last executing test programs: 21.20205329s ago: executing program 2 (id=8944): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0xfff5}, 0x80, 0x0}, 0x88d0) 21.057217559s ago: executing program 2 (id=8947): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000180)=@caif=@dbg, 0x80, &(0x7f0000001b00)}, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty=0x20000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='k', 0x1}], 0x1}, 0x4004081) 21.015638362s ago: executing program 3 (id=8948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4780, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.70300711s ago: executing program 2 (id=8949): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000b80)=r1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xfffffd26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0xa9, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000840)=@ll={0x11, 0x16, r8, 0x1, 0x3b, 0x6, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000008c0)="395d7fb3c772781d1513e80f1782c80776d3881c993b4f89c6d4a5bef42d2ddc9dcb4e64f208a91989fecd8ed09bcee05e4378caf1bbbcd8061c56d8eb27ddba231a841280decd1d5e39dae960660eefa77d9beb5a33d878396800df2e204edb28feeb10f8c50da2bbf5bb", 0x6b}, {&(0x7f0000000940)="853db39537ae17022245d7bb18372380ae507a265fb476cf78d8285f3b77e7a3082e0573fcaa8992d30ac9332def9a5ee4c5e8a06134df3fb96863099f2626aec9131c1cb1bd1ed9b2549e892c43e049f9db17ece5137f49f550403460f9b4e9f302a91f02658acdc178276f4e3e272009dddbfe43137ea978a8e59be372dd5e2359c7382d99ffd35c123567a77cf4b55875422f22c6b8bd6efb01f9fb16e2915d1b10a5720dbef8a42f70a2264fcb", 0xaf}], 0x2, &(0x7f0000000a40)=[{0x58, 0x84, 0x8, "3847a35e41196584f83285b95fbbf21563f9032b552118dc74cc038725dd24e544ad111cf4e9f460054e88807f290b713b20649379c91f64923857242c40fddee4d820250009"}, {0x88, 0x88, 0x7, "60c238cd48a15bbc0651867234b97ed8046553b604514312f4919cc3cd13d3f5b3428a303fcccb69f51acf51cfd02c0544412d4d454280a73e954a57739c3dafb2e8f13e11127e1e1cfb8c93676d38dc4cdf8e33cb6f32ede1980ea385f09b71b65b6b12f72012a9e21931aec08bc526db0d01b47d"}], 0xe0}, 0xc000) 20.53092544s ago: executing program 3 (id=8950): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/680], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf}, 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a", 0xa}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000400)=r6, 0x51a) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 20.031059779s ago: executing program 1 (id=8953): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000080)="fab7750ec6a2b12c18c4d4e1d25cad8ba38f85bb1be319308a7aa4d9ad57dc0664c21e9b3d8ba9a3a50749baf357ae99ad3682c96619d08996c11334e8fa76590907d27c926a9c530111f3fdd3b35eedcff22b4b739931924c32cb78fb3a2769659eacf416dc964f69f0eadbfc7d7e795ea32d0d50eac8af1c115152d8df0612b9fc730b9f4343f701ff273231a7c31a3f6619eb3abb14", 0x97}, {&(0x7f0000000700)="63ea9b5829d8ae836e465a66e1252beeb48e303f7b767e2acca7fb4da1b773d41fa05b2063107a0ff1608520ea1b5fef4d3b694c257f6d22ed8ba8e486ab20290bb36e9cc8bac69affdb8a30f41058b7346da6fbc6205b084120b635d3310a19f9499d5acd5e4744efb5e4f86ea6eb1d22cb681f82ad96e9123669700c750479d625c521e932", 0x86}, {&(0x7f00000007c0)="8585afd4b1687f2ef59a7abdff855a64ec7947fc32aa2a65c7cb120683113676a0d0d79c53706c4801b7178ca081dfe8e4e230653f346e8251bc5d0bc0ba50a2a2743103b0d4c47246709045f228cd08c2304d6c12eb2a6e96eeedadf135d1ae2f644444f5f5a6770739da67672d9231a38d124395438237a304654e2d5b61a4fcd833cd6ebc038fafbe02e105348ee353b57deeda34e262ce93afdd504f552a0957d0e7e94e18288c42c4bf3b1aea68eb7bf377a04cda1cf35785e66e63c4b6d22d859dee1c2dd576f02125deb2f8f40cb9664958d492dce55a9102497d4a480740ccc4b31848ec704b4b60bdc3dfda005919c7b4", 0xf5}, {&(0x7f00000001c0)="2b1e4c9a8c881032d767cddcc296d717b33d6a0f80b92bb5117ca055ba346aa76242428b79727acbf832e168e86fda4bee35ebf82f2da3600f31242d881d5941bfbcc6af8757f6eeae87935d7e03095054ad6ae9af4f400bbe", 0x59}, {&(0x7f0000000580)="8d2a789d209d4d96aab44769454edaf1121934e461ee9d875b27b89b144834cedbb708da5f02af33716e000fc30d2a6544a637800a5763521e1f86ac17960ac61aa0877c8aeae66b47a3e082fa2f4bcc57cb1fbe5e4b11293cf47c627af41f7f03fa", 0x62}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20000004}, 0x4006) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xe118123ad726cb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x100200, 0x0, 0xfffffffd, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000af74f52098919e596cebe5873e47ff0a0000000000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000600), &(0x7f0000000680)='%-010d \x00'}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40010023) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000210f0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x11}, 0x94) 19.920715845s ago: executing program 3 (id=8955): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000840)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2d}], 0x1}, 0x40000022) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffef) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 19.706333768s ago: executing program 0 (id=8956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)=')[*$\x00') socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc0189436, 0x2000141a) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="380000003420000000000000b86fc51329233d2da407916cf0ef9d38e1af56d38872a888fea5744fa6f9366f7aac3722938bbcac7e2ea3bc4dff74b59cec90bf4e7bd3c1325a46ef2643459d6be61b612c46821aca2e12d5515bd229bec78965ae6d2decb5a41904362f8a74c3995b541ae4c858b9b561ae7740d8", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000001000), 0x1}, 0x14105, 0x7fffffff, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001980)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0502000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e9}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 19.705554088s ago: executing program 2 (id=8957): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, 0x0, 0xff00) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$cgroup_devices(r5, 0x0, 0xffdd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x1100000}, 0x3e8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) 19.553019536s ago: executing program 1 (id=8958): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) 19.402809185s ago: executing program 1 (id=8959): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181f02e00000000fe0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000027c0)={&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000680)=']', 0x1}], 0x1}, 0x80) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x10, 0x0, 0x6, 0x4a047, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x2a4, 0x1}, 0x880, 0xc4, 0xb49a, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='-\x00') (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x2e, 0x1, 0x200, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0xfdef) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r5, 0xffffffffffffffff, 0x10, 0x1acb715ac415231a, 0x0, @value=r7, @void, @void, @void, r4}, 0x20) 19.235071056s ago: executing program 0 (id=8960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 19.105554393s ago: executing program 0 (id=8961): socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000000780)=""/4111, 0x100f}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000680)=""/121, 0x79}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 19.017548648s ago: executing program 2 (id=8962): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fb", 0x1}], 0x1}, 0x850) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fb", 0x1}], 0x1}, 0x850) 19.017339868s ago: executing program 1 (id=8963): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 18.955214492s ago: executing program 2 (id=8964): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100ff9711000000000000000000000007000000010000000000000018"], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 18.949409872s ago: executing program 1 (id=8965): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="130000001000000002dcc750ca7682b96ac1d8e341fb000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x10, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000b9b300008500003f0c00000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r2], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4008004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) 18.834766249s ago: executing program 3 (id=8966): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000007700000071000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.712348236s ago: executing program 3 (id=8967): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0}, 0x20000) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0xffffff00}}, 0x10, 0x0}, 0x4040005) 18.63875624s ago: executing program 1 (id=8968): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000b80)=r1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xfffffd26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0xa9, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000840)=@ll={0x11, 0x16, r8, 0x1, 0x3b, 0x6, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000008c0)="395d7fb3c772781d1513e80f1782c80776d3881c993b4f89c6d4a5bef42d2ddc9dcb4e64f208a91989fecd8ed09bcee05e4378caf1bbbcd8061c56d8eb27ddba231a841280decd1d5e39dae960660eefa77d9beb5a33d878396800df2e204edb28feeb10f8c50da2bbf5bb", 0x6b}, {&(0x7f0000000940)="853db39537ae17022245d7bb18372380ae507a265fb476cf78d8285f3b77e7a3082e0573fcaa8992d30ac9332def9a5ee4c5e8a06134df3fb96863099f2626aec9131c1cb1bd1ed9b2549e892c43e049f9db17ece5137f49f550403460f9b4e9f302a91f02658acdc178276f4e3e272009dddbfe43137ea978a8e59be372dd5e2359c7382d99ffd35c123567a77cf4b55875422f22c6b8bd6efb01f9fb16e2915d1b10a5720dbef8a42f70a2264fcb", 0xaf}], 0x2, &(0x7f0000000a40)=[{0x58, 0x84, 0x8, "3847a35e41196584f83285b95fbbf21563f9032b552118dc74cc038725dd24e544ad111cf4e9f460054e88807f290b713b20649379c91f64923857242c40fddee4d820250009"}, {0x88, 0x88, 0x7, "60c238cd48a15bbc0651867234b97ed8046553b604514312f4919cc3cd13d3f5b3428a303fcccb69f51acf51cfd02c0544412d4d454280a73e954a57739c3dafb2e8f13e11127e1e1cfb8c93676d38dc4cdf8e33cb6f32ede1980ea385f09b71b65b6b12f72012a9e21931aec08bc526db0d01b47d"}], 0xe0}, 0xc000) 18.485528279s ago: executing program 3 (id=8969): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/680], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf}, 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000400)=r6, 0x51a) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 18.158684419s ago: executing program 0 (id=8970): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, r0, 0xd) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) 17.981875679s ago: executing program 0 (id=8971): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000f2ff0103000000000000000000000b000000000000000000000009020000000000"], 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.06546704s ago: executing program 0 (id=8972): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000200), &(0x7f0000000280)=""/127, &(0x7f0000000300)="2c7f0323ef7b37bf3832fdfe1b3d689323053118308cecba18a0d293c28ed9e78b18ac1718d389020702fc999f80fc6c889f1d3df05d5bb688b53cc875816319d91d6e", &(0x7f0000000380)="b947913025657a411ef8926a0ddd367b45f3f1e57bbdd8b377fbb2ba82cc378b988fdb8be03a8128255f1043efb87473569d9a3b5300a74a71d2b6ea0ca7b3", 0x7}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xa2, 0x0, 0x0, 0xff6, 0x2181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x108c9c, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000280)=0x10) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}, {0x2b, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'rlimit'}]}, 0x3a) 2.988911325s ago: executing program 32 (id=8968): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000b80)=r1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xfffffd26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0xa9, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000840)=@ll={0x11, 0x16, r8, 0x1, 0x3b, 0x6, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000008c0)="395d7fb3c772781d1513e80f1782c80776d3881c993b4f89c6d4a5bef42d2ddc9dcb4e64f208a91989fecd8ed09bcee05e4378caf1bbbcd8061c56d8eb27ddba231a841280decd1d5e39dae960660eefa77d9beb5a33d878396800df2e204edb28feeb10f8c50da2bbf5bb", 0x6b}, {&(0x7f0000000940)="853db39537ae17022245d7bb18372380ae507a265fb476cf78d8285f3b77e7a3082e0573fcaa8992d30ac9332def9a5ee4c5e8a06134df3fb96863099f2626aec9131c1cb1bd1ed9b2549e892c43e049f9db17ece5137f49f550403460f9b4e9f302a91f02658acdc178276f4e3e272009dddbfe43137ea978a8e59be372dd5e2359c7382d99ffd35c123567a77cf4b55875422f22c6b8bd6efb01f9fb16e2915d1b10a5720dbef8a42f70a2264fcb", 0xaf}], 0x2, &(0x7f0000000a40)=[{0x58, 0x84, 0x8, "3847a35e41196584f83285b95fbbf21563f9032b552118dc74cc038725dd24e544ad111cf4e9f460054e88807f290b713b20649379c91f64923857242c40fddee4d820250009"}, {0x88, 0x88, 0x7, "60c238cd48a15bbc0651867234b97ed8046553b604514312f4919cc3cd13d3f5b3428a303fcccb69f51acf51cfd02c0544412d4d454280a73e954a57739c3dafb2e8f13e11127e1e1cfb8c93676d38dc4cdf8e33cb6f32ede1980ea385f09b71b65b6b12f72012a9e21931aec08bc526db0d01b47d"}], 0xe0}, 0xc000) 2.72984858s ago: executing program 33 (id=8964): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100ff9711000000000000000000000007000000010000000000000018"], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 1.801978134s ago: executing program 34 (id=8969): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/680], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf}, 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000400)=r6, 0x51a) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 0s ago: executing program 35 (id=8972): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000200), &(0x7f0000000280)=""/127, &(0x7f0000000300)="2c7f0323ef7b37bf3832fdfe1b3d689323053118308cecba18a0d293c28ed9e78b18ac1718d389020702fc999f80fc6c889f1d3df05d5bb688b53cc875816319d91d6e", &(0x7f0000000380)="b947913025657a411ef8926a0ddd367b45f3f1e57bbdd8b377fbb2ba82cc378b988fdb8be03a8128255f1043efb87473569d9a3b5300a74a71d2b6ea0ca7b3", 0x7}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xa2, 0x0, 0x0, 0xff6, 0x2181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x108c9c, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000280)=0x10) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}, {0x2b, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'rlimit'}]}, 0x3a) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.8101'. [ 1934.934316][ T1156] netlink: 'syz.1.8102': attribute type 10 has an invalid length. [ 1935.037490][ T1164] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8103'. [ 1935.101390][ T1164] netlink: 'syz.3.8103': attribute type 29 has an invalid length. [ 1935.143021][ T1164] netlink: 'syz.3.8103': attribute type 29 has an invalid length. [ 1935.175970][ T1173] netlink: 'syz.3.8103': attribute type 29 has an invalid length. [ 1935.195984][ T1168] netlink: 'syz.3.8103': attribute type 29 has an invalid length. [ 1935.220091][ T1164] netlink: 'syz.3.8103': attribute type 29 has an invalid length. [ 1935.263747][ T1167] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1935.271218][ T1167] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1935.311766][ T1174] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1935.342703][ T1174] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1935.620098][ T1180] netlink: 'syz.2.8109': attribute type 10 has an invalid length. [ 1935.659824][ T1180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1936.403673][ T1180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1936.600104][ T1190] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8112'. [ 1937.399316][ T1222] netlink: 'syz.0.8123': attribute type 10 has an invalid length. [ 1937.408034][ T1222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1941.969186][ T1222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1942.199359][ T1236] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1942.275735][ T1240] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1942.532231][ T1247] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8131'. [ 1943.285694][ T1249] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 1943.309744][ T1249] mac80211_hwsim hwsim72 wlan0: left allmulticast mode [ 1943.336716][ T1252] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1943.344511][ T1252] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 1943.615139][ T1261] netlink: 'syz.3.8135': attribute type 10 has an invalid length. [ 1943.625033][ T1261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1943.645645][ T1261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1944.372442][ T1282] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1944.390309][ T1282] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1944.458779][ T1282] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1944.481788][ T1282] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1944.756259][ T1293] netlink: 'syz.0.8148': attribute type 13 has an invalid length. [ 1944.766288][ T1293] netlink: 'syz.0.8148': attribute type 58 has an invalid length. [ 1944.801432][ T1293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8148'. [ 1945.035011][ T1301] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8150'. [ 1946.092009][ T1312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1946.106400][ T1312] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 1947.102505][ T1324] netlink: 'syz.1.8156': attribute type 39 has an invalid length. [ 1947.233621][ T1322] netlink: 'syz.2.8155': attribute type 10 has an invalid length. [ 1947.242184][ T1322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1947.261552][ T1322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1947.343893][ T1321] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 1947.360894][ T1321] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 1947.402009][ T1328] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 1947.423493][ T1328] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 1948.563916][ T1341] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1948.646758][ T1344] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 1948.658829][ T1344] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 1948.787584][ T1348] netlink: 'syz.3.8165': attribute type 2 has an invalid length. [ 1948.795700][ T1348] netlink: 'syz.3.8165': attribute type 9 has an invalid length. [ 1948.803986][ T1348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8165'. [ 1948.856836][ T1351] netlink: 'syz.2.8166': attribute type 10 has an invalid length. [ 1950.396661][ T1362] netlink: 'syz.2.8169': attribute type 10 has an invalid length. [ 1950.426901][ T1362] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8169'. [ 1950.444833][ T1363] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8170'. [ 1951.850596][ T1368] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1951.919756][ T1366] netlink: 'syz.2.8171': attribute type 10 has an invalid length. [ 1951.938970][ T1366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8171'. [ 1951.976897][ T1366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1952.244914][ T1382] FAULT_INJECTION: forcing a failure. [ 1952.244914][ T1382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1952.283434][ T1382] CPU: 0 PID: 1382 Comm: syz.3.8177 Not tainted syzkaller #0 [ 1952.290913][ T1382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1952.301040][ T1382] Call Trace: [ 1952.304368][ T1382] [ 1952.307343][ T1382] dump_stack_lvl+0x18c/0x250 [ 1952.312094][ T1382] ? show_regs_print_info+0x20/0x20 [ 1952.317372][ T1382] ? load_image+0x400/0x400 [ 1952.321947][ T1382] ? __might_fault+0xaa/0x120 [ 1952.326686][ T1382] ? __lock_acquire+0x7d40/0x7d40 [ 1952.331814][ T1382] should_fail_ex+0x39d/0x4d0 [ 1952.336567][ T1382] _copy_from_user+0x2f/0xe0 [ 1952.341220][ T1382] ____sys_sendmsg+0x2fd/0x960 [ 1952.346055][ T1382] ? __lock_acquire+0x7d40/0x7d40 [ 1952.351141][ T1382] ? __sys_sendmsg_sock+0x30/0x30 [ 1952.356237][ T1382] ? __import_iovec+0x3fa/0x850 [ 1952.361168][ T1382] ? import_iovec+0x73/0xa0 [ 1952.365780][ T1382] ___sys_sendmsg+0x2a6/0x360 [ 1952.370530][ T1382] ? __sys_sendmsg+0x2a0/0x2a0 [ 1952.375359][ T1382] ? trace_call_bpf+0xc3/0x6c0 [ 1952.380183][ T1382] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1952.386513][ T1382] __se_sys_sendmsg+0x1c2/0x2b0 [ 1952.391423][ T1382] ? __x64_sys_sendmsg+0x80/0x80 [ 1952.396427][ T1382] ? lockdep_hardirqs_on+0x98/0x150 [ 1952.401683][ T1382] do_syscall_64+0x55/0xa0 [ 1952.406189][ T1382] ? clear_bhb_loop+0x40/0x90 [ 1952.410920][ T1382] ? clear_bhb_loop+0x40/0x90 [ 1952.415659][ T1382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1952.421611][ T1382] RIP: 0033:0x7fdb7dd9aeb9 [ 1952.426078][ T1382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1952.445737][ T1382] RSP: 002b:00007fdb7ec22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1952.454190][ T1382] RAX: ffffffffffffffda RBX: 00007fdb7e015fa0 RCX: 00007fdb7dd9aeb9 [ 1952.462188][ T1382] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 000000000000000b [ 1952.470277][ T1382] RBP: 00007fdb7ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 1952.478272][ T1382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.486269][ T1382] R13: 00007fdb7e016038 R14: 00007fdb7e015fa0 R15: 00007fff93bd3378 [ 1952.494286][ T1382] [ 1953.059475][ T1392] netlink: 'syz.2.8180': attribute type 10 has an invalid length. [ 1955.739699][ T1402] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1955.932801][ T1408] netlink: 'syz.0.8188': attribute type 10 has an invalid length. [ 1955.948865][ T1408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8188'. [ 1955.961276][ T1408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1957.441119][ T1434] netlink: 'syz.3.8196': attribute type 2 has an invalid length. [ 1957.464651][ T1433] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8197'. [ 1957.483021][ T1434] netlink: 'syz.3.8196': attribute type 1 has an invalid length. [ 1957.510550][ T1434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1957.945341][ T1429] delete_channel: no stack [ 1958.660333][ T1448] netlink: 'syz.0.8202': attribute type 10 has an invalid length. [ 1958.703486][ T1448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8202'. [ 1958.753851][ T1448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1958.790980][ T1450] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1958.809705][ T1450] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1958.882524][ T1454] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1958.890630][ T1454] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1959.943025][ T1469] FAULT_INJECTION: forcing a failure. [ 1959.943025][ T1469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.992650][ T1469] CPU: 1 PID: 1469 Comm: syz.2.8209 Not tainted syzkaller #0 [ 1960.000174][ T1469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1960.010296][ T1469] Call Trace: [ 1960.013656][ T1469] [ 1960.016653][ T1469] dump_stack_lvl+0x18c/0x250 [ 1960.021436][ T1469] ? show_regs_print_info+0x20/0x20 [ 1960.026725][ T1469] ? load_image+0x400/0x400 [ 1960.031309][ T1469] ? __might_fault+0xaa/0x120 [ 1960.036065][ T1469] ? __lock_acquire+0x7d40/0x7d40 [ 1960.041257][ T1469] should_fail_ex+0x39d/0x4d0 [ 1960.046011][ T1469] _copy_from_user+0x2f/0xe0 [ 1960.050646][ T1469] csum_and_copy_from_iter+0x662/0x14a0 [ 1960.056267][ T1469] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1960.062024][ T1469] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1960.067741][ T1469] ? __alloc_skb+0x138/0x2c0 [ 1960.072415][ T1469] ? rcu_is_watching+0x15/0xb0 [ 1960.077261][ T1469] ip_generic_getfrag+0x163/0x2f0 [ 1960.082398][ T1469] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1960.087377][ T1469] ? skb_put+0x11b/0x210 [ 1960.091690][ T1469] __ip6_append_data+0x2f1b/0x3c50 [ 1960.096905][ T1469] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1960.101829][ T1469] ? ip6_setup_cork+0xfe0/0xfe0 [ 1960.106762][ T1469] ip6_append_data+0x1b0/0x350 [ 1960.111589][ T1469] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1960.116716][ T1469] l2tp_ip6_sendmsg+0x1237/0x1690 [ 1960.122005][ T1469] ? __might_sleep+0xe0/0xe0 [ 1960.126646][ T1469] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 1960.132033][ T1469] ? aa_af_perm+0x330/0x330 [ 1960.136583][ T1469] ? sock_rps_record_flow+0x19/0x3f0 [ 1960.141905][ T1469] ? inet_sendmsg+0x7c/0x2f0 [ 1960.146540][ T1469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1960.151884][ T1469] ? security_socket_sendmsg+0x80/0xa0 [ 1960.157500][ T1469] ? inet_send_prepare+0x260/0x260 [ 1960.162685][ T1469] ____sys_sendmsg+0x5ba/0x960 [ 1960.167532][ T1469] ? __sys_sendmsg_sock+0x30/0x30 [ 1960.172613][ T1469] ? __import_iovec+0x3fa/0x850 [ 1960.177533][ T1469] ? import_iovec+0x73/0xa0 [ 1960.182090][ T1469] ___sys_sendmsg+0x2a6/0x360 [ 1960.186822][ T1469] ? __sys_sendmsg+0x2a0/0x2a0 [ 1960.191635][ T1469] ? perf_trace_preemptirq_template+0xac/0x330 [ 1960.197849][ T1469] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1960.203987][ T1469] ? lockdep_hardirqs_on+0x98/0x150 [ 1960.209229][ T1469] ? kasan_check_range+0x85/0x290 [ 1960.214292][ T1469] __se_sys_sendmsg+0x1c2/0x2b0 [ 1960.219230][ T1469] ? __x64_sys_sendmsg+0x80/0x80 [ 1960.224421][ T1469] ? lockdep_hardirqs_on+0x98/0x150 [ 1960.229749][ T1469] do_syscall_64+0x55/0xa0 [ 1960.234318][ T1469] ? clear_bhb_loop+0x40/0x90 [ 1960.239027][ T1469] ? clear_bhb_loop+0x40/0x90 [ 1960.243750][ T1469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1960.249805][ T1469] RIP: 0033:0x7f0c0919aeb9 [ 1960.254263][ T1469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.274007][ T1469] RSP: 002b:00007f0c0a042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.282467][ T1469] RAX: ffffffffffffffda RBX: 00007f0c09415fa0 RCX: 00007f0c0919aeb9 [ 1960.290490][ T1469] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000006 [ 1960.298489][ T1469] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.306502][ T1469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1960.314542][ T1469] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 1960.322553][ T1469] [ 1962.747373][ T1488] FAULT_INJECTION: forcing a failure. [ 1962.747373][ T1488] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.761303][ T1488] CPU: 1 PID: 1488 Comm: syz.2.8215 Not tainted syzkaller #0 [ 1962.768763][ T1488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.778888][ T1488] Call Trace: [ 1962.782210][ T1488] [ 1962.785224][ T1488] dump_stack_lvl+0x18c/0x250 [ 1962.789957][ T1488] ? show_regs_print_info+0x20/0x20 [ 1962.795202][ T1488] ? load_image+0x400/0x400 [ 1962.799770][ T1488] ? __might_sleep+0xe0/0xe0 [ 1962.804425][ T1488] ? __lock_acquire+0x7d40/0x7d40 [ 1962.809552][ T1488] ? lock_chain_count+0x20/0x20 [ 1962.814470][ T1488] should_fail_ex+0x39d/0x4d0 [ 1962.819224][ T1488] should_failslab+0x9/0x20 [ 1962.823795][ T1488] slab_pre_alloc_hook+0x59/0x310 [ 1962.828904][ T1488] kmem_cache_alloc_node+0x60/0x320 [ 1962.834174][ T1488] ? __alloc_skb+0x39/0x2c0 [ 1962.838746][ T1488] ? __alloc_skb+0x103/0x2c0 [ 1962.843398][ T1488] __alloc_skb+0x103/0x2c0 [ 1962.847883][ T1488] netlink_sendmsg+0x66a/0xbf0 [ 1962.852693][ T1488] ? lockdep_hardirqs_on+0x98/0x150 [ 1962.857934][ T1488] ? netlink_getsockopt+0x590/0x590 [ 1962.863222][ T1488] ? security_socket_sendmsg+0x45/0xa0 [ 1962.868844][ T1488] ? security_socket_sendmsg+0x80/0xa0 [ 1962.874381][ T1488] ? netlink_getsockopt+0x590/0x590 [ 1962.879659][ T1488] ____sys_sendmsg+0x5ba/0x960 [ 1962.884505][ T1488] ? __asan_memset+0x22/0x40 [ 1962.889176][ T1488] ? __sys_sendmsg_sock+0x30/0x30 [ 1962.894263][ T1488] ? __import_iovec+0x5f2/0x850 [ 1962.899273][ T1488] ? import_iovec+0x73/0xa0 [ 1962.903852][ T1488] ___sys_sendmsg+0x2a6/0x360 [ 1962.908642][ T1488] ? __sys_sendmsg+0x2a0/0x2a0 [ 1962.913532][ T1488] __se_sys_sendmsg+0x1c2/0x2b0 [ 1962.918456][ T1488] ? __x64_sys_sendmsg+0x80/0x80 [ 1962.923461][ T1488] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1962.929415][ T1488] do_syscall_64+0x55/0xa0 [ 1962.934135][ T1488] ? clear_bhb_loop+0x40/0x90 [ 1962.938861][ T1488] ? clear_bhb_loop+0x40/0x90 [ 1962.943597][ T1488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1962.949541][ T1488] RIP: 0033:0x7f0c0919aeb9 [ 1962.954001][ T1488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.973684][ T1488] RSP: 002b:00007f0c0a042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.982143][ T1488] RAX: ffffffffffffffda RBX: 00007f0c09415fa0 RCX: 00007f0c0919aeb9 [ 1962.990146][ T1488] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1962.998442][ T1488] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.006497][ T1488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.014540][ T1488] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 1963.022635][ T1488] [ 1964.853800][ T1461] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8207'. [ 1964.864044][ T1491] netlink: 'syz.2.8216': attribute type 10 has an invalid length. [ 1964.877065][ T1491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1964.890243][ T1491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1964.912889][ T1493] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1964.933582][ T1493] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1968.119322][ T1512] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1968.131455][ T1512] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1968.168800][ T1513] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1968.184172][ T1513] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1968.351245][ T1520] netlink: 'syz.2.8225': attribute type 46 has an invalid length. [ 1968.448206][ T1523] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8226'. [ 1968.539033][ T1525] netlink: 'syz.3.8227': attribute type 10 has an invalid length. [ 1968.571885][ T1525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8227'. [ 1968.654855][ T1525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1972.729996][ T1543] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 1972.737108][ T1543] mac80211_hwsim hwsim72 wlan0: left allmulticast mode [ 1972.751735][ T1545] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1972.759279][ T1545] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 1973.965381][ T1580] netlink: 'syz.1.8244': attribute type 10 has an invalid length. [ 1973.978217][ T1580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8244'. [ 1975.657884][ T1580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1975.857948][ T1588] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1975.873483][ T1588] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1975.944725][ T1588] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1975.952384][ T1588] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1976.556091][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.562688][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.299628][ T1629] netlink: 'syz.0.8258': attribute type 3 has an invalid length. [ 1980.323689][ T1629] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1982.297415][ T1618] netlink: 'syz.2.8256': attribute type 10 has an invalid length. [ 1982.305743][ T1618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8256'. [ 1982.315733][ T1618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1982.566062][ T1636] netlink: 'syz.3.8260': attribute type 46 has an invalid length. [ 1983.447759][ T1643] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1983.462832][ T1643] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1983.493605][ T1645] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1983.513387][ T1645] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1983.614420][ T1655] netlink: 'syz.1.8266': attribute type 33 has an invalid length. [ 1983.625343][ T1655] netlink: 'syz.1.8266': attribute type 3 has an invalid length. [ 1983.641664][ T1655] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.8266'. [ 1983.657491][ T1655] netlink: 'syz.1.8266': attribute type 10 has an invalid length. [ 1983.667072][ T1655] hsr_slave_0: entered allmulticast mode [ 1983.819624][ T1659] À: port 1(vlan0) entered blocking state [ 1983.827951][ T1659] À: port 1(vlan0) entered disabled state [ 1983.835248][ T1659] vlan0: entered allmulticast mode [ 1983.841039][ T1659] veth0_vlan: entered allmulticast mode [ 1983.855161][ T1659] vlan0: entered promiscuous mode [ 1983.886723][ T1661] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 1983.898709][ T1661] mac80211_hwsim hwsim72 wlan0: left allmulticast mode [ 1983.921957][ T1663] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1983.929848][ T1663] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 1984.144527][ T1665] netlink: 'syz.1.8269': attribute type 10 has an invalid length. [ 1984.159525][ T1665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8269'. [ 1984.172589][ T1665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1984.309435][ T1669] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8271'. [ 1984.871594][ T1675] netlink: 'syz.0.8272': attribute type 9 has an invalid length. [ 1984.928289][ T1675] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8272'. [ 1987.624003][ T1683] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1987.682062][ T1680] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1987.692470][ T1680] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1987.728767][ T1688] netlink: 'syz.3.8277': attribute type 1 has an invalid length. [ 1987.742991][ T1680] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1987.755046][ T1680] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1987.988585][ T1690] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1988.003473][ T1690] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1988.076257][ T1690] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1988.087964][ T1690] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1988.100194][ T1696] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1988.111023][ T1692] À: port 1(vlan0) entered blocking state [ 1988.123057][ T1692] À: port 1(vlan0) entered disabled state [ 1988.130349][ T1692] vlan0: entered allmulticast mode [ 1988.136468][ T1692] veth0_vlan: entered allmulticast mode [ 1988.160794][ T1692] vlan0: entered promiscuous mode [ 1988.295797][ T1701] netlink: 'syz.2.8282': attribute type 10 has an invalid length. [ 1988.313414][ T1701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8282'. [ 1988.342540][ T1701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1988.421428][ T1705] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8291'. [ 1988.472945][ T1706] netlink: 'syz.1.8283': attribute type 3 has an invalid length. [ 1988.486721][ T1706] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8283'. [ 1988.666771][ T1709] netlink: 'syz.0.8284': attribute type 8 has an invalid length. [ 1988.681855][ T1709] netlink: 'syz.0.8284': attribute type 1 has an invalid length. [ 1988.692140][ T1709] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8284'. [ 1988.869552][ T1712] bridge_slave_1: left allmulticast mode [ 1988.890826][ T1712] bridge_slave_1: left promiscuous mode [ 1988.956454][ T1712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.190288][ T1712] bridge_slave_0: left allmulticast mode [ 1989.200534][ T1712] bridge_slave_0: left promiscuous mode [ 1989.241294][ T1712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.728823][ T1719] IPv6: NLM_F_CREATE should be specified when creating new route [ 1990.243155][ T1738] netlink: 'syz.1.8294': attribute type 9 has an invalid length. [ 1990.282513][ T1738] netlink: 399 bytes leftover after parsing attributes in process `syz.1.8294'. [ 1993.083744][ T1750] netlink: 'syz.2.8298': attribute type 10 has an invalid length. [ 1993.092150][ T1750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1993.159152][ T1748] netlink: 'syz.3.8297': attribute type 1 has an invalid length. [ 1993.175237][ T1748] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8297'. [ 1994.209629][ T1750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1994.239188][ T1753] netlink: 'syz.3.8297': attribute type 10 has an invalid length. [ 1994.266900][ T1753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1994.290290][ T1753] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1994.304539][ T1756] bond0: entered promiscuous mode [ 1994.309825][ T1756] bond_slave_0: entered promiscuous mode [ 1994.316435][ T1756] bond_slave_1: entered promiscuous mode [ 1994.322799][ T1756] batadv0: entered promiscuous mode [ 1994.345934][ T1760] netlink: 'syz.1.8300': attribute type 41 has an invalid length. [ 1994.939162][ T1773] À: port 1(vlan0) entered blocking state [ 1994.959580][ T1773] À: port 1(vlan0) entered disabled state [ 1995.005163][ T1773] vlan0: entered allmulticast mode [ 1995.013188][ T1773] veth0_vlan: entered allmulticast mode [ 1995.066077][ T1773] vlan0: entered promiscuous mode [ 1995.299483][ T1785] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 1995.314108][ T1785] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 1995.355318][ T1788] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 1995.362846][ T1788] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 1995.660411][ T1798] netlink: 'syz.3.8312': attribute type 10 has an invalid length. [ 1995.670490][ T1798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1996.469653][ T1798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1996.628636][ T1805] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1996.705528][T29113] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1997.036222][ T1815] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8324'. [ 1997.144771][ T1819] netlink: 'syz.2.8317': attribute type 1 has an invalid length. [ 1997.159381][ T1819] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8317'. [ 1997.192862][ T1819] netlink: 'syz.2.8317': attribute type 10 has an invalid length. [ 1997.828152][ T1819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1997.859178][ T1819] batadv0: entered promiscuous mode [ 1997.866951][ T1819] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1997.902428][ T1820] bond_slave_0: left promiscuous mode [ 1997.921108][ T1820] bond_slave_1: left promiscuous mode [ 1997.939210][ T1820] batadv0: left promiscuous mode [ 1997.963619][ T1820] bond0: entered promiscuous mode [ 1997.980233][ T1820] bond_slave_0: entered promiscuous mode [ 1998.000227][ T1820] bond_slave_1: entered promiscuous mode [ 1998.020177][ T1820] batadv0: entered promiscuous mode [ 1998.768611][ T1841] netlink: 'syz.2.8325': attribute type 10 has an invalid length. [ 1998.793348][ T1841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1998.895369][ T1841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1999.158881][ T1850] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8328'. [ 2001.574168][ T1883] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8337'. [ 2001.791585][ T1885] mac80211_hwsim hwsim70 wlan0: left promiscuous mode [ 2001.809582][ T1885] mac80211_hwsim hwsim70 wlan0: left allmulticast mode [ 2001.865854][ T1885] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 2001.909393][ T1885] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 2001.933675][ T1893] bridge_slave_1: left allmulticast mode [ 2001.939926][ T1893] bridge_slave_1: left promiscuous mode [ 2001.975147][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.192929][ T1893] bridge_slave_0: left allmulticast mode [ 2002.214205][ T1893] bridge_slave_0: left promiscuous mode [ 2002.281251][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.934168][ T1896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8341'. [ 2002.973697][ T1895] netlink: 'syz.1.8342': attribute type 10 has an invalid length. [ 2002.981708][ T1895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8342'. [ 2003.034553][ T1895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2003.052256][ T1898] netlink: 'syz.0.8343': attribute type 10 has an invalid length. [ 2004.492225][ T1926] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8349'. [ 2004.513312][ T1929] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.8348'. [ 2005.928966][ T1940] netlink: 'syz.2.8354': attribute type 10 has an invalid length. [ 2005.979205][ T1940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8354'. [ 2006.080751][ T1940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2006.389072][ T1944] netlink: 'syz.3.8355': attribute type 4 has an invalid length. [ 2008.116209][ T1964] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8361'. [ 2008.174522][ T1968] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8362'. [ 2008.477043][ T1975] sock: sock_set_timeout: `syz.0.8366' (pid 1975) tries to set negative timeout [ 2008.550927][ T1981] netlink: 'syz.2.8369': attribute type 10 has an invalid length. [ 2008.560703][ T1981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8369'. [ 2008.590170][ T1977] netlink: 'syz.1.8367': attribute type 10 has an invalid length. [ 2008.637095][ T1977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8367'. [ 2008.693911][ T1977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2008.930406][ T1989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8372'. [ 2009.372193][ T1996] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8373'. [ 2010.608110][ T2003] netlink: 'syz.2.8377': attribute type 2 has an invalid length. [ 2010.656563][ T2003] netlink: 'syz.2.8377': attribute type 11 has an invalid length. [ 2010.783449][ T2003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8377'. [ 2010.979323][ T2009] mac80211_hwsim hwsim68 wlan1: left promiscuous mode [ 2010.993785][ T2009] mac80211_hwsim hwsim68 wlan1: left allmulticast mode [ 2011.440419][ T2011] netlink: 'syz.2.8379': attribute type 10 has an invalid length. [ 2011.460533][ T2011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8379'. [ 2011.486596][ T2011] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2011.543505][ T2011] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2011.606377][ T2011] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2011.616823][ T2014] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8380'. [ 2011.636384][ T2012] netlink: 'syz.2.8379': attribute type 10 has an invalid length. [ 2011.653688][ T2012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8379'. [ 2011.789858][ T2025] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8383'. [ 2011.823982][ T2026] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8384'. [ 2011.918224][ T2028] netlink: 'syz.2.8385': attribute type 10 has an invalid length. [ 2011.937158][ T2028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8385'. [ 2011.950652][ T2028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2013.044212][ T2039] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8388'. [ 2013.138424][ T2043] netlink: 'syz.1.8390': attribute type 2 has an invalid length. [ 2013.149603][ T2043] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.8390'. [ 2013.434265][ T2046] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8392'. [ 2013.461423][ T2046] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2013.574484][ T2046] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 2014.514245][ T2058] FAULT_INJECTION: forcing a failure. [ 2014.514245][ T2058] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.563244][ T2058] CPU: 0 PID: 2058 Comm: syz.0.8395 Not tainted syzkaller #0 [ 2014.570735][ T2058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2014.581025][ T2058] Call Trace: [ 2014.584458][ T2058] [ 2014.587469][ T2058] dump_stack_lvl+0x18c/0x250 [ 2014.592493][ T2058] ? show_regs_print_info+0x20/0x20 [ 2014.598305][ T2058] ? load_image+0x400/0x400 [ 2014.603510][ T2058] ? __might_sleep+0xe0/0xe0 [ 2014.609399][ T2058] ? __lock_acquire+0x7d40/0x7d40 [ 2014.616070][ T2058] ? lock_chain_count+0x20/0x20 [ 2014.621881][ T2058] should_fail_ex+0x39d/0x4d0 [ 2014.628580][ T2058] should_failslab+0x9/0x20 [ 2014.636255][ T2058] slab_pre_alloc_hook+0x59/0x310 [ 2014.641522][ T2058] ? _raw_spin_unlock+0x40/0x40 [ 2014.646413][ T2058] ? string+0x26d/0x2b0 [ 2014.652081][ T2058] ? __request_module+0x2d1/0x600 [ 2014.660310][ T2058] __kmem_cache_alloc_node+0x53/0x250 [ 2014.666182][ T2058] ? __request_module+0x2d1/0x600 [ 2014.672071][ T2058] kmalloc_trace+0x2a/0xe0 [ 2014.676560][ T2058] __request_module+0x2d1/0x600 [ 2014.681626][ T2058] ? module_enforce_rwx_sections+0x150/0x150 [ 2014.689549][ T2058] ? dev_load+0x21/0x1f0 [ 2014.696321][ T2058] ? bpf_lsm_capable+0x9/0x10 [ 2014.701912][ T2058] ? dev_load+0x21/0x1f0 [ 2014.707424][ T2058] dev_load+0x18b/0x1f0 [ 2014.714188][ T2058] dev_ioctl+0x59f/0x1140 [ 2014.720518][ T2058] sock_do_ioctl+0x239/0x310 [ 2014.726694][ T2058] ? sock_show_fdinfo+0xb0/0xb0 [ 2014.732510][ T2058] sock_ioctl+0x5ba/0x7e0 [ 2014.737262][ T2058] ? sock_poll+0x3e0/0x3e0 [ 2014.742876][ T2058] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2014.748178][ T2058] ? security_file_ioctl+0x80/0xa0 [ 2014.753853][ T2058] ? sock_poll+0x3e0/0x3e0 [ 2014.760528][ T2058] __se_sys_ioctl+0xfd/0x170 [ 2014.767275][ T2058] do_syscall_64+0x55/0xa0 [ 2014.772539][ T2058] ? clear_bhb_loop+0x40/0x90 [ 2014.779827][ T2058] ? clear_bhb_loop+0x40/0x90 [ 2014.785126][ T2058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2014.793289][ T2058] RIP: 0033:0x7efd2599aeb9 [ 2014.798270][ T2058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2014.823442][ T2058] RSP: 002b:00007efd267ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2014.835235][ T2058] RAX: ffffffffffffffda RBX: 00007efd25c16090 RCX: 00007efd2599aeb9 [ 2014.843719][ T2058] RDX: 0000200000001340 RSI: 0000000000008923 RDI: 0000000000000008 [ 2014.853795][ T2058] RBP: 00007efd267ef090 R08: 0000000000000000 R09: 0000000000000000 [ 2014.863716][ T2058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.874628][ T2058] R13: 00007efd25c16128 R14: 00007efd25c16090 R15: 00007ffca005f838 [ 2014.885473][ T2058] [ 2015.264389][ T2076] netlink: 'syz.1.8400': attribute type 10 has an invalid length. [ 2015.805915][ T2076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2017.007129][ T2110] __nla_validate_parse: 3 callbacks suppressed [ 2017.007150][ T2110] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8406'. [ 2017.440553][ T2113] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8407'. [ 2017.757150][ T2118] netlink: 'syz.3.8409': attribute type 8 has an invalid length. [ 2017.771906][ T2118] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8409'. [ 2018.031751][ T2128] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.8413'. [ 2018.129479][ T2128] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8413'. [ 2018.199659][ T2128] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.8413'. [ 2018.219106][ T2128] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8413'. [ 2018.232878][ T2128] tc_dump_action: action bad kind [ 2020.388222][ T2130] netlink: 'syz.0.8414': attribute type 10 has an invalid length. [ 2020.403673][ T2130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8414'. [ 2020.422546][ T2130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2020.915825][ T2144] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8417'. [ 2021.116399][ T2150] netlink: 'syz.2.8420': attribute type 2 has an invalid length. [ 2021.134119][ T2150] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8420'. [ 2023.268411][ T2167] netlink: 'syz.1.8425': attribute type 10 has an invalid length. [ 2023.281631][ T2167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8425'. [ 2023.349993][ T2167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2023.426563][ T2176] FAULT_INJECTION: forcing a failure. [ 2023.426563][ T2176] name failslab, interval 1, probability 0, space 0, times 0 [ 2023.465793][ T2176] CPU: 1 PID: 2176 Comm: syz.2.8428 Not tainted syzkaller #0 [ 2023.473279][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2023.483662][ T2176] Call Trace: [ 2023.486989][ T2176] [ 2023.489966][ T2176] dump_stack_lvl+0x18c/0x250 [ 2023.494712][ T2176] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 2023.499791][ T2176] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2023.505916][ T2176] ? show_regs_print_info+0x20/0x20 [ 2023.511187][ T2176] ? load_image+0x400/0x400 [ 2023.515772][ T2176] should_fail_ex+0x39d/0x4d0 [ 2023.520524][ T2176] should_failslab+0x9/0x20 [ 2023.525178][ T2176] slab_pre_alloc_hook+0x59/0x310 [ 2023.530352][ T2176] ? nf_ct_ext_add+0x1ab/0x440 [ 2023.535183][ T2176] ? nf_ct_ext_add+0x1ab/0x440 [ 2023.540000][ T2176] __kmem_cache_alloc_node+0x53/0x250 [ 2023.545450][ T2176] ? nf_ct_ext_add+0x1ab/0x440 [ 2023.550302][ T2176] __kmalloc_node_track_caller+0xa2/0x230 [ 2023.556098][ T2176] krealloc+0x86/0x120 [ 2023.560242][ T2176] nf_ct_ext_add+0x1ab/0x440 [ 2023.564905][ T2176] init_conntrack+0x69c/0xf10 [ 2023.569702][ T2176] ? early_drop+0x7f0/0x7f0 [ 2023.574267][ T2176] ? nf_conntrack_find_get+0x650/0x650 [ 2023.579805][ T2176] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2023.585331][ T2176] ? __siphash_unaligned+0x22e/0x3a0 [ 2023.590692][ T2176] nf_conntrack_in+0xc06/0x15c0 [ 2023.595639][ T2176] ? nf_ct_pernet+0x270/0x270 [ 2023.600566][ T2176] ? ipt_do_table+0x2c1/0x15e0 [ 2023.605407][ T2176] ? sctp_packet_singleton+0x235/0x340 [ 2023.611151][ T2176] ? sctp_outq_flush+0x50e/0x3120 [ 2023.616257][ T2176] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 2023.622240][ T2176] ? do_syscall_64+0x55/0xa0 [ 2023.626992][ T2176] ? ipv4_conntrack_local+0x123/0x200 [ 2023.632425][ T2176] ? ipv4_conntrack_in+0x20/0x20 [ 2023.637795][ T2176] nf_hook_slow+0xbd/0x200 [ 2023.642645][ T2176] ? nf_hook+0x390/0x390 [ 2023.647014][ T2176] nf_hook+0x228/0x390 [ 2023.651165][ T2176] ? nf_hook+0xa2/0x390 [ 2023.655565][ T2176] ? __ip_local_out+0x5f0/0x5f0 [ 2023.660749][ T2176] ? nf_hook+0x390/0x390 [ 2023.665061][ T2176] ? __lock_acquire+0x7d40/0x7d40 [ 2023.670153][ T2176] ? ip_fast_csum+0x1ee/0x2b0 [ 2023.675149][ T2176] __ip_local_out+0x4db/0x5f0 [ 2023.679891][ T2176] ? nf_hook+0x390/0x390 [ 2023.684245][ T2176] ? __ip_queue_xmit+0x5d/0x1950 [ 2023.689434][ T2176] __ip_queue_xmit+0xf7c/0x1950 [ 2023.694367][ T2176] ? __ip_queue_xmit+0x5d/0x1950 [ 2023.699462][ T2176] sctp_packet_transmit+0x247d/0x2a30 [ 2023.705542][ T2176] sctp_packet_singleton+0x235/0x340 [ 2023.711610][ T2176] ? sctp_outq_select_transport+0x570/0x570 [ 2023.717596][ T2176] ? sctp_outq_select_transport+0x45d/0x570 [ 2023.723578][ T2176] ? sctp_transport_burst_limited+0x197/0x280 [ 2023.730076][ T2176] sctp_outq_flush+0x50e/0x3120 [ 2023.735097][ T2176] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2023.741218][ T2176] ? _raw_spin_unlock+0x40/0x40 [ 2023.746188][ T2176] ? rcu_is_watching+0x15/0xb0 [ 2023.751069][ T2176] ? enqueue_timer+0x23d/0x550 [ 2023.756007][ T2176] ? sctp_outq_tail+0x8a0/0x8a0 [ 2023.760955][ T2176] ? sctp_outq_tail+0x604/0x8a0 [ 2023.765893][ T2176] ? sctp_outq_uncork+0x4d/0xa0 [ 2023.770816][ T2176] sctp_do_sm+0x533b/0x5a60 [ 2023.775496][ T2176] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 2023.781463][ T2176] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 2023.786681][ T2176] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 2023.792659][ T2176] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 2023.798295][ T2176] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 2023.803743][ T2176] ? __asan_memcpy+0x40/0x70 [ 2023.808591][ T2176] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 2023.814040][ T2176] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 2023.819917][ T2176] ? __sctp_connect+0xd80/0xd80 [ 2023.824829][ T2176] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2023.830346][ T2176] ? _local_bh_enable+0xa0/0xa0 [ 2023.835255][ T2176] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2023.841125][ T2176] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2023.846999][ T2176] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2023.852617][ T2176] ? security_sctp_bind_connect+0x89/0xb0 [ 2023.858703][ T2176] sctp_sendmsg+0x1b83/0x28c0 [ 2023.863455][ T2176] ? sctp_getsockopt+0xb60/0xb60 [ 2023.868455][ T2176] ? aa_sk_perm+0x83c/0x970 [ 2023.873036][ T2176] ? aa_af_perm+0x330/0x330 [ 2023.877783][ T2176] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2023.884356][ T2176] ? sock_rps_record_flow+0x19/0x3f0 [ 2023.889708][ T2176] ? inet_sendmsg+0x7c/0x2f0 [ 2023.894876][ T2176] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2023.900308][ T2176] ? security_socket_sendmsg+0x80/0xa0 [ 2023.905907][ T2176] ? inet_send_prepare+0x260/0x260 [ 2023.911090][ T2176] ____sys_sendmsg+0x5ba/0x960 [ 2023.916023][ T2176] ? __lock_acquire+0x7d40/0x7d40 [ 2023.921115][ T2176] ? __asan_memset+0x22/0x40 [ 2023.925766][ T2176] ? __sys_sendmsg_sock+0x30/0x30 [ 2023.930937][ T2176] ? __import_iovec+0x5f2/0x850 [ 2023.935933][ T2176] ? import_iovec+0x73/0xa0 [ 2023.940509][ T2176] ___sys_sendmsg+0x2a6/0x360 [ 2023.945241][ T2176] ? get_pid_task+0x20/0x1e0 [ 2023.949902][ T2176] ? __sys_sendmsg+0x2a0/0x2a0 [ 2023.954750][ T2176] ? __lock_acquire+0x7d40/0x7d40 [ 2023.959874][ T2176] __se_sys_sendmsg+0x1c2/0x2b0 [ 2023.964788][ T2176] ? __x64_sys_sendmsg+0x80/0x80 [ 2023.969801][ T2176] ? lockdep_hardirqs_on+0x98/0x150 [ 2023.975104][ T2176] do_syscall_64+0x55/0xa0 [ 2023.979592][ T2176] ? clear_bhb_loop+0x40/0x90 [ 2023.984413][ T2176] ? clear_bhb_loop+0x40/0x90 [ 2023.989148][ T2176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2023.995099][ T2176] RIP: 0033:0x7f0c0919aeb9 [ 2023.999572][ T2176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.019673][ T2176] RSP: 002b:00007f0c0a042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.028156][ T2176] RAX: ffffffffffffffda RBX: 00007f0c09415fa0 RCX: 00007f0c0919aeb9 [ 2024.036182][ T2176] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 2024.044214][ T2176] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 2024.052237][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2024.060268][ T2176] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 2024.068325][ T2176] [ 2024.109658][ T2180] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8429'. [ 2024.401689][ T2187] netlink: 'syz.3.8432': attribute type 9 has an invalid length. [ 2024.441651][ T2187] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8432'. [ 2024.581622][ T2188] netlink: 'syz.3.8432': attribute type 9 has an invalid length. [ 2024.638342][ T2188] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8432'. [ 2026.362144][ T2211] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8440'. [ 2026.547483][ T2219] netlink: 'syz.1.8442': attribute type 10 has an invalid length. [ 2026.558935][ T2219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8442'. [ 2027.300346][ T2219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2028.051133][ T2228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8445'. [ 2028.467364][ T2246] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8451'. [ 2030.045609][ T2258] netlink: 'syz.1.8455': attribute type 10 has an invalid length. [ 2030.063458][ T2258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8455'. [ 2030.105309][ T2258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2030.214771][ T2271] netlink: 'syz.2.8458': attribute type 17 has an invalid length. [ 2030.223006][ T2271] netlink: 'syz.2.8458': attribute type 16 has an invalid length. [ 2030.232364][ T2271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8458'. [ 2030.521548][ T2281] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8462'. [ 2030.584714][ T2276] delete_channel: no stack [ 2032.482620][ T2303] netlink: zone id is out of range [ 2032.492224][ T2303] netlink: set zone limit has 8 unknown bytes [ 2032.517190][ T2303] netlink: 'syz.1.8466': attribute type 21 has an invalid length. [ 2032.672391][ T2305] netlink: 'syz.0.8470': attribute type 10 has an invalid length. [ 2032.773073][ T2311] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8472'. [ 2033.091239][ T2315] netlink: 'syz.0.8474': attribute type 10 has an invalid length. [ 2033.121828][ T2315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8474'. [ 2034.652866][ T2315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2034.872697][ T2330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8477'. [ 2035.158528][ T2338] FAULT_INJECTION: forcing a failure. [ 2035.158528][ T2338] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.221224][ T2338] CPU: 1 PID: 2338 Comm: syz.1.8481 Not tainted syzkaller #0 [ 2035.228704][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2035.238821][ T2338] Call Trace: [ 2035.242147][ T2338] [ 2035.245127][ T2338] dump_stack_lvl+0x18c/0x250 [ 2035.249873][ T2338] ? show_regs_print_info+0x20/0x20 [ 2035.255132][ T2338] ? load_image+0x400/0x400 [ 2035.259700][ T2338] ? __might_sleep+0xe0/0xe0 [ 2035.264353][ T2338] ? __lock_acquire+0x7d40/0x7d40 [ 2035.269430][ T2338] should_fail_ex+0x39d/0x4d0 [ 2035.274172][ T2338] should_failslab+0x9/0x20 [ 2035.278760][ T2338] slab_pre_alloc_hook+0x59/0x310 [ 2035.283824][ T2338] ? kvmalloc_node+0x70/0x180 [ 2035.288541][ T2338] ? kvmalloc_node+0x70/0x180 [ 2035.293423][ T2338] __kmem_cache_alloc_node+0x53/0x250 [ 2035.298867][ T2338] ? kvmalloc_node+0x70/0x180 [ 2035.303580][ T2338] __kmalloc_node+0xa4/0x230 [ 2035.308207][ T2338] kvmalloc_node+0x70/0x180 [ 2035.312744][ T2338] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 2035.318159][ T2338] ? 0xffffffffa0004740 [ 2035.322343][ T2338] ? 0xffffffffa0004740 [ 2035.326541][ T2338] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2035.332458][ T2338] ? 0xffffffffa0004740 [ 2035.336649][ T2338] ? xdp_convert_md_to_buff+0x330/0x330 [ 2035.342270][ T2338] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2035.348569][ T2338] ? _copy_from_user+0xa5/0xe0 [ 2035.353377][ T2338] ? bpf_test_init+0x119/0x140 [ 2035.358172][ T2338] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2035.363664][ T2338] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2035.369081][ T2338] ? dev_put+0x80/0x80 [ 2035.373187][ T2338] ? dev_put+0x80/0x80 [ 2035.377294][ T2338] bpf_prog_test_run+0x321/0x390 [ 2035.382265][ T2338] __sys_bpf+0x49d/0x890 [ 2035.386534][ T2338] ? bpf_link_show_fdinfo+0x390/0x390 [ 2035.391979][ T2338] ? lock_chain_count+0x20/0x20 [ 2035.396853][ T2338] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2035.402907][ T2338] __x64_sys_bpf+0x7c/0x90 [ 2035.407354][ T2338] do_syscall_64+0x55/0xa0 [ 2035.411799][ T2338] ? clear_bhb_loop+0x40/0x90 [ 2035.416500][ T2338] ? clear_bhb_loop+0x40/0x90 [ 2035.421214][ T2338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2035.427133][ T2338] RIP: 0033:0x7f8e35d9aeb9 [ 2035.431586][ T2338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2035.451215][ T2338] RSP: 002b:00007f8e36b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2035.459658][ T2338] RAX: ffffffffffffffda RBX: 00007f8e36015fa0 RCX: 00007f8e35d9aeb9 [ 2035.468579][ T2338] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2035.476575][ T2338] RBP: 00007f8e36b84090 R08: 0000000000000000 R09: 0000000000000000 [ 2035.485182][ T2338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2035.493470][ T2338] R13: 00007f8e36016038 R14: 00007f8e36015fa0 R15: 00007ffdcb0042f8 [ 2035.501485][ T2338] [ 2035.806065][ T2347] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8484'. [ 2036.076458][ T2358] netlink: 'syz.3.8487': attribute type 10 has an invalid length. [ 2036.098963][ T2358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8487'. [ 2036.184418][ T2358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2036.288051][ T2362] netlink: 'syz.1.8486': attribute type 10 has an invalid length. [ 2036.306892][ T2362] geneve0: entered promiscuous mode [ 2036.349114][ T2362] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2037.910527][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.917077][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.313077][ T2377] bridge_slave_1: left allmulticast mode [ 2038.335445][ T2377] bridge_slave_1: left promiscuous mode [ 2038.347312][ T2377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.410401][ T2377] bridge_slave_0: left promiscuous mode [ 2038.426501][ T2377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.395664][ T2381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8490'. [ 2039.417840][ T2380] netlink: 'syz.3.8493': attribute type 6 has an invalid length. [ 2039.442849][ T2394] netlink: 'syz.2.8496': attribute type 10 has an invalid length. [ 2039.473543][ T2394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8496'. [ 2039.520531][ T2394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2039.588861][ T2398] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8497'. [ 2040.242130][ T2414] netlink: 'syz.0.8501': attribute type 19 has an invalid length. [ 2040.257486][ T2414] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8501'. [ 2041.229104][ T2433] netlink: 'syz.2.8504': attribute type 13 has an invalid length. [ 2041.240296][ T2433] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.8504'. [ 2041.271517][ T2439] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8508'. [ 2041.739622][ T2459] netlink: 'syz.2.8513': attribute type 10 has an invalid length. [ 2041.756417][ T2459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8513'. [ 2041.803985][ T2459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2044.805811][ T2490] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8519'. [ 2044.922414][ T2493] FAULT_INJECTION: forcing a failure. [ 2044.922414][ T2493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2044.945049][ T2493] CPU: 1 PID: 2493 Comm: syz.3.8522 Not tainted syzkaller #0 [ 2044.952533][ T2493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2044.962649][ T2493] Call Trace: [ 2044.965969][ T2493] [ 2044.968933][ T2493] dump_stack_lvl+0x18c/0x250 [ 2044.973675][ T2493] ? show_regs_print_info+0x20/0x20 [ 2044.978986][ T2493] ? load_image+0x400/0x400 [ 2044.983545][ T2493] ? __lock_acquire+0x7d40/0x7d40 [ 2044.988627][ T2493] ? snprintf+0xe9/0x140 [ 2044.992928][ T2493] should_fail_ex+0x39d/0x4d0 [ 2044.997668][ T2493] _copy_to_user+0x2f/0xa0 [ 2045.002132][ T2493] simple_read_from_buffer+0xe7/0x150 [ 2045.007570][ T2493] proc_fail_nth_read+0x1e8/0x260 [ 2045.012656][ T2493] ? proc_fault_inject_write+0x360/0x360 [ 2045.018346][ T2493] ? vfs_read+0x275/0x970 [ 2045.022753][ T2493] ? proc_fault_inject_write+0x360/0x360 [ 2045.028445][ T2493] vfs_read+0x28b/0x970 [ 2045.032660][ T2493] ? kernel_read+0x1e0/0x1e0 [ 2045.037311][ T2493] ? __fget_files+0x28/0x4b0 [ 2045.042581][ T2493] ? __fget_files+0x28/0x4b0 [ 2045.047277][ T2493] ? __fget_files+0x43d/0x4b0 [ 2045.052080][ T2493] ? __fdget_pos+0x2a3/0x330 [ 2045.056769][ T2493] ? ksys_read+0x75/0x260 [ 2045.061171][ T2493] ksys_read+0x150/0x260 [ 2045.065476][ T2493] ? vfs_write+0x990/0x990 [ 2045.069957][ T2493] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2045.075908][ T2493] do_syscall_64+0x55/0xa0 [ 2045.080385][ T2493] ? clear_bhb_loop+0x40/0x90 [ 2045.085118][ T2493] ? clear_bhb_loop+0x40/0x90 [ 2045.089846][ T2493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2045.095801][ T2493] RIP: 0033:0x7fdb7dd5b78e [ 2045.100289][ T2493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2045.119959][ T2493] RSP: 002b:00007fdb7ec21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2045.128437][ T2493] RAX: ffffffffffffffda RBX: 00007fdb7ec226c0 RCX: 00007fdb7dd5b78e [ 2045.136456][ T2493] RDX: 000000000000000f RSI: 00007fdb7ec220a0 RDI: 000000000000000a [ 2045.144457][ T2493] RBP: 00007fdb7ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 2045.152488][ T2493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.160492][ T2493] R13: 00007fdb7e016038 R14: 00007fdb7e015fa0 R15: 00007fff93bd3378 [ 2045.168674][ T2493] [ 2045.496113][ T2509] netlink: 'syz.2.8527': attribute type 1 has an invalid length. [ 2045.506915][ T2509] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8527'. [ 2045.602697][ T2511] netlink: 'syz.2.8527': attribute type 10 has an invalid length. [ 2045.655447][ T2511] team0: Device veth0_vlan failed to register rx_handler [ 2046.025731][ T2510] netlink: 'syz.1.8528': attribute type 10 has an invalid length. [ 2046.043936][ T2510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8528'. [ 2046.110659][ T2510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2046.177875][ T2529] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8531'. [ 2046.311081][ T2534] delete_channel: no stack [ 2046.327827][ T2534] delete_channel: no stack [ 2046.404388][ T2539] FAULT_INJECTION: forcing a failure. [ 2046.404388][ T2539] name failslab, interval 1, probability 0, space 0, times 0 [ 2046.449288][ T2539] CPU: 0 PID: 2539 Comm: syz.2.8533 Not tainted syzkaller #0 [ 2046.456758][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2046.466886][ T2539] Call Trace: [ 2046.470195][ T2539] [ 2046.473159][ T2539] dump_stack_lvl+0x18c/0x250 [ 2046.477895][ T2539] ? sctp_sendmsg+0x1575/0x28c0 [ 2046.482784][ T2539] ? ___sys_sendmsg+0x2a6/0x360 [ 2046.487666][ T2539] ? show_regs_print_info+0x20/0x20 [ 2046.492904][ T2539] ? load_image+0x400/0x400 [ 2046.497453][ T2539] should_fail_ex+0x39d/0x4d0 [ 2046.502171][ T2539] should_failslab+0x9/0x20 [ 2046.506747][ T2539] slab_pre_alloc_hook+0x59/0x310 [ 2046.511811][ T2539] ? sctp_add_bind_addr+0x8c/0x360 [ 2046.516965][ T2539] __kmem_cache_alloc_node+0x53/0x250 [ 2046.522375][ T2539] ? sctp_add_bind_addr+0x8c/0x360 [ 2046.527530][ T2539] kmalloc_trace+0x2a/0xe0 [ 2046.531983][ T2539] sctp_add_bind_addr+0x8c/0x360 [ 2046.536960][ T2539] sctp_copy_local_addr_list+0x315/0x4f0 [ 2046.542627][ T2539] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2046.548418][ T2539] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2046.554522][ T2539] ? sctp_v4_is_any+0x35/0x60 [ 2046.559234][ T2539] ? sctp_copy_one_addr+0x8c/0x350 [ 2046.564474][ T2539] sctp_bind_addr_copy+0xb3/0x3c0 [ 2046.569538][ T2539] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2046.575902][ T2539] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2046.581220][ T2539] ? __sctp_connect+0xd80/0xd80 [ 2046.586092][ T2539] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2046.591495][ T2539] ? _local_bh_enable+0xa0/0xa0 [ 2046.596368][ T2539] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2046.602209][ T2539] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2046.608041][ T2539] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2046.613615][ T2539] ? security_sctp_bind_connect+0x89/0xb0 [ 2046.619369][ T2539] sctp_sendmsg+0x1575/0x28c0 [ 2046.624081][ T2539] ? sctp_getsockopt+0xb60/0xb60 [ 2046.629047][ T2539] ? aa_sk_perm+0x83c/0x970 [ 2046.633615][ T2539] ? aa_af_perm+0x330/0x330 [ 2046.638154][ T2539] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2046.644599][ T2539] ? sock_rps_record_flow+0x19/0x3f0 [ 2046.649916][ T2539] ? inet_sendmsg+0x7c/0x2f0 [ 2046.654532][ T2539] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2046.659847][ T2539] ? security_socket_sendmsg+0x80/0xa0 [ 2046.665335][ T2539] ? inet_send_prepare+0x260/0x260 [ 2046.670478][ T2539] ____sys_sendmsg+0x5ba/0x960 [ 2046.675287][ T2539] ? __asan_memset+0x22/0x40 [ 2046.679916][ T2539] ? __sys_sendmsg_sock+0x30/0x30 [ 2046.684979][ T2539] ? __import_iovec+0x3fa/0x850 [ 2046.689901][ T2539] ? import_iovec+0x73/0xa0 [ 2046.694445][ T2539] ___sys_sendmsg+0x2a6/0x360 [ 2046.699152][ T2539] ? get_pid_task+0x20/0x1e0 [ 2046.703786][ T2539] ? __sys_sendmsg+0x2a0/0x2a0 [ 2046.708599][ T2539] ? __lock_acquire+0x7d40/0x7d40 [ 2046.713674][ T2539] __se_sys_sendmsg+0x1c2/0x2b0 [ 2046.718549][ T2539] ? __x64_sys_sendmsg+0x80/0x80 [ 2046.723525][ T2539] ? lockdep_hardirqs_on+0x98/0x150 [ 2046.728758][ T2539] do_syscall_64+0x55/0xa0 [ 2046.733212][ T2539] ? clear_bhb_loop+0x40/0x90 [ 2046.737921][ T2539] ? clear_bhb_loop+0x40/0x90 [ 2046.742625][ T2539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2046.748553][ T2539] RIP: 0033:0x7f0c0919aeb9 [ 2046.752993][ T2539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2046.772628][ T2539] RSP: 002b:00007f0c0a021028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2046.781071][ T2539] RAX: ffffffffffffffda RBX: 00007f0c09416090 RCX: 00007f0c0919aeb9 [ 2046.789070][ T2539] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 2046.797095][ T2539] RBP: 00007f0c0a021090 R08: 0000000000000000 R09: 0000000000000000 [ 2046.805095][ T2539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2046.813094][ T2539] R13: 00007f0c09416128 R14: 00007f0c09416090 R15: 00007fff19ea8288 [ 2046.821109][ T2539] [ 2046.937927][ T2551] netlink: 'syz.0.8536': attribute type 1 has an invalid length. [ 2046.947431][ T2551] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8536'. [ 2046.957440][ T2551] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8536'. [ 2047.228053][ T2556] netlink: 'syz.0.8539': attribute type 10 has an invalid length. [ 2047.263554][ T2556] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8539'. [ 2047.309841][ T2559] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8540'. [ 2048.054660][ T2598] netlink: 'syz.0.8546': attribute type 10 has an invalid length. [ 2048.062603][ T2598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8546'. [ 2048.268727][ T2598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2048.289174][ T2600] netlink: 'syz.3.8544': attribute type 10 has an invalid length. [ 2048.319699][ T2600] team0: Device hsr_slave_0 failed to register rx_handler [ 2048.390261][ T2604] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8549'. [ 2048.419458][ T2604] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8549'. [ 2048.634031][ T2615] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2048.640796][ T2615] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2049.994077][ T2653] netlink: 'syz.3.8564': attribute type 10 has an invalid length. [ 2050.015896][ T2653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2050.770750][ T2664] netlink: 'syz.0.8565': attribute type 10 has an invalid length. [ 2050.792470][ T2664] __nla_validate_parse: 3 callbacks suppressed [ 2050.792488][ T2664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8565'. [ 2050.858627][ T2664] `: entered promiscuous mode [ 2050.867918][ T2664] C: entered promiscuous mode [ 2050.872856][ T2664] team_slave_1: entered promiscuous mode [ 2050.887147][ T2664] hsr0: entered promiscuous mode [ 2050.892595][ T2664] macvlan0: entered promiscuous mode [ 2050.902462][ T2664] `: entered allmulticast mode [ 2050.912252][ T2664] C: entered allmulticast mode [ 2050.936323][ T2664] team_slave_1: entered allmulticast mode [ 2050.955325][ T2664] hsr0: entered allmulticast mode [ 2050.968799][ T2664] hsr_slave_0: entered allmulticast mode [ 2050.983235][ T2664] hsr_slave_1: entered allmulticast mode [ 2050.989188][ T2664] macvlan0: entered allmulticast mode [ 2051.003926][ T2664] veth1_vlan: entered allmulticast mode [ 2051.010529][ T2664] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2051.263577][ T2682] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8571'. [ 2051.646625][ T2702] netlink: 'syz.3.8577': attribute type 10 has an invalid length. [ 2051.671638][ T2702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8577'. [ 2051.729763][ T2702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2052.005305][ T2719] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8583'. [ 2052.391935][ T2732] tap0: tun_chr_ioctl cmd 1074025677 [ 2052.399204][ T2732] tap0: linktype set to 0 [ 2053.100524][ T2751] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8593'. [ 2053.524616][ T2763] netlink: 'syz.3.8597': attribute type 10 has an invalid length. [ 2053.542866][ T2763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8597'. [ 2053.575964][ T2763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2053.615390][ T2765] FAULT_INJECTION: forcing a failure. [ 2053.615390][ T2765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2053.637639][ T2765] CPU: 1 PID: 2765 Comm: syz.1.8598 Not tainted syzkaller #0 [ 2053.645299][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2053.655519][ T2765] Call Trace: [ 2053.658872][ T2765] [ 2053.661855][ T2765] dump_stack_lvl+0x18c/0x250 [ 2053.666601][ T2765] ? show_regs_print_info+0x20/0x20 [ 2053.671859][ T2765] ? load_image+0x400/0x400 [ 2053.676424][ T2765] ? __might_fault+0xaa/0x120 [ 2053.681163][ T2765] ? __lock_acquire+0x7d40/0x7d40 [ 2053.686260][ T2765] should_fail_ex+0x39d/0x4d0 [ 2053.691005][ T2765] _copy_to_user+0x2f/0xa0 [ 2053.695473][ T2765] bpf_ctx_finish+0x18a/0x210 [ 2053.700198][ T2765] ? bpf_test_finish+0x650/0x650 [ 2053.705180][ T2765] ? __might_fault+0xaa/0x120 [ 2053.709911][ T2765] ? __might_fault+0xaa/0x120 [ 2053.714652][ T2765] bpf_prog_test_run_xdp+0x8e7/0x10e0 [ 2053.720095][ T2765] ? dev_put+0x80/0x80 [ 2053.724238][ T2765] ? dev_put+0x80/0x80 [ 2053.728365][ T2765] bpf_prog_test_run+0x321/0x390 [ 2053.733364][ T2765] __sys_bpf+0x49d/0x890 [ 2053.737659][ T2765] ? bpf_link_show_fdinfo+0x390/0x390 [ 2053.743105][ T2765] ? lock_chain_count+0x20/0x20 [ 2053.748000][ T2765] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2053.754037][ T2765] __x64_sys_bpf+0x7c/0x90 [ 2053.758493][ T2765] do_syscall_64+0x55/0xa0 [ 2053.762965][ T2765] ? clear_bhb_loop+0x40/0x90 [ 2053.767689][ T2765] ? clear_bhb_loop+0x40/0x90 [ 2053.772431][ T2765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2053.778383][ T2765] RIP: 0033:0x7f8e35d9aeb9 [ 2053.782939][ T2765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2053.803160][ T2765] RSP: 002b:00007f8e36b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2053.811646][ T2765] RAX: ffffffffffffffda RBX: 00007f8e36015fa0 RCX: 00007f8e35d9aeb9 [ 2053.819673][ T2765] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 2053.827699][ T2765] RBP: 00007f8e36b84090 R08: 0000000000000000 R09: 0000000000000000 [ 2053.835716][ T2765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.843741][ T2765] R13: 00007f8e36016038 R14: 00007f8e36015fa0 R15: 00007ffdcb0042f8 [ 2053.851785][ T2765] [ 2054.182922][ T2775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8601'. [ 2054.249441][ T2777] FAULT_INJECTION: forcing a failure. [ 2054.249441][ T2777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.299154][ T2777] CPU: 1 PID: 2777 Comm: syz.2.8602 Not tainted syzkaller #0 [ 2054.306645][ T2777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2054.316787][ T2777] Call Trace: [ 2054.320092][ T2777] [ 2054.323051][ T2777] dump_stack_lvl+0x18c/0x250 [ 2054.327779][ T2777] ? show_regs_print_info+0x20/0x20 [ 2054.333012][ T2777] ? load_image+0x400/0x400 [ 2054.337544][ T2777] ? __might_fault+0xaa/0x120 [ 2054.342262][ T2777] ? __lock_acquire+0x7d40/0x7d40 [ 2054.347330][ T2777] should_fail_ex+0x39d/0x4d0 [ 2054.352051][ T2777] _copy_from_user+0x2f/0xe0 [ 2054.356672][ T2777] ___sys_sendmsg+0x1c7/0x360 [ 2054.361377][ T2777] ? __sys_sendmsg+0x2a0/0x2a0 [ 2054.366205][ T2777] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2054.372493][ T2777] __se_sys_sendmsg+0x1c2/0x2b0 [ 2054.377370][ T2777] ? __x64_sys_sendmsg+0x80/0x80 [ 2054.382347][ T2777] ? lockdep_hardirqs_on+0x98/0x150 [ 2054.387577][ T2777] do_syscall_64+0x55/0xa0 [ 2054.392023][ T2777] ? clear_bhb_loop+0x40/0x90 [ 2054.396729][ T2777] ? clear_bhb_loop+0x40/0x90 [ 2054.401438][ T2777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2054.407401][ T2777] RIP: 0033:0x7f0c0919aeb9 [ 2054.411845][ T2777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2054.431485][ T2777] RSP: 002b:00007f0c0a042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2054.439960][ T2777] RAX: ffffffffffffffda RBX: 00007f0c09415fa0 RCX: 00007f0c0919aeb9 [ 2054.448048][ T2777] RDX: 0000000004000004 RSI: 0000200000000040 RDI: 0000000000000006 [ 2054.456042][ T2777] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 2054.464055][ T2777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2054.472049][ T2777] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 2054.480065][ T2777] [ 2054.608118][ T2779] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8603'. [ 2054.737028][ T2789] netlink: 'syz.1.8604': attribute type 10 has an invalid length. [ 2054.776289][ T2789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8604'. [ 2054.854951][ T2789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2055.279418][ T2798] netlink: 'syz.0.8607': attribute type 10 has an invalid length. [ 2055.293528][ T2798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8607'. [ 2055.334137][ T2798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2056.369674][ T2826] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8614'. [ 2056.421642][ T2825] netlink: 'syz.1.8613': attribute type 10 has an invalid length. [ 2056.433420][ T2825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8613'. [ 2056.494946][ T2825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2057.977303][ T2860] netlink: 'syz.0.8624': attribute type 10 has an invalid length. [ 2059.914890][ T2860] `: Device hsr_slave_0 is already a lower device of the team interface [ 2060.098332][ T2863] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8625'. [ 2060.686804][ T2876] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8629'. [ 2061.466356][ T2892] netlink: 'syz.3.8633': attribute type 22 has an invalid length. [ 2061.519237][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8633'. [ 2061.852169][ T2899] netlink: 'syz.1.8636': attribute type 10 has an invalid length. [ 2061.874425][ T2899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8636'. [ 2062.785574][ T2899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2062.810658][ T2901] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8637'. [ 2062.947174][ T2914] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.8640'. [ 2063.291903][ T2924] netlink: 'syz.0.8645': attribute type 49 has an invalid length. [ 2063.311454][ T2924] netlink: 'syz.0.8645': attribute type 22 has an invalid length. [ 2063.330234][ T2924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8645'. [ 2063.391782][ T2930] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8646'. [ 2063.702987][ T2940] netlink: 'syz.3.8650': attribute type 10 has an invalid length. [ 2063.739632][ T2940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8650'. [ 2064.413619][ T2940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2064.433456][ T2939] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8649'. [ 2064.442871][ T2946] netlink: 'syz.0.8651': attribute type 4 has an invalid length. [ 2064.604090][ T2949] netlink: 'syz.2.8652': attribute type 4 has an invalid length. [ 2065.089137][ T2971] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8660'. [ 2065.215087][ T2973] netlink: 'syz.3.8662': attribute type 10 has an invalid length. [ 2065.228630][ T2973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8662'. [ 2066.334497][ T2973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2066.536610][ T2989] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8666'. [ 2066.585930][ T2993] FAULT_INJECTION: forcing a failure. [ 2066.585930][ T2993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2066.625623][ T2993] CPU: 0 PID: 2993 Comm: syz.2.8668 Not tainted syzkaller #0 [ 2066.633122][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2066.643242][ T2993] Call Trace: [ 2066.646573][ T2993] [ 2066.649564][ T2993] dump_stack_lvl+0x18c/0x250 [ 2066.654324][ T2993] ? show_regs_print_info+0x20/0x20 [ 2066.659601][ T2993] ? load_image+0x400/0x400 [ 2066.664185][ T2993] ? __lock_acquire+0x7d40/0x7d40 [ 2066.669300][ T2993] ? snprintf+0xe9/0x140 [ 2066.673619][ T2993] should_fail_ex+0x39d/0x4d0 [ 2066.678383][ T2993] _copy_to_user+0x2f/0xa0 [ 2066.682886][ T2993] simple_read_from_buffer+0xe7/0x150 [ 2066.688352][ T2993] proc_fail_nth_read+0x1e8/0x260 [ 2066.693528][ T2993] ? proc_fault_inject_write+0x360/0x360 [ 2066.699387][ T2993] ? fsnotify_perm+0x271/0x5e0 [ 2066.704245][ T2993] ? proc_fault_inject_write+0x360/0x360 [ 2066.709947][ T2993] vfs_read+0x28b/0x970 [ 2066.714175][ T2993] ? kernel_read+0x1e0/0x1e0 [ 2066.718820][ T2993] ? __fget_files+0x28/0x4b0 [ 2066.723462][ T2993] ? __fget_files+0x28/0x4b0 [ 2066.728108][ T2993] ? __fget_files+0x43d/0x4b0 [ 2066.732855][ T2993] ? __fdget_pos+0x2a3/0x330 [ 2066.737515][ T2993] ? ksys_read+0x75/0x260 [ 2066.741910][ T2993] ksys_read+0x150/0x260 [ 2066.746215][ T2993] ? vfs_write+0x990/0x990 [ 2066.750715][ T2993] ? lockdep_hardirqs_on+0x98/0x150 [ 2066.755977][ T2993] do_syscall_64+0x55/0xa0 [ 2066.760458][ T2993] ? clear_bhb_loop+0x40/0x90 [ 2066.765183][ T2993] ? clear_bhb_loop+0x40/0x90 [ 2066.769911][ T2993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.775858][ T2993] RIP: 0033:0x7f0c0915b78e [ 2066.780323][ T2993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2066.800000][ T2993] RSP: 002b:00007f0c0a041fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2066.808479][ T2993] RAX: ffffffffffffffda RBX: 00007f0c0a0426c0 RCX: 00007f0c0915b78e [ 2066.816504][ T2993] RDX: 000000000000000f RSI: 00007f0c0a0420a0 RDI: 0000000000000004 [ 2066.824521][ T2993] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.832543][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.840567][ T2993] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 2066.848611][ T2993] [ 2067.099022][ T2999] netlink: 'syz.3.8669': attribute type 17 has an invalid length. [ 2067.107664][ T2999] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8669'. [ 2067.576161][ T3008] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8673'. [ 2067.669278][ T3011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8674'. [ 2068.448503][ T3023] netlink: 'syz.1.8678': attribute type 10 has an invalid length. [ 2068.460239][ T3023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8678'. [ 2069.100353][ T3023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2069.712649][ T3038] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8684'. [ 2070.285570][ T3055] netlink: 'syz.2.8689': attribute type 10 has an invalid length. [ 2070.314331][ T3055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8689'. [ 2070.527228][ T3061] FAULT_INJECTION: forcing a failure. [ 2070.527228][ T3061] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.556856][ T3061] CPU: 1 PID: 3061 Comm: syz.1.8691 Not tainted syzkaller #0 [ 2070.564333][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2070.574436][ T3061] Call Trace: [ 2070.577755][ T3061] [ 2070.580754][ T3061] dump_stack_lvl+0x18c/0x250 [ 2070.585484][ T3061] ? sctp_sendmsg+0x1575/0x28c0 [ 2070.590376][ T3061] ? ___sys_sendmsg+0x2a6/0x360 [ 2070.595277][ T3061] ? show_regs_print_info+0x20/0x20 [ 2070.600530][ T3061] ? load_image+0x400/0x400 [ 2070.605101][ T3061] should_fail_ex+0x39d/0x4d0 [ 2070.609840][ T3061] should_failslab+0x9/0x20 [ 2070.614399][ T3061] slab_pre_alloc_hook+0x59/0x310 [ 2070.619480][ T3061] ? sctp_add_bind_addr+0x8c/0x360 [ 2070.624696][ T3061] __kmem_cache_alloc_node+0x53/0x250 [ 2070.630127][ T3061] ? sctp_add_bind_addr+0x8c/0x360 [ 2070.635295][ T3061] kmalloc_trace+0x2a/0xe0 [ 2070.639765][ T3061] sctp_add_bind_addr+0x8c/0x360 [ 2070.644805][ T3061] sctp_copy_local_addr_list+0x315/0x4f0 [ 2070.650524][ T3061] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2070.656302][ T3061] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2070.662459][ T3061] ? sctp_v4_is_any+0x35/0x60 [ 2070.667255][ T3061] ? sctp_copy_one_addr+0x8c/0x350 [ 2070.672463][ T3061] sctp_bind_addr_copy+0xb3/0x3c0 [ 2070.677700][ T3061] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2070.684093][ T3061] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2070.689428][ T3061] ? __sctp_connect+0xd80/0xd80 [ 2070.694321][ T3061] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2070.699748][ T3061] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2070.705390][ T3061] ? security_sctp_bind_connect+0x89/0xb0 [ 2070.711171][ T3061] sctp_sendmsg+0x1575/0x28c0 [ 2070.715996][ T3061] ? sctp_getsockopt+0xb60/0xb60 [ 2070.721007][ T3061] ? aa_sk_perm+0x83c/0x970 [ 2070.725567][ T3061] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2070.731774][ T3061] ? lockdep_hardirqs_on+0x98/0x150 [ 2070.737022][ T3061] ? aa_af_perm+0x330/0x330 [ 2070.741575][ T3061] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2070.748045][ T3061] ? sock_rps_record_flow+0x19/0x3f0 [ 2070.753380][ T3061] ? inet_sendmsg+0xe9/0x2f0 [ 2070.758019][ T3061] ? inet_send_prepare+0x260/0x260 [ 2070.763194][ T3061] ____sys_sendmsg+0x5ba/0x960 [ 2070.768023][ T3061] ? __lock_acquire+0x7d40/0x7d40 [ 2070.773102][ T3061] ? __asan_memset+0x22/0x40 [ 2070.777748][ T3061] ? __sys_sendmsg_sock+0x30/0x30 [ 2070.782833][ T3061] ? __import_iovec+0x5f2/0x850 [ 2070.787751][ T3061] ? import_iovec+0x73/0xa0 [ 2070.792309][ T3061] ___sys_sendmsg+0x2a6/0x360 [ 2070.797037][ T3061] ? __sys_sendmsg+0x2a0/0x2a0 [ 2070.801870][ T3061] ? lockdep_hardirqs_on+0x98/0x150 [ 2070.807153][ T3061] __se_sys_sendmsg+0x1c2/0x2b0 [ 2070.812053][ T3061] ? __x64_sys_sendmsg+0x80/0x80 [ 2070.817051][ T3061] ? lockdep_hardirqs_on+0x98/0x150 [ 2070.822298][ T3061] do_syscall_64+0x55/0xa0 [ 2070.826775][ T3061] ? clear_bhb_loop+0x40/0x90 [ 2070.831501][ T3061] ? clear_bhb_loop+0x40/0x90 [ 2070.836226][ T3061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2070.842167][ T3061] RIP: 0033:0x7f8e35d9aeb9 [ 2070.846684][ T3061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2070.866463][ T3061] RSP: 002b:00007f8e33fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2070.874933][ T3061] RAX: ffffffffffffffda RBX: 00007f8e36016180 RCX: 00007f8e35d9aeb9 [ 2070.882960][ T3061] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000c [ 2070.890983][ T3061] RBP: 00007f8e33fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2070.899019][ T3061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2070.907053][ T3061] R13: 00007f8e36016218 R14: 00007f8e36016180 R15: 00007ffdcb0042f8 [ 2070.915095][ T3061] [ 2071.232122][ T3055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2071.516814][ T3068] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8693'. [ 2071.528472][ T3070] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8695'. [ 2071.554617][ T3070] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.8695'. [ 2071.695360][ T3071] delete_channel: no stack [ 2072.316762][ T3089] netlink: 'syz.2.8701': attribute type 10 has an invalid length. [ 2072.366983][ T3089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8701'. [ 2073.386435][ T3089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2073.926013][ T3111] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8705'. [ 2074.082824][ T3117] netlink: 'syz.0.8710': attribute type 2 has an invalid length. [ 2074.102119][ T3117] netlink: 'syz.0.8710': attribute type 3 has an invalid length. [ 2074.128965][ T3119] netlink: 'syz.2.8711': attribute type 3 has an invalid length. [ 2074.136869][ T3117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8710'. [ 2074.164771][ T3119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8711'. [ 2074.382406][ T3126] netlink: 'syz.0.8714': attribute type 10 has an invalid length. [ 2074.403495][ T3126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8714'. [ 2074.424036][ T3126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2075.998141][ T3142] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8719'. [ 2076.193797][ T3144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8721'. [ 2076.357897][T14009] tipc: Subscription rejected, illegal request [ 2077.110599][ T3177] netlink: 'syz.3.8731': attribute type 10 has an invalid length. [ 2077.180301][ T3177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8731'. [ 2079.337388][ T3177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2079.370567][ T3182] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8732'. [ 2079.632737][ T3190] delete_channel: no stack [ 2079.644618][ T3190] delete_channel: no stack [ 2080.588421][ T3214] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8744'. [ 2080.634844][ T3212] netlink: 'syz.2.8743': attribute type 10 has an invalid length. [ 2080.687463][ T3212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8743'. [ 2081.951523][ T3212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2082.183666][ T3234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8749'. [ 2082.457480][ T3240] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8753'. [ 2082.758207][ T3248] netlink: 'syz.3.8755': attribute type 2 has an invalid length. [ 2083.344648][ T3265] netlink: 'syz.1.8759': attribute type 10 has an invalid length. [ 2083.354037][ T3265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8759'. [ 2084.197899][ T3265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2084.496022][ T3274] FAULT_INJECTION: forcing a failure. [ 2084.496022][ T3274] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.524734][ T3274] CPU: 1 PID: 3274 Comm: syz.2.8762 Not tainted syzkaller #0 [ 2084.532436][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2084.544044][ T3274] Call Trace: [ 2084.547398][ T3274] [ 2084.550384][ T3274] dump_stack_lvl+0x18c/0x250 [ 2084.555584][ T3274] ? sctp_sendmsg+0x1575/0x28c0 [ 2084.560512][ T3274] ? ___sys_sendmsg+0x2a6/0x360 [ 2084.565612][ T3274] ? show_regs_print_info+0x20/0x20 [ 2084.570899][ T3274] ? load_image+0x400/0x400 [ 2084.575538][ T3274] should_fail_ex+0x39d/0x4d0 [ 2084.580283][ T3274] should_failslab+0x9/0x20 [ 2084.584840][ T3274] slab_pre_alloc_hook+0x59/0x310 [ 2084.589918][ T3274] ? sctp_add_bind_addr+0x8c/0x360 [ 2084.595281][ T3274] __kmem_cache_alloc_node+0x53/0x250 [ 2084.601191][ T3274] ? sctp_add_bind_addr+0x8c/0x360 [ 2084.606730][ T3274] kmalloc_trace+0x2a/0xe0 [ 2084.611544][ T3274] sctp_add_bind_addr+0x8c/0x360 [ 2084.617187][ T3274] sctp_copy_local_addr_list+0x315/0x4f0 [ 2084.623060][ T3274] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2084.628928][ T3274] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2084.635158][ T3274] ? sctp_v4_is_any+0x35/0x60 [ 2084.640322][ T3274] ? sctp_copy_one_addr+0x8c/0x350 [ 2084.645494][ T3274] sctp_bind_addr_copy+0xb3/0x3c0 [ 2084.650599][ T3274] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2084.657097][ T3274] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2084.662560][ T3274] ? __sctp_connect+0xd80/0xd80 [ 2084.668830][ T3274] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2084.674551][ T3274] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2084.680534][ T3274] ? security_sctp_bind_connect+0x89/0xb0 [ 2084.686401][ T3274] sctp_sendmsg+0x1575/0x28c0 [ 2084.693030][ T3274] ? sctp_getsockopt+0xb60/0xb60 [ 2084.698822][ T3274] ? aa_sk_perm+0x83c/0x970 [ 2084.704212][ T3274] ? aa_af_perm+0x330/0x330 [ 2084.710584][ T3274] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2084.717777][ T3274] ? sock_rps_record_flow+0x19/0x3f0 [ 2084.723891][ T3274] ? inet_sendmsg+0xe9/0x2f0 [ 2084.728576][ T3274] ? inet_send_prepare+0x260/0x260 [ 2084.734570][ T3274] ____sys_sendmsg+0x5ba/0x960 [ 2084.739511][ T3274] ? __lock_acquire+0x7d40/0x7d40 [ 2084.745241][ T3274] ? __asan_memset+0x22/0x40 [ 2084.749907][ T3274] ? __sys_sendmsg_sock+0x30/0x30 [ 2084.755000][ T3274] ? __import_iovec+0x5f2/0x850 [ 2084.760198][ T3274] ? import_iovec+0x73/0xa0 [ 2084.765339][ T3274] ___sys_sendmsg+0x2a6/0x360 [ 2084.770188][ T3274] ? __sys_sendmsg+0x2a0/0x2a0 [ 2084.775036][ T3274] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2084.781729][ T3274] __se_sys_sendmsg+0x1c2/0x2b0 [ 2084.787056][ T3274] ? __x64_sys_sendmsg+0x80/0x80 [ 2084.792088][ T3274] ? lockdep_hardirqs_on+0x98/0x150 [ 2084.797483][ T3274] do_syscall_64+0x55/0xa0 [ 2084.801951][ T3274] ? clear_bhb_loop+0x40/0x90 [ 2084.806753][ T3274] ? clear_bhb_loop+0x40/0x90 [ 2084.811664][ T3274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2084.818292][ T3274] RIP: 0033:0x7f0c0919aeb9 [ 2084.823097][ T3274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2084.843914][ T3274] RSP: 002b:00007f0c0a042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2084.853047][ T3274] RAX: ffffffffffffffda RBX: 00007f0c09415fa0 RCX: 00007f0c0919aeb9 [ 2084.861517][ T3274] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000010 [ 2084.870498][ T3274] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 2084.878614][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2084.887416][ T3274] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 2084.896559][ T3274] [ 2085.051927][ T3278] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8765'. [ 2085.215412][ T3283] netlink: 'syz.3.8768': attribute type 9 has an invalid length. [ 2085.230148][ T3283] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8768'. [ 2085.407662][ T3294] mac80211_hwsim hwsim66 wlan1: left promiscuous mode [ 2085.421991][ T3288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8768'. [ 2085.434961][ T3294] mac80211_hwsim hwsim66 wlan1: left allmulticast mode [ 2085.452893][ T3288] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2085.563227][ T3291] pimreg: tun_chr_ioctl cmd 1074025677 [ 2085.592535][ T3281] delete_channel: no stack [ 2085.603003][ T3291] pimreg: linktype set to 780 [ 2086.572682][ T3300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8772'. [ 2086.615861][ T3304] pimreg: tun_chr_ioctl cmd 1074025677 [ 2086.621718][ T3304] pimreg: linktype set to 780 [ 2086.659612][ T3302] netlink: 'syz.3.8773': attribute type 10 has an invalid length. [ 2086.674805][ T3302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8773'. [ 2086.687533][ T3302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2087.152333][ T3313] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8777'. [ 2087.857537][ T3335] netlink: 'syz.1.8784': attribute type 10 has an invalid length. [ 2088.120196][ T3335] syz_tun: entered promiscuous mode [ 2088.148455][ T3335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2088.456772][ T3349] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8787'. [ 2088.728057][ T3354] netlink: 'syz.2.8788': attribute type 6 has an invalid length. [ 2088.782975][ T3354] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8788'. [ 2088.986468][ T3359] netlink: 'syz.1.8791': attribute type 10 has an invalid length. [ 2089.003711][ T3359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8791'. [ 2089.021627][ T3359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2091.206697][ T3384] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8797'. [ 2091.457667][ T3394] netlink: 'syz.0.8804': attribute type 21 has an invalid length. [ 2091.503507][ T3394] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8804'. [ 2091.536997][ T3394] netlink: 'syz.0.8804': attribute type 29 has an invalid length. [ 2091.558362][ T3394] netlink: 'syz.0.8804': attribute type 29 has an invalid length. [ 2091.570144][ T3394] netlink: 'syz.0.8804': attribute type 29 has an invalid length. [ 2091.730856][ T3404] netlink: 'syz.1.8806': attribute type 19 has an invalid length. [ 2091.812058][ T3406] netlink: 'syz.0.8808': attribute type 10 has an invalid length. [ 2091.830824][ T3406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8808'. [ 2091.865427][ T3406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2092.547026][ T3415] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8811'. [ 2092.821235][ T3422] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2092.843638][ T3422] syzkaller0: entered promiscuous mode [ 2092.849229][ T3422] syzkaller0: entered allmulticast mode [ 2093.041402][ T3430] netlink: 'syz.1.8817': attribute type 21 has an invalid length. [ 2094.058615][ T3449] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8822'. [ 2094.086027][ T3450] netlink: 'syz.2.8823': attribute type 10 has an invalid length. [ 2094.109779][ T3454] delete_channel: no stack [ 2094.114400][ T3450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8823'. [ 2094.132756][ T3450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2094.140557][ T3454] delete_channel: no stack [ 2094.790419][ T3462] mac80211_hwsim hwsim73 wlan1: left promiscuous mode [ 2094.853375][ T3462] mac80211_hwsim hwsim73 wlan1: left allmulticast mode [ 2095.752590][ T3485] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8835'. [ 2095.871007][ T3488] FAULT_INJECTION: forcing a failure. [ 2095.871007][ T3488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2095.911469][ T3488] CPU: 0 PID: 3488 Comm: syz.2.8834 Not tainted syzkaller #0 [ 2095.918953][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2095.929052][ T3488] Call Trace: [ 2095.932370][ T3488] [ 2095.935343][ T3488] dump_stack_lvl+0x18c/0x250 [ 2095.940079][ T3488] ? show_regs_print_info+0x20/0x20 [ 2095.945339][ T3488] ? load_image+0x400/0x400 [ 2095.949979][ T3488] ? __might_fault+0xaa/0x120 [ 2095.954711][ T3488] ? __lock_acquire+0x7d40/0x7d40 [ 2095.959798][ T3488] should_fail_ex+0x39d/0x4d0 [ 2095.964547][ T3488] _copy_from_user+0x2f/0xe0 [ 2095.969195][ T3488] dev_ethtool+0xc6/0x18d0 [ 2095.973681][ T3488] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2095.980008][ T3488] ? __lock_acquire+0x7d40/0x7d40 [ 2095.985184][ T3488] ? __might_fault+0xaa/0x120 [ 2095.989926][ T3488] ? full_name_hash+0x92/0xe0 [ 2095.994751][ T3488] ? dev_load+0x21/0x1f0 [ 2095.999140][ T3488] dev_ioctl+0x392/0x1140 [ 2096.003544][ T3488] sock_do_ioctl+0x239/0x310 [ 2096.008190][ T3488] ? sock_show_fdinfo+0xb0/0xb0 [ 2096.013123][ T3488] sock_ioctl+0x5ba/0x7e0 [ 2096.017772][ T3488] ? sock_poll+0x3e0/0x3e0 [ 2096.022264][ T3488] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2096.027253][ T3488] ? security_file_ioctl+0x80/0xa0 [ 2096.032431][ T3488] ? sock_poll+0x3e0/0x3e0 [ 2096.036898][ T3488] __se_sys_ioctl+0xfd/0x170 [ 2096.041571][ T3488] do_syscall_64+0x55/0xa0 [ 2096.046069][ T3488] ? clear_bhb_loop+0x40/0x90 [ 2096.050817][ T3488] ? clear_bhb_loop+0x40/0x90 [ 2096.055639][ T3488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2096.061673][ T3488] RIP: 0033:0x7f0c0919aeb9 [ 2096.066260][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2096.085927][ T3488] RSP: 002b:00007f0c0a021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.094398][ T3488] RAX: ffffffffffffffda RBX: 00007f0c09416090 RCX: 00007f0c0919aeb9 [ 2096.102435][ T3488] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 2096.110548][ T3488] RBP: 00007f0c0a021090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.118575][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.126590][ T3488] R13: 00007f0c09416128 R14: 00007f0c09416090 R15: 00007fff19ea8288 [ 2096.134630][ T3488] [ 2096.972830][ T3506] netlink: 'syz.0.8841': attribute type 10 has an invalid length. [ 2096.981839][ T3506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8841'. [ 2097.033978][ T3506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2097.337058][ T3516] netlink: 'syz.3.8843': attribute type 6 has an invalid length. [ 2097.534162][ T3519] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8844'. [ 2099.348203][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.354830][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.871285][ T3556] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8856'. [ 2100.031608][ T3554] netlink: 'syz.2.8855': attribute type 10 has an invalid length. [ 2100.044173][ T3558] netlink: 'syz.1.8857': attribute type 3 has an invalid length. [ 2100.067006][ T3554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8855'. [ 2100.083520][ T3558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8857'. [ 2100.116720][ T3554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2100.304385][ T3562] pim6reg1: entered allmulticast mode [ 2102.946249][ T3584] netlink: 'syz.3.8864': attribute type 10 has an invalid length. [ 2102.954461][ T3584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8864'. [ 2102.999138][ T3584] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2103.022469][ T3584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2103.052114][ T3586] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8866'. [ 2103.221248][ T3596] FAULT_INJECTION: forcing a failure. [ 2103.221248][ T3596] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.234466][ T3596] CPU: 0 PID: 3596 Comm: syz.3.8869 Not tainted syzkaller #0 [ 2103.241906][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2103.252016][ T3596] Call Trace: [ 2103.255339][ T3596] [ 2103.258309][ T3596] dump_stack_lvl+0x18c/0x250 [ 2103.263048][ T3596] ? show_regs_print_info+0x20/0x20 [ 2103.268313][ T3596] ? load_image+0x400/0x400 [ 2103.272890][ T3596] should_fail_ex+0x39d/0x4d0 [ 2103.277643][ T3596] should_failslab+0x9/0x20 [ 2103.282205][ T3596] slab_pre_alloc_hook+0x59/0x310 [ 2103.287296][ T3596] ? ip6_pol_route+0x171/0x1210 [ 2103.292214][ T3596] kmem_cache_alloc+0x5a/0x2d0 [ 2103.297039][ T3596] ? dst_alloc+0x105/0x170 [ 2103.301543][ T3596] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 2103.307246][ T3596] dst_alloc+0x105/0x170 [ 2103.311575][ T3596] ip6_pol_route+0x93d/0x1210 [ 2103.316319][ T3596] ? ip6_pol_route+0x171/0x1210 [ 2103.321235][ T3596] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 2103.326944][ T3596] fib6_rule_lookup+0x33d/0x570 [ 2103.331867][ T3596] ? skb_header_pointer+0x120/0x120 [ 2103.337128][ T3596] ? fib6_lookup+0x2d0/0x2d0 [ 2103.341778][ T3596] ? is_dynamic_key+0x260/0x260 [ 2103.346695][ T3596] ? chacha_block_generic+0xc8/0xdd0 [ 2103.352064][ T3596] ? read_lock_is_recursive+0x20/0x20 [ 2103.357498][ T3596] ? dev_get_by_index_rcu+0xf4/0x110 [ 2103.362847][ T3596] ip6_route_output_flags+0x364/0x5d0 [ 2103.368280][ T3596] ? ip6_route_output_flags+0x2e/0x5d0 [ 2103.374933][ T3596] ip6_dst_lookup_tail+0x1ae/0x1530 [ 2103.380320][ T3596] ? __asan_memset+0x22/0x40 [ 2103.385344][ T3596] ? ip6_dst_lookup+0x60/0x60 [ 2103.390105][ T3596] ? sha256+0x127/0x190 [ 2103.394351][ T3596] ? sha224_final+0x30/0x30 [ 2103.398933][ T3596] ? crng_make_state+0x142/0x700 [ 2103.403951][ T3596] ip6_dst_lookup_flow+0x48/0xe0 [ 2103.408975][ T3596] tcp_v6_connect+0xc68/0x18d0 [ 2103.413803][ T3596] ? tcp_v6_pre_connect+0xf0/0xf0 [ 2103.418848][ T3596] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2103.424270][ T3596] ? mptcp_token_new_connect+0x42c/0x630 [ 2103.429956][ T3596] ? mptcp_token_new_connect+0x4c7/0x630 [ 2103.435659][ T3596] mptcp_connect+0x449/0x640 [ 2103.440291][ T3596] __inet_stream_connect+0x254/0xdc0 [ 2103.445608][ T3596] ? inet_dgram_connect+0x360/0x360 [ 2103.450868][ T3596] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 2103.456128][ T3596] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 2103.461522][ T3596] mptcp_sendmsg+0x14b2/0x16d0 [ 2103.466326][ T3596] ? __lock_acquire+0x1273/0x7d40 [ 2103.471411][ T3596] ? verify_lock_unused+0x140/0x140 [ 2103.476703][ T3596] ? aa_sk_perm+0x83c/0x970 [ 2103.481291][ T3596] ? aa_af_perm+0x330/0x330 [ 2103.485848][ T3596] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2103.492316][ T3596] ? mptcp_shutdown+0x80/0x80 [ 2103.497062][ T3596] ? inet6_sendmsg+0x5f/0xd0 [ 2103.501709][ T3596] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 2103.507099][ T3596] ____sys_sendmsg+0x5ba/0x960 [ 2103.511939][ T3596] ? __lock_acquire+0x7d40/0x7d40 [ 2103.517013][ T3596] ? __asan_memset+0x22/0x40 [ 2103.521627][ T3596] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.526688][ T3596] ? __import_iovec+0x3fa/0x850 [ 2103.531637][ T3596] ? import_iovec+0x73/0xa0 [ 2103.536177][ T3596] ___sys_sendmsg+0x2a6/0x360 [ 2103.540914][ T3596] ? get_pid_task+0x20/0x1e0 [ 2103.545540][ T3596] ? __sys_sendmsg+0x2a0/0x2a0 [ 2103.550365][ T3596] ? __lock_acquire+0x7d40/0x7d40 [ 2103.555454][ T3596] __se_sys_sendmsg+0x1c2/0x2b0 [ 2103.560332][ T3596] ? __x64_sys_sendmsg+0x80/0x80 [ 2103.565303][ T3596] ? lockdep_hardirqs_on+0x98/0x150 [ 2103.570522][ T3596] do_syscall_64+0x55/0xa0 [ 2103.574964][ T3596] ? clear_bhb_loop+0x40/0x90 [ 2103.579673][ T3596] ? clear_bhb_loop+0x40/0x90 [ 2103.584388][ T3596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2103.590330][ T3596] RIP: 0033:0x7fdb7dd9aeb9 [ 2103.594847][ T3596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.614654][ T3596] RSP: 002b:00007fdb7ec22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.623134][ T3596] RAX: ffffffffffffffda RBX: 00007fdb7e015fa0 RCX: 00007fdb7dd9aeb9 [ 2103.631150][ T3596] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 2103.639141][ T3596] RBP: 00007fdb7ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.647134][ T3596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.655159][ T3596] R13: 00007fdb7e016038 R14: 00007fdb7e015fa0 R15: 00007fff93bd3378 [ 2103.663188][ T3596] [ 2103.706384][ T3592] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8868'. [ 2103.952706][ T3607] netlink: 'syz.0.8874': attribute type 10 has an invalid length. [ 2103.994436][ T3607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8874'. [ 2104.045805][ T3607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2105.549823][ T3617] FAULT_INJECTION: forcing a failure. [ 2105.549823][ T3617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.583313][ T3617] CPU: 0 PID: 3617 Comm: syz.2.8876 Not tainted syzkaller #0 [ 2105.590813][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2105.600937][ T3617] Call Trace: [ 2105.604299][ T3617] [ 2105.607274][ T3617] dump_stack_lvl+0x18c/0x250 [ 2105.612019][ T3617] ? show_regs_print_info+0x20/0x20 [ 2105.617284][ T3617] ? load_image+0x400/0x400 [ 2105.621842][ T3617] ? __lock_acquire+0x7d40/0x7d40 [ 2105.626924][ T3617] ? snprintf+0xe9/0x140 [ 2105.631223][ T3617] should_fail_ex+0x39d/0x4d0 [ 2105.636167][ T3617] _copy_to_user+0x2f/0xa0 [ 2105.640650][ T3617] simple_read_from_buffer+0xe7/0x150 [ 2105.646093][ T3617] proc_fail_nth_read+0x1e8/0x260 [ 2105.651271][ T3617] ? proc_fault_inject_write+0x360/0x360 [ 2105.657049][ T3617] ? fsnotify_perm+0x271/0x5e0 [ 2105.661903][ T3617] ? proc_fault_inject_write+0x360/0x360 [ 2105.667606][ T3617] vfs_read+0x28b/0x970 [ 2105.671876][ T3617] ? kernel_read+0x1e0/0x1e0 [ 2105.676529][ T3617] ? __fget_files+0x28/0x4b0 [ 2105.681202][ T3617] ? __fget_files+0x28/0x4b0 [ 2105.685859][ T3617] ? __fget_files+0x43d/0x4b0 [ 2105.690603][ T3617] ? __fdget_pos+0x2a3/0x330 [ 2105.695253][ T3617] ? ksys_read+0x75/0x260 [ 2105.699652][ T3617] ksys_read+0x150/0x260 [ 2105.703941][ T3617] ? vfs_write+0x990/0x990 [ 2105.708424][ T3617] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2105.714385][ T3617] do_syscall_64+0x55/0xa0 [ 2105.718933][ T3617] ? clear_bhb_loop+0x40/0x90 [ 2105.723649][ T3617] ? clear_bhb_loop+0x40/0x90 [ 2105.728358][ T3617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2105.734282][ T3617] RIP: 0033:0x7f0c0915b78e [ 2105.738734][ T3617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2105.758557][ T3617] RSP: 002b:00007f0c0a041fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2105.767008][ T3617] RAX: ffffffffffffffda RBX: 00007f0c0a0426c0 RCX: 00007f0c0915b78e [ 2105.775063][ T3617] RDX: 000000000000000f RSI: 00007f0c0a0420a0 RDI: 0000000000000006 [ 2105.783060][ T3617] RBP: 00007f0c0a042090 R08: 0000000000000000 R09: 0000000000000000 [ 2105.791194][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2105.799398][ T3617] R13: 00007f0c09416038 R14: 00007f0c09415fa0 R15: 00007fff19ea8288 [ 2105.807604][ T3617] [ 2105.868811][ T3622] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8879'. [ 2106.215856][ T3632] netlink: 'syz.3.8881': attribute type 17 has an invalid length. [ 2106.575625][ T3641] netlink: 'syz.0.8885': attribute type 10 has an invalid length. [ 2106.608293][ T3641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8885'. [ 2108.481728][ T3641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2108.532102][ T3653] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2108.554851][ T3656] netlink: 'syz.1.8888': attribute type 10 has an invalid length. [ 2108.573657][ T3656] team0: Device ipvlan1 failed to register rx_handler [ 2108.603201][ T3655] netpci0: tun_chr_ioctl cmd 2147767511 [ 2108.846214][ T3660] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8889'. [ 2109.366389][ T3676] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8897'. [ 2109.514071][ T3674] netlink: 'syz.0.8896': attribute type 21 has an invalid length. [ 2110.253071][ T3674] syzkaller0: entered promiscuous mode [ 2110.259339][ T3674] syzkaller0: entered allmulticast mode [ 2110.315693][ T3685] netlink: 'syz.1.8899': attribute type 10 has an invalid length. [ 2110.364371][ T3685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8899'. [ 2110.520394][ T3685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2110.571697][ T3695] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8901'. [ 2110.916117][ T3699] netlink: 'syz.2.8903': attribute type 10 has an invalid length. [ 2110.951837][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2111.081088][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2111.196478][ T3699] batadv_slave_0: entered promiscuous mode [ 2111.230820][ T3699] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2111.243526][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8902'. [ 2111.307397][ T3718] netlink: 'syz.3.8907': attribute type 10 has an invalid length. [ 2111.317128][ T3718] FAULT_INJECTION: forcing a failure. [ 2111.317128][ T3718] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.331235][ T3718] CPU: 0 PID: 3718 Comm: syz.3.8907 Not tainted syzkaller #0 [ 2111.338699][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2111.348802][ T3718] Call Trace: [ 2111.352120][ T3718] [ 2111.355085][ T3718] dump_stack_lvl+0x18c/0x250 [ 2111.359807][ T3718] ? show_regs_print_info+0x20/0x20 [ 2111.365050][ T3718] ? load_image+0x400/0x400 [ 2111.369610][ T3718] ? __lock_acquire+0x7d40/0x7d40 [ 2111.374681][ T3718] should_fail_ex+0x39d/0x4d0 [ 2111.379404][ T3718] should_failslab+0x9/0x20 [ 2111.383943][ T3718] slab_pre_alloc_hook+0x59/0x310 [ 2111.389007][ T3718] ? dev_activate+0x397/0x11a0 [ 2111.393806][ T3718] ? __dev_open+0x347/0x430 [ 2111.398347][ T3718] ? dev_open+0xab/0x190 [ 2111.402625][ T3718] ? qdisc_alloc+0x94/0xa50 [ 2111.407161][ T3718] ? qdisc_alloc+0x94/0xa50 [ 2111.411695][ T3718] __kmem_cache_alloc_node+0x53/0x250 [ 2111.417120][ T3718] ? ____sys_sendmsg+0x5ba/0x960 [ 2111.422105][ T3718] ? qdisc_alloc+0x94/0xa50 [ 2111.426668][ T3718] __kmalloc_node+0xa4/0x230 [ 2111.431312][ T3718] qdisc_alloc+0x94/0xa50 [ 2111.435697][ T3718] qdisc_create_dflt+0x63/0x430 [ 2111.440578][ T3718] ? dev_activate+0x37c/0x11a0 [ 2111.445375][ T3718] dev_activate+0x397/0x11a0 [ 2111.450014][ T3718] __dev_open+0x347/0x430 [ 2111.454379][ T3718] ? dev_open+0x190/0x190 [ 2111.458747][ T3718] ? ref_tracker_dir_exit+0x500/0x500 [ 2111.464189][ T3718] dev_open+0xab/0x190 [ 2111.468294][ T3718] ? netdev_notify_peers+0x180/0x180 [ 2111.473615][ T3718] ? team_add_slave+0x735/0x26d0 [ 2111.478587][ T3718] ? rcu_is_watching+0x15/0xb0 [ 2111.483388][ T3718] ? team_add_slave+0x9c9/0x26d0 [ 2111.488365][ T3718] team_add_slave+0xaf8/0x26d0 [ 2111.493191][ T3718] ? __dev_change_flags+0x6a0/0x6a0 [ 2111.498521][ T3718] ? __dev_change_flags+0x4d4/0x6a0 [ 2111.503768][ T3718] ? team_netpoll_cleanup+0xf0/0xf0 [ 2111.509023][ T3718] ? vprintk_emit+0x53d/0x610 [ 2111.514095][ T3718] ? dev_get_flags+0x1c0/0x1c0 [ 2111.518903][ T3718] ? printk_sprint+0x460/0x460 [ 2111.523812][ T3718] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2111.529746][ T3718] ? _raw_spin_unlock+0x40/0x40 [ 2111.534669][ T3718] ? mutex_is_locked+0x12/0x40 [ 2111.539474][ T3718] do_setlink+0xdfe/0x4130 [ 2111.544020][ T3718] ? arch_stack_walk+0x160/0x190 [ 2111.549089][ T3718] ? load_image+0x400/0x400 [ 2111.553634][ T3718] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2111.559833][ T3718] ? stack_trace_save+0xaa/0x100 [ 2111.564841][ T3718] ? __nla_validate_parse+0x2522/0x2ea0 [ 2111.570448][ T3718] ? __nla_validate+0x50/0x50 [ 2111.575194][ T3718] ? validate_linkmsg+0x719/0x910 [ 2111.580268][ T3718] rtnl_newlink+0x17da/0x20a0 [ 2111.585038][ T3718] ? rtnl_newlink+0x4d1/0x20a0 [ 2111.589879][ T3718] ? rtnl_setlink+0x4e0/0x4e0 [ 2111.594598][ T3718] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2111.600789][ T3718] ? rcu_is_watching+0x15/0xb0 [ 2111.605600][ T3718] ? trace_contention_end+0x39/0xe0 [ 2111.610830][ T3718] ? __mutex_lock+0x315/0xcc0 [ 2111.615566][ T3718] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2111.620740][ T3718] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2111.625890][ T3718] ? rtnl_setlink+0x4e0/0x4e0 [ 2111.630611][ T3718] rtnetlink_rcv_msg+0x869/0xfa0 [ 2111.635598][ T3718] ? rtnetlink_bind+0x80/0x80 [ 2111.640304][ T3718] ? mark_lock+0x94/0x320 [ 2111.644668][ T3718] ? __lock_acquire+0x1273/0x7d40 [ 2111.649750][ T3718] ? __kernel_text_address+0xd/0x30 [ 2111.654995][ T3718] ? mark_lock+0x94/0x320 [ 2111.659371][ T3718] ? mark_lock+0x94/0x320 [ 2111.663737][ T3718] ? __lock_acquire+0x1273/0x7d40 [ 2111.668888][ T3718] ? kmalloc_reserve+0x95/0x240 [ 2111.673789][ T3718] ? verify_lock_unused+0x140/0x140 [ 2111.679036][ T3718] ? verify_lock_unused+0x140/0x140 [ 2111.684299][ T3718] netlink_rcv_skb+0x241/0x4d0 [ 2111.689204][ T3718] ? rtnetlink_bind+0x80/0x80 [ 2111.693982][ T3718] ? netlink_ack+0x1180/0x1180 [ 2111.698806][ T3718] ? __lock_acquire+0x7d40/0x7d40 [ 2111.703868][ T3718] ? net_generic+0x1e/0x240 [ 2111.708415][ T3718] ? netlink_deliver_tap+0x2e/0x1b0 [ 2111.713655][ T3718] netlink_unicast+0x751/0x8d0 [ 2111.718466][ T3718] netlink_sendmsg+0x8d0/0xbf0 [ 2111.723280][ T3718] ? netlink_getsockopt+0x590/0x590 [ 2111.728526][ T3718] ? aa_sock_msg_perm+0x94/0x150 [ 2111.733503][ T3718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2111.738832][ T3718] ? security_socket_sendmsg+0x80/0xa0 [ 2111.744332][ T3718] ? netlink_getsockopt+0x590/0x590 [ 2111.749658][ T3718] ____sys_sendmsg+0x5ba/0x960 [ 2111.754511][ T3718] ? __asan_memset+0x22/0x40 [ 2111.759146][ T3718] ? __sys_sendmsg_sock+0x30/0x30 [ 2111.764216][ T3718] ? __import_iovec+0x5f2/0x850 [ 2111.769201][ T3718] ? import_iovec+0x73/0xa0 [ 2111.773745][ T3718] ___sys_sendmsg+0x2a6/0x360 [ 2111.778452][ T3718] ? get_pid_task+0x20/0x1e0 [ 2111.783083][ T3718] ? __sys_sendmsg+0x2a0/0x2a0 [ 2111.787899][ T3718] ? __lock_acquire+0x7d40/0x7d40 [ 2111.793020][ T3718] __se_sys_sendmsg+0x1c2/0x2b0 [ 2111.797904][ T3718] ? __x64_sys_sendmsg+0x80/0x80 [ 2111.802888][ T3718] ? lockdep_hardirqs_on+0x98/0x150 [ 2111.808128][ T3718] do_syscall_64+0x55/0xa0 [ 2111.812619][ T3718] ? clear_bhb_loop+0x40/0x90 [ 2111.817353][ T3718] ? clear_bhb_loop+0x40/0x90 [ 2111.822087][ T3718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2111.828020][ T3718] RIP: 0033:0x7fdb7dd9aeb9 [ 2111.832467][ T3718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2111.852197][ T3718] RSP: 002b:00007fdb7ec22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2111.860643][ T3718] RAX: ffffffffffffffda RBX: 00007fdb7e015fa0 RCX: 00007fdb7dd9aeb9 [ 2111.868646][ T3718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2111.876649][ T3718] RBP: 00007fdb7ec22090 R08: 0000000000000000 R09: 0000000000000000 [ 2111.884650][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.892657][ T3718] R13: 00007fdb7e016038 R14: 00007fdb7e015fa0 R15: 00007fff93bd3378 [ 2111.900680][ T3718] [ 2111.923086][ T3718] team0: Device ipvlan1 failed to register rx_handler [ 2112.075218][ T3720] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 2112.086450][ T3720] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 2112.099631][ T3720] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 2112.115519][ T3720] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 2112.149219][ T3720] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 2112.328066][ T3728] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8912'. [ 2112.390890][ T3728] openvswitch: netlink: Flow key attribute not present in set flow. [ 2112.411211][ T3731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8913'. [ 2113.516023][ T3731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2113.584379][ T3740] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8914'. [ 2113.852640][ T3748] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8918'. [ 2113.868378][ T3750] FAULT_INJECTION: forcing a failure. [ 2113.868378][ T3750] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.895097][ T3750] CPU: 0 PID: 3750 Comm: syz.1.8920 Not tainted syzkaller #0 [ 2113.902587][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2113.912700][ T3750] Call Trace: [ 2113.916029][ T3750] [ 2113.919004][ T3750] dump_stack_lvl+0x18c/0x250 [ 2113.923758][ T3750] ? show_regs_print_info+0x20/0x20 [ 2113.929010][ T3750] ? load_image+0x400/0x400 [ 2113.933631][ T3750] ? __might_sleep+0xe0/0xe0 [ 2113.938366][ T3750] ? __lock_acquire+0x7d40/0x7d40 [ 2113.943459][ T3750] should_fail_ex+0x39d/0x4d0 [ 2113.948291][ T3750] should_failslab+0x9/0x20 [ 2113.952865][ T3750] slab_pre_alloc_hook+0x59/0x310 [ 2113.957960][ T3750] ? kvmalloc_node+0x70/0x180 [ 2113.962730][ T3750] ? kvmalloc_node+0x70/0x180 [ 2113.967520][ T3750] __kmem_cache_alloc_node+0x53/0x250 [ 2113.972983][ T3750] ? kvmalloc_node+0x70/0x180 [ 2113.977723][ T3750] __kmalloc_node+0xa4/0x230 [ 2113.982384][ T3750] kvmalloc_node+0x70/0x180 [ 2113.986952][ T3750] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 2113.992395][ T3750] ? 0xffffffffa0004740 [ 2113.996610][ T3750] ? 0xffffffffa0004740 [ 2114.000829][ T3750] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2114.006767][ T3750] ? 0xffffffffa0004740 [ 2114.011004][ T3750] ? xdp_convert_md_to_buff+0x330/0x330 [ 2114.016798][ T3750] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2114.023233][ T3750] ? _copy_from_user+0xa5/0xe0 [ 2114.028067][ T3750] ? bpf_test_init+0x119/0x140 [ 2114.032876][ T3750] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2114.039404][ T3750] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2114.045816][ T3750] ? dev_put+0x80/0x80 [ 2114.049977][ T3750] ? dev_put+0x80/0x80 [ 2114.054351][ T3750] bpf_prog_test_run+0x321/0x390 [ 2114.059711][ T3750] __sys_bpf+0x49d/0x890 [ 2114.064358][ T3750] ? bpf_link_show_fdinfo+0x390/0x390 [ 2114.070171][ T3750] ? lock_chain_count+0x20/0x20 [ 2114.075128][ T3750] __x64_sys_bpf+0x7c/0x90 [ 2114.079783][ T3750] do_syscall_64+0x55/0xa0 [ 2114.084264][ T3750] ? clear_bhb_loop+0x40/0x90 [ 2114.089107][ T3750] ? clear_bhb_loop+0x40/0x90 [ 2114.094714][ T3750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2114.100871][ T3750] RIP: 0033:0x7f8e35d9aeb9 [ 2114.105336][ T3750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.126212][ T3750] RSP: 002b:00007f8e36b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2114.135472][ T3750] RAX: ffffffffffffffda RBX: 00007f8e36015fa0 RCX: 00007f8e35d9aeb9 [ 2114.143671][ T3750] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2114.152122][ T3750] RBP: 00007f8e36b84090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.160310][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.168328][ T3750] R13: 00007f8e36016038 R14: 00007f8e36015fa0 R15: 00007ffdcb0042f8 [ 2114.176362][ T3750] [ 2117.606930][ T3778] validate_nla: 1 callbacks suppressed [ 2117.606985][ T3778] netlink: 'syz.1.8928': attribute type 10 has an invalid length. [ 2117.662751][ T3778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8928'. [ 2117.678682][ T3778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2117.833681][ T3785] syzkaller0: mtu less than device minimum [ 2118.002016][ T3791] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8934'. [ 2120.315063][ T3825] netlink: 'syz.3.8948': attribute type 1 has an invalid length. [ 2120.342817][ T3825] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.8948'. [ 2120.581664][ T3829] netlink: 'syz.2.8949': attribute type 10 has an invalid length. [ 2120.631842][ T3829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8949'. [ 2120.691679][ T3829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2121.312042][ T3843] netlink: 'syz.0.8954': attribute type 39 has an invalid length. [ 2121.608807][ T3850] netlink: 'syz.0.8956': attribute type 6 has an invalid length. [ 2121.734696][ T3848] netlink: 'syz.0.8956': attribute type 11 has an invalid length. [ 2121.752918][ T3848] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.8956'. [ 2121.810422][ T3856] netlink: 'syz.1.8959': attribute type 10 has an invalid length. [ 2121.828438][ T3856] netlink: 'syz.1.8959': attribute type 10 has an invalid length. [ 2121.868123][ T3856] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8959'. [ 2121.949900][ T3856] vlan0 (unregistering): left allmulticast mode [ 2121.956688][ T3856] veth0_vlan: left allmulticast mode [ 2121.962315][ T3856] vlan0 (unregistering): left promiscuous mode [ 2121.970375][ T3856] À: port 1(vlan0) entered disabled state [ 2122.306846][ T3870] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 2122.319155][ T3870] mac80211_hwsim hwsim72 wlan0: left allmulticast mode [ 2122.377190][ T3877] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 2122.403302][ T3877] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 2122.634323][ T3882] netlink: 'syz.1.8968': attribute type 10 has an invalid length. [ 2122.651867][ T3882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8968'. [ 2139.045010][T20423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2139.055796][T20423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2139.064944][T20423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2139.074076][T20423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2139.082190][T20423] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2139.093446][T20423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2139.948470][T20423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2139.962168][T20423] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2139.972198][T20423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2139.981008][T20423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2139.991699][T20423] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2140.000433][T20423] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2140.701226][T29113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2140.725149][T29113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2140.734004][T29113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2140.743923][T29113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2140.753272][T29113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2140.761174][T29113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2141.183572][T29113] Bluetooth: hci2: command tx timeout [ 2141.830563][T20423] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2141.848397][T20423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2141.873071][T20423] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2141.888781][T20423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2141.898580][T20423] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2141.912680][T20423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2142.064430][T20423] Bluetooth: hci5: command tx timeout [ 2142.863579][T20423] Bluetooth: hci6: command tx timeout [ 2143.263659][T20423] Bluetooth: hci2: command tx timeout [ 2143.983905][T20423] Bluetooth: hci7: command tx timeout [ 2144.143764][T20423] Bluetooth: hci5: command tx timeout [ 2144.943425][T20423] Bluetooth: hci6: command tx timeout [ 2145.343388][T20423] Bluetooth: hci2: command tx timeout [ 2146.065534][T20423] Bluetooth: hci7: command tx timeout [ 2146.223476][T20423] Bluetooth: hci5: command tx timeout [ 2147.024503][T20423] Bluetooth: hci6: command tx timeout [ 2147.423434][T20423] Bluetooth: hci2: command tx timeout [ 2148.143862][T20423] Bluetooth: hci7: command tx timeout [ 2148.303469][T20423] Bluetooth: hci5: command tx timeout [ 2149.104685][T20423] Bluetooth: hci6: command tx timeout [ 2150.223913][T20423] Bluetooth: hci7: command tx timeout [ 2160.791253][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.801439][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2180.117885][ T3882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2180.424259][ T3900] netlink: 'syz.0.8972': attribute type 39 has an invalid length. [ 2182.101917][ T3914] chnl_net:caif_netlink_parms(): no params data found [ 2182.288910][ T3914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.304707][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.312224][ T3914] bridge_slave_0: entered allmulticast mode [ 2182.327913][ T3914] bridge_slave_0: entered promiscuous mode [ 2182.343814][ T3914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.351273][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.372415][ T3914] bridge_slave_1: entered allmulticast mode [ 2182.382610][ T3914] bridge_slave_1: entered promiscuous mode [ 2182.451861][ T3914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2182.476781][ T3914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2182.556659][ T3914] team0: Port device team_slave_0 added [ 2182.578941][ T3914] team0: Port device team_slave_1 added [ 2182.638232][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2182.653152][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2182.689361][ T3914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2182.717750][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2182.732095][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2182.766701][ T3914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2199.817260][T29113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2199.838019][T29113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2199.854090][T29113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2199.872570][T29113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2199.893917][T29113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2199.903916][T29113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2201.395524][T20423] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2201.409609][T20423] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2201.420894][T20423] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2201.432562][T20423] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2201.444613][T20423] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2201.454235][T20423] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2201.603623][T29113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2201.625311][T29113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2201.636778][T29113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2201.647316][T29113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2201.657189][T29113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2201.673495][T29113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2201.983749][T29113] Bluetooth: hci8: command tx timeout [ 2202.582965][T20423] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2202.606663][T20423] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2202.622409][T20423] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2202.637306][T20423] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2202.652766][T20423] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2202.667866][T20423] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2203.504217][T20423] Bluetooth: hci9: command tx timeout [ 2203.743434][T20423] Bluetooth: hci10: command tx timeout [ 2204.083179][T20423] Bluetooth: hci8: command tx timeout [ 2204.703740][T20423] Bluetooth: hci11: command tx timeout [ 2205.594063][T20423] Bluetooth: hci9: command tx timeout [ 2205.832127][T20423] Bluetooth: hci10: command tx timeout [ 2206.143631][T20423] Bluetooth: hci8: command tx timeout [ 2206.792849][T20423] Bluetooth: hci11: command tx timeout [ 2207.663721][T20423] Bluetooth: hci9: command tx timeout [ 2207.913625][T20423] Bluetooth: hci10: command tx timeout [ 2208.241984][T20423] Bluetooth: hci8: command tx timeout [ 2208.873777][T20423] Bluetooth: hci11: command tx timeout [ 2209.744143][T20423] Bluetooth: hci9: command tx timeout [ 2209.983259][T20423] Bluetooth: hci10: command tx timeout [ 2210.953628][T20423] Bluetooth: hci11: command tx timeout [ 2284.593268][ T29] INFO: task syz.2.8964:3871 blocked for more than 155 seconds. [ 2284.601036][ T29] Not tainted syzkaller #0 [ 2284.630198][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2284.653371][ T29] task:syz.2.8964 state:D stack:27016 pid:3871 ppid:30517 flags:0x00004006 [ 2284.662816][ T29] Call Trace: [ 2284.705745][ T29] [ 2284.708793][ T29] __schedule+0x1553/0x45a0 [ 2284.733884][ T29] ? lock_chain_count+0x20/0x20 [ 2284.749379][ T29] ? asan.module_dtor+0x20/0x20 [ 2284.770987][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 2284.780147][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 2284.800386][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2284.830381][ T29] schedule+0xbd/0x170 [ 2284.834644][ T29] schedule_preempt_disabled+0x13/0x20 [ 2284.840171][ T29] __mutex_lock+0x6a9/0xcc0 [ 2284.863100][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 2284.867939][ T29] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 2284.903211][ T29] ? mutex_lock_nested+0x20/0x20 [ 2284.908287][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2284.933572][ T29] perf_event_ctx_lock_nested+0x3b9/0x490 [ 2284.939421][ T29] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 2284.970202][ T29] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 2284.984076][ T29] ? perf_remove_from_owner+0x444/0x4f0 [ 2284.989724][ T29] ? perf_remove_from_owner+0x22/0x4f0 [ 2285.003977][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2285.008830][ T29] perf_event_release_kernel+0x1a0/0x8d0 [ 2285.028594][ T29] ? __might_sleep+0xe0/0xe0 [ 2285.033952][ T29] ? calc_timer_values+0x400/0x400 [ 2285.039157][ T29] ? __fput+0x61c/0x970 [ 2285.051981][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2285.057178][ T29] perf_release+0x3b/0x40 [ 2285.061594][ T29] __fput+0x234/0x970 [ 2285.073541][ T29] task_work_run+0x1d4/0x260 [ 2285.078262][ T29] ? task_work_cancel+0x220/0x220 [ 2285.091138][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2285.097332][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 2285.102714][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2285.117252][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2285.122860][ T29] do_syscall_64+0x61/0xa0 [ 2285.135025][ T29] ? clear_bhb_loop+0x40/0x90 [ 2285.139827][ T29] ? clear_bhb_loop+0x40/0x90 [ 2285.157560][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2285.170717][ T29] RIP: 0033:0x7f0c0919aeb9 [ 2285.177240][ T29] RSP: 002b:00007fff19ea83e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2285.192544][ T29] RAX: 0000000000000000 RBX: 00007f0c09417da0 RCX: 00007f0c0919aeb9 [ 2285.202893][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2285.220139][ T29] RBP: 00007f0c09417da0 R08: 0000000000000006 R09: 0000000000000000 [ 2285.228855][ T29] R10: 00007f0c09417cb0 R11: 0000000000000246 R12: 000000000020650c [ 2285.249613][ T29] R13: 00007f0c09415fac R14: 00000000002063c6 R15: 00007f0c09415fa0 [ 2285.261844][ T29] [ 2285.273100][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2285.273272][ T29] INFO: task syz.1.8968:3881 blocked for more than 156 seconds. [ 2285.279983][ C1] rcu: 1-....: (1 GPs behind) idle=3b04/1/0x4000000000000000 softirq=146190/146191 fqs=4624 [ 2285.299469][ C1] rcu: hardirqs softirqs csw/system [ 2285.306177][ C1] rcu: number: 1132873 0 0 [ 2285.313154][ C1] rcu: cputime: 17131 35338 65 ==> 52470(ms) [ 2285.321366][ C1] rcu: (t=10500 jiffies g=201093 q=2278 ncpus=2) [ 2285.327942][ C1] CPU: 1 PID: 3876 Comm: syz.2.8964 Not tainted syzkaller #0 [ 2285.329889][ T29] Not tainted syzkaller #0 [ 2285.335530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2285.335549][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 2285.335593][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 a0 a0 7c 7e 65 8b [ 2285.335614][ C1] RSP: 0018:ffffc900001f08f8 EFLAGS: 00000246 [ 2285.383609][ C1] RAX: ffffffff8940f6ca RBX: ffff888057564a70 RCX: ffff88802a8dda00 [ 2285.391892][ C1] RDX: 0000000000000100 RSI: 0000000000000007 RDI: 0000000000000020 [ 2285.400236][ C1] RBP: ffffc900001f0ad0 R08: 0000000000006d85 R09: 0000000000000000 [ 2285.408363][ C1] R10: ffffc900001f0880 R11: fffff5200003e112 R12: 1ffff1100aeac94e [ 2285.416808][ C1] R13: dffffc0000000000 R14: 0000000000000007 R15: ffff888026cecdea [ 2285.425290][ C1] FS: 00007f0c0a0216c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2285.434342][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2285.440941][ C1] CR2: 00007ffc19e1efe0 CR3: 0000000047f25000 CR4: 00000000003506e0 [ 2285.448959][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 2285.456972][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2285.464986][ C1] Call Trace: [ 2285.468292][ C1] [ 2285.471158][ C1] ndisc_send_skb+0x62a/0x14f0 [ 2285.475959][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 2285.481112][ C1] ? ndisc_alloc_skb+0x18c/0x450 [ 2285.486511][ C1] ? ndisc_mc_map+0x680/0x680 [ 2285.491207][ C1] ? __build_skb_around+0x255/0x3d0 [ 2285.496450][ C1] addrconf_rs_timer+0x2d5/0x630 [ 2285.501421][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2285.507593][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2285.513682][ C1] call_timer_fn+0x189/0x540 [ 2285.518294][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2285.524583][ C1] ? call_timer_fn+0xd2/0x540 [ 2285.529327][ C1] ? __run_timers+0x800/0x800 [ 2285.534049][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2285.540172][ C1] __run_timers+0x542/0x800 [ 2285.544887][ C1] ? detach_timer+0x2b0/0x2b0 [ 2285.549680][ C1] run_timer_softirq+0x67/0xf0 [ 2285.554603][ C1] handle_softirqs+0x280/0x820 [ 2285.559411][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2285.564306][ C1] ? do_softirq+0x1a0/0x1a0 [ 2285.568860][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2285.574083][ C1] __irq_exit_rcu+0xd3/0x190 [ 2285.578792][ C1] ? irq_exit_rcu+0x20/0x20 [ 2285.583336][ C1] irq_exit_rcu+0x9/0x20 [ 2285.587598][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2285.593280][ C1] [ 2285.596270][ C1] [ 2285.599326][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2285.605734][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 2285.611696][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 40 83 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 2285.632576][ C1] RSP: 0018:ffffc9000beff758 EFLAGS: 00000282 [ 2285.638841][ C1] RAX: 1b4899f8baccb300 RBX: 0000000000000000 RCX: 1b4899f8baccb300 [ 2285.646839][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 2285.654828][ C1] RBP: ffffc9000beff7b0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 2285.663093][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff88802a8dda00 [ 2285.671182][ C1] R13: dffffc0000000000 R14: ffff888029635a00 R15: ffff8880b8f3cac8 [ 2285.679300][ C1] ? finish_task_switch+0x265/0x8f0 [ 2285.684527][ C1] __schedule+0x155b/0x45a0 [ 2285.689112][ C1] ? mark_lock+0x94/0x320 [ 2285.693492][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2285.699519][ C1] ? lock_chain_count+0x20/0x20 [ 2285.704562][ C1] ? asan.module_dtor+0x20/0x20 [ 2285.709441][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2285.715611][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2285.720836][ C1] ? preempt_schedule+0xc0/0xd0 [ 2285.725703][ C1] preempt_schedule_common+0x82/0xc0 [ 2285.731011][ C1] preempt_schedule+0xc0/0xd0 [ 2285.735703][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2285.741349][ C1] ? event_function+0x300/0x300 [ 2285.746213][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 2285.751945][ C1] ? lock_chain_count+0x20/0x20 [ 2285.756818][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2285.762029][ C1] ? smp_call_function_single+0x488/0x5a0 [ 2285.767783][ C1] smp_call_function_single+0x48d/0x5a0 [ 2285.773384][ C1] ? event_function+0x300/0x300 [ 2285.778263][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 2285.784593][ C1] ? event_function+0x300/0x300 [ 2285.789614][ C1] perf_install_in_context+0x5be/0x920 [ 2285.795387][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 2285.802421][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2285.808188][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 2285.813561][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 2285.819079][ C1] ? perf_event__header_size+0x165/0x220 [ 2285.825461][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 2285.831262][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2285.836966][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2285.842720][ C1] do_syscall_64+0x55/0xa0 [ 2285.847366][ C1] ? clear_bhb_loop+0x40/0x90 [ 2285.852074][ C1] ? clear_bhb_loop+0x40/0x90 [ 2285.856767][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2285.862675][ C1] RIP: 0033:0x7f0c0919aeb9 [ 2285.867340][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2285.887065][ C1] RSP: 002b:00007f0c0a021028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2285.895531][ C1] RAX: ffffffffffffffda RBX: 00007f0c09416090 RCX: 00007f0c0919aeb9 [ 2285.903546][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2285.911638][ C1] RBP: 00007f0c09208c1f R08: 0000000000000002 R09: 0000000000000000 [ 2285.919898][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2285.927903][ C1] R13: 00007f0c09416128 R14: 00007f0c09416090 R15: 00007fff19ea8288 [ 2285.936295][ C1] [ 2285.939627][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2285.950670][ T29] task:syz.1.8968 state:D stack:25320 pid:3881 ppid:31213 flags:0x00004004 [ 2285.960219][ T29] Call Trace: [ 2285.964038][ T29] [ 2285.967033][ T29] __schedule+0x1553/0x45a0 [ 2285.971877][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 2285.976824][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 2285.981691][ T29] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 2285.987912][ T29] ? asan.module_dtor+0x20/0x20 [ 2285.992911][ T29] ? perf_trace_preemptirq_template+0x269/0x330 [ 2285.999498][ T29] schedule+0xbd/0x170 [ 2286.003949][ T29] schedule_timeout+0xc1/0x2d0 [ 2286.008928][ T29] ? console_conditional_schedule+0x40/0x40 [ 2286.015419][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2286.021636][ T29] ? lock_chain_count+0x20/0x20 [ 2286.026743][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2286.031847][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2286.037546][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2286.042821][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 2286.048176][ T29] ? wait_for_completion+0x27a/0x5b0 [ 2286.053582][ T29] wait_for_completion+0x2cb/0x5b0 [ 2286.058785][ T29] ? io_schedule+0xd0/0xd0 [ 2286.063383][ T29] ? __init_swait_queue_head+0xa9/0x150 [ 2286.069004][ T29] __wait_rcu_gp+0x242/0x270 [ 2286.073719][ T29] synchronize_rcu_tasks_trace+0x160/0x230 [ 2286.079782][ T29] ? call_rcu_tasks_trace+0x10/0x10 [ 2286.090389][ T29] ? call_rcu_tasks_generic+0x667/0x960 [ 2286.097140][ T29] ? rcu_tasks_trace_qs_blkd+0x340/0x340 [ 2286.107564][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2286.123138][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2286.133122][ T29] ? rcu_read_lock_any_held+0x140/0x140 [ 2286.139398][ T29] ? call_rcu_tasks+0x10/0x10 [ 2286.164109][ T29] ? bpf_prog_array_copy+0x176/0x370 [ 2286.170250][ T29] perf_event_detach_bpf_prog+0x264/0x310 [ 2286.188055][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 2286.200393][ T29] ? irq_work_sync+0x287/0x370 [ 2286.205625][ T29] _free_event+0xa6b/0xf30 [ 2286.210243][ T29] perf_event_release_kernel+0x842/0x8d0 [ 2286.216266][ T29] ? __might_sleep+0xe0/0xe0 [ 2286.220935][ T29] ? calc_timer_values+0x400/0x400 [ 2286.226716][ T29] ? __fput+0x61c/0x970 [ 2286.231049][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2286.236167][ T29] perf_release+0x3b/0x40 [ 2286.240866][ T29] __fput+0x234/0x970 [ 2286.245429][ T29] task_work_run+0x1d4/0x260 [ 2286.250163][ T29] ? task_work_cancel+0x220/0x220 [ 2286.255405][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2286.261110][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 2286.267527][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2286.273338][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2286.278958][ T29] do_syscall_64+0x61/0xa0 [ 2286.293102][ T29] ? clear_bhb_loop+0x40/0x90 [ 2286.298003][ T29] ? clear_bhb_loop+0x40/0x90 [ 2286.302846][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2286.311349][ T29] RIP: 0033:0x7f8e35d9aeb9 [ 2286.323659][ T29] RSP: 002b:00007ffdcb004458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2286.332942][ T29] RAX: 0000000000000000 RBX: 00007f8e36017da0 RCX: 00007f8e35d9aeb9 [ 2286.348811][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2286.357260][ T29] RBP: 00007f8e36017da0 R08: 0000000000000006 R09: 0000000000000000 [ 2286.365823][ T29] R10: 00007f8e36017cb0 R11: 0000000000000246 R12: 0000000000206639 [ 2286.374220][ T29] R13: 00007f8e3601618c R14: 0000000000206401 R15: 00007f8e36016180 [ 2286.382464][ T29] [ 2286.385597][ T29] INFO: task syz.3.8969:3885 blocked for more than 157 seconds. [ 2286.393523][ T29] Not tainted syzkaller #0 [ 2286.400224][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2286.412284][ T29] task:syz.3.8969 state:D stack:24232 pid:3885 ppid:30955 flags:0x00004004 [ 2286.424102][ T29] Call Trace: [ 2286.427648][ T29] [ 2286.431189][ T29] __schedule+0x1553/0x45a0 [ 2286.437027][ T29] ? asan.module_dtor+0x20/0x20 [ 2286.442318][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 2286.447715][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 2286.454339][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2286.460865][ T29] schedule+0xbd/0x170 [ 2286.465234][ T29] schedule_preempt_disabled+0x13/0x20 [ 2286.471309][ T29] __mutex_lock+0x6a9/0xcc0 [ 2286.475939][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 2286.480938][ T29] ? perf_event_detach_bpf_prog+0x8b/0x310 [ 2286.496009][ T29] ? mutex_lock_nested+0x20/0x20 [ 2286.501517][ T29] ? rcu_is_watching+0x15/0xb0 [ 2286.506572][ T29] ? trace_contention_end+0x39/0xe0 [ 2286.512664][ T29] ? __might_sleep+0xe0/0xe0 [ 2286.527089][ T29] ? __mutex_lock+0x315/0xcc0 [ 2286.531997][ T29] perf_event_detach_bpf_prog+0x8b/0x310 [ 2286.541618][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2286.547533][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 2286.561935][ T29] _free_event+0xa6b/0xf30 [ 2286.566538][ T29] perf_event_release_kernel+0x842/0x8d0 [ 2286.572250][ T29] ? __might_sleep+0xe0/0xe0 [ 2286.585431][ T29] ? calc_timer_values+0x400/0x400 [ 2286.590680][ T29] ? __fput+0x61c/0x970 [ 2286.595318][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2286.601602][ T29] perf_release+0x3b/0x40 [ 2286.621358][ T29] __fput+0x234/0x970 [ 2286.627109][ T29] task_work_run+0x1d4/0x260 [ 2286.632070][ T29] ? task_work_cancel+0x220/0x220 [ 2286.641828][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2286.650212][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 2286.662903][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2286.670673][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2286.682621][ T29] do_syscall_64+0x61/0xa0 [ 2286.689255][ T29] ? clear_bhb_loop+0x40/0x90 [ 2286.700338][ T29] ? clear_bhb_loop+0x40/0x90 [ 2286.707291][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2286.722273][ T29] RIP: 0033:0x7fdb7dd9aeb9 [ 2286.742027][ T29] RSP: 002b:00007fff93bd34d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2286.776225][ T29] RAX: 0000000000000000 RBX: 00007fdb7e017da0 RCX: 00007fdb7dd9aeb9 [ 2286.796115][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2286.804922][ T29] RBP: 00007fdb7e017da0 R08: 0000000000000006 R09: 0000000000000000 [ 2286.823125][ T29] R10: 00007fdb7e017cb0 R11: 0000000000000246 R12: 0000000000206c15 [ 2286.831497][ T29] R13: 00007fdb7e01609c R14: 0000000000206be3 R15: 00007fdb7e016090 [ 2286.853678][ T29] [ 2286.856948][ T29] [ 2286.856948][ T29] Showing all locks held in the system: [ 2286.872339][ T29] 2 locks held by rcu_tasks_trace/15: [ 2286.880130][ T29] #0: ffffffff8d132d10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 2286.894058][ T29] #1: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2286.912281][ T29] 2 locks held by kworker/1:1/27: [ 2286.919959][ T29] 1 lock held by khungtaskd/29: [ 2286.931773][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2286.944347][ T29] 2 locks held by getty/5529: [ 2286.950479][ T29] #0: ffff888031f310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2286.980482][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2286.996154][ T29] 3 locks held by kworker/0:6/5826: [ 2287.008987][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.024733][ T29] #1: ffffc90004a5fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.042739][ T29] #2: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2287.061870][ T29] 3 locks held by kworker/u4:18/14009: [ 2287.068354][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.108416][ T29] #1: ffffc900036a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.126925][ T29] #2: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2287.140711][ T29] 3 locks held by kworker/u4:24/14015: [ 2287.151657][ T29] #0: ffff88802c5e3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.165365][ T29] #1: ffffc90003717d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.192095][ T29] #2: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 2287.215898][ T29] 3 locks held by kworker/u5:2/20423: [ 2287.222809][ T29] #0: ffff888063924538 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.251288][ T29] #1: ffffc90003687d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.273870][ T29] #2: ffff888057ed4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 2287.291391][ T29] 3 locks held by kworker/u5:1/25001: [ 2287.299108][ T29] #0: ffff88805da09538 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.323460][ T29] #1: ffffc9000442fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.344687][ T29] #2: ffff88804807ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 2287.362109][ T29] 3 locks held by kworker/u5:0/29113: [ 2287.368120][ T29] #0: ffff88805db32938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.387386][ T29] #1: ffffc90010fdfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2287.409409][ T29] #2: ffff88805ad38e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 2287.421637][ T29] 2 locks held by kworker/1:2/31365: [ 2287.440837][ T29] 3 locks held by kworker/1:6/31423: [ 2287.449993][ T29] 1 lock held by syz.2.8964/3871: [ 2287.460324][ T29] #0: ffff88801f3ae0a8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 2287.471430][ T29] 5 locks held by syz.2.8964/3876: [ 2287.485070][ T29] 1 lock held by syz.1.8968/3881: [ 2287.490183][ T29] #0: ffffffff8d192168 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 2287.506193][ T29] 1 lock held by syz.3.8969/3885: [ 2287.511316][ T29] #0: ffffffff8d192168 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 2287.523163][ T29] 1 lock held by syz.0.8972/3900: [ 2287.528266][ T29] #0: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2287.555831][ T29] 1 lock held by syz-executor/3904: [ 2287.561166][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 2287.575041][ T29] 1 lock held by syz-executor/3909: [ 2287.580336][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 2287.598006][ T29] 2 locks held by syz-executor/3911: [ 2287.606072][ T29] #0: ffffffff8e3b3150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 2287.622305][ T29] #1: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x88/0x240 [ 2287.641145][ T29] 1 lock held by syz-executor/3914: [ 2287.647095][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2287.663662][ T29] 1 lock held by dhcpcd/3916: [ 2287.668438][ T29] #0: ffff88806a092130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.688332][ T29] 1 lock held by dhcpcd/3917: [ 2287.697255][ T29] #0: ffff88807e306130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.712514][ T29] 1 lock held by dhcpcd/3918: [ 2287.721212][ T29] #0: ffff88802826e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.731540][ T29] 1 lock held by dhcpcd/3919: [ 2287.743386][ T29] #0: ffff8880635f6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.761833][ T29] 1 lock held by dhcpcd/3920: [ 2287.767187][ T29] #0: ffff888047314130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.791216][ T29] 1 lock held by dhcpcd/3921: [ 2287.796587][ T29] #0: ffff88802ee3e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2287.816680][ T29] 1 lock held by syz-executor/3933: [ 2287.821989][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2287.838211][ T29] 1 lock held by syz-executor/3939: [ 2287.847279][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2287.862002][ T29] 1 lock held by syz-executor/3941: [ 2287.871013][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2287.883307][ T29] 1 lock held by syz-executor/3944: [ 2287.888586][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2287.910740][ T29] 3 locks held by syz-executor/3947: [ 2287.919712][ T29] #0: ffff88814d918418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2287.936690][ T29] #1: ffff8880775ede10 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 2287.953094][ T29] #2: ffff88814d91c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 2287.963010][ T29] 2 locks held by syz-executor/3948: [ 2287.977383][ T29] #0: ffff88814d918418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2287.993404][ T29] #1: ffff8880775ede10 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 2288.018702][ T29] 2 locks held by syz-executor/3949: [ 2288.031132][ T29] #0: ffff88814d918418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2288.045708][ T29] #1: ffff8880775ede10 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 2288.062454][ T29] 2 locks held by syz-executor/3950: [ 2288.073488][ T29] #0: ffff88814d918418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2288.093507][ T29] #1: ffff8880775ede10 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 2288.118866][ T29] 3 locks held by kworker/u5:3/3951: [ 2288.125016][ T29] #0: ffff888030210d38 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2288.149993][ T29] #1: ffffc9000c677d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2288.172767][ T29] #2: ffff888069874e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 2288.191596][ T29] [ 2288.194641][ T29] ============================================= [ 2288.194641][ T29] [ 2288.213565][ T29] NMI backtrace for cpu 0 [ 2288.218641][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2288.226392][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2288.236770][ T29] Call Trace: [ 2288.240146][ T29] [ 2288.244525][ T29] dump_stack_lvl+0x18c/0x250 [ 2288.250132][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 2288.255692][ T29] ? show_regs_print_info+0x20/0x20 [ 2288.261948][ T29] ? load_image+0x400/0x400 [ 2288.267650][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2288.274097][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2288.280689][ T29] ? _printk+0xde/0x130 [ 2288.285180][ T29] ? load_image+0x400/0x400 [ 2288.290549][ T29] ? load_image+0x400/0x400 [ 2288.297157][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2288.303727][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2288.310531][ T29] watchdog+0xf3d/0xf80 [ 2288.315423][ T29] ? watchdog+0x1e1/0xf80 [ 2288.320378][ T29] kthread+0x2fa/0x390 [ 2288.324610][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2288.330064][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2288.335469][ T29] ret_from_fork+0x48/0x80 [ 2288.340783][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2288.345567][ T29] ret_from_fork_asm+0x11/0x20 [ 2288.351545][ T29] [ 2288.356764][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2288.362960][ C1] NMI backtrace for cpu 1 [ 2288.362974][ C1] CPU: 1 PID: 3876 Comm: syz.2.8964 Not tainted syzkaller #0 [ 2288.362992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2288.363003][ C1] RIP: 0010:unwind_next_frame+0xd4/0x2970 [ 2288.363028][ C1] Code: 4c 89 74 24 60 48 89 5c 24 18 bf 01 00 00 00 e8 72 46 21 00 49 8d 6c 24 50 48 89 e8 48 c1 e8 03 48 89 44 24 50 42 80 3c 28 00 <74> 08 48 89 ef e8 02 05 a4 00 4c 8b 75 00 4d 85 f6 74 44 49 81 c6 [ 2288.363044][ C1] RSP: 0018:ffffc900001ef7f0 EFLAGS: 00000046 [ 2288.363059][ C1] RAX: 1ffff9200003df2e RBX: 1ffff9200003df24 RCX: ffffffff972c6403 [ 2288.363075][ C1] RDX: ffff88802a8dda00 RSI: 0000000000000002 RDI: 0000000000000001 [ 2288.363087][ C1] RBP: ffffc900001ef970 R08: ffff88802a8dda00 R09: 0000000000000003 [ 2288.363099][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef920 [ 2288.363111][ C1] R13: dffffc0000000000 R14: ffffc900001ef958 R15: ffffffff88774a8b [ 2288.363143][ C1] FS: 00007f0c0a0216c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2288.363159][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2288.363171][ C1] CR2: 00007ffc19e1efe0 CR3: 0000000047f25000 CR4: 00000000003506e0 [ 2288.363187][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 2288.363198][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2288.363210][ C1] Call Trace: [ 2288.363216][ C1] [ 2288.363229][ C1] ? __flow_hash_from_keys+0x45b/0x6e0 [ 2288.363262][ C1] ? __flow_hash_from_keys+0x45b/0x6e0 [ 2288.363288][ C1] perf_callchain_kernel+0x42e/0x690 [ 2288.363321][ C1] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 2288.363352][ C1] ? __flow_hash_from_keys+0x45b/0x6e0 [ 2288.363390][ C1] ? get_callchain_entry+0x185/0x3c0 [ 2288.363410][ C1] get_perf_callchain+0x235/0x4f0 [ 2288.363430][ C1] ? put_callchain_entry+0xb0/0xb0 [ 2288.363451][ C1] ? __perf_event_header__init_id+0x3be/0x480 [ 2288.363473][ C1] perf_prepare_sample+0x390/0x1ca0 [ 2288.363496][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2288.363518][ C1] ? perf_callchain+0x1f0/0x1f0 [ 2288.363541][ C1] perf_event_output_forward+0x187/0x3e0 [ 2288.363561][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 2288.363580][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 2288.363607][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 2288.363999][ C1] __perf_event_overflow+0x447/0x630 [ 2288.364037][ C1] perf_swevent_event+0x324/0x630 [ 2288.364061][ C1] ? perf_tp_event+0x1450/0x1450 [ 2288.364088][ C1] perf_tp_event+0x54f/0x1450 [ 2288.364111][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2288.364131][ C1] ? ktime_get+0x7f/0x280 [ 2288.364169][ C1] ? sched_clock+0x3f/0x60 [ 2288.364188][ C1] ? sched_clock_cpu+0x75/0x430 [ 2288.364206][ C1] ? lapic_next_event+0x11/0x20 [ 2288.364227][ C1] ? clockevents_program_event+0x230/0x310 [ 2288.364252][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2288.364281][ C1] perf_trace_preemptirq_template+0x269/0x330 [ 2288.364309][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.364339][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2288.364365][ C1] ? __irq_exit_rcu+0xdf/0x190 [ 2288.364383][ C1] ? irq_exit_rcu+0x20/0x20 [ 2288.364404][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.364425][ C1] trace_irq_enable+0xbb/0xe0 [ 2288.364449][ C1] trace_hardirqs_on+0x18/0x40 [ 2288.364475][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.364500][ C1] RIP: 0010:__siphash_unaligned+0x13f/0x3a0 [ 2288.364523][ C1] Code: 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 b2 00 00 00 48 01 eb 48 c1 c5 0d 48 8b 44 24 10 4a 8b 04 30 48 31 dd 48 c1 c3 20 49 31 c4 <4d> 01 e5 49 c1 c4 10 4d 31 ec 4c 01 e3 49 c1 c4 15 49 01 ed 48 c1 [ 2288.364538][ C1] RSP: 0018:ffffc900001f02c0 EFLAGS: 00000206 [ 2288.364555][ C1] RAX: 000002ff35000000 RBX: c8fed8694da0fed5 RCX: ffff88802a8dda00 [ 2288.364569][ C1] RDX: dffffc0000000000 RSI: 0000000000000048 RDI: ffffc900001f041f [ 2288.364581][ C1] RBP: 38cc488ecee59fbe R08: ffff88802a8dda00 R09: 0000000000000003 [ 2288.364595][ C1] R10: 0000000000000008 R11: 0000000000000100 R12: 03144cc193b3ff30 [ 2288.364606][ C1] R13: 20dcbb871fc04140 R14: 0000000000000030 R15: ffffc900001f0418 [ 2288.364638][ C1] __flow_hash_from_keys+0x45b/0x6e0 [ 2288.364672][ C1] __skb_get_hash+0x106/0x2e0 [ 2288.364700][ C1] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 2288.364741][ C1] netdev_pick_tx+0x3bd/0xc20 [ 2288.364768][ C1] netdev_core_pick_tx+0x132/0x340 [ 2288.364793][ C1] __dev_queue_xmit+0x9e6/0x36b0 [ 2288.364821][ C1] ? __dev_queue_xmit+0x26b/0x36b0 [ 2288.364844][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.364868][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.364893][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 2288.364916][ C1] ? __asan_memcpy+0x40/0x70 [ 2288.364941][ C1] ? eth_header+0x11b/0x200 [ 2288.364970][ C1] ? macvlan_sync_address+0x810/0x810 [ 2288.364996][ C1] ? neigh_resolve_output+0x618/0x730 [ 2288.365028][ C1] ip6_finish_output2+0xe3d/0x1630 [ 2288.365055][ C1] ? ip6_finish_output2+0x645/0x1630 [ 2288.365078][ C1] ? ip6_mtu+0x7d/0x3f0 [ 2288.365100][ C1] ? nf_hook+0x390/0x390 [ 2288.365121][ C1] ? ip6_finish_output+0x57b/0x820 [ 2288.365147][ C1] ndisc_send_skb+0xc26/0x14f0 [ 2288.365166][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 2288.365188][ C1] ? ndisc_mc_map+0x680/0x680 [ 2288.365205][ C1] ? skb_dst+0xd0/0xd0 [ 2288.365234][ C1] addrconf_rs_timer+0x2d5/0x630 [ 2288.365265][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2288.365292][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2288.365320][ C1] call_timer_fn+0x189/0x540 [ 2288.365347][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2288.365375][ C1] ? call_timer_fn+0xd2/0x540 [ 2288.365398][ C1] ? __run_timers+0x800/0x800 [ 2288.365424][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 2288.365453][ C1] __run_timers+0x542/0x800 [ 2288.365478][ C1] ? detach_timer+0x2b0/0x2b0 [ 2288.365505][ C1] run_timer_softirq+0x67/0xf0 [ 2288.365523][ C1] handle_softirqs+0x280/0x820 [ 2288.365543][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2288.365563][ C1] ? do_softirq+0x1a0/0x1a0 [ 2288.365583][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2288.365610][ C1] __irq_exit_rcu+0xd3/0x190 [ 2288.365628][ C1] ? irq_exit_rcu+0x20/0x20 [ 2288.365650][ C1] irq_exit_rcu+0x9/0x20 [ 2288.365666][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2288.365688][ C1] [ 2288.365694][ C1] [ 2288.365700][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.365720][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 2288.365739][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 40 83 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 2288.365754][ C1] RSP: 0018:ffffc9000beff758 EFLAGS: 00000282 [ 2288.365769][ C1] RAX: 1b4899f8baccb300 RBX: 0000000000000000 RCX: 1b4899f8baccb300 [ 2288.365781][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 2288.365794][ C1] RBP: ffffc9000beff7b0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 2288.365807][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff88802a8dda00 [ 2288.365820][ C1] R13: dffffc0000000000 R14: ffff888029635a00 R15: ffff8880b8f3cac8 [ 2288.365845][ C1] ? finish_task_switch+0x265/0x8f0 [ 2288.365868][ C1] __schedule+0x155b/0x45a0 [ 2288.365898][ C1] ? mark_lock+0x94/0x320 [ 2288.365919][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2288.365941][ C1] ? lock_chain_count+0x20/0x20 [ 2288.365961][ C1] ? asan.module_dtor+0x20/0x20 [ 2288.365985][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2288.366011][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2288.366035][ C1] ? preempt_schedule+0xc0/0xd0 [ 2288.366060][ C1] preempt_schedule_common+0x82/0xc0 [ 2288.366085][ C1] preempt_schedule+0xc0/0xd0 [ 2288.366109][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2288.366132][ C1] ? event_function+0x300/0x300 [ 2288.366154][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 2288.366175][ C1] ? lock_chain_count+0x20/0x20 [ 2288.366195][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2288.366223][ C1] ? smp_call_function_single+0x488/0x5a0 [ 2288.366245][ C1] smp_call_function_single+0x48d/0x5a0 [ 2288.366266][ C1] ? event_function+0x300/0x300 [ 2288.366287][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 2288.366309][ C1] ? event_function+0x300/0x300 [ 2288.366345][ C1] perf_install_in_context+0x5be/0x920 [ 2288.366373][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 2288.366394][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2288.366412][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 2288.366444][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 2288.366468][ C1] ? perf_event__header_size+0x165/0x220 [ 2288.366494][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 2288.366523][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2288.366559][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2288.366582][ C1] do_syscall_64+0x55/0xa0 [ 2288.366620][ C1] ? clear_bhb_loop+0x40/0x90 [ 2288.366638][ C1] ? clear_bhb_loop+0x40/0x90 [ 2288.366657][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2288.366675][ C1] RIP: 0033:0x7f0c0919aeb9 [ 2288.366690][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2288.366703][ C1] RSP: 002b:00007f0c0a021028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2288.366720][ C1] RAX: ffffffffffffffda RBX: 00007f0c09416090 RCX: 00007f0c0919aeb9 [ 2288.366732][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2288.366743][ C1] RBP: 00007f0c09208c1f R08: 0000000000000002 R09: 0000000000000000 [ 2288.366754][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2288.366765][ C1] R13: 00007f0c09416128 R14: 00007f0c09416090 R15: 00007fff19ea8288 [ 2288.366786][ C1] [ 2289.413138][ T3953] Bluetooth: hci2: command 0x0406 tx timeout [ 2289.419423][ T3953] Bluetooth: hci5: command 0x0406 tx timeout [ 2289.425887][ T3953] Bluetooth: hci6: command 0x0406 tx timeout [ 2289.431954][ T3953] Bluetooth: hci7: command 0x0406 tx timeout [ 2289.447552][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2289.454493][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2289.462008][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2289.472308][ T29] Call Trace: [ 2289.475636][ T29] [ 2289.478614][ T29] dump_stack_lvl+0x18c/0x250 [ 2289.483445][ T29] ? show_regs_print_info+0x20/0x20 [ 2289.488706][ T29] ? load_image+0x400/0x400 [ 2289.493386][ T29] panic+0x2dc/0x730 [ 2289.497373][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2289.503364][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2289.507920][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2289.513690][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2289.520182][ T29] watchdog+0xf7c/0xf80 [ 2289.524492][ T29] ? watchdog+0x1e1/0xf80 [ 2289.528974][ T29] kthread+0x2fa/0x390 [ 2289.533186][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2289.538300][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2289.543109][ T29] ret_from_fork+0x48/0x80 [ 2289.547569][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2289.552215][ T29] ret_from_fork_asm+0x11/0x20 [ 2289.557046][ T29] [ 2289.560708][ T29] Kernel Offset: disabled [ 2289.565369][ T29] Rebooting in 86400 seconds..