40 [ 1237.757829][T20632] should_fail_ex+0x39d/0x4d0 [ 1237.762694][T20632] _copy_from_user+0x2f/0xe0 [ 1237.767329][T20632] ___sys_sendmsg+0x1c7/0x360 [ 1237.772035][T20632] ? __sys_sendmsg+0x2a0/0x2a0 [ 1237.776826][T20632] ? __lock_acquire+0x7d40/0x7d40 [ 1237.781914][T20632] __se_sys_sendmsg+0x1c2/0x2b0 [ 1237.786794][T20632] ? __x64_sys_sendmsg+0x80/0x80 [ 1237.791779][T20632] ? lockdep_hardirqs_on+0x98/0x150 [ 1237.797011][T20632] do_syscall_64+0x55/0xa0 [ 1237.801449][T20632] ? clear_bhb_loop+0x40/0x90 [ 1237.806168][T20632] ? clear_bhb_loop+0x40/0x90 [ 1237.810868][T20632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1237.816778][T20632] RIP: 0033:0x7fadbc19cdd9 [ 1237.821213][T20632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.840842][T20632] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.849282][T20632] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1237.857282][T20632] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 1237.865279][T20632] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.873278][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.881280][T20632] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1237.889307][T20632] [ 1238.190453][T20644] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1238.299449][T20646] netlink: 'syz.0.4577': attribute type 21 has an invalid length. [ 1238.333202][T20646] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1238.489415][T20508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1238.509360][T20508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1238.552245][T14149] vlan0: left allmulticast mode [ 1238.564845][T14149] veth0_vlan: left allmulticast mode [ 1238.570226][T14149] vlan0: left promiscuous mode [ 1238.595470][T14149] À: port 1(vlan0) entered disabled state [ 1238.863283][ T5825] Bluetooth: hci3: command tx timeout [ 1238.955301][T14149] hsr_slave_1: left promiscuous mode [ 1238.967056][T14149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.979040][T14149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.988081][T14149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.998286][T14149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.006917][T14149] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1239.016644][T14149] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1239.028041][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.036600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.047761][T14149] batman_adv: batadv0: Interface deactivated: vlan1 [ 1239.057163][T14149] batman_adv: batadv0: Removing interface: vlan1 [ 1239.092113][T20674] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1239.186085][T14149] veth0_macvtap: left promiscuous mode [ 1239.191856][T14149] veth1_vlan: left promiscuous mode [ 1239.197910][T14149] veth0_vlan: left promiscuous mode [ 1240.947331][ T5825] Bluetooth: hci3: command tx timeout [ 1241.263769][T14149] geneve1 (unregistering): left promiscuous mode [ 1241.270578][T14149] geneve1 (unregistering): left allmulticast mode [ 1241.280342][T14149] team0 (unregistering): Port device geneve1 removed [ 1241.409090][T14149] macvlan1 (unregistering): left promiscuous mode [ 1241.417588][T14149] team0 (unregistering): Port device macvlan1 removed [ 1241.756278][T14149] team_slave_1 (unregistering): left promiscuous mode [ 1241.763338][T14149] team_slave_1 (unregistering): left allmulticast mode [ 1241.772178][T14149] team0 (unregistering): Port device team_slave_1 removed [ 1242.220302][T20508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1242.232858][T20508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1242.253106][T20684] netlink: 'syz.3.4588': attribute type 21 has an invalid length. [ 1242.261098][T20684] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1242.465397][T20699] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1242.562567][T20508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.605889][T20508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.631197][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.638489][T14153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.657964][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.665201][T14153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.255785][T20508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.338080][T20508] veth0_vlan: entered promiscuous mode [ 1243.374708][T20723] netlink: 'syz.3.4599': attribute type 21 has an invalid length. [ 1243.386122][T20723] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1243.397777][T20508] veth1_vlan: entered promiscuous mode [ 1243.448904][T20508] veth0_macvtap: entered promiscuous mode [ 1243.461494][T20508] veth1_macvtap: entered promiscuous mode [ 1243.517074][T20508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.549000][T20508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.636223][T20726] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1243.691160][T20508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.708340][T20508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.718298][T20508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.731164][T20508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.819638][T20731] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4601'. [ 1244.000006][T14139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.033832][T14139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.125724][T14147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.151510][T14147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.535108][T14139] tipc: Subscription rejected, illegal request [ 1244.890157][T20753] netlink: 'syz.3.4609': attribute type 21 has an invalid length. [ 1244.913631][T20753] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4609'. [ 1244.939114][T20749] pim6reg1: entered promiscuous mode [ 1244.956172][T20749] pim6reg1: entered allmulticast mode [ 1244.986765][T20757] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1245.158634][T20762] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1245.466387][T20772] FAULT_INJECTION: forcing a failure. [ 1245.466387][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.500411][T20772] CPU: 1 PID: 20772 Comm: syz.1.4615 Not tainted syzkaller #0 [ 1245.508009][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1245.518123][T20772] Call Trace: [ 1245.521464][T20772] [ 1245.524458][T20772] dump_stack_lvl+0x18c/0x250 [ 1245.529254][T20772] ? show_regs_print_info+0x20/0x20 [ 1245.534530][T20772] ? load_image+0x420/0x420 [ 1245.539108][T20772] ? __might_sleep+0xe0/0xe0 [ 1245.543766][T20772] ? __lock_acquire+0x7d40/0x7d40 [ 1245.548877][T20772] should_fail_ex+0x39d/0x4d0 [ 1245.553654][T20772] should_failslab+0x9/0x20 [ 1245.558318][T20772] slab_pre_alloc_hook+0x59/0x310 [ 1245.563503][T20772] ? __lock_acquire+0x7d40/0x7d40 [ 1245.568606][T20772] kmem_cache_alloc_node+0x60/0x320 [ 1245.573879][T20772] ? __alloc_skb+0x103/0x2c0 [ 1245.578562][T20772] __alloc_skb+0x103/0x2c0 [ 1245.583062][T20772] netlink_sendmsg+0x66a/0xbf0 [ 1245.587919][T20772] ? perf_trace_lock+0x304/0x3b0 [ 1245.592947][T20772] ? netlink_getsockopt+0x590/0x590 [ 1245.598248][T20772] ? aa_sock_msg_perm+0x94/0x150 [ 1245.603275][T20772] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1245.608640][T20772] ? security_socket_sendmsg+0x80/0xa0 [ 1245.614169][T20772] ? netlink_getsockopt+0x590/0x590 [ 1245.619471][T20772] ____sys_sendmsg+0x5ba/0x960 [ 1245.624347][T20772] ? __asan_memset+0x22/0x40 [ 1245.629019][T20772] ? __sys_sendmsg_sock+0x30/0x30 [ 1245.634136][T20772] ? __import_iovec+0x5f2/0x850 [ 1245.639110][T20772] ? import_iovec+0x73/0xa0 [ 1245.643699][T20772] ___sys_sendmsg+0x2a6/0x360 [ 1245.648476][T20772] ? __sys_sendmsg+0x2a0/0x2a0 [ 1245.653428][T20772] ? trace_call_bpf+0xc3/0x6c0 [ 1245.658362][T20772] __se_sys_sendmsg+0x1c2/0x2b0 [ 1245.663308][T20772] ? __x64_sys_sendmsg+0x80/0x80 [ 1245.668359][T20772] ? lockdep_hardirqs_on+0x98/0x150 [ 1245.673643][T20772] do_syscall_64+0x55/0xa0 [ 1245.678141][T20772] ? clear_bhb_loop+0x40/0x90 [ 1245.682889][T20772] ? clear_bhb_loop+0x40/0x90 [ 1245.687666][T20772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.693651][T20772] RIP: 0033:0x7fadbc19cdd9 [ 1245.698145][T20772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.717834][T20772] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.726425][T20772] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1245.734563][T20772] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1245.742627][T20772] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.750659][T20772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.758704][T20772] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1245.766821][T20772] [ 1245.841840][T20760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1245.849365][T20760] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.857947][T20760] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.865732][T20760] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.901130][T20768] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4614'. [ 1246.284726][T20784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1246.547920][T20790] netlink: 'syz.1.4621': attribute type 21 has an invalid length. [ 1246.612566][T20793] netlink: 'syz.3.4622': attribute type 21 has an invalid length. [ 1247.302826][T20820] __nla_validate_parse: 6 callbacks suppressed [ 1247.302845][T20820] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1247.970271][T20829] netlink: 'syz.1.4633': attribute type 21 has an invalid length. [ 1247.980814][T20829] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1248.053567][T20835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4635'. [ 1248.072759][T20836] netlink: 'syz.3.4634': attribute type 19 has an invalid length. [ 1248.123024][T20836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1248.216144][T20840] FAULT_INJECTION: forcing a failure. [ 1248.216144][T20840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.229934][T20840] CPU: 1 PID: 20840 Comm: syz.1.4636 Not tainted syzkaller #0 [ 1248.237488][T20840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1248.247610][T20840] Call Trace: [ 1248.250941][T20840] [ 1248.253895][T20840] dump_stack_lvl+0x18c/0x250 [ 1248.258615][T20840] ? show_regs_print_info+0x20/0x20 [ 1248.263847][T20840] ? load_image+0x420/0x420 [ 1248.268388][T20840] ? __might_fault+0xaa/0x120 [ 1248.273124][T20840] ? __lock_acquire+0x7d40/0x7d40 [ 1248.278235][T20840] should_fail_ex+0x39d/0x4d0 [ 1248.282993][T20840] _copy_from_user+0x2f/0xe0 [ 1248.287667][T20840] br_ioctl_stub+0x3e0/0xd50 [ 1248.292326][T20840] ? rcu_is_watching+0x15/0xb0 [ 1248.297219][T20840] ? rcu_read_unlock+0xa0/0xa0 [ 1248.302050][T20840] ? trace_contention_end+0x39/0xe0 [ 1248.307297][T20840] ? __mutex_lock+0x315/0xcc0 [ 1248.312013][T20840] ? mutex_lock_nested+0x20/0x20 [ 1248.317001][T20840] ? rcu_read_unlock+0xa0/0xa0 [ 1248.321789][T20840] sock_ioctl+0x517/0x7e0 [ 1248.326166][T20840] ? sock_poll+0x3e0/0x3e0 [ 1248.330647][T20840] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1248.335715][T20840] ? security_file_ioctl+0x80/0xa0 [ 1248.340882][T20840] ? sock_poll+0x3e0/0x3e0 [ 1248.345350][T20840] __se_sys_ioctl+0xfd/0x170 [ 1248.349983][T20840] do_syscall_64+0x55/0xa0 [ 1248.354428][T20840] ? clear_bhb_loop+0x40/0x90 [ 1248.359191][T20840] ? clear_bhb_loop+0x40/0x90 [ 1248.363914][T20840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.369845][T20840] RIP: 0033:0x7fadbc19cdd9 [ 1248.374306][T20840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.393952][T20840] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.402404][T20840] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1248.410410][T20840] RDX: 0000200000000080 RSI: 0000000000008940 RDI: 0000000000000004 [ 1248.418410][T20840] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.426409][T20840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.434423][T20840] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1248.442474][T20840] [ 1248.608078][T20847] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 1248.626463][T20847] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1248.649897][T20846] netlink: 539 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1248.674907][T20849] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1248.983719][T20855] netlink: 'syz.1.4644': attribute type 21 has an invalid length. [ 1248.992836][T20855] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1249.169777][T20860] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4643'. [ 1249.945034][T20872] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1250.076620][T20877] netlink: 'syz.3.4650': attribute type 2 has an invalid length. [ 1250.480556][T20890] tap0: tun_chr_ioctl cmd 1074025680 [ 1250.623475][T20891] netlink: 'syz.0.4655': attribute type 21 has an invalid length. [ 1250.832101][T20896] netlink: 'syz.1.4657': attribute type 10 has an invalid length. [ 1251.657252][T20920] FAULT_INJECTION: forcing a failure. [ 1251.657252][T20920] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.689535][T20920] CPU: 0 PID: 20920 Comm: syz.3.4666 Not tainted syzkaller #0 [ 1251.697116][T20920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1251.707220][T20920] Call Trace: [ 1251.710529][T20920] [ 1251.713513][T20920] dump_stack_lvl+0x18c/0x250 [ 1251.718340][T20920] ? show_regs_print_info+0x20/0x20 [ 1251.723591][T20920] ? load_image+0x420/0x420 [ 1251.728163][T20920] ? __lock_acquire+0x7d40/0x7d40 [ 1251.733239][T20920] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1251.738603][T20920] should_fail_ex+0x39d/0x4d0 [ 1251.743365][T20920] should_failslab+0x9/0x20 [ 1251.747915][T20920] slab_pre_alloc_hook+0x59/0x310 [ 1251.752993][T20920] ? __build_skb_around+0x255/0x3d0 [ 1251.758252][T20920] kmem_cache_alloc+0x5a/0x2d0 [ 1251.763058][T20920] ? _sctp_make_chunk+0x14e/0x420 [ 1251.768135][T20920] _sctp_make_chunk+0x14e/0x420 [ 1251.773038][T20920] sctp_make_datafrag_empty+0x12b/0x240 [ 1251.778641][T20920] ? sctp_make_ecne+0x340/0x340 [ 1251.783583][T20920] ? sctp_auth_send_cid+0x69/0x250 [ 1251.788750][T20920] sctp_datamsg_from_user+0x722/0xee0 [ 1251.794190][T20920] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 1251.799608][T20920] ? __asan_memcpy+0x40/0x70 [ 1251.804252][T20920] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 1251.809704][T20920] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1251.815601][T20920] ? __sctp_connect+0xd80/0xd80 [ 1251.820503][T20920] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1251.825925][T20920] ? _local_bh_enable+0xa0/0xa0 [ 1251.830828][T20920] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1251.836680][T20920] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1251.842531][T20920] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1251.848117][T20920] ? security_sctp_bind_connect+0x89/0xb0 [ 1251.853889][T20920] sctp_sendmsg+0x1b83/0x28c0 [ 1251.858639][T20920] ? sctp_getsockopt+0xb60/0xb60 [ 1251.863625][T20920] ? aa_sk_perm+0x83c/0x970 [ 1251.868198][T20920] ? aa_af_perm+0x330/0x330 [ 1251.872761][T20920] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1251.879231][T20920] ? sock_rps_record_flow+0x19/0x3f0 [ 1251.884570][T20920] ? inet_sendmsg+0x7c/0x2f0 [ 1251.889210][T20920] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1251.894546][T20920] ? security_socket_sendmsg+0x80/0xa0 [ 1251.900036][T20920] ? inet_send_prepare+0x260/0x260 [ 1251.905189][T20920] ____sys_sendmsg+0x5ba/0x960 [ 1251.910003][T20920] ? __lock_acquire+0x7d40/0x7d40 [ 1251.915082][T20920] ? __asan_memset+0x22/0x40 [ 1251.919719][T20920] ? __sys_sendmsg_sock+0x30/0x30 [ 1251.924809][T20920] ? __import_iovec+0x5f2/0x850 [ 1251.929711][T20920] ? import_iovec+0x73/0xa0 [ 1251.934264][T20920] ___sys_sendmsg+0x2a6/0x360 [ 1251.938987][T20920] ? __sys_sendmsg+0x2a0/0x2a0 [ 1251.943819][T20920] ? __lock_acquire+0x7d40/0x7d40 [ 1251.948920][T20920] __se_sys_sendmsg+0x1c2/0x2b0 [ 1251.953831][T20920] ? __x64_sys_sendmsg+0x80/0x80 [ 1251.958820][T20920] ? lockdep_hardirqs_on+0x98/0x150 [ 1251.964077][T20920] do_syscall_64+0x55/0xa0 [ 1251.968526][T20920] ? clear_bhb_loop+0x40/0x90 [ 1251.973272][T20920] ? clear_bhb_loop+0x40/0x90 [ 1251.978018][T20920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.983975][T20920] RIP: 0033:0x7f8e6fd9cdd9 [ 1251.988430][T20920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.008095][T20920] RSP: 002b:00007f8e70d0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.016578][T20920] RAX: ffffffffffffffda RBX: 00007f8e70015fa0 RCX: 00007f8e6fd9cdd9 [ 1252.024601][T20920] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1252.032637][T20920] RBP: 00007f8e70d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.040643][T20920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.048658][T20920] R13: 00007f8e70016038 R14: 00007f8e70015fa0 R15: 00007ffe0b2b3a68 [ 1252.056695][T20920] [ 1252.352914][T20926] __nla_validate_parse: 12 callbacks suppressed [ 1252.367677][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1252.382889][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1252.424920][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4669'. [ 1252.477049][T20929] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1252.500005][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1252.528072][T20926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1252.537819][T20928] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4669'. [ 1252.811447][T20939] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1253.387512][T20951] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1253.651100][T20957] FAULT_INJECTION: forcing a failure. [ 1253.651100][T20957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.723654][T20957] CPU: 1 PID: 20957 Comm: syz.1.4681 Not tainted syzkaller #0 [ 1253.731226][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1253.741339][T20957] Call Trace: [ 1253.744717][T20957] [ 1253.747700][T20957] dump_stack_lvl+0x18c/0x250 [ 1253.752454][T20957] ? show_regs_print_info+0x20/0x20 [ 1253.757719][T20957] ? load_image+0x420/0x420 [ 1253.762302][T20957] ? __might_fault+0xaa/0x120 [ 1253.767052][T20957] ? __lock_acquire+0x7d40/0x7d40 [ 1253.772163][T20957] should_fail_ex+0x39d/0x4d0 [ 1253.776935][T20957] _copy_from_iter+0x1d9/0x12e0 [ 1253.781850][T20957] ? __might_fault+0xaa/0x120 [ 1253.786589][T20957] ? _copy_from_iter+0x24e/0x12e0 [ 1253.791720][T20957] ? __virt_addr_valid+0x18c/0x540 [ 1253.796895][T20957] ? __lock_acquire+0x7d40/0x7d40 [ 1253.801992][T20957] ? copyout_mc+0x70/0x70 [ 1253.806406][T20957] ? copyout_mc+0x70/0x70 [ 1253.810782][T20957] ? __virt_addr_valid+0x18c/0x540 [ 1253.815963][T20957] ? page_copy_sane+0x16a/0x270 [ 1253.820939][T20957] copy_page_from_iter+0x7b/0x100 [ 1253.826072][T20957] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1253.831974][T20957] tun_get_user+0x15db/0x3ca0 [ 1253.836754][T20957] ? aa_file_perm+0x11b/0xee0 [ 1253.841526][T20957] ? rcu_read_unlock+0xa0/0xa0 [ 1253.846376][T20957] ? tun_get+0x1c/0x2e0 [ 1253.850604][T20957] ? __lock_acquire+0x7d40/0x7d40 [ 1253.855690][T20957] ? tun_get+0x1c/0x2e0 [ 1253.859891][T20957] tun_chr_write_iter+0x119/0x200 [ 1253.864956][T20957] vfs_write+0x46c/0x990 [ 1253.869293][T20957] ? file_end_write+0x250/0x250 [ 1253.874201][T20957] ? __fget_files+0x43d/0x4b0 [ 1253.878933][T20957] ? __fdget_pos+0x1d8/0x330 [ 1253.883568][T20957] ? ksys_write+0x75/0x260 [ 1253.888043][T20957] ksys_write+0x150/0x260 [ 1253.892422][T20957] ? __ia32_sys_read+0x90/0x90 [ 1253.897235][T20957] ? lockdep_hardirqs_on+0x98/0x150 [ 1253.902482][T20957] do_syscall_64+0x55/0xa0 [ 1253.906938][T20957] ? clear_bhb_loop+0x40/0x90 [ 1253.911667][T20957] ? clear_bhb_loop+0x40/0x90 [ 1253.916391][T20957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1253.922320][T20957] RIP: 0033:0x7fadbc19cdd9 [ 1253.926765][T20957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.946406][T20957] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1253.954857][T20957] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1253.962856][T20957] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 1253.970857][T20957] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.978886][T20957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.986883][T20957] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1253.994926][T20957] [ 1254.863427][T20961] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1255.311994][T20978] netlink: 'syz.1.4688': attribute type 3 has an invalid length. [ 1255.783485][T20985] netlink: 'syz.2.4689': attribute type 10 has an invalid length. [ 1255.808571][T20985] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1257.430946][T21016] __nla_validate_parse: 7 callbacks suppressed [ 1257.430966][T21016] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1257.629777][T21024] netlink: 'syz.2.4701': attribute type 8 has an invalid length. [ 1257.649357][T21024] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4701'. [ 1257.686632][T21023] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1257.964474][T21030] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4702'. [ 1258.535513][T21030] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4702'. [ 1258.574042][T21029] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4702'. [ 1258.625142][T21027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1259.185955][T21043] netlink: 'syz.2.4706': attribute type 29 has an invalid length. [ 1259.245894][T21046] FAULT_INJECTION: forcing a failure. [ 1259.245894][T21046] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.281994][T21043] netlink: 'syz.2.4706': attribute type 29 has an invalid length. [ 1259.300871][T21046] CPU: 0 PID: 21046 Comm: syz.1.4707 Not tainted syzkaller #0 [ 1259.308511][T21046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.318620][T21046] Call Trace: [ 1259.321949][T21046] [ 1259.324909][T21046] dump_stack_lvl+0x18c/0x250 [ 1259.329637][T21046] ? show_regs_print_info+0x20/0x20 [ 1259.334883][T21046] ? load_image+0x420/0x420 [ 1259.339460][T21046] should_fail_ex+0x39d/0x4d0 [ 1259.344200][T21046] should_failslab+0x9/0x20 [ 1259.348777][T21046] slab_pre_alloc_hook+0x59/0x310 [ 1259.353858][T21046] ? nf_ct_ext_add+0x1ab/0x440 [ 1259.358747][T21046] ? nf_ct_ext_add+0x1ab/0x440 [ 1259.363541][T21046] __kmem_cache_alloc_node+0x53/0x250 [ 1259.366711][T21045] netlink: 'syz.2.4706': attribute type 29 has an invalid length. [ 1259.368958][T21046] ? nf_ct_ext_add+0x1ab/0x440 [ 1259.381573][T21046] __kmalloc_node_track_caller+0xa2/0x230 [ 1259.387349][T21046] krealloc+0x86/0x120 [ 1259.391474][T21046] nf_ct_ext_add+0x1ab/0x440 [ 1259.396130][T21046] init_conntrack+0x69c/0xf10 [ 1259.400873][T21046] ? early_drop+0x7f0/0x7f0 [ 1259.405430][T21046] ? nf_conntrack_find_get+0x650/0x650 [ 1259.410952][T21046] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1259.416371][T21046] ? __siphash_unaligned+0x22e/0x3a0 [ 1259.421721][T21046] nf_conntrack_in+0xc06/0x15c0 [ 1259.426638][T21046] ? nf_ct_pernet+0x270/0x270 [ 1259.431373][T21046] ? ipt_do_table+0x2c1/0x15e0 [ 1259.436192][T21046] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 1259.441684][T21046] ? ip_select_ttl+0xb1/0x330 [ 1259.446396][T21046] ? ipv4_conntrack_local+0x123/0x200 [ 1259.451821][T21046] ? ipv4_conntrack_in+0x20/0x20 [ 1259.456799][T21046] nf_hook_slow+0xbd/0x200 [ 1259.461322][T21046] ? nf_hook+0x390/0x390 [ 1259.465597][T21046] nf_hook+0x228/0x390 [ 1259.469694][T21046] ? nf_hook+0xa2/0x390 [ 1259.473895][T21046] ? __ip_local_out+0x5f0/0x5f0 [ 1259.478870][T21046] ? nf_hook+0x390/0x390 [ 1259.483148][T21046] ? ip_fast_csum+0x1ee/0x2b0 [ 1259.487869][T21046] __ip_local_out+0x4db/0x5f0 [ 1259.492579][T21046] ? nf_hook+0x390/0x390 [ 1259.496851][T21046] ip_send_skb+0x4c/0x1d0 [ 1259.501230][T21046] raw_sendmsg+0x163e/0x1c00 [ 1259.505892][T21046] ? compat_raw_ioctl+0x70/0x70 [ 1259.510783][T21046] ? __lock_acquire+0x1273/0x7d40 [ 1259.515865][T21046] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1259.522314][T21046] ? sock_rps_record_flow+0x19/0x3f0 [ 1259.527636][T21046] ? inet_sendmsg+0x7c/0x2f0 [ 1259.532256][T21046] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1259.537578][T21046] ? security_socket_sendmsg+0x80/0xa0 [ 1259.543063][T21046] ? inet_send_prepare+0x260/0x260 [ 1259.548215][T21046] ____sys_sendmsg+0x5ba/0x960 [ 1259.553022][T21046] ? __lock_acquire+0x7d40/0x7d40 [ 1259.558176][T21046] ? __asan_memset+0x22/0x40 [ 1259.562830][T21046] ? __sys_sendmsg_sock+0x30/0x30 [ 1259.567878][T21046] ? __import_iovec+0x5f2/0x850 [ 1259.572758][T21046] ? import_iovec+0x73/0xa0 [ 1259.577289][T21046] ___sys_sendmsg+0x2a6/0x360 [ 1259.582000][T21046] ? get_pid_task+0x20/0x1e0 [ 1259.586658][T21046] ? __sys_sendmsg+0x2a0/0x2a0 [ 1259.591474][T21046] ? __lock_acquire+0x7d40/0x7d40 [ 1259.596578][T21046] __se_sys_sendmsg+0x1c2/0x2b0 [ 1259.601467][T21046] ? __x64_sys_sendmsg+0x80/0x80 [ 1259.606484][T21046] ? lockdep_hardirqs_on+0x98/0x150 [ 1259.611726][T21046] do_syscall_64+0x55/0xa0 [ 1259.616194][T21046] ? clear_bhb_loop+0x40/0x90 [ 1259.620911][T21046] ? clear_bhb_loop+0x40/0x90 [ 1259.625626][T21046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.631555][T21046] RIP: 0033:0x7fadbc19cdd9 [ 1259.636000][T21046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.655783][T21046] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.664252][T21046] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1259.672265][T21046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1259.680282][T21046] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.688280][T21046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.696331][T21046] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1259.704375][T21046] [ 1260.060391][T21052] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4709'. [ 1260.402301][T21060] netlink: 'syz.3.4713': attribute type 21 has an invalid length. [ 1260.434218][T21060] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4713'. [ 1260.911504][T21067] netlink: 'syz.3.4715': attribute type 21 has an invalid length. [ 1260.960334][T21067] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1261.426345][T21085] netlink: 'syz.0.4722': attribute type 21 has an invalid length. [ 1261.442993][T21085] netlink: 'syz.0.4722': attribute type 4 has an invalid length. [ 1262.135837][T21092] netlink: 'syz.3.4724': attribute type 21 has an invalid length. [ 1263.551775][T21115] __nla_validate_parse: 4 callbacks suppressed [ 1263.551793][T21115] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1264.013858][T21120] netlink: 'syz.0.4733': attribute type 21 has an invalid length. [ 1264.021846][T21120] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1264.053254][T21120] netlink: 'syz.0.4733': attribute type 5 has an invalid length. [ 1264.085708][T21120] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1264.924745][T21130] netlink: 'syz.1.4743': attribute type 2 has an invalid length. [ 1265.036241][T21128] netlink: 'syz.3.4735': attribute type 21 has an invalid length. [ 1265.088058][T21128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1265.100602][T21126] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4734'. [ 1265.231276][T21135] netlink: 'syz.1.4736': attribute type 21 has an invalid length. [ 1265.265535][T21135] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1265.300393][T21135] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1267.138235][T21154] FAULT_INJECTION: forcing a failure. [ 1267.138235][T21154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.152296][T21154] CPU: 1 PID: 21154 Comm: syz.2.4744 Not tainted syzkaller #0 [ 1267.159824][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1267.169928][T21154] Call Trace: [ 1267.173244][T21154] [ 1267.176210][T21154] dump_stack_lvl+0x18c/0x250 [ 1267.180936][T21154] ? show_regs_print_info+0x20/0x20 [ 1267.186186][T21154] ? load_image+0x420/0x420 [ 1267.190756][T21154] ? __might_fault+0xaa/0x120 [ 1267.195476][T21154] ? __lock_acquire+0x7d40/0x7d40 [ 1267.200537][T21154] should_fail_ex+0x39d/0x4d0 [ 1267.205286][T21154] _copy_from_user+0x2f/0xe0 [ 1267.209972][T21154] generic_map_update_batch+0x59a/0x810 [ 1267.215589][T21154] ? rcu_read_unlock+0xa0/0xa0 [ 1267.220406][T21154] ? __fdget+0x180/0x210 [ 1267.224710][T21154] ? rcu_read_unlock+0xa0/0xa0 [ 1267.229614][T21154] bpf_map_do_batch+0x3d7/0x610 [ 1267.234518][T21154] __sys_bpf+0x381/0x890 [ 1267.238811][T21154] ? bpf_link_show_fdinfo+0x390/0x390 [ 1267.244247][T21154] ? lock_chain_count+0x20/0x20 [ 1267.249162][T21154] __x64_sys_bpf+0x7c/0x90 [ 1267.253626][T21154] do_syscall_64+0x55/0xa0 [ 1267.258086][T21154] ? clear_bhb_loop+0x40/0x90 [ 1267.262810][T21154] ? clear_bhb_loop+0x40/0x90 [ 1267.267549][T21154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.273493][T21154] RIP: 0033:0x7f9eac99cdd9 [ 1267.277951][T21154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.297615][T21154] RSP: 002b:00007f9ead8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1267.306089][T21154] RAX: ffffffffffffffda RBX: 00007f9eacc15fa0 RCX: 00007f9eac99cdd9 [ 1267.314104][T21154] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1267.322118][T21154] RBP: 00007f9ead8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.330129][T21154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.338138][T21154] R13: 00007f9eacc16038 R14: 00007f9eacc15fa0 R15: 00007fff3625eb88 [ 1267.346261][T21154] [ 1267.609016][T21160] FAULT_INJECTION: forcing a failure. [ 1267.609016][T21160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.639200][T21160] CPU: 0 PID: 21160 Comm: syz.2.4746 Not tainted syzkaller #0 [ 1267.646745][T21160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1267.656937][T21160] Call Trace: [ 1267.660251][T21160] [ 1267.663231][T21160] dump_stack_lvl+0x18c/0x250 [ 1267.667979][T21160] ? show_regs_print_info+0x20/0x20 [ 1267.673316][T21160] ? load_image+0x420/0x420 [ 1267.677879][T21160] ? __might_fault+0xaa/0x120 [ 1267.682585][T21160] ? __lock_acquire+0x7d40/0x7d40 [ 1267.687641][T21160] should_fail_ex+0x39d/0x4d0 [ 1267.692351][T21160] _copy_from_user+0x2f/0xe0 [ 1267.696973][T21160] __sys_bpf+0x23e/0x890 [ 1267.701247][T21160] ? bpf_link_show_fdinfo+0x390/0x390 [ 1267.706669][T21160] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.712855][T21160] __x64_sys_bpf+0x7c/0x90 [ 1267.717296][T21160] do_syscall_64+0x55/0xa0 [ 1267.721812][T21160] ? clear_bhb_loop+0x40/0x90 [ 1267.726512][T21160] ? clear_bhb_loop+0x40/0x90 [ 1267.731217][T21160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.737140][T21160] RIP: 0033:0x7f9eac99cdd9 [ 1267.741566][T21160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.761194][T21160] RSP: 002b:00007f9ead8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1267.769643][T21160] RAX: ffffffffffffffda RBX: 00007f9eacc15fa0 RCX: 00007f9eac99cdd9 [ 1267.777634][T21160] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1267.785628][T21160] RBP: 00007f9ead8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.793620][T21160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.801611][T21160] R13: 00007f9eacc16038 R14: 00007f9eacc15fa0 R15: 00007fff3625eb88 [ 1267.809615][T21160] [ 1267.957448][T21164] validate_nla: 1 callbacks suppressed [ 1267.957504][T21164] netlink: 'syz.3.4747': attribute type 21 has an invalid length. [ 1267.973656][T21164] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1268.282051][T21166] netlink: 'syz.2.4748': attribute type 3 has an invalid length. [ 1268.364513][T21173] netlink: 'syz.0.4751': attribute type 17 has an invalid length. [ 1268.401742][T21173] netlink: 'syz.0.4751': attribute type 16 has an invalid length. [ 1268.413546][T21173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4751'. [ 1268.677911][T21183] FAULT_INJECTION: forcing a failure. [ 1268.677911][T21183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.705270][T21183] CPU: 1 PID: 21183 Comm: syz.0.4754 Not tainted syzkaller #0 [ 1268.712824][T21183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1268.722935][T21183] Call Trace: [ 1268.726272][T21183] [ 1268.729258][T21183] dump_stack_lvl+0x18c/0x250 [ 1268.734011][T21183] ? show_regs_print_info+0x20/0x20 [ 1268.739289][T21183] ? load_image+0x420/0x420 [ 1268.743949][T21183] ? __might_fault+0xaa/0x120 [ 1268.748705][T21183] ? __lock_acquire+0x7d40/0x7d40 [ 1268.753820][T21183] should_fail_ex+0x39d/0x4d0 [ 1268.758577][T21183] _copy_to_user+0x2f/0xa0 [ 1268.763053][T21183] bpf_test_finish+0x4e7/0x650 [ 1268.768013][T21183] ? convert___skb_to_skb+0x590/0x590 [ 1268.773420][T21183] ? convert_skb_to___skb+0x420/0x420 [ 1268.778845][T21183] ? slab_build_skb+0x25f/0x3f0 [ 1268.783743][T21183] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1268.789184][T21183] ? cpu_online+0x60/0x60 [ 1268.793611][T21183] bpf_prog_test_run+0x321/0x390 [ 1268.798583][T21183] __sys_bpf+0x49d/0x890 [ 1268.802857][T21183] ? bpf_link_show_fdinfo+0x390/0x390 [ 1268.808313][T21183] ? lock_chain_count+0x20/0x20 [ 1268.813253][T21183] __x64_sys_bpf+0x7c/0x90 [ 1268.817700][T21183] do_syscall_64+0x55/0xa0 [ 1268.822137][T21183] ? clear_bhb_loop+0x40/0x90 [ 1268.826849][T21183] ? clear_bhb_loop+0x40/0x90 [ 1268.831580][T21183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1268.837590][T21183] RIP: 0033:0x7f585259cdd9 [ 1268.842027][T21183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.861680][T21183] RSP: 002b:00007f58533f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1268.870142][T21183] RAX: ffffffffffffffda RBX: 00007f5852815fa0 RCX: 00007f585259cdd9 [ 1268.878139][T21183] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1268.886153][T21183] RBP: 00007f58533f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.894169][T21183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.902165][T21183] R13: 00007f5852816038 R14: 00007f5852815fa0 R15: 00007ffcb39efa48 [ 1268.910209][T21183] [ 1268.936125][T21186] FAULT_INJECTION: forcing a failure. [ 1268.936125][T21186] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.970506][T21186] CPU: 0 PID: 21186 Comm: syz.1.4753 Not tainted syzkaller #0 [ 1268.978196][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1268.988296][T21186] Call Trace: [ 1268.991616][T21186] [ 1268.994575][T21186] dump_stack_lvl+0x18c/0x250 [ 1268.999312][T21186] ? trace_event_raw_event_lock+0x250/0x250 [ 1269.005259][T21186] ? show_regs_print_info+0x20/0x20 [ 1269.010507][T21186] ? load_image+0x420/0x420 [ 1269.015098][T21186] should_fail_ex+0x39d/0x4d0 [ 1269.019828][T21186] should_failslab+0x9/0x20 [ 1269.024380][T21186] slab_pre_alloc_hook+0x59/0x310 [ 1269.029471][T21186] kmem_cache_alloc+0x5a/0x2d0 [ 1269.034280][T21186] ? __nf_conntrack_alloc+0x99/0x380 [ 1269.039614][T21186] __nf_conntrack_alloc+0x99/0x380 [ 1269.044770][T21186] init_conntrack+0x177/0xf10 [ 1269.049508][T21186] ? early_drop+0x7f0/0x7f0 [ 1269.054088][T21186] ? nf_conntrack_find_get+0x650/0x650 [ 1269.059611][T21186] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1269.065054][T21186] ? __siphash_unaligned+0x22e/0x3a0 [ 1269.070400][T21186] nf_conntrack_in+0xc06/0x15c0 [ 1269.075308][T21186] ? nf_ct_pernet+0x270/0x270 [ 1269.080046][T21186] ? ipt_do_table+0x2c1/0x15e0 [ 1269.084863][T21186] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 1269.090374][T21186] ? ip_select_ttl+0xb1/0x330 [ 1269.095083][T21186] ? ipv4_conntrack_local+0x123/0x200 [ 1269.100520][T21186] ? ipv4_conntrack_in+0x20/0x20 [ 1269.105525][T21186] nf_hook_slow+0xbd/0x200 [ 1269.109990][T21186] ? nf_hook+0x390/0x390 [ 1269.114273][T21186] nf_hook+0x228/0x390 [ 1269.118382][T21186] ? nf_hook+0xa2/0x390 [ 1269.122614][T21186] ? __ip_local_out+0x5f0/0x5f0 [ 1269.127497][T21186] ? nf_hook+0x390/0x390 [ 1269.131785][T21186] ? ip_fast_csum+0x1ee/0x2b0 [ 1269.136507][T21186] __ip_local_out+0x4db/0x5f0 [ 1269.141221][T21186] ? nf_hook+0x390/0x390 [ 1269.145532][T21186] ip_send_skb+0x4c/0x1d0 [ 1269.149898][T21186] raw_sendmsg+0x163e/0x1c00 [ 1269.154550][T21186] ? compat_raw_ioctl+0x70/0x70 [ 1269.159443][T21186] ? __lock_acquire+0x1273/0x7d40 [ 1269.164525][T21186] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1269.170977][T21186] ? sock_rps_record_flow+0x19/0x3f0 [ 1269.176306][T21186] ? inet_sendmsg+0x7c/0x2f0 [ 1269.180938][T21186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1269.186266][T21186] ? security_socket_sendmsg+0x80/0xa0 [ 1269.191760][T21186] ? inet_send_prepare+0x260/0x260 [ 1269.196911][T21186] ____sys_sendmsg+0x5ba/0x960 [ 1269.201712][T21186] ? __lock_acquire+0x7d40/0x7d40 [ 1269.206787][T21186] ? __asan_memset+0x22/0x40 [ 1269.211452][T21186] ? __sys_sendmsg_sock+0x30/0x30 [ 1269.216524][T21186] ? __import_iovec+0x3fa/0x850 [ 1269.221414][T21186] ? import_iovec+0x73/0xa0 [ 1269.225953][T21186] ___sys_sendmsg+0x2a6/0x360 [ 1269.230761][T21186] ? __sys_sendmsg+0x2a0/0x2a0 [ 1269.235586][T21186] ? trace_call_bpf+0xc3/0x6c0 [ 1269.240420][T21186] __se_sys_sendmsg+0x1c2/0x2b0 [ 1269.245313][T21186] ? __x64_sys_sendmsg+0x80/0x80 [ 1269.250422][T21186] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.255678][T21186] do_syscall_64+0x55/0xa0 [ 1269.260146][T21186] ? clear_bhb_loop+0x40/0x90 [ 1269.264863][T21186] ? clear_bhb_loop+0x40/0x90 [ 1269.269572][T21186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.275518][T21186] RIP: 0033:0x7fadbc19cdd9 [ 1269.279960][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.299777][T21186] RSP: 002b:00007fadbcfe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.308222][T21186] RAX: ffffffffffffffda RBX: 00007fadbc415fa0 RCX: 00007fadbc19cdd9 [ 1269.316231][T21186] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1269.324240][T21186] RBP: 00007fadbcfe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.332245][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.340249][T21186] R13: 00007fadbc416038 R14: 00007fadbc415fa0 R15: 00007ffdf1b17828 [ 1269.348307][T21186] [ 1269.669828][T21193] netlink: 'syz.3.4758': attribute type 21 has an invalid length. [ 1269.688933][T21193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1269.707598][T21193] netlink: 'syz.3.4758': attribute type 5 has an invalid length. [ 1269.718480][T21193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4758'. [ 1269.799341][T21199] netlink: 'syz.2.4757': attribute type 21 has an invalid length. [ 1269.811277][T21199] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1270.483949][T21210] netlink: 'syz.0.4762': attribute type 21 has an invalid length. [ 1270.491858][T21210] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4762'. [ 1270.504457][T21210] netlink: 'syz.0.4762': attribute type 5 has an invalid length. [ 1270.514844][T21210] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4762'. [ 1270.774973][T13477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1270.786157][T13477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1270.794400][T13477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1270.802589][T13477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1270.830823][T13477] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1270.838437][T13477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.591471][T14151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.691330][T14151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.806604][T14151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.894959][T21217] chnl_net:caif_netlink_parms(): no params data found [ 1272.134037][T21217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.146145][T21217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.156144][T21217] bridge_slave_0: entered allmulticast mode [ 1272.163879][T21217] bridge_slave_0: entered promiscuous mode [ 1272.203451][T21217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.210805][T21217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.218585][T21217] bridge_slave_1: entered allmulticast mode [ 1272.226898][T21217] bridge_slave_1: entered promiscuous mode [ 1272.329976][T21217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.355590][T21217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.576527][T21246] netlink: 'syz.3.4770': attribute type 21 has an invalid length. [ 1272.595013][T21246] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4770'. [ 1272.611591][T21217] team0: Port device team_slave_0 added [ 1272.622020][T21217] team0: Port device team_slave_1 added [ 1272.667898][T21217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.677123][T21217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.716177][T21217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.729998][T21217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.739826][T21217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.776606][T21217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.944551][ T5825] Bluetooth: hci4: command tx timeout [ 1275.023356][ T5825] Bluetooth: hci4: command tx timeout [ 1275.871166][T21217] hsr_slave_0: entered promiscuous mode [ 1275.926534][T21217] hsr_slave_1: entered promiscuous mode [ 1275.996176][T21268] netlink: 'syz.3.4772': attribute type 21 has an invalid length. [ 1276.016623][T21268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4772'. [ 1276.255526][T21283] netlink: 'syz.2.4775': attribute type 21 has an invalid length. [ 1276.266302][T21283] FAULT_INJECTION: forcing a failure. [ 1276.266302][T21283] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.299130][T21283] CPU: 1 PID: 21283 Comm: syz.2.4775 Not tainted syzkaller #0 [ 1276.306679][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1276.316794][T21283] Call Trace: [ 1276.320115][T21283] [ 1276.323082][T21283] dump_stack_lvl+0x18c/0x250 [ 1276.327820][T21283] ? show_regs_print_info+0x20/0x20 [ 1276.333074][T21283] ? load_image+0x420/0x420 [ 1276.337677][T21283] ? __might_sleep+0xe0/0xe0 [ 1276.342309][T21283] ? __lock_acquire+0x7d40/0x7d40 [ 1276.347387][T21283] should_fail_ex+0x39d/0x4d0 [ 1276.352121][T21283] should_failslab+0x9/0x20 [ 1276.356686][T21283] slab_pre_alloc_hook+0x59/0x310 [ 1276.361766][T21283] ? lockdep_hardirqs_on+0x98/0x150 [ 1276.367024][T21283] kmem_cache_alloc_node+0x60/0x320 [ 1276.372276][T21283] ? __alloc_skb+0x103/0x2c0 [ 1276.376905][T21283] __alloc_skb+0x103/0x2c0 [ 1276.381366][T21283] netlink_ack+0x376/0x1180 [ 1276.385941][T21283] ? __dev_queue_xmit+0x265/0x3660 [ 1276.391116][T21283] ? netlink_dump+0xe50/0xe50 [ 1276.395853][T21283] ? ref_tracker_free+0x690/0x840 [ 1276.400941][T21283] netlink_rcv_skb+0x2c5/0x4d0 [ 1276.405771][T21283] ? rtnetlink_bind+0x80/0x80 [ 1276.410506][T21283] ? netlink_ack+0x1180/0x1180 [ 1276.415330][T21283] ? __lock_acquire+0x7d40/0x7d40 [ 1276.420398][T21283] ? netlink_deliver_tap+0x2e/0x1b0 [ 1276.425638][T21283] netlink_unicast+0x751/0x8d0 [ 1276.430461][T21283] netlink_sendmsg+0x8d0/0xbf0 [ 1276.435253][T21283] ? netlink_getsockopt+0x590/0x590 [ 1276.440475][T21283] ? aa_sock_msg_perm+0x94/0x150 [ 1276.445436][T21283] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1276.450751][T21283] ? security_socket_sendmsg+0x80/0xa0 [ 1276.456230][T21283] ? netlink_getsockopt+0x590/0x590 [ 1276.461456][T21283] ____sys_sendmsg+0x5ba/0x960 [ 1276.466248][T21283] ? __asan_memset+0x22/0x40 [ 1276.470861][T21283] ? __sys_sendmsg_sock+0x30/0x30 [ 1276.475902][T21283] ? __import_iovec+0x5f2/0x850 [ 1276.480766][T21283] ? import_iovec+0x73/0xa0 [ 1276.485285][T21283] ___sys_sendmsg+0x2a6/0x360 [ 1276.489985][T21283] ? get_pid_task+0x20/0x1e0 [ 1276.494596][T21283] ? __sys_sendmsg+0x2a0/0x2a0 [ 1276.499384][T21283] ? __lock_acquire+0x7d40/0x7d40 [ 1276.504447][T21283] __se_sys_sendmsg+0x1c2/0x2b0 [ 1276.509326][T21283] ? __x64_sys_sendmsg+0x80/0x80 [ 1276.514298][T21283] ? lockdep_hardirqs_on+0x98/0x150 [ 1276.519527][T21283] do_syscall_64+0x55/0xa0 [ 1276.524042][T21283] ? clear_bhb_loop+0x40/0x90 [ 1276.528741][T21283] ? clear_bhb_loop+0x40/0x90 [ 1276.533446][T21283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.539364][T21283] RIP: 0033:0x7f9eac99cdd9 [ 1276.543804][T21283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.563431][T21283] RSP: 002b:00007f9ead8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.571895][T21283] RAX: ffffffffffffffda RBX: 00007f9eacc15fa0 RCX: 00007f9eac99cdd9 [ 1276.579983][T21283] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1276.587970][T21283] RBP: 00007f9ead8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.595963][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.603984][T21283] R13: 00007f9eacc16038 R14: 00007f9eacc15fa0 R15: 00007fff3625eb88 [ 1276.611987][T21283] [ 1277.007262][T21299] netlink: 'syz.2.4777': attribute type 21 has an invalid length. [ 1277.027720][T21299] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1277.038576][T21299] netlink: 'syz.2.4777': attribute type 5 has an invalid length. [ 1277.048183][T21299] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1277.126688][ T5825] Bluetooth: hci4: command tx timeout [ 1277.286183][T21311] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1277.825179][T21315] netlink: 'syz.3.4781': attribute type 10 has an invalid length. [ 1277.891526][T21315] geneve1: entered promiscuous mode [ 1277.899087][T21315] geneve1: entered allmulticast mode [ 1277.910652][T21315] team0: Port device geneve1 added [ 1278.105908][T21217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1278.132455][T21217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1278.223243][T21217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1278.356531][T21217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1278.512188][T21331] netlink: 'syz.3.4784': attribute type 3 has an invalid length. [ 1278.689493][T14151] veth1_vlan: left promiscuous mode [ 1279.126274][T14151] team0 (unregistering): Port device geneve1 removed [ 1279.207963][ T5825] Bluetooth: hci4: command tx timeout [ 1279.664687][T14151] team0 (unregistering): Port device team_slave_1 removed [ 1279.762873][T14151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.810445][T14151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.100840][T14151] bond0 (unregistering): (slave team0): Releasing backup interface [ 1280.136190][T14151] bond0 (unregistering): Released all slaves [ 1280.289571][T21369] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1280.363316][T21217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.418829][T21217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.455068][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.462360][T14139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.497469][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.504709][T14139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.651670][T21381] FAULT_INJECTION: forcing a failure. [ 1280.651670][T21381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.683639][T21381] CPU: 1 PID: 21381 Comm: syz.0.4791 Not tainted syzkaller #0 [ 1280.691203][T21381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.701397][T21381] Call Trace: [ 1280.704717][T21381] [ 1280.707687][T21381] dump_stack_lvl+0x18c/0x250 [ 1280.712419][T21381] ? show_regs_print_info+0x20/0x20 [ 1280.717673][T21381] ? load_image+0x420/0x420 [ 1280.722222][T21381] ? __might_fault+0xaa/0x120 [ 1280.726944][T21381] ? __lock_acquire+0x7d40/0x7d40 [ 1280.732020][T21381] should_fail_ex+0x39d/0x4d0 [ 1280.736752][T21381] _copy_from_user+0x2f/0xe0 [ 1280.741401][T21381] generic_map_update_batch+0x59a/0x810 [ 1280.746998][T21381] ? rcu_read_unlock+0xa0/0xa0 [ 1280.751802][T21381] ? __fdget+0x180/0x210 [ 1280.756092][T21381] ? rcu_read_unlock+0xa0/0xa0 [ 1280.760894][T21381] bpf_map_do_batch+0x3d7/0x610 [ 1280.765796][T21381] __sys_bpf+0x381/0x890 [ 1280.770091][T21381] ? bpf_link_show_fdinfo+0x390/0x390 [ 1280.775527][T21381] ? lock_chain_count+0x20/0x20 [ 1280.780429][T21381] __x64_sys_bpf+0x7c/0x90 [ 1280.784899][T21381] do_syscall_64+0x55/0xa0 [ 1280.789377][T21381] ? clear_bhb_loop+0x40/0x90 [ 1280.794141][T21381] ? clear_bhb_loop+0x40/0x90 [ 1280.798884][T21381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1280.804823][T21381] RIP: 0033:0x7f585259cdd9 [ 1280.809283][T21381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.828942][T21381] RSP: 002b:00007f58533f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1280.837416][T21381] RAX: ffffffffffffffda RBX: 00007f5852815fa0 RCX: 00007f585259cdd9 [ 1280.845438][T21381] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1280.853465][T21381] RBP: 00007f58533f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.861490][T21381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.869519][T21381] R13: 00007f5852816038 R14: 00007f5852815fa0 R15: 00007ffcb39efa48 [ 1280.877554][T21381] [ 1281.180263][T21217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.306529][T21217] veth0_vlan: entered promiscuous mode [ 1281.354487][T21217] veth1_vlan: entered promiscuous mode [ 1281.531623][T21217] veth0_macvtap: entered promiscuous mode [ 1281.580115][T21217] veth1_macvtap: entered promiscuous mode [ 1281.646779][T21217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.678111][T21217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.692530][T21217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.722322][T21217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.745632][T21217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.795213][T21217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.816179][T21403] netlink: 'syz.2.4795': attribute type 10 has an invalid length. [ 1281.833472][T21403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1281.844466][T21403] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1281.851643][T21403] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.880165][T21403] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1281.918848][T21217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.944379][T21217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.973571][T21217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.992597][T21217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.102691][T21416] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1282.172725][T14151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.198635][T14151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.264042][T14153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.271994][T14153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.583371][T21443] netlink: 'syz.1.4802': attribute type 21 has an invalid length. [ 1283.611500][T21443] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1283.623705][T21443] netlink: 'syz.1.4802': attribute type 5 has an invalid length. [ 1283.631706][T21443] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1284.060226][T21452] netlink: 'syz.3.4804': attribute type 6 has an invalid length. [ 1284.130823][T21454] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1284.154415][T21452] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1284.480120][T21458] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1284.727792][T21464] netlink: 'syz.2.4808': attribute type 21 has an invalid length. [ 1284.736818][T21464] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1286.024001][T21486] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4816'. [ 1286.036499][T21490] netlink: 'syz.1.4818': attribute type 21 has an invalid length. [ 1286.046527][T21490] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1286.063484][T21490] netlink: 'syz.1.4818': attribute type 5 has an invalid length. [ 1286.088554][T21491] netlink: 'syz.3.4817': attribute type 39 has an invalid length. [ 1287.314656][T21515] netlink: 'syz.0.4823': attribute type 21 has an invalid length. [ 1287.335904][T21515] __nla_validate_parse: 3 callbacks suppressed [ 1287.335968][T21515] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1287.337771][T21509] netlink: 'syz.2.4821': attribute type 1 has an invalid length. [ 1287.860305][T21530] netlink: 'syz.0.4829': attribute type 3 has an invalid length. [ 1287.870515][T21530] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1287.940278][T21527] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 1288.218213][T21537] FAULT_INJECTION: forcing a failure. [ 1288.218213][T21537] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.231750][T21537] CPU: 0 PID: 21537 Comm: syz.2.4830 Not tainted syzkaller #0 [ 1288.239266][T21537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.249351][T21537] Call Trace: [ 1288.252664][T21537] [ 1288.255625][T21537] dump_stack_lvl+0x18c/0x250 [ 1288.260357][T21537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1288.266561][T21537] ? show_regs_print_info+0x20/0x20 [ 1288.271811][T21537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1288.278018][T21537] ? dump_stack+0x9/0x20 [ 1288.282297][T21537] should_fail_ex+0x39d/0x4d0 [ 1288.287007][T21537] should_failslab+0x9/0x20 [ 1288.291540][T21537] slab_pre_alloc_hook+0x59/0x310 [ 1288.296607][T21537] ? __lock_acquire+0x7d40/0x7d40 [ 1288.301658][T21537] kmem_cache_alloc_node+0x60/0x320 [ 1288.306909][T21537] ? __alloc_skb+0x103/0x2c0 [ 1288.311524][T21537] __alloc_skb+0x103/0x2c0 [ 1288.315967][T21537] netlink_sendmsg+0x66a/0xbf0 [ 1288.320785][T21537] ? netlink_getsockopt+0x590/0x590 [ 1288.326063][T21537] ? aa_sock_msg_perm+0x94/0x150 [ 1288.331024][T21537] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1288.336326][T21537] ? security_socket_sendmsg+0x80/0xa0 [ 1288.341798][T21537] ? netlink_getsockopt+0x590/0x590 [ 1288.347025][T21537] ____sys_sendmsg+0x5ba/0x960 [ 1288.351819][T21537] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1288.357998][T21537] ? __asan_memset+0x22/0x40 [ 1288.362606][T21537] ? __sys_sendmsg_sock+0x30/0x30 [ 1288.367644][T21537] ? __import_iovec+0x5f2/0x850 [ 1288.372516][T21537] ? import_iovec+0x73/0xa0 [ 1288.377058][T21537] ___sys_sendmsg+0x2a6/0x360 [ 1288.381778][T21537] ? __sys_sendmsg+0x2a0/0x2a0 [ 1288.386578][T21537] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1288.392889][T21537] __se_sys_sendmsg+0x1c2/0x2b0 [ 1288.397772][T21537] ? __x64_sys_sendmsg+0x80/0x80 [ 1288.402738][T21537] ? lockdep_hardirqs_on+0x98/0x150 [ 1288.407956][T21537] do_syscall_64+0x55/0xa0 [ 1288.412387][T21537] ? clear_bhb_loop+0x40/0x90 [ 1288.417084][T21537] ? clear_bhb_loop+0x40/0x90 [ 1288.422226][T21537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.428156][T21537] RIP: 0033:0x7f9eac99cdd9 [ 1288.432594][T21537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.452265][T21537] RSP: 002b:00007f9ead8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.460700][T21537] RAX: ffffffffffffffda RBX: 00007f9eacc15fa0 RCX: 00007f9eac99cdd9 [ 1288.468697][T21537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 1288.476693][T21537] RBP: 00007f9ead8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.484687][T21537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.492680][T21537] R13: 00007f9eacc16038 R14: 00007f9eacc15fa0 R15: 00007fff3625eb88 [ 1288.500695][T21537] [ 1288.558201][T21537] netlink: 'syz.2.4830': attribute type 1 has an invalid length. [ 1288.833963][ T5825] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1289.202480][T13477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1289.247007][T13477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.264291][T13477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.282184][T13477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.290121][T13477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1289.297636][T13477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1290.901844][T14111] syz_tun (unregistering): left promiscuous mode [ 1290.909984][T14111] syz_tun (unregistering): left allmulticast mode [ 1290.921136][T14111] team0: Port device syz_tun removed [ 1291.038170][T14139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.121054][T14139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.221640][T14139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.294823][T21546] chnl_net:caif_netlink_parms(): no params data found [ 1291.357839][T13477] Bluetooth: hci0: command tx timeout [ 1291.435820][T14139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.478256][T21561] netlink: 'syz.0.4843': attribute type 21 has an invalid length. [ 1291.491937][T21561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4843'. [ 1291.501240][T21561] netlink: 'syz.0.4843': attribute type 5 has an invalid length. [ 1291.511569][T21561] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4843'. [ 1291.588019][T21562] netlink: 'syz.1.4836': attribute type 21 has an invalid length. [ 1291.598196][T21562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1291.902817][T21546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.925340][T21546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.942364][T21546] bridge_slave_0: entered allmulticast mode [ 1291.961074][T21546] bridge_slave_0: entered promiscuous mode [ 1291.983330][T21546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.992628][T21546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.016178][T21546] bridge_slave_1: entered allmulticast mode [ 1292.029344][T21546] bridge_slave_1: entered promiscuous mode [ 1292.551344][T21546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.678811][T21546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.838990][T21546] team0: Port device team_slave_0 added [ 1292.906008][T21546] team0: Port device team_slave_1 added [ 1293.112515][T21546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.122629][T21546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.175745][T21546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.229795][T21546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.237005][T21546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.297609][T21546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.426990][T13477] Bluetooth: hci0: command tx timeout [ 1293.634385][T21602] netlink: 'syz.2.4844': attribute type 3 has an invalid length. [ 1293.642330][T21602] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1293.660119][T21546] hsr_slave_0: entered promiscuous mode [ 1293.669768][T21546] hsr_slave_1: entered promiscuous mode [ 1293.678398][T21546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.688221][T21546] Cannot create hsr debugfs directory [ 1293.987087][T21599] syzkaller0: entered promiscuous mode [ 1293.992608][T21599] syzkaller0: entered allmulticast mode [ 1294.541231][T21615] netlink: 'syz.2.4848': attribute type 9 has an invalid length. [ 1294.549255][T21615] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1295.513109][T13477] Bluetooth: hci0: command tx timeout [ 1295.954745][T21614] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1296.358444][T21618] netlink: 'syz.1.4849': attribute type 6 has an invalid length. [ 1296.372413][T21618] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1296.395221][T21623] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4850'. [ 1297.047433][T14139] [ 1297.049835][T14139] ====================================================== [ 1297.056885][T14139] WARNING: possible circular locking dependency detected [ 1297.063940][T14139] syzkaller #0 Not tainted [ 1297.068386][T14139] ------------------------------------------------------ [ 1297.075462][T14139] kworker/u4:11/14139 is trying to acquire lock: [ 1297.081819][T14139] ffff888055880d00 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1297.091454][T14139] [ 1297.091454][T14139] but task is already holding lock: [ 1297.098849][T14139] ffff88805edb0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1297.109239][T14139] [ 1297.109239][T14139] which lock already depends on the new lock. [ 1297.109239][T14139] [ 1297.119665][T14139] [ 1297.119665][T14139] the existing dependency chain (in reverse order) is: [ 1297.128707][T14139] [ 1297.128707][T14139] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1297.136518][T14139] __mutex_lock+0x136/0xcc0 [ 1297.141580][T14139] ieee80211_open+0x144/0x200 [ 1297.146814][T14139] __dev_open+0x2cb/0x430 [ 1297.151709][T14139] dev_open+0xab/0x190 [ 1297.156327][T14139] team_add_slave+0x75f/0x29a0 [ 1297.161646][T14139] do_setlink+0xdfe/0x4130 [ 1297.166644][T14139] rtnl_newlink+0x17da/0x20a0 [ 1297.171876][T14139] rtnetlink_rcv_msg+0x869/0xfa0 [ 1297.177364][T14139] netlink_rcv_skb+0x241/0x4d0 [ 1297.182705][T14139] netlink_unicast+0x751/0x8d0 [ 1297.188027][T14139] netlink_sendmsg+0x8d0/0xbf0 [ 1297.193369][T14139] ____sys_sendmsg+0x5ba/0x960 [ 1297.198690][T14139] ___sys_sendmsg+0x2a6/0x360 [ 1297.203916][T14139] __se_sys_sendmsg+0x1c2/0x2b0 [ 1297.209318][T14139] do_syscall_64+0x55/0xa0 [ 1297.214291][T14139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.220781][T14139] [ 1297.220781][T14139] -> #0 (team->team_lock_key#7){+.+.}-{3:3}: [ 1297.228992][T14139] __lock_acquire+0x2df1/0x7d40 [ 1297.234403][T14139] lock_acquire+0x19e/0x420 [ 1297.239478][T14139] __mutex_lock+0x136/0xcc0 [ 1297.244539][T14139] team_del_slave+0x32/0x1c0 [ 1297.249683][T14139] team_device_event+0x28d/0xa20 [ 1297.255188][T14139] notifier_call_chain+0x197/0x380 [ 1297.260858][T14139] unregister_netdevice_many_notify+0x100d/0x1900 [ 1297.267830][T14139] unregister_netdevice_queue+0x32c/0x370 [ 1297.274121][T14139] _cfg80211_unregister_wdev+0x16b/0x580 [ 1297.280314][T14139] ieee80211_remove_interfaces+0x49e/0x690 [ 1297.286674][T14139] ieee80211_unregister_hw+0x5d/0x2a0 [ 1297.292610][T14139] mac80211_hwsim_del_radio+0x289/0x480 [ 1297.298718][T14139] hwsim_exit_net+0x58d/0x650 [ 1297.303955][T14139] cleanup_net+0x70a/0xbb0 [ 1297.308938][T14139] process_scheduled_works+0xa5d/0x15d0 [ 1297.315048][T14139] worker_thread+0xa55/0xfc0 [ 1297.320195][T14139] kthread+0x2fa/0x390 [ 1297.324814][T14139] ret_from_fork+0x48/0x80 [ 1297.329806][T14139] ret_from_fork_asm+0x11/0x20 [ 1297.335220][T14139] [ 1297.335220][T14139] other info that might help us debug this: [ 1297.335220][T14139] [ 1297.345523][T14139] Possible unsafe locking scenario: [ 1297.345523][T14139] [ 1297.353005][T14139] CPU0 CPU1 [ 1297.358403][T14139] ---- ---- [ 1297.363793][T14139] lock(&rdev->wiphy.mtx); [ 1297.368329][T14139] lock(team->team_lock_key#7); [ 1297.375837][T14139] lock(&rdev->wiphy.mtx); [ 1297.382890][T14139] lock(team->team_lock_key#7); [ 1297.387886][T14139] [ 1297.387886][T14139] *** DEADLOCK *** [ 1297.387886][T14139] [ 1297.396055][T14139] 5 locks held by kworker/u4:11/14139: [ 1297.401554][T14139] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1297.412507][T14139] #1: ffffc900037b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1297.423102][T14139] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1297.432608][T14139] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1297.442499][T14139] #4: ffff88805edb0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1297.453346][T14139] [ 1297.453346][T14139] stack backtrace: [ 1297.459263][T14139] CPU: 0 PID: 14139 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 1297.467011][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1297.477131][T14139] Workqueue: netns cleanup_net [ 1297.481967][T14139] Call Trace: [ 1297.485322][T14139] [ 1297.488287][T14139] dump_stack_lvl+0x18c/0x250 [ 1297.493023][T14139] ? load_image+0x420/0x420 [ 1297.497585][T14139] ? show_regs_print_info+0x20/0x20 [ 1297.502852][T14139] ? print_circular_bug+0x12b/0x1a0 [ 1297.508099][T14139] check_noncircular+0x2fc/0x400 [ 1297.513093][T14139] ? print_deadlock_bug+0x5d0/0x5d0 [ 1297.518338][T14139] ? lockdep_lock+0xf5/0x230 [ 1297.522987][T14139] ? __lock_acquire+0x1273/0x7d40 [ 1297.528090][T14139] ? _find_first_zero_bit+0xd3/0x100 [ 1297.533446][T14139] __lock_acquire+0x2df1/0x7d40 [ 1297.538358][T14139] ? verify_lock_unused+0x140/0x140 [ 1297.543605][T14139] ? verify_lock_unused+0x140/0x140 [ 1297.548866][T14139] lock_acquire+0x19e/0x420 [ 1297.553421][T14139] ? team_del_slave+0x32/0x1c0 [ 1297.558232][T14139] ? __might_sleep+0xe0/0xe0 [ 1297.562869][T14139] ? read_lock_is_recursive+0x20/0x20 [ 1297.568298][T14139] __mutex_lock+0x136/0xcc0 [ 1297.572832][T14139] ? team_del_slave+0x32/0x1c0 [ 1297.577625][T14139] ? __lock_acquire+0x7d40/0x7d40 [ 1297.582690][T14139] ? rcu_is_watching+0x15/0xb0 [ 1297.587501][T14139] ? trace_contention_end+0x39/0xe0 [ 1297.592729][T14139] ? __mutex_lock+0x315/0xcc0 [ 1297.597459][T14139] ? team_del_slave+0x32/0x1c0 [ 1297.602268][T14139] ? mutex_lock_nested+0x20/0x20 [ 1297.607253][T14139] ? bond_netdev_event+0xeb/0xf20 [ 1297.612332][T14139] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1297.618026][T14139] team_del_slave+0x32/0x1c0 [ 1297.622656][T14139] team_device_event+0x28d/0xa20 [ 1297.627658][T14139] notifier_call_chain+0x197/0x380 [ 1297.632824][T14139] unregister_netdevice_many_notify+0x100d/0x1900 [ 1297.639280][T14139] ? lock_chain_count+0x20/0x20 [ 1297.644174][T14139] ? unregister_netdevice_many+0x20/0x20 [ 1297.649850][T14139] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1297.655618][T14139] ? __lock_acquire+0x7d40/0x7d40 [ 1297.660678][T14139] unregister_netdevice_queue+0x32c/0x370 [ 1297.666428][T14139] ? list_netdevice+0x730/0x730 [ 1297.671318][T14139] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1297.677082][T14139] _cfg80211_unregister_wdev+0x16b/0x580 [ 1297.682750][T14139] ieee80211_remove_interfaces+0x49e/0x690 [ 1297.688626][T14139] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1297.693962][T14139] ? rcu_is_watching+0x15/0xb0 [ 1297.698772][T14139] ieee80211_unregister_hw+0x5d/0x2a0 [ 1297.704214][T14139] mac80211_hwsim_del_radio+0x289/0x480 [ 1297.709821][T14139] ? rhashtable_remove_fast+0xc00/0xc00 [ 1297.715418][T14139] hwsim_exit_net+0x58d/0x650 [ 1297.720149][T14139] ? hwsim_init_net+0x90/0x90 [ 1297.724924][T14139] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1297.730931][T14139] cleanup_net+0x70a/0xbb0 [ 1297.735405][T14139] ? ops_free_list+0x3b0/0x3b0 [ 1297.740222][T14139] ? _raw_spin_unlock_irq+0x23/0x50 [ 1297.745473][T14139] ? process_scheduled_works+0x96f/0x15d0 [ 1297.751254][T14139] ? process_scheduled_works+0x96f/0x15d0 [ 1297.757019][T14139] process_scheduled_works+0xa5d/0x15d0 [ 1297.762631][T14139] ? worker_attach_to_pool+0x380/0x380 [ 1297.768134][T14139] ? assign_work+0x3d2/0x5d0 [ 1297.772773][T14139] worker_thread+0xa55/0xfc0 [ 1297.777417][T14139] kthread+0x2fa/0x390 [ 1297.781518][T14139] ? pr_cont_work+0x560/0x560 [ 1297.786260][T14139] ? kthread_blkcg+0xd0/0xd0 [ 1297.790895][T14139] ret_from_fork+0x48/0x80 [ 1297.795351][T14139] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1297.799969][T14139] ret_from_fork_asm+0x11/0x20 [ 1297.804776][T14139] [ 1297.810194][T13477] Bluetooth: hci0: command tx timeout [ 1297.860097][T14139] team0: Port device wlan1 removed [ 1297.971454][T21640] netlink: 'syz.1.4853': attribute type 21 has an invalid length. [ 1297.984852][T21640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1298.420269][T14139] hsr_slave_0: left promiscuous mode [ 1298.430432][T14139] hsr_slave_1: left promiscuous mode [ 1298.471671][T14139] veth1_vlan: left promiscuous mode [ 1298.477101][T14139] veth0_vlan: left promiscuous mode [ 1300.119378][T14139] geneve1 (unregistering): left promiscuous mode [ 1300.126521][T14139] geneve1 (unregistering): left allmulticast mode [ 1300.133910][T14139] team0 (unregistering): Port device geneve1 removed [ 1300.348495][T14139] team_slave_1 (unregistering): left promiscuous mode [ 1300.355571][T14139] team_slave_1 (unregistering): left allmulticast mode [ 1300.363593][T14139] team0 (unregistering): Port device team_slave_1 removed [ 1300.422650][T14139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.451979][T14139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.465972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.472324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.574543][T14139] bond0 (unregistering): Released all slaves [ 1301.146005][T14139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.211198][T14139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.310623][T14139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.380451][T14139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.505344][T14139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.550107][T14139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.609909][T14139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.662060][T14139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.887103][T14139] ip6gretap0 (unregistering): left allmulticast mode [ 1301.894494][T14139] ip6gretap0 (unregistering): left promiscuous mode [ 1301.901938][T14139] : port 1(ip6gretap0) entered disabled state [ 1302.738780][T14139] mac80211_hwsim hwsim24 wlan1 (unregistering): left promiscuous mode [ 1302.749107][T14139] mac80211_hwsim hwsim24 wlan1 (unregistering): left allmulticast mode [ 1302.758725][T14139] team0: Port device wlan1 removed [ 1303.075082][T14139] hsr_slave_0: left promiscuous mode [ 1303.080906][T14139] hsr_slave_1: left promiscuous mode [ 1303.089300][T14139] hsr_slave_0: left promiscuous mode [ 1303.097492][T14139] hsr_slave_1: left promiscuous mode [ 1303.103992][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.111529][T14139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.120105][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.127754][T14139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.135594][T14139] bridge_slave_1: left allmulticast mode [ 1303.141256][T14139] bridge_slave_1: left promiscuous mode [ 1303.147017][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.155441][T14139] bridge_slave_0: left allmulticast mode [ 1303.161100][T14139] bridge_slave_0: left promiscuous mode [ 1303.167106][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.178340][T14139] veth1_vlan: left allmulticast mode [ 1303.183918][T14139] veth1_vlan: left promiscuous mode [ 1303.189264][T14139] veth0_vlan: left promiscuous mode [ 1303.196455][T14139] veth1_macvtap: left promiscuous mode [ 1303.201990][T14139] veth0_macvtap: left promiscuous mode [ 1303.207625][T14139] veth1_vlan: left promiscuous mode [ 1303.214111][T14139] veth0_vlan: left promiscuous mode [ 1303.415397][T14139] geneve1 (unregistering): left promiscuous mode [ 1303.421778][T14139] geneve1 (unregistering): left allmulticast mode [ 1303.429194][T14139] team0 (unregistering): Port device geneve1 removed [ 1303.462578][T14139] macvlan1 (unregistering): left promiscuous mode [ 1303.471807][T14139] team0 (unregistering): Port device macvlan1 removed [ 1303.593136][T14139] team_slave_1 (unregistering): left promiscuous mode [ 1303.599957][T14139] team_slave_1 (unregistering): left allmulticast mode [ 1303.607766][T14139] team0 (unregistering): Port device team_slave_1 removed [ 1303.926358][T14139] team0 (unregistering): Port device team_slave_1 removed [ 1303.954998][T14139] team0 (unregistering): Port device team_slave_0 removed [ 1303.985990][T14139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.016563][T14139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.091356][T14139] bond0 (unregistering): Released all slaves [ 1305.238523][T14139] hsr_slave_0: left promiscuous mode [ 1305.244534][T14139] hsr_slave_1: left promiscuous mode [ 1305.250410][T14139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.258444][T14139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.266442][T14139] bridge_slave_1: left allmulticast mode [ 1305.272116][T14139] bridge_slave_1: left promiscuous mode [ 1305.279550][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.288561][T14139] bridge_slave_0: left allmulticast mode [ 1305.294411][T14139] bridge_slave_0: left promiscuous mode [ 1305.300133][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.490635][T14139] team0 (unregistering): Port device team_slave_1 removed [ 1305.522729][T14139] team0 (unregistering): Port device team_slave_0 removed [ 1305.555948][T14139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.586442][T14139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.650543][T14139] bond0 (unregistering): Released all slaves