last executing test programs: 17.513114397s ago: executing program 1 (id=2988): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 16.390558193s ago: executing program 1 (id=2994): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 15.077009765s ago: executing program 1 (id=3002): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, 0x0, 0x0) 14.856825672s ago: executing program 1 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10f006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x110a08, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb"], 0x6b}, 0x0) perf_event_open(0x0, 0x0, 0x10000b, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="02000000ff03000002000000fbffffff00680000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0e00000005000000040000000800000002020000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000400000000310100000000000000000000fffffff200000000000055ee52490b233e8e0000f464ca67"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000780)="d80000001e0081054e81f782db4cb90409000000000000005dd2086518000a800d00000003600e1208000f0000000406a80016c008000b000000000000000561c1d67f6f94007134cf6efb8000a007a2900000000000000000e06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f6475730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace00000000ece0b42a9ecaee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000000980)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="10007ddfb1ff"], 0x10}, 0x4040) 14.436106695s ago: executing program 1 (id=3007): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x11}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x25, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc", 0x13}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000005000000000000d83a1213669ac6f53b49c08fb1641feca653dbc8b4688f99709400006e5400004bcb48ea56e5e8e14e4d95cc4eda6675fd7c248c6b32d94be4ca7539934e642a9ee94139abf687057008a8e607995edbf00e59f59e2e25c476d8737577d06e5f3c196cdb42125477f6443b5ca331bb14666d8d5903950f0800000002feaab9a9b960eba98f19beb28c31301f708a9f82b68d08474a4a62728715f18553328cbc81bd39d0d995530887c550d71e"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa3a200007"], 0xfdef) 11.17315154s ago: executing program 1 (id=3012): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (fail_nth: 22) 9.234655432s ago: executing program 3 (id=3023): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10f006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x110a08, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000010c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) perf_event_open(0x0, 0x0, 0x10000b, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="02000000ff03000002000000fbffffff00680000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0e00000005000000040000000800000002020000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000400000000310100000000000000000000fffffff200000000000055ee52490b233e8e0000f464ca67"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000780)="d80000001e0081054e81f782db4cb90409000000000000005dd2086518000a800d00000003600e1208000f0000000406a80016c008000b000000000000000561c1d67f6f94007134cf6efb8000a007a2900000000000000000e06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f6475730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace00000000ece0b42a9ecaee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$kcm(r3, &(0x7f0000003300)={&(0x7f0000000980)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="10007ddfb1ff"], 0x10}, 0x4040) 8.38433669s ago: executing program 3 (id=3029): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001200)="541fe4b3504ae29cda0aa72519dfe53204d3ea00ea2aaab5dbf019ba", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.249276199s ago: executing program 0 (id=3037): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 5.157638674s ago: executing program 0 (id=3041): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000337153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.023876018s ago: executing program 2 (id=3042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x8000}) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001c40)=""/4065, 0xfe1}], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 4.833211764s ago: executing program 4 (id=3043): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10820, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xffffffffffffff80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8, 0xffffffffffff8001, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xe0ffffff}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002b2c11fc80e733dedc8b407a91d8ebf4d91757a50ac1257cf14bf4f089ca11053c230f81bd4e532e4d64587f71f3a0370ba72bdddb4c10eafb75e65ad58af3d0176b7033376cc48be0f93a57590a0825e49fe79e65d2dcf9898f1a0245", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="d28a08d908958888a88d", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0xf8, 0xfc, 0x8a, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0x8, 0x7, 0x0, 0xa1c, 0xff, 0x0, 0x4, 0x0, 0x7fff}, 0xffffffffffffffff, 0x9, r0, 0xa) 4.820735045s ago: executing program 0 (id=3044): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r2 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a000000000000611159000000000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e0000001105000000000000004cb9cca7480ef42b", 0x15}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) 4.467023486s ago: executing program 4 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000060000000f00000002000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00#\x00'/26], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r0}, &(0x7f00000000c0), &(0x7f0000000200)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000001c0)=ANY=[]) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 4.465947016s ago: executing program 0 (id=3054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_retopts={{0x10}}], 0x10}, 0x8000) close(r1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="3c4a4e8039348373defbd84823e5df728e619659ac1622ad5cfb962705edebcd4f0468cc9ff329a22c0f44d0b190e5aa30cc220966a4d4fc6da48a329c8619ee6f8b3e1790677a7262bd62fbb7330316f635c2e0cca9c7296ea81d321aaba1369f79e7c2a13d057c5ce581d20bafdd2883c05fd7ae598737ad19f452a8e2e2a117f22ecb1a2825e816078c7c722cdbb4b1b407d9fb7aeddd9687639261fc71cd1e0b00384a6fab1cf1807ad8fd8b689b5985efc1679b0d6718f03fd250741c5551073c078442e74248c0a9ee9619390e7a16e970e8dcdb26d11680bc9aecd6015d5cbdf639c81f26cc57ad4aabcd7d28d9237225f4e90ffd", @ANYRES16=r0, @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000000300), 0x0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080200000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') setsockopt$sock_attach_bpf(r4, 0x0, 0x3, 0x0, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) 4.465617346s ago: executing program 2 (id=3046): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fdffffff0000000000000001050000001000000000000000000000090200000000003c07fffcd9cb19e26c24d2438dd71ac5503a2682985b07b17d816b82db90e684ca3a116df960f95b70028203f6cec15b30c97d1bda839226190183224fd6e8bba574b215922f90e2ac4a30bba48a897bb6560d4a606e0745f90f6d99b42c8221a1991997b4eccf46ee6ddfd2124fabdb3f1768380aa8ffe7b9caf7baedb1137cbfca04feb10cb10909b4c3aa8f83b4b2e0de505057"], 0x0, 0x4e}, 0x28) socket$kcm(0xa, 0x2, 0x88) socketpair(0x29, 0x800, 0x1, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000600)="f1c519b1cd40a2bc1daf5882a35ea80551d3fc79a2ccd240262787fbb4b8ce1230522d7f41730b86fa5a0be07c4e935182a1559391a7b003d46a94be355bd49f643ceb1d900f5523074df91d3c6f5f734350455695871f5cc01592bf7aaba1fb794c3ed128da8a70c3d73bbe76dde33abf8584f5a6f634ebcc4c316d0bb88bce014cf1613c096c1e5ca83c84f120328ab8e3c089043d587e002abf7843aa2ae188b9f7fb53a4a996", 0xa8}, {&(0x7f0000000f40)="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", 0x140}, {&(0x7f00000000c0)="53634bf79bb46352373ab382e3fe08aa3e1b93f1ea2b93b21ddb670ce6592eb2a2ea42a93b923490d11b", 0x2a}, {&(0x7f0000000780)="25dc2655c6fa223350e228f103a8042e64fabb4f596f39a2216f25c1e5b604dd55da5b", 0x23}, {&(0x7f00000007c0)="c0bc7e16227cc5ac9f27baead1424123afc1660980136acc33ad080f175bb5df8ba8c6912183ed9616fac312ce6a8791d6cde4dc69793237da25e968b9f3a20954d2e9922241df080b30bb5f464581eb41d251b9478df1f6fa119c472d", 0x5d}, {&(0x7f0000000840)="a1660e9ed70cc9a2ba4a11aef0d61c59dca5a7aec37cc0f7fc3259c801f10d66b1cf5ea57d8ca5caa0aa25c79ce41c61c24ea5549e554f86a1945b3f2e4d4793c1329a83d3bd51299f70705d7efcef3a9742916a3a5b250d3e63d07110eab5dfe35901f08f9524e30e552a152c1f4ae0a70ec175fdf913ad8fcde16c329901f492512d584e419f5b64", 0x89}, {&(0x7f0000000e40)="34a9f825a2288423dea294d07b44558c82b703113e4bd2749ca50259c28bd8afe53c9447f1113f1f6cb60d6c5ca3fc247e90789df84f26a2f49ea47a2257b556093498243efeeb17d7771975b573bbd8a48ee43233d247301a3ba20dc24ae9c1a4776a80ed8e916e1717e7d63df7fd0891b3513a770fd39eaaa9c9fa62186d4584b15876bc2c1ef25e611107fa384b3b6e691ac684bd2e60a6becf65a192808e444c3f07db481892fac78205495f4c034a3a64e527a7679ddb1ada47496d7885f6287b32b8e130da3e03f108bd62618e826746e96c", 0xd5}, {&(0x7f0000000a00)="afcf98444423f9e39f3030a0b473231c7eb291cef5e94616a7faeafcc99e9abbc06fa0f8a7e09ea07c652c3daf0fff4861abfeb7bd088474d4c9c7dca3d9ab03ebe8d481922bb57fdfe502fbacf3ae24abd758853cc09382ee01cf86321ca5f23c471d1a53b5d1afc769d221d88a83b6740f5f439d4734dbabcf2eba588fe11408db1f1da3196d7627fdfd1dd554426cf100f1a7eb172545d89ed52a3d6ba5b4eadcc387fdf7e1ce4ad3d700fcdd1854b21575fda86b2884a03991e41e83bd3f764cf72802be4b1aa6f5fbf194689a97dad8f6a98a8afb3a82e75593dac4da", 0xdf}, {&(0x7f0000000c00)="cf8e3605bf9248cc26a6b77961af2bcc10d458e6b4a6eb4cb21c98c77f08e707a5ac53cf1152659ec1228e13c7245b6fc794769decfbd5ad96e2701218a1a8247c32791ab0e2fac35cad4a6ef2381110f5418d0220cceec3f8ee6f4a93d206b2d49d272e650271c3035f1e3543", 0x6d}, {0x0}], 0xa}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x0, 0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x48d8a2b98e7bf4f7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000060100000000000fffff00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.183042965s ago: executing program 3 (id=3047): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) write$cgroup_subtree(r0, 0x0, 0x0) 3.920493703s ago: executing program 2 (id=3048): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x1e, 0x5, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8], 0xfe33) 3.775389808s ago: executing program 3 (id=3049): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x40006fb, 0x0, 0x0, 0x0, 0x0, 0x0) 3.267905375s ago: executing program 3 (id=3050): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d640a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}, 0x8000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x4}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r5, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a00)={{0x1}, &(0x7f0000001980), &(0x7f00000019c0)='%pK \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000e2ff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r7}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="dc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400fdff02000700050000000000000000000000001c000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x45, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ff00000000000008000000b704000000000400850000003300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) 3.267788915s ago: executing program 4 (id=3051): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0xf9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r2) close(r1) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) 3.172221818s ago: executing program 0 (id=3052): socket$kcm(0x21, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x8, 0x2, 0x10, 0x0, 0x0, 0x200, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb58c, 0x4, @perf_config_ext={0x214, 0x3}, 0x603, 0x8, 0x8, 0x1, 0x9, 0x7, 0x9db9, 0x0, 0x9, 0x0, 0x8000000000000001}, r0, 0x9, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400200000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) 3.076388131s ago: executing program 4 (id=3053): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close(0x4) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x4, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f00000002c0), &(0x7f0000000580)=r5}, 0x20) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x4, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r12}, &(0x7f00000002c0), &(0x7f0000000580)=r9}, 0x20) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a"], 0xfdef) 2.383990903s ago: executing program 4 (id=3055): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10820, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xffffffffffffff80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8, 0xffffffffffff8001, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xe0ffffff}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002b2c11fc80e733dedc8b407a91d8ebf4d91757a50ac1257cf14bf4f089ca11053c230f81bd4e532e4d64587f71f3a0370ba72bdddb4c10eafb75e65ad58af3d0176b7033376cc48be0f93a57590a0825e49fe79e65d2dcf9898f1a0245", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="d28a08d908958888a88d", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0xf8, 0xfc, 0x8a, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0x8, 0x7, 0x0, 0xa1c, 0xff, 0x0, 0x4, 0x0, 0x7fff}, 0xffffffffffffffff, 0x9, r0, 0xa) 1.042722956s ago: executing program 3 (id=3056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x8000}) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001c40)=""/4065, 0xfe1}], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 967.530038ms ago: executing program 0 (id=3057): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001200)="541fe4b3504ae29cda0aa72519dfe53204d3ea00ea2aaab5dbf019ba", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 906.90942ms ago: executing program 2 (id=3058): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fdffffff0000000000000001050000001000000000000000000000090200000000003c07fffcd9cb19e26c24d2438dd71ac5503a2682985b07b17d816b82db90e684ca3a116df960f95b70028203f6cec15b30c97d1bda839226190183224fd6e8bba574b215922f90e2ac4a30bba48a897bb6560d4a606e0745f90f6d99b42c8221a1991997b4eccf46ee6ddfd2124fabdb3f1768380aa8ffe7b9caf7baedb1137cbfca04feb10cb10909b4c3aa8f83b4b2e0de505057"], 0x0, 0x4e}, 0x28) socket$kcm(0xa, 0x2, 0x88) socketpair(0x29, 0x800, 0x1, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000600)="f1c519b1cd40a2bc1daf5882a35ea80551d3fc79a2ccd240262787fbb4b8ce1230522d7f41730b86fa5a0be07c4e935182a1559391a7b003d46a94be355bd49f643ceb1d900f5523074df91d3c6f5f734350455695871f5cc01592bf7aaba1fb794c3ed128da8a70c3d73bbe76dde33abf8584f5a6f634ebcc4c316d0bb88bce014cf1613c096c1e5ca83c84f120328ab8e3c089043d587e002abf7843aa2ae188b9f7fb53a4a996", 0xa8}, {&(0x7f0000000f40)="4a4ef9759748345449f6607fbea1dd839e80c9c6e418f8877c85f7c3cbe429b7fa2deb241ffe3fbb2f33b794c3f01d25e949f931811e4d44953c1e36e496132e1f45ebd48fca1b8e23fbaa11daf1eb92cecab1e9f78bfa4b71a6e5f951d1bf0f33803bba7cad1a085dbc1862a42833ff941ee37e36837ec70932edc2f7bb920089bce86ab7ad70778014f2b5f7543a36de463cf69b36795878ca62f14b9eb04f207d7dba8d35ab152faf52128b489c8e85d59e6875050e75724e457df6ca27cc2452f1314c8098aa8de09ea88a1d3dc6177885d53027bb3018cc74b669799675c646b50d50f318e2e16ec75988139cd6fcaae3c931e3495ad4d8f51c529a2dde89396d01e8f2b55fc41fa370d6ad65c60834bfeda6a8fd8206488ab5c523d0d01ab9243e8617a5aec7201ece1642ae05660257241e9a027bcfe0c921cdf26fde", 0x140}, {&(0x7f00000000c0)="53634bf79bb46352373ab382e3fe08aa3e1b93f1ea2b93b21ddb670ce6592eb2a2ea42a93b923490d11b", 0x2a}, {&(0x7f0000000780)="25dc2655c6fa223350e228f103a8042e64fabb4f596f39a2216f25c1e5b604dd55da5b", 0x23}, {&(0x7f00000007c0)="c0bc7e16227cc5ac9f27baead1424123afc1660980136acc33ad080f175bb5df8ba8c6912183ed9616fac312ce6a8791d6cde4dc69793237da25e968b9f3a20954d2e9922241df080b30bb5f464581eb41d251b9478df1f6fa119c472d", 0x5d}, {&(0x7f0000000840)="a1660e9ed70cc9a2ba4a11aef0d61c59dca5a7aec37cc0f7fc3259c801f10d66b1cf5ea57d8ca5caa0aa25c79ce41c61c24ea5549e554f86a1945b3f2e4d4793c1329a83d3bd51299f70705d7efcef3a9742916a3a5b250d3e63d07110eab5dfe35901f08f9524e30e552a152c1f4ae0a70ec175fdf913ad8fcde16c329901f492512d584e419f5b64", 0x89}, {&(0x7f0000000e40)="34a9f825a2288423dea294d07b44558c82b703113e4bd2749ca50259c28bd8afe53c9447f1113f1f6cb60d6c5ca3fc247e90789df84f26a2f49ea47a2257b556093498243efeeb17d7771975b573bbd8a48ee43233d247301a3ba20dc24ae9c1a4776a80ed8e916e1717e7d63df7fd0891b3513a770fd39eaaa9c9fa62186d4584b15876bc2c1ef25e611107fa384b3b6e691ac684bd2e60a6becf65a192808e444c3f07db481892fac78205495f4c034a3a64e527a7679ddb1ada47496d7885f6287b32b8e130da3e03f108bd62618e826746e96c", 0xd5}, {&(0x7f0000000a00)="afcf98444423f9e39f3030a0b473231c7eb291cef5e94616a7faeafcc99e9abbc06fa0f8a7e09ea07c652c3daf0fff4861abfeb7bd088474d4c9c7dca3d9ab03ebe8d481922bb57fdfe502fbacf3ae24abd758853cc09382ee01cf86321ca5f23c471d1a53b5d1afc769d221d88a83b6740f5f439d4734dbabcf2eba588fe11408db1f1da3196d7627fdfd1dd554426cf100f1a7eb172545d89ed52a3d6ba5b4eadcc387fdf7e1ce4ad3d700fcdd1854b21575fda86b2884a03991e41e83bd3f764cf72802be4b1aa6f5fbf194689a97dad8f6a98a8afb3a82e75593dac4da", 0xdf}, {&(0x7f0000000c00)="cf8e3605bf9248cc26a6b77961af2bcc10d458e6b4a6eb4cb21c98c77f08e707a5ac53cf1152659ec1228e13c7245b6fc794769decfbd5ad96e2701218a1a8247c32791ab0e2fac35cad4a6ef2381110f5418d0220cceec3f8ee6f4a93d206b2d49d272e650271c3035f1e3543", 0x6d}, {0x0}], 0xa}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x0, 0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x48d8a2b98e7bf4f7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000060100000000000fffff00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 277.562431ms ago: executing program 2 (id=3059): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) write$cgroup_subtree(r0, 0x0, 0x0) 276.914891ms ago: executing program 4 (id=3060): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00080052006bab9a3fe3d8fe934ce5651e39ce1d0048007ea60864160af31a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c578a77403ff6e01ae7aa990dfe0ce5bd30aa8ab12fa843a9202734b8b3224867baacbccfd6ea25216ae6a2cfe0373bba00f43cd0103f6022d3bc482b372053d58fae95cbcb80fdaf249f044b8b67c2d000000", 0xab}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x50) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0xfffffe28}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) 0s ago: executing program 2 (id=3061): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4b, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x8000}, 0x40, 0xac5d, 0x7fffffff, 0x0, 0xfffffffffffffff9, 0x6, 0xafd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r0, 0xb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x1, 0xd, 0x5, 0x0, 0x7fffffff, 0x3a094, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x11}, 0x2, 0xfffffffffffffffe, 0x7, 0x1, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9, 0x4, 0x8, 0x1, 0x0, 0x4, 0x48, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x81, 0x6}, 0x4, 0x55, 0x9, 0x7, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0xfe}, 0x0, 0x3, 0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): ] ? clear_bhb_loop+0x60/0xb0 [ 507.117134][T10403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.123081][T10403] RIP: 0033:0x7f9f3915d68e [ 507.127548][T10403] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.147215][T10403] RSP: 002b:00007f9f3a0fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.155696][T10403] RAX: ffffffffffffffda RBX: 00007f9f3a0ff6c0 RCX: 00007f9f3915d68e [ 507.163723][T10403] RDX: 000000000000000f RSI: 00007f9f3a0ff0a0 RDI: 000000000000000a [ 507.171907][T10403] RBP: 00007f9f3a0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 507.179911][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.187931][T10403] R13: 00007f9f39416038 R14: 00007f9f39415fa0 R15: 00007fff827582a8 [ 507.195988][T10403] [ 507.646607][T10401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1880'. [ 507.975652][T10421] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1887'. [ 508.667473][T10429] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1890'. [ 509.943330][T10461] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1903'. [ 511.056586][T10474] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1905'. [ 512.946760][T10482] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1907'. [ 513.157042][T10485] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1908'. [ 513.836761][ T4286] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 514.232866][T10509] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1915'. [ 514.671092][T10519] FAULT_INJECTION: forcing a failure. [ 514.671092][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 514.692319][T10519] CPU: 0 PID: 10519 Comm: syz.0.1921 Not tainted syzkaller #0 [ 514.699879][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 514.710163][T10519] Call Trace: [ 514.713496][T10519] [ 514.716469][T10519] dump_stack_lvl+0x188/0x24e [ 514.721228][T10519] ? show_regs_print_info+0x12/0x12 [ 514.726490][T10519] ? load_image+0x400/0x400 [ 514.731055][T10519] ? __might_sleep+0xd0/0xd0 [ 514.735798][T10519] ? __lock_acquire+0x7d10/0x7d10 [ 514.740899][T10519] should_fail_ex+0x399/0x4d0 [ 514.745630][T10519] should_failslab+0x5/0x20 [ 514.750262][T10519] slab_pre_alloc_hook+0x59/0x310 [ 514.755401][T10519] ? kvmalloc_node+0x6c/0x180 [ 514.760213][T10519] __kmem_cache_alloc_node+0x4f/0x260 [ 514.765655][T10519] ? kvmalloc_node+0x6c/0x180 [ 514.770441][T10519] __kmalloc_node+0xa0/0x240 [ 514.775101][T10519] kvmalloc_node+0x6c/0x180 [ 514.779679][T10519] alloc_fdtable+0x106/0x2c0 [ 514.784341][T10519] dup_fd+0x782/0xa50 [ 514.788390][T10519] ? apparmor_task_alloc+0x1b9/0x230 [ 514.793817][T10519] copy_files+0x72/0xe0 [ 514.798105][T10519] copy_process+0x1835/0x4030 [ 514.802852][T10519] ? copy_process+0x94d/0x4030 [ 514.807699][T10519] ? idle_dummy+0x10/0x10 [ 514.812096][T10519] kernel_clone+0x24b/0x900 [ 514.816651][T10519] ? ksys_write+0x1c0/0x250 [ 514.821218][T10519] ? create_io_thread+0x170/0x170 [ 514.826314][T10519] __x64_sys_clone+0x1a7/0x220 [ 514.831130][T10519] ? __fget_files+0x43d/0x4b0 [ 514.835868][T10519] ? __ia32_sys_vfork+0x140/0x140 [ 514.840961][T10519] ? lock_chain_count+0x20/0x20 [ 514.845887][T10519] ? lockdep_hardirqs_on+0x94/0x140 [ 514.851148][T10519] do_syscall_64+0x4c/0xa0 [ 514.855627][T10519] ? clear_bhb_loop+0x60/0xb0 [ 514.860364][T10519] ? clear_bhb_loop+0x60/0xb0 [ 514.865103][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.871048][T10519] RIP: 0033:0x7f1b0a59ce59 [ 514.875507][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.895169][T10519] RSP: 002b:00007f1b0b431fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 514.903658][T10519] RAX: ffffffffffffffda RBX: 00007f1b0a815fa0 RCX: 00007f1b0a59ce59 [ 514.911707][T10519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002200 [ 514.919760][T10519] RBP: 00007f1b0b432090 R08: 0000000000000000 R09: 0000000000000000 [ 514.927808][T10519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 514.935858][T10519] R13: 00007f1b0a816038 R14: 00007f1b0a815fa0 R15: 00007ffdef76b378 [ 514.943969][T10519] [ 517.468003][T10536] device bridge_slave_0 entered promiscuous mode [ 518.946189][T10561] netlink: 'syz.2.1933': attribute type 10 has an invalid length. [ 519.045651][T10561] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1933'. [ 519.400682][T10570] FAULT_INJECTION: forcing a failure. [ 519.400682][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 519.469495][T10570] CPU: 0 PID: 10570 Comm: syz.2.1939 Not tainted syzkaller #0 [ 519.477057][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.487160][T10570] Call Trace: [ 519.490474][T10570] [ 519.493447][T10570] dump_stack_lvl+0x188/0x24e [ 519.498190][T10570] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 519.504411][T10570] ? show_regs_print_info+0x12/0x12 [ 519.509672][T10570] ? load_image+0x400/0x400 [ 519.514243][T10570] should_fail_ex+0x399/0x4d0 [ 519.518974][T10570] should_failslab+0x5/0x20 [ 519.523533][T10570] slab_pre_alloc_hook+0x59/0x310 [ 519.528615][T10570] kmem_cache_alloc+0x56/0x2f0 [ 519.533420][T10570] ? __build_skb+0x2a/0x3c0 [ 519.537984][T10570] __build_skb+0x2a/0x3c0 [ 519.542373][T10570] build_skb+0x1e/0x230 [ 519.546586][T10570] bpf_prog_test_run_skb+0x37e/0x12a0 [ 519.552096][T10570] ? __fget_files+0x28/0x4b0 [ 519.556751][T10570] ? __fget_files+0x43d/0x4b0 [ 519.561497][T10570] ? cpu_online+0xa0/0xa0 [ 519.565878][T10570] bpf_prog_test_run+0x31e/0x390 [ 519.571032][T10570] __sys_bpf+0x62b/0x780 [ 519.575334][T10570] ? bpf_link_show_fdinfo+0x380/0x380 [ 519.580782][T10570] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 519.587000][T10570] __x64_sys_bpf+0x78/0x90 [ 519.591474][T10570] do_syscall_64+0x4c/0xa0 [ 519.595952][T10570] ? clear_bhb_loop+0x60/0xb0 [ 519.600690][T10570] ? clear_bhb_loop+0x60/0xb0 [ 519.605455][T10570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.611441][T10570] RIP: 0033:0x7f1c29f9ce59 [ 519.615908][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.635571][T10570] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.644040][T10570] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 519.652059][T10570] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 519.660091][T10570] RBP: 00007f1c2ada8090 R08: 0000000000000000 R09: 0000000000000000 [ 519.668115][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.676129][T10570] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 519.684261][T10570] [ 519.778410][T10576] netlink: 'syz.1.1940': attribute type 17 has an invalid length. [ 520.547487][T10592] netlink: 'syz.2.1943': attribute type 28 has an invalid length. [ 520.561055][T10592] netlink: 'syz.2.1943': attribute type 29 has an invalid length. [ 520.571235][T10592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1943'. [ 522.844187][T10609] netlink: 'syz.3.1950': attribute type 10 has an invalid length. [ 522.877930][T10609] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1950'. [ 524.304016][T10625] device veth1_macvtap left promiscuous mode [ 524.561119][T10643] netlink: 'syz.3.1958': attribute type 3 has an invalid length. [ 524.573020][T10643] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1958'. [ 525.448837][T10648] netlink: 'syz.2.1960': attribute type 27 has an invalid length. [ 525.456748][T10648] netlink: 'syz.2.1960': attribute type 3 has an invalid length. [ 525.477946][T10648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1960'. [ 527.711794][ T4286] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 528.000516][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.019590][T10661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.068973][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.076529][T10661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.364477][T10672] netlink: 'syz.1.1968': attribute type 10 has an invalid length. [ 528.458163][T10672] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1968'. [ 528.851322][T10682] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1971'. [ 532.719442][T10717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.726998][T10717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.804357][T10717] device batadv0 left promiscuous mode [ 533.940656][T10717] bridge0: port 3(batadv0) entered disabled state [ 534.008758][T10725] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1986'. [ 534.031711][T10733] FAULT_INJECTION: forcing a failure. [ 534.031711][T10733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.053310][T10733] CPU: 0 PID: 10733 Comm: syz.1.1988 Not tainted syzkaller #0 [ 534.060869][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.071148][T10733] Call Trace: [ 534.074477][T10733] [ 534.077455][T10733] dump_stack_lvl+0x188/0x24e [ 534.082202][T10733] ? show_regs_print_info+0x12/0x12 [ 534.087469][T10733] ? load_image+0x400/0x400 [ 534.092037][T10733] ? __lock_acquire+0x7d10/0x7d10 [ 534.097134][T10733] should_fail_ex+0x399/0x4d0 [ 534.101870][T10733] _copy_from_user+0x2c/0x170 [ 534.106608][T10733] iovec_from_user+0x143/0x360 [ 534.111442][T10733] __import_iovec+0x6d/0x500 [ 534.116089][T10733] ? __might_fault+0xa6/0x120 [ 534.120913][T10733] import_iovec+0x6f/0xa0 [ 534.125429][T10733] ___sys_recvmsg+0x4b6/0x590 [ 534.130170][T10733] ? __sys_recvmsg+0x290/0x290 [ 534.135004][T10733] ? common_file_perm+0x171/0x1c0 [ 534.140086][T10733] ? __fget_files+0x43d/0x4b0 [ 534.144833][T10733] __x64_sys_recvmsg+0x205/0x2e0 [ 534.149836][T10733] ? ___sys_recvmsg+0x590/0x590 [ 534.154887][T10733] ? lockdep_hardirqs_on+0x94/0x140 [ 534.160156][T10733] do_syscall_64+0x4c/0xa0 [ 534.164648][T10733] ? clear_bhb_loop+0x60/0xb0 [ 534.169386][T10733] ? clear_bhb_loop+0x60/0xb0 [ 534.174121][T10733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.180068][T10733] RIP: 0033:0x7fd77ff9ce59 [ 534.184534][T10733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.204201][T10733] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 534.212676][T10733] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 534.220698][T10733] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000003 [ 534.228718][T10733] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 534.236742][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.244781][T10733] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 534.252829][T10733] [ 537.349583][T10765] netlink: 'syz.1.1998': attribute type 3 has an invalid length. [ 537.386653][T10765] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 537.400075][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1998'. [ 537.440977][T10764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1997'. [ 537.803786][T10779] netlink: 'syz.4.2002': attribute type 21 has an invalid length. [ 537.871004][T10779] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 537.943809][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 540.501423][T10790] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2005'. [ 540.685065][T10796] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 541.648689][T10811] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2011'. [ 545.034510][T10829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.042718][T10829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.120489][T10834] netlink: 'syz.4.2015': attribute type 2 has an invalid length. [ 546.007192][T10839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2019'. [ 547.894055][T10855] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2025'. [ 547.982821][T10858] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2026'. [ 548.967250][T10873] netlink: 'syz.2.2031': attribute type 21 has an invalid length. [ 548.991970][T10873] netlink: 'syz.2.2031': attribute type 5 has an invalid length. [ 549.054372][T10867] netlink: 'syz.1.2028': attribute type 21 has an invalid length. [ 549.083443][T10878] netlink: 'syz.2.2031': attribute type 4 has an invalid length. [ 549.117837][T10878] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2031'. [ 549.306141][T10871] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2032'. [ 550.255209][T10902] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2039'. [ 550.588384][T10906] netlink: 'syz.0.2041': attribute type 13 has an invalid length. [ 550.627643][T10906] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2041'. [ 550.840242][T10906] syz_tun: refused to change device tx_queue_len [ 550.977440][T10906] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 551.604711][T10911] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2043'. [ 551.791142][T10928] netlink: 'syz.0.2047': attribute type 17 has an invalid length. [ 552.476894][T10942] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2051'. [ 552.588482][T10942] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 552.639680][T10942] CPU: 1 PID: 10942 Comm: syz.4.2051 Not tainted syzkaller #0 [ 552.647250][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.657371][T10942] Call Trace: [ 552.660701][T10942] [ 552.663693][T10942] dump_stack_lvl+0x188/0x24e [ 552.668446][T10942] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 552.674680][T10942] ? show_regs_print_info+0x12/0x12 [ 552.679960][T10942] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 552.686213][T10942] sysfs_warn_dup+0x8a/0xa0 [ 552.690892][T10942] sysfs_do_create_link_sd+0xc0/0x110 [ 552.696346][T10942] device_add+0x7ed/0xfb0 [ 552.700839][T10942] wiphy_register+0x1d9f/0x2ac0 [ 552.705856][T10942] ? cfg80211_event_work+0x40/0x40 [ 552.711031][T10942] ? minstrel_ht_alloc+0x894/0xa20 [ 552.716313][T10942] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 552.722501][T10942] ieee80211_register_hw+0x2d00/0x39f0 [ 552.728122][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 552.733740][T10942] ? ieee80211_register_hw+0xe71/0x39f0 [ 552.739351][T10942] ? ieee80211_register_hw+0xe71/0x39f0 [ 552.744967][T10942] ? ieee80211_tasklet_handler+0x20/0x20 [ 552.750692][T10942] ? memset+0x1e/0x40 [ 552.754819][T10942] ? __hrtimer_init+0x186/0x270 [ 552.759737][T10942] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 552.765660][T10942] hwsim_new_radio_nl+0xafa/0xce0 [ 552.770783][T10942] genl_family_rcv_msg_doit+0x22a/0x330 [ 552.776395][T10942] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 552.782357][T10942] ? security_capable+0x80/0xb0 [ 552.787262][T10942] ? security_capable+0x85/0xb0 [ 552.792184][T10942] genl_rcv_msg+0x604/0x790 [ 552.796835][T10942] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 552.803066][T10942] ? genl_bind+0x360/0x360 [ 552.807529][T10942] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 552.813936][T10942] ? lock_acquire+0x225/0x4a0 [ 552.818683][T10942] netlink_rcv_skb+0x1fb/0x450 [ 552.823597][T10942] ? genl_bind+0x360/0x360 [ 552.828085][T10942] ? netlink_ack+0x1170/0x1170 [ 552.832932][T10942] ? down_read+0x1a8/0x2d0 [ 552.838356][T10942] genl_rcv+0x24/0x40 [ 552.842489][T10942] netlink_unicast+0x74d/0x8d0 [ 552.847347][T10942] netlink_sendmsg+0x8ad/0xbd0 [ 552.852203][T10942] ? netlink_getsockopt+0x550/0x550 [ 552.857503][T10942] ? netlink_getsockopt+0x550/0x550 [ 552.862880][T10942] ____sys_sendmsg+0x5be/0x970 [ 552.867738][T10942] ? __sys_sendmsg_sock+0x30/0x30 [ 552.872836][T10942] ? __import_iovec+0x315/0x500 [ 552.877770][T10942] ? import_iovec+0x6f/0xa0 [ 552.882345][T10942] ___sys_sendmsg+0x2a2/0x360 [ 552.887104][T10942] ? __sys_sendmsg+0x290/0x290 [ 552.892004][T10942] __se_sys_sendmsg+0x1bb/0x2a0 [ 552.896924][T10942] ? ct_nmi_exit+0x145/0x1c0 [ 552.901581][T10942] ? __x64_sys_sendmsg+0x80/0x80 [ 552.906615][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 552.911881][T10942] do_syscall_64+0x4c/0xa0 [ 552.916369][T10942] ? clear_bhb_loop+0x60/0xb0 [ 552.921109][T10942] ? clear_bhb_loop+0x60/0xb0 [ 552.925861][T10942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.931817][T10942] RIP: 0033:0x7f2107f9ce59 [ 552.936288][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.955961][T10942] RSP: 002b:00007f2108e02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.964449][T10942] RAX: ffffffffffffffda RBX: 00007f2108216270 RCX: 00007f2107f9ce59 [ 552.972484][T10942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 552.980514][T10942] RBP: 00007f2108032d6f R08: 0000000000000000 R09: 0000000000000000 [ 552.988547][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.996573][T10942] R13: 00007f2108216308 R14: 00007f2108216270 R15: 00007ffeb8c8e388 [ 553.004624][T10942] [ 555.358036][T10961] netlink: 'syz.2.2054': attribute type 2 has an invalid length. [ 556.088267][T10971] netlink: 'syz.4.2058': attribute type 13 has an invalid length. [ 556.134887][T10971] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2058'. [ 556.153329][T10971] syz_tun: refused to change device tx_queue_len [ 556.160283][T10971] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 556.178999][T10970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2059'. [ 556.282066][T10978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.297948][T10978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.968448][T10989] netlink: 'syz.0.2065': attribute type 9 has an invalid length. [ 556.976854][T10989] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2065'. [ 557.097522][T11000] netlink: 'syz.2.2067': attribute type 3 has an invalid length. [ 557.129076][T11000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2067'. [ 557.310189][T11004] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2070'. [ 557.646204][T11016] netlink: 'syz.3.2075': attribute type 13 has an invalid length. [ 557.708476][T11016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2075'. [ 557.890385][T11025] netlink: 'syz.1.2074': attribute type 2 has an invalid length. [ 558.072925][T11014] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2073'. [ 559.381211][T11049] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2086'. [ 559.456857][T11053] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2084'. [ 559.672605][T11059] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 559.696240][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2089'. [ 559.768460][T11059] device team0 entered promiscuous mode [ 559.787963][T11059] device team_slave_0 entered promiscuous mode [ 559.794602][T11059] device team_slave_1 entered promiscuous mode [ 559.839091][T11059] device wlan1 entered promiscuous mode [ 559.845003][T11059] device geneve1 entered promiscuous mode [ 559.890381][T11059] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 559.992882][T11068] netlink: 'syz.2.2093': attribute type 3 has an invalid length. [ 560.027207][T11068] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2093'. [ 562.547951][T11066] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2092'. [ 562.792978][T11077] netlink: 'syz.4.2096': attribute type 2 has an invalid length. [ 562.806705][T11077] netlink: 'syz.4.2096': attribute type 8 has an invalid length. [ 562.817287][T11077] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2096'. [ 562.990833][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.997295][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.427311][T11092] netlink: 'syz.0.2100': attribute type 25 has an invalid length. [ 563.464727][T11092] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 563.489987][T11095] FAULT_INJECTION: forcing a failure. [ 563.489987][T11095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.506365][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.546945][T11095] CPU: 1 PID: 11095 Comm: syz.3.2101 Not tainted syzkaller #0 [ 563.554532][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.564645][T11095] Call Trace: [ 563.567978][T11095] [ 563.570959][T11095] dump_stack_lvl+0x188/0x24e [ 563.575709][T11095] ? show_regs_print_info+0x12/0x12 [ 563.580982][T11095] ? load_image+0x400/0x400 [ 563.585555][T11095] ? __lock_acquire+0x7d10/0x7d10 [ 563.590663][T11095] should_fail_ex+0x399/0x4d0 [ 563.595410][T11095] _copy_from_user+0x2c/0x170 [ 563.600158][T11095] ___sys_sendmsg+0x1c3/0x360 [ 563.604913][T11095] ? __sys_sendmsg+0x290/0x290 [ 563.609772][T11095] ? __lock_acquire+0x7d10/0x7d10 [ 563.614881][T11095] __se_sys_sendmsg+0x1bb/0x2a0 [ 563.619803][T11095] ? __x64_sys_sendmsg+0x80/0x80 [ 563.624827][T11095] ? lockdep_hardirqs_on+0x94/0x140 [ 563.630109][T11095] do_syscall_64+0x4c/0xa0 [ 563.634623][T11095] ? clear_bhb_loop+0x60/0xb0 [ 563.639354][T11095] ? clear_bhb_loop+0x60/0xb0 [ 563.644079][T11095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.650022][T11095] RIP: 0033:0x7f9f3919ce59 [ 563.654467][T11095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.674194][T11095] RSP: 002b:00007f9f3a0ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.682643][T11095] RAX: ffffffffffffffda RBX: 00007f9f39415fa0 RCX: 00007f9f3919ce59 [ 563.690737][T11095] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000003 [ 563.698735][T11095] RBP: 00007f9f3a0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 563.706737][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.714734][T11095] R13: 00007f9f39416038 R14: 00007f9f39415fa0 R15: 00007fff827582a8 [ 563.722752][T11095] [ 564.488972][T11113] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2108'. [ 564.549853][T11125] netlink: 'syz.1.2110': attribute type 21 has an invalid length. [ 564.568661][T11125] netlink: 'syz.1.2110': attribute type 1 has an invalid length. [ 564.579675][T11125] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2110'. [ 564.616063][T11126] netlink: 'syz.0.2111': attribute type 21 has an invalid length. [ 567.171249][T11160] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 567.201998][T11160] netlink: 'syz.4.2122': attribute type 14 has an invalid length. [ 567.221081][T11160] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2122'. [ 567.323392][T11160] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2122'. [ 567.356716][T11160] bridge_slave_1: default FDB implementation only supports local addresses [ 570.434715][T11162] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2123'. [ 570.622235][T11183] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 570.667837][T11183] netlink: 4438 bytes leftover after parsing attributes in process `syz.4.2130'. [ 570.786710][T11192] netlink: 'syz.4.2130': attribute type 3 has an invalid length. [ 570.810397][T11192] netlink: 567 bytes leftover after parsing attributes in process `syz.4.2130'. [ 570.830291][T11196] tun0: tun_chr_ioctl cmd 1074025681 [ 570.979857][T11193] netlink: 'syz.2.2132': attribute type 19 has an invalid length. [ 571.273710][T11211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 571.298086][T11211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.510759][T11218] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2142'. [ 573.046766][T11251] syz.3.2152 (11251) used obsolete PPPIOCDETACH ioctl [ 573.229821][T11264] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2157'. [ 576.419380][T11289] netlink: 'syz.4.2168': attribute type 27 has an invalid length. [ 576.451056][T11289] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 576.477475][T11289] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2168'. [ 576.692491][T11295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2170'. [ 577.110682][T11301] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2172'. [ 577.184515][T11305] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2173'. [ 579.826720][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2177'. [ 579.912468][T11319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 579.929896][T11319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.401865][T11330] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2182'. [ 580.810396][T11349] netlink: 'syz.0.2190': attribute type 10 has an invalid length. [ 580.827318][T11349] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2190'. [ 581.840312][T11370] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2197'. [ 582.196858][T11386] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 582.218060][T11386] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2203'. [ 582.553882][T11400] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 582.562392][T11400] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 582.573606][T11400] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 582.595665][T11400] netlink: 'syz.1.2208': attribute type 29 has an invalid length. [ 584.395669][T11424] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2214'. [ 584.412669][T11420] tun0: tun_chr_ioctl cmd 1074025681 [ 584.429526][T11425] netlink: 'syz.3.2211': attribute type 19 has an invalid length. [ 584.498533][T11434] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 584.507193][T11434] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2217'. [ 585.457060][T11460] bond0: (slave dummy0): Error: Slave device does not support XDP [ 585.513507][T11460] bond0: (slave dummy0): Error: Slave device does not support XDP [ 586.096499][T11473] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 586.115860][T11473] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2232'. [ 586.296545][T11480] FAULT_INJECTION: forcing a failure. [ 586.296545][T11480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.313946][T11480] CPU: 1 PID: 11480 Comm: syz.1.2235 Not tainted syzkaller #0 [ 586.321504][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.331618][T11480] Call Trace: [ 586.334958][T11480] [ 586.337941][T11480] dump_stack_lvl+0x188/0x24e [ 586.342692][T11480] ? show_regs_print_info+0x12/0x12 [ 586.347960][T11480] ? load_image+0x400/0x400 [ 586.352530][T11480] ? __lock_acquire+0x7d10/0x7d10 [ 586.357638][T11480] should_fail_ex+0x399/0x4d0 [ 586.362468][T11480] _copy_from_iter+0x1c0/0x1130 [ 586.367373][T11480] ? __lock_acquire+0x7d10/0x7d10 [ 586.372473][T11480] ? copyout_mc+0x110/0x110 [ 586.377060][T11480] ? __virt_addr_valid+0x188/0x540 [ 586.382243][T11480] ? __virt_addr_valid+0x188/0x540 [ 586.387422][T11480] ? __virt_addr_valid+0x465/0x540 [ 586.392616][T11480] ? __check_object_size+0x500/0xa40 [ 586.397955][T11480] kernfs_fop_write_iter+0x1a0/0x520 [ 586.403316][T11480] vfs_write+0x4b1/0xa30 [ 586.407651][T11480] ? file_end_write+0x250/0x250 [ 586.412580][T11480] ? __fget_files+0x43d/0x4b0 [ 586.417327][T11480] ? __fdget_pos+0x2ae/0x360 [ 586.421980][T11480] ? ksys_write+0x71/0x250 [ 586.426460][T11480] ksys_write+0x14c/0x250 [ 586.430866][T11480] ? __ia32_sys_read+0x80/0x80 [ 586.435719][T11480] ? lockdep_hardirqs_on+0x94/0x140 [ 586.440991][T11480] do_syscall_64+0x4c/0xa0 [ 586.445482][T11480] ? clear_bhb_loop+0x60/0xb0 [ 586.450227][T11480] ? clear_bhb_loop+0x60/0xb0 [ 586.454981][T11480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.460948][T11480] RIP: 0033:0x7fd77ff9ce59 [ 586.465434][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.485110][T11480] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.493595][T11480] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 586.501637][T11480] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 586.509942][T11480] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 586.517969][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.526003][T11480] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 586.534064][T11480] [ 587.324246][T11508] FAULT_INJECTION: forcing a failure. [ 587.324246][T11508] name failslab, interval 1, probability 0, space 0, times 0 [ 587.343279][T11510] netlink: 'syz.4.2246': attribute type 10 has an invalid length. [ 587.354323][T11510] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2246'. [ 587.364816][T11508] CPU: 0 PID: 11508 Comm: syz.2.2245 Not tainted syzkaller #0 [ 587.372346][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.382455][T11508] Call Trace: [ 587.385784][T11508] [ 587.388761][T11508] dump_stack_lvl+0x188/0x24e [ 587.393509][T11508] ? sctp_sendmsg+0x15b0/0x2940 [ 587.398548][T11508] ? ___sys_sendmsg+0x2a2/0x360 [ 587.403473][T11508] ? show_regs_print_info+0x12/0x12 [ 587.408739][T11508] ? load_image+0x400/0x400 [ 587.413315][T11508] should_fail_ex+0x399/0x4d0 [ 587.418054][T11508] should_failslab+0x5/0x20 [ 587.422605][T11508] slab_pre_alloc_hook+0x59/0x310 [ 587.427667][T11508] ? sctp_add_bind_addr+0x89/0x350 [ 587.432844][T11508] __kmem_cache_alloc_node+0x4f/0x260 [ 587.438269][T11508] ? sctp_add_bind_addr+0x89/0x350 [ 587.443428][T11508] kmalloc_trace+0x26/0xe0 [ 587.447886][T11508] sctp_add_bind_addr+0x89/0x350 [ 587.452868][T11508] sctp_copy_local_addr_list+0x311/0x4e0 [ 587.458617][T11508] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 587.464379][T11508] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 587.470492][T11508] ? sctp_v4_is_any+0x31/0x50 [ 587.475208][T11508] ? sctp_copy_one_addr+0x93/0x660 [ 587.480362][T11508] sctp_bind_addr_copy+0xaf/0x3c0 [ 587.485429][T11508] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 587.491788][T11508] sctp_connect_new_asoc+0x2f5/0x6a0 [ 587.497107][T11508] ? __sctp_connect+0xd80/0xd80 [ 587.501991][T11508] ? __local_bh_enable_ip+0x136/0x1c0 [ 587.507483][T11508] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 587.513097][T11508] ? security_sctp_bind_connect+0x85/0xb0 [ 587.518860][T11508] sctp_sendmsg+0x15b0/0x2940 [ 587.523589][T11508] ? aa_sk_perm+0x811/0x950 [ 587.528139][T11508] ? sctp_getsockopt+0x8a0/0x8a0 [ 587.533113][T11508] ? __might_fault+0xa6/0x120 [ 587.537816][T11508] ? aa_af_perm+0x340/0x340 [ 587.542347][T11508] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 587.548878][T11508] ? inet_sendmsg+0xe5/0x2f0 [ 587.553517][T11508] ? inet_send_prepare+0x260/0x260 [ 587.558655][T11508] ____sys_sendmsg+0x5be/0x970 [ 587.563467][T11508] ? __sys_sendmsg_sock+0x30/0x30 [ 587.568528][T11508] ? __import_iovec+0x315/0x500 [ 587.573415][T11508] ? import_iovec+0x6f/0xa0 [ 587.577949][T11508] ___sys_sendmsg+0x2a2/0x360 [ 587.582667][T11508] ? __sys_sendmsg+0x290/0x290 [ 587.587483][T11508] ? __lock_acquire+0x7d10/0x7d10 [ 587.592564][T11508] __se_sys_sendmsg+0x1bb/0x2a0 [ 587.597455][T11508] ? ct_nmi_exit+0x145/0x1c0 [ 587.602083][T11508] ? __x64_sys_sendmsg+0x80/0x80 [ 587.607075][T11508] ? lockdep_hardirqs_on+0x94/0x140 [ 587.612305][T11508] do_syscall_64+0x4c/0xa0 [ 587.616758][T11508] ? clear_bhb_loop+0x60/0xb0 [ 587.621472][T11508] ? clear_bhb_loop+0x60/0xb0 [ 587.626206][T11508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.632157][T11508] RIP: 0033:0x7f1c29f9ce59 [ 587.636604][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.656245][T11508] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.664694][T11508] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 587.672697][T11508] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 587.680693][T11508] RBP: 00007f1c2ada8090 R08: 0000000000000000 R09: 0000000000000000 [ 587.688694][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.696689][T11508] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 587.704715][T11508] [ 588.589514][T11537] netlink: 'syz.0.2257': attribute type 10 has an invalid length. [ 588.610177][T11537] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2257'. [ 589.334170][T11559] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 589.357854][T11559] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2264'. [ 589.694535][T11569] netlink: 'syz.1.2269': attribute type 10 has an invalid length. [ 589.736049][T11569] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2269'. [ 590.359034][T11581] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2272'. [ 591.448020][T11610] delete_channel: no stack [ 591.602123][T11613] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 591.620220][T11613] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2282'. [ 591.903026][T11625] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2287'. [ 591.968066][T11625] bridge_slave_1: default FDB implementation only supports local addresses [ 592.062929][T11627] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.2288'. [ 592.545197][T11638] FAULT_INJECTION: forcing a failure. [ 592.545197][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 592.565205][T11638] CPU: 1 PID: 11638 Comm: syz.0.2292 Not tainted syzkaller #0 [ 592.572790][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.582914][T11638] Call Trace: [ 592.586250][T11638] [ 592.589233][T11638] dump_stack_lvl+0x188/0x24e [ 592.593986][T11638] ? show_regs_print_info+0x12/0x12 [ 592.599261][T11638] ? load_image+0x400/0x400 [ 592.603837][T11638] ? __might_sleep+0xd0/0xd0 [ 592.608487][T11638] ? __lock_acquire+0x7d10/0x7d10 [ 592.613588][T11638] should_fail_ex+0x399/0x4d0 [ 592.618346][T11638] should_failslab+0x5/0x20 [ 592.623179][T11638] slab_pre_alloc_hook+0x59/0x310 [ 592.628354][T11638] ? tomoyo_encode+0x27e/0x540 [ 592.633184][T11638] __kmem_cache_alloc_node+0x4f/0x260 [ 592.638625][T11638] ? tomoyo_encode+0x27e/0x540 [ 592.643461][T11638] __kmalloc+0xa0/0x240 [ 592.647702][T11638] tomoyo_encode+0x27e/0x540 [ 592.652378][T11638] tomoyo_realpath_from_path+0x58e/0x5d0 [ 592.658094][T11638] ? tomoyo_path_number_perm+0x205/0x650 [ 592.663805][T11638] tomoyo_path_number_perm+0x22f/0x650 [ 592.669345][T11638] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 592.674875][T11638] ? ktime_get+0x7b/0x270 [ 592.679268][T11638] ? ktime_get+0x7b/0x270 [ 592.683675][T11638] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 592.690037][T11638] ? __fget_files+0x28/0x4b0 [ 592.694704][T11638] ? __fget_files+0x28/0x4b0 [ 592.699390][T11638] security_file_ioctl+0x6c/0xa0 [ 592.704402][T11638] __se_sys_ioctl+0x48/0x170 [ 592.709160][T11638] do_syscall_64+0x4c/0xa0 [ 592.713651][T11638] ? clear_bhb_loop+0x60/0xb0 [ 592.718400][T11638] ? clear_bhb_loop+0x60/0xb0 [ 592.723150][T11638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.729130][T11638] RIP: 0033:0x7f1b0a59ce59 [ 592.733605][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.753274][T11638] RSP: 002b:00007f1b0b432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.761748][T11638] RAX: ffffffffffffffda RBX: 00007f1b0a815fa0 RCX: 00007f1b0a59ce59 [ 592.769781][T11638] RDX: 0000200000000640 RSI: 000000000000541b RDI: 0000000000000005 [ 592.777817][T11638] RBP: 00007f1b0b432090 R08: 0000000000000000 R09: 0000000000000000 [ 592.785844][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.793873][T11638] R13: 00007f1b0a816038 R14: 00007f1b0a815fa0 R15: 00007ffdef76b378 [ 592.801927][T11638] [ 592.880730][T11636] delete_channel: no stack [ 592.934015][T11638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.943687][T11637] delete_channel: no stack [ 593.031607][T11645] netlink: 'syz.1.2295': attribute type 8 has an invalid length. [ 593.166596][T11650] netlink: 'syz.4.2297': attribute type 33 has an invalid length. [ 593.206543][T11650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2297'. [ 593.236451][T11653] netlink: 'syz.0.2298': attribute type 10 has an invalid length. [ 593.256106][T11653] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2298'. [ 593.610909][T11661] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2300'. [ 594.749195][T11694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2312'. [ 594.812873][T11695] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 594.838365][T11695] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2311'. [ 594.896161][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2313'. [ 595.830957][T11720] netlink: 'syz.0.2319': attribute type 10 has an invalid length. [ 595.833623][T11726] FAULT_INJECTION: forcing a failure. [ 595.833623][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 595.852346][T11720] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2319'. [ 595.861778][T11726] CPU: 0 PID: 11726 Comm: syz.2.2322 Not tainted syzkaller #0 [ 595.869296][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.879384][T11726] Call Trace: [ 595.882700][T11726] [ 595.885657][T11726] dump_stack_lvl+0x188/0x24e [ 595.890385][T11726] ? sctp_sendmsg+0x15b0/0x2940 [ 595.895273][T11726] ? ___sys_sendmsg+0x2a2/0x360 [ 595.900337][T11726] ? show_regs_print_info+0x12/0x12 [ 595.905663][T11726] ? load_image+0x400/0x400 [ 595.910214][T11726] should_fail_ex+0x399/0x4d0 [ 595.914925][T11726] should_failslab+0x5/0x20 [ 595.919455][T11726] slab_pre_alloc_hook+0x59/0x310 [ 595.924625][T11726] ? sctp_add_bind_addr+0x89/0x350 [ 595.930299][T11726] __kmem_cache_alloc_node+0x4f/0x260 [ 595.935980][T11726] ? sctp_add_bind_addr+0x89/0x350 [ 595.941145][T11726] kmalloc_trace+0x26/0xe0 [ 595.945615][T11726] sctp_add_bind_addr+0x89/0x350 [ 595.950600][T11726] sctp_copy_local_addr_list+0x311/0x4e0 [ 595.956280][T11726] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 595.962040][T11726] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 595.968151][T11726] ? sctp_v4_is_any+0x31/0x50 [ 595.972865][T11726] ? sctp_copy_one_addr+0x93/0x660 [ 595.978016][T11726] sctp_bind_addr_copy+0xaf/0x3c0 [ 595.983120][T11726] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 595.989482][T11726] sctp_connect_new_asoc+0x2f5/0x6a0 [ 595.994801][T11726] ? __sctp_connect+0xd80/0xd80 [ 595.999675][T11726] ? __local_bh_enable_ip+0x136/0x1c0 [ 596.005304][T11726] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 596.010915][T11726] ? security_sctp_bind_connect+0x85/0xb0 [ 596.016678][T11726] sctp_sendmsg+0x15b0/0x2940 [ 596.021403][T11726] ? trace_event_raw_event_lock+0x250/0x250 [ 596.027615][T11726] ? aa_sk_perm+0x811/0x950 [ 596.032300][T11726] ? sctp_getsockopt+0x8a0/0x8a0 [ 596.037373][T11726] ? __might_fault+0xa6/0x120 [ 596.042080][T11726] ? aa_af_perm+0x340/0x340 [ 596.046625][T11726] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 596.053103][T11726] ? inet_sendmsg+0xe5/0x2f0 [ 596.057728][T11726] ? inet_send_prepare+0x260/0x260 [ 596.062873][T11726] ____sys_sendmsg+0x5be/0x970 [ 596.067690][T11726] ? __sys_sendmsg_sock+0x30/0x30 [ 596.072755][T11726] ? __import_iovec+0x315/0x500 [ 596.077642][T11726] ? import_iovec+0x6f/0xa0 [ 596.082175][T11726] ___sys_sendmsg+0x2a2/0x360 [ 596.086896][T11726] ? __sys_sendmsg+0x290/0x290 [ 596.091725][T11726] ? __lock_acquire+0x7d10/0x7d10 [ 596.096816][T11726] __se_sys_sendmsg+0x1bb/0x2a0 [ 596.101708][T11726] ? __x64_sys_sendmsg+0x80/0x80 [ 596.106700][T11726] ? lockdep_hardirqs_on+0x94/0x140 [ 596.111930][T11726] do_syscall_64+0x4c/0xa0 [ 596.116385][T11726] ? clear_bhb_loop+0x60/0xb0 [ 596.121098][T11726] ? clear_bhb_loop+0x60/0xb0 [ 596.125858][T11726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.131788][T11726] RIP: 0033:0x7f1c29f9ce59 [ 596.136233][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.155869][T11726] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.164312][T11726] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 596.172338][T11726] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 596.180339][T11726] RBP: 00007f1c2ada8090 R08: 0000000000000000 R09: 0000000000000000 [ 596.188336][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.196418][T11726] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 596.204429][T11726] [ 596.731585][T11736] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 596.745813][T11736] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2325'. [ 597.786610][T11764] netlink: 'syz.4.2335': attribute type 10 has an invalid length. [ 597.808786][T11764] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2335'. [ 598.165933][T11776] netlink: 'syz.0.2341': attribute type 10 has an invalid length. [ 598.174849][T11776] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2341'. [ 601.705303][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.712854][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.961206][T11816] netlink: 'syz.1.2355': attribute type 10 has an invalid length. [ 603.012335][T11816] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2355'. [ 603.767591][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2365'. [ 604.128717][T11854] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2368'. [ 604.162349][T11856] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 604.178294][T11856] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2369'. [ 605.094919][T11872] netlink: 'syz.0.2377': attribute type 3 has an invalid length. [ 605.123367][T11872] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2377'. [ 605.186434][T11876] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 605.251223][T11876] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2378'. [ 606.397588][T11905] FAULT_INJECTION: forcing a failure. [ 606.397588][T11905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.478580][T11905] CPU: 0 PID: 11905 Comm: syz.2.2386 Not tainted syzkaller #0 [ 606.486148][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.496264][T11905] Call Trace: [ 606.499678][T11905] [ 606.502668][T11905] dump_stack_lvl+0x188/0x24e [ 606.507432][T11905] ? show_regs_print_info+0x12/0x12 [ 606.512708][T11905] ? load_image+0x400/0x400 [ 606.517270][T11905] ? __lock_acquire+0x7d10/0x7d10 [ 606.522358][T11905] ? __local_bh_enable_ip+0x136/0x1c0 [ 606.527788][T11905] should_fail_ex+0x399/0x4d0 [ 606.532524][T11905] _copy_from_user+0x2c/0x170 [ 606.537268][T11905] copy_from_sockptr+0x69/0x80 [ 606.542199][T11905] do_ipv6_setsockopt+0x874/0x3e30 [ 606.547384][T11905] ? sk_dst_reset+0xa0/0xa0 [ 606.551955][T11905] ? mark_lock+0x94/0x320 [ 606.556354][T11905] ? __lock_acquire+0x12f4/0x7d10 [ 606.561454][T11905] ? aa_label_sk_perm+0x456/0x5b0 [ 606.566531][T11905] ? verify_lock_unused+0x140/0x140 [ 606.571799][T11905] ? trace_call_bpf+0xbf/0x6b0 [ 606.576720][T11905] ? aa_sk_perm+0x950/0x950 [ 606.581297][T11905] ? migrate_enable+0x148/0x220 [ 606.586291][T11905] ? __might_sleep+0xd0/0xd0 [ 606.590940][T11905] ? __fget_files+0x28/0x4b0 [ 606.595604][T11905] ? aa_sk_perm+0x81f/0x950 [ 606.600209][T11905] ? aa_af_perm+0x340/0x340 [ 606.604768][T11905] ? __fget_files+0x43d/0x4b0 [ 606.609510][T11905] ? aa_sock_opt_perm+0x74/0x100 [ 606.614485][T11905] ipv6_setsockopt+0x55/0x190 [ 606.619225][T11905] ? sock_common_recvmsg+0x190/0x190 [ 606.624556][T11905] __sys_setsockopt+0x2bf/0x3d0 [ 606.629454][T11905] __x64_sys_setsockopt+0xb1/0xc0 [ 606.634543][T11905] do_syscall_64+0x4c/0xa0 [ 606.639011][T11905] ? clear_bhb_loop+0x60/0xb0 [ 606.643733][T11905] ? clear_bhb_loop+0x60/0xb0 [ 606.648451][T11905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.654400][T11905] RIP: 0033:0x7f1c29f9ce59 [ 606.658851][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.678503][T11905] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 606.686963][T11905] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 606.694976][T11905] RDX: 0000000000000015 RSI: 0000000000000029 RDI: 0000000000000003 [ 606.702984][T11905] RBP: 00007f1c2ada8090 R08: 00000000000000b9 R09: 0000000000000000 [ 606.710990][T11905] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 606.718999][T11905] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 606.727017][T11905] [ 607.067634][T11919] netlink: 'syz.3.2392': attribute type 9 has an invalid length. [ 607.130399][T11918] netlink: 'syz.3.2392': attribute type 9 has an invalid length. [ 607.202674][T11924] netlink: 'syz.3.2392': attribute type 10 has an invalid length. [ 607.230551][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.238335][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.284231][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.291815][T11924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.301011][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.308298][T11924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.404676][T11924] team0: Port device bridge0 added [ 607.563480][T11936] netlink: 'syz.0.2397': attribute type 3 has an invalid length. [ 607.603758][T11936] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2397'. [ 608.231167][T11960] FAULT_INJECTION: forcing a failure. [ 608.231167][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 608.291249][T11960] CPU: 1 PID: 11960 Comm: syz.4.2406 Not tainted syzkaller #0 [ 608.298824][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.308984][T11960] Call Trace: [ 608.312319][T11960] [ 608.315312][T11960] dump_stack_lvl+0x188/0x24e [ 608.320077][T11960] ? verify_lock_unused+0x140/0x140 [ 608.325337][T11960] ? show_regs_print_info+0x12/0x12 [ 608.330587][T11960] ? load_image+0x400/0x400 [ 608.335147][T11960] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 608.341835][T11960] should_fail_ex+0x399/0x4d0 [ 608.346560][T11960] should_failslab+0x5/0x20 [ 608.351104][T11960] slab_pre_alloc_hook+0x59/0x310 [ 608.356180][T11960] kmem_cache_alloc+0x56/0x2f0 [ 608.360998][T11960] ? skb_clone+0x1e7/0x370 [ 608.365479][T11960] skb_clone+0x1e7/0x370 [ 608.369769][T11960] ? pfkey_broadcast_one+0x7d/0x340 [ 608.375052][T11960] pfkey_broadcast_one+0x9b/0x340 [ 608.380128][T11960] ? pfkey_broadcast+0x39c/0x3e0 [ 608.385126][T11960] pfkey_broadcast+0x3a9/0x3e0 [ 608.389934][T11960] ? pfkey_broadcast+0x48/0x3e0 [ 608.394843][T11960] pfkey_flush+0x202/0x4a0 [ 608.399308][T11960] ? pfkey_register+0x880/0x880 [ 608.404197][T11960] ? kmem_cache_free+0xf7/0x290 [ 608.409094][T11960] ? pfkey_broadcast+0x3c0/0x3e0 [ 608.414091][T11960] pfkey_sendmsg+0xbef/0x1090 [ 608.418814][T11960] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 608.425488][T11960] ? pfkey_release+0x310/0x310 [ 608.430353][T11960] ? aa_sock_msg_perm+0x94/0x150 [ 608.435347][T11960] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 608.440673][T11960] ? security_socket_sendmsg+0x7c/0xa0 [ 608.446184][T11960] ? pfkey_release+0x310/0x310 [ 608.450995][T11960] ____sys_sendmsg+0x5be/0x970 [ 608.455823][T11960] ? __sys_sendmsg_sock+0x30/0x30 [ 608.460900][T11960] ? __import_iovec+0x315/0x500 [ 608.465803][T11960] ? import_iovec+0x6f/0xa0 [ 608.470353][T11960] ___sys_sendmsg+0x2a2/0x360 [ 608.475091][T11960] ? __sys_sendmsg+0x290/0x290 [ 608.479964][T11960] ? __lock_acquire+0x7d10/0x7d10 [ 608.485082][T11960] __se_sys_sendmsg+0x1bb/0x2a0 [ 608.490003][T11960] ? __x64_sys_sendmsg+0x80/0x80 [ 608.495020][T11960] ? lockdep_hardirqs_on+0x94/0x140 [ 608.500262][T11960] do_syscall_64+0x4c/0xa0 [ 608.504723][T11960] ? clear_bhb_loop+0x60/0xb0 [ 608.509443][T11960] ? clear_bhb_loop+0x60/0xb0 [ 608.514172][T11960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.520114][T11960] RIP: 0033:0x7f2107f9ce59 [ 608.524584][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.544258][T11960] RSP: 002b:00007f2108e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.552727][T11960] RAX: ffffffffffffffda RBX: 00007f2108215fa0 RCX: 00007f2107f9ce59 [ 608.560739][T11960] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 608.568754][T11960] RBP: 00007f2108e65090 R08: 0000000000000000 R09: 0000000000000000 [ 608.576769][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.584774][T11960] R13: 00007f2108216038 R14: 00007f2108215fa0 R15: 00007ffeb8c8e388 [ 608.592813][T11960] [ 609.194269][T11977] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 609.226793][T11977] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2412'. [ 610.638119][T11999] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 610.808789][T12001] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2419'. [ 612.010608][T12020] netlink: 'syz.3.2425': attribute type 10 has an invalid length. [ 612.056140][T12020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2425'. [ 612.469971][T12028] netlink: 'syz.3.2427': attribute type 10 has an invalid length. [ 612.484709][T12025] netlink: 'syz.1.2426': attribute type 3 has an invalid length. [ 612.533461][T12025] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2426'. [ 612.702881][T12028] team0: Port device wlan1 added [ 613.052473][T12041] netlink: 'syz.3.2431': attribute type 4 has an invalid length. [ 613.091947][T12041] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2431'. [ 613.246596][T12042] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2430'. [ 614.345234][T12061] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 614.379246][T12061] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2437'. [ 615.186054][T12072] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 615.198007][T12072] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2441'. [ 615.413463][T12082] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2445'. [ 616.506556][T12096] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 616.515287][T12096] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2449'. [ 616.716687][T12102] netlink: 'syz.0.2452': attribute type 10 has an invalid length. [ 616.839702][T12105] FAULT_INJECTION: forcing a failure. [ 616.839702][T12105] name failslab, interval 1, probability 0, space 0, times 0 [ 616.893585][T12105] CPU: 0 PID: 12105 Comm: syz.2.2451 Not tainted syzkaller #0 [ 616.901144][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.911252][T12105] Call Trace: [ 616.914575][T12105] [ 616.917576][T12105] dump_stack_lvl+0x188/0x24e [ 616.922320][T12105] ? show_regs_print_info+0x12/0x12 [ 616.927584][T12105] ? load_image+0x400/0x400 [ 616.932148][T12105] ? __might_sleep+0xd0/0xd0 [ 616.936873][T12105] ? __lock_acquire+0x7d10/0x7d10 [ 616.941952][T12105] ? __lock_acquire+0x12f4/0x7d10 [ 616.947045][T12105] ? verify_lock_unused+0x140/0x140 [ 616.952328][T12105] should_fail_ex+0x399/0x4d0 [ 616.957064][T12105] should_failslab+0x5/0x20 [ 616.961618][T12105] slab_pre_alloc_hook+0x59/0x310 [ 616.966713][T12105] kmem_cache_alloc_node+0x5a/0x320 [ 616.971981][T12105] ? __alloc_skb+0xfc/0x7e0 [ 616.976556][T12105] __alloc_skb+0xfc/0x7e0 [ 616.980956][T12105] ? __lock_acquire+0x12f4/0x7d10 [ 616.986659][T12105] alloc_skb_with_frags+0xa7/0x710 [ 616.991860][T12105] ? __lock_acquire+0x12f4/0x7d10 [ 616.996957][T12105] sock_alloc_send_pskb+0x87f/0x9a0 [ 617.002241][T12105] ? sock_kzfree_s+0x50/0x50 [ 617.007423][T12105] ? dev_get_by_index+0x1e/0x2d0 [ 617.012538][T12105] ? dev_get_by_index+0x1e/0x2d0 [ 617.017592][T12105] packet_sendmsg+0x32b0/0x4e60 [ 617.022534][T12105] ? __might_sleep+0xd0/0xd0 [ 617.027195][T12105] ? verify_lock_unused+0x140/0x140 [ 617.032487][T12105] ? aa_sk_perm+0x81f/0x950 [ 617.037190][T12105] ? packet_getsockopt+0x9a0/0x9a0 [ 617.042499][T12105] ? aa_sock_msg_perm+0x94/0x150 [ 617.047506][T12105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 617.052860][T12105] ? security_socket_sendmsg+0x7c/0xa0 [ 617.058480][T12105] ? packet_getsockopt+0x9a0/0x9a0 [ 617.063652][T12105] ____sys_sendmsg+0x5be/0x970 [ 617.068490][T12105] ? __sys_sendmsg_sock+0x30/0x30 [ 617.073587][T12105] ? __import_iovec+0x315/0x500 [ 617.078504][T12105] ? import_iovec+0x6f/0xa0 [ 617.083071][T12105] ___sys_sendmsg+0x2a2/0x360 [ 617.087829][T12105] ? __sys_sendmsg+0x290/0x290 [ 617.092789][T12105] ? trace_call_bpf+0xbf/0x6b0 [ 617.097652][T12105] __se_sys_sendmsg+0x1bb/0x2a0 [ 617.102580][T12105] ? __x64_sys_sendmsg+0x80/0x80 [ 617.107598][T12105] ? lockdep_hardirqs_on+0x94/0x140 [ 617.112862][T12105] do_syscall_64+0x4c/0xa0 [ 617.117336][T12105] ? clear_bhb_loop+0x60/0xb0 [ 617.122071][T12105] ? clear_bhb_loop+0x60/0xb0 [ 617.126812][T12105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.132766][T12105] RIP: 0033:0x7f1c29f9ce59 [ 617.137244][T12105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.156910][T12105] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.165384][T12105] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 617.173411][T12105] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 617.181434][T12105] RBP: 00007f1c2ada8090 R08: 0000000000000000 R09: 0000000000000000 [ 617.189462][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.197505][T12105] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 617.205547][T12105] [ 617.460988][T12112] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 617.497859][T12112] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2455'. [ 617.706823][T12118] netlink: 'syz.2.2456': attribute type 3 has an invalid length. [ 617.767083][T12122] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2457'. [ 617.789599][T12118] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2456'. [ 618.082901][T12133] netlink: 'syz.4.2462': attribute type 10 has an invalid length. [ 618.093450][T12133] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2462'. [ 618.694972][T12151] device syzkaller0 entered promiscuous mode [ 621.386893][T12158] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2471'. [ 621.397003][T12162] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2472'. [ 621.406473][T12163] netlink: 'syz.4.2472': attribute type 10 has an invalid length. [ 621.417944][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2472'. [ 621.556317][T12166] netlink: 'syz.0.2473': attribute type 3 has an invalid length. [ 621.577484][T12166] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2473'. [ 621.814290][T12177] netlink: 'syz.2.2478': attribute type 10 has an invalid length. [ 621.829142][T12177] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2478'. [ 622.433392][T12191] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2482'. [ 623.116757][T12200] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2484'. [ 624.380179][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389741][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.651847][T12207] netlink: 'syz.4.2487': attribute type 3 has an invalid length. [ 624.667983][T12207] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2487'. [ 626.361488][T12235] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2497'. [ 626.379569][T12234] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 626.388407][T12234] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2490'. [ 627.560009][T12247] netlink: 'syz.0.2502': attribute type 3 has an invalid length. [ 627.568557][T12247] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2502'. [ 627.816860][T12249] device syzkaller0 entered promiscuous mode [ 628.006415][T12253] netlink: 'syz.3.2505': attribute type 13 has an invalid length. [ 628.015311][T12253] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2505'. [ 628.047844][T12253] erspan0: refused to change device tx_queue_len [ 630.591181][T12255] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2504'. [ 630.600526][T12264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2508'. [ 630.780798][T12271] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 630.793545][T12271] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2510'. [ 631.075255][T12289] netlink: 'syz.3.2516': attribute type 3 has an invalid length. [ 631.083532][T12289] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2516'. [ 631.103067][T12283] device syzkaller0 entered promiscuous mode [ 633.890397][T12304] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2520'. [ 634.196958][T12310] FAULT_INJECTION: forcing a failure. [ 634.196958][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 634.211085][T12310] CPU: 0 PID: 12310 Comm: syz.4.2522 Not tainted syzkaller #0 [ 634.218601][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.228743][T12310] Call Trace: [ 634.232062][T12310] [ 634.235025][T12310] dump_stack_lvl+0x188/0x24e [ 634.239767][T12310] ? show_regs_print_info+0x12/0x12 [ 634.245027][T12310] ? load_image+0x400/0x400 [ 634.249580][T12310] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.255802][T12310] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.262072][T12310] should_fail_ex+0x399/0x4d0 [ 634.266903][T12310] should_failslab+0x5/0x20 [ 634.271457][T12310] slab_pre_alloc_hook+0x59/0x310 [ 634.276721][T12310] kmem_cache_alloc+0x56/0x2f0 [ 634.281608][T12310] ? __inet_hash_connect+0x832/0x18e0 [ 634.287093][T12310] __inet_hash_connect+0x832/0x18e0 [ 634.292374][T12310] ? lock_chain_count+0x20/0x20 [ 634.297301][T12310] ? inet_hash_connect+0x130/0x130 [ 634.302577][T12310] ? inet_bhash2_reset_saddr+0x80/0x80 [ 634.308102][T12310] ? rcu_is_watching+0x11/0xa0 [ 634.312948][T12310] tcp_v4_connect+0xc96/0x18e0 [ 634.317878][T12310] ? tcp_twsk_unique+0x990/0x990 [ 634.322884][T12310] __inet_stream_connect+0x242/0xe10 [ 634.328240][T12310] ? inet_dgram_connect+0x360/0x360 [ 634.333768][T12310] tcp_sendmsg_fastopen+0x38f/0x600 [ 634.339039][T12310] tcp_sendmsg_locked+0x3616/0x3a90 [ 634.344311][T12310] ? mark_lock+0x94/0x320 [ 634.348716][T12310] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.354767][T12310] ? lock_chain_count+0x20/0x20 [ 634.359700][T12310] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.365925][T12310] ? lockdep_hardirqs_on+0x94/0x140 [ 634.371192][T12310] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 634.377429][T12310] ? tcp_sendmsg+0x1d/0x40 [ 634.381916][T12310] ? tcp_set_state+0x520/0x520 [ 634.386745][T12310] ? __local_bh_enable_ip+0x13e/0x1c0 [ 634.392260][T12310] tcp_sendmsg+0x2b/0x40 [ 634.396642][T12310] ? inet_send_prepare+0x260/0x260 [ 634.401798][T12310] ____sys_sendmsg+0x5be/0x970 [ 634.406633][T12310] ? __sys_sendmsg_sock+0x30/0x30 [ 634.411714][T12310] ? __import_iovec+0x315/0x500 [ 634.416611][T12310] ? import_iovec+0x6f/0xa0 [ 634.421161][T12310] ___sys_sendmsg+0x2a2/0x360 [ 634.425905][T12310] ? __sys_sendmsg+0x290/0x290 [ 634.430770][T12310] __se_sys_sendmsg+0x1bb/0x2a0 [ 634.435684][T12310] ? __x64_sys_sendmsg+0x80/0x80 [ 634.440689][T12310] ? syscall_enter_from_user_mode+0x2a/0x80 [ 634.446629][T12310] do_syscall_64+0x4c/0xa0 [ 634.451100][T12310] ? clear_bhb_loop+0x60/0xb0 [ 634.455811][T12310] ? clear_bhb_loop+0x60/0xb0 [ 634.460545][T12310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.466487][T12310] RIP: 0033:0x7f2107f9ce59 [ 634.470968][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.490625][T12310] RSP: 002b:00007f2108e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.499519][T12310] RAX: ffffffffffffffda RBX: 00007f2108215fa0 RCX: 00007f2107f9ce59 [ 634.507633][T12310] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000016 [ 634.515648][T12310] RBP: 00007f2108e65090 R08: 0000000000000000 R09: 0000000000000000 [ 634.523656][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.531668][T12310] R13: 00007f2108216038 R14: 00007f2108215fa0 R15: 00007ffeb8c8e388 [ 634.539702][T12310] [ 634.704749][T12320] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 634.718790][T12320] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2525'. [ 634.741233][T12307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2521'. [ 636.035295][T12333] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2530'. [ 636.084877][T12346] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2533'. [ 636.324645][T12351] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2545'. [ 636.786932][T12361] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 636.839533][T12361] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2538'. [ 637.695993][T12367] netlink: 'syz.2.2540': attribute type 4 has an invalid length. [ 637.706126][T12367] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2540'. [ 641.013091][T12386] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.2547'. [ 641.253302][T12396] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2549'. [ 641.424589][T12391] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2546'. [ 641.567300][T12408] netlink: 'syz.1.2552': attribute type 10 has an invalid length. [ 641.577201][T12408] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2552'. [ 642.393985][T12417] netlink: 'syz.3.2554': attribute type 3 has an invalid length. [ 642.444035][T12417] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2554'. [ 645.612590][T12437] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2563'. [ 645.985808][T12446] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 646.020555][T12446] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2564'. [ 649.865567][T12486] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 649.887292][T12486] netlink: 'syz.1.2582': attribute type 11 has an invalid length. [ 649.908059][T12486] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.2582'. [ 649.994031][T12489] netlink: 'syz.2.2573': attribute type 3 has an invalid length. [ 650.020244][T12489] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2573'. [ 650.311009][T12502] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2575'. [ 650.398039][T12503] netlink: 'syz.2.2578': attribute type 10 has an invalid length. [ 650.406532][T12503] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2578'. [ 651.005979][T12510] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2580'. [ 652.190665][T12544] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 652.217890][T12544] netlink: 'syz.3.2589': attribute type 11 has an invalid length. [ 652.231697][T12544] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.2589'. [ 654.284004][T12547] netlink: 'syz.1.2590': attribute type 3 has an invalid length. [ 654.309524][T12547] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2590'. [ 654.396342][T12553] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2592'. [ 654.425727][T12554] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 654.448007][T12554] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2593'. [ 654.634639][T12562] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2607'. [ 654.757042][T12559] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.2594'. [ 655.770857][T12582] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2603'. [ 659.080136][T12589] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 659.108196][T12589] netlink: 'syz.4.2606': attribute type 11 has an invalid length. [ 659.116328][T12589] netlink: 5145 bytes leftover after parsing attributes in process `syz.4.2606'. [ 659.142154][T12592] netlink: 'syz.0.2616': attribute type 2 has an invalid length. [ 659.317354][T12600] device syzkaller0 entered promiscuous mode [ 659.367851][T12592] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2616'. [ 659.542182][T12605] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 659.551631][T12605] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2609'. [ 659.561207][T12600] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 659.594481][T12600] device bridge_slave_1 left promiscuous mode [ 659.608289][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.633822][T12600] team0: Port device bridge_slave_1 added [ 665.069377][T12648] netlink: 'syz.3.2624': attribute type 10 has an invalid length. [ 665.095787][T12648] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2624'. [ 665.142305][T12654] sctp: [Deprecated]: syz.4.2627 (pid 12654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.142305][T12654] Use struct sctp_sack_info instead [ 665.696824][T12674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2632'. [ 665.786238][T12674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2632'. [ 666.507771][T12677] netlink: 'syz.4.2633': attribute type 5 has an invalid length. [ 666.532506][T12678] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2633'. [ 666.567897][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 666.598174][T12678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.512467][T12695] netlink: 'syz.4.2637': attribute type 2 has an invalid length. [ 667.559622][T12699] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2639'. [ 667.776060][T12704] device syzkaller0 entered promiscuous mode [ 667.823645][T12695] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2637'. [ 667.970188][T12707] netlink: 'syz.4.2637': attribute type 10 has an invalid length. [ 668.046109][T12707] device bridge_slave_1 left promiscuous mode [ 668.063455][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.096454][T12707] device bridge_slave_1 entered promiscuous mode [ 668.106477][T12707] team0: Port device bridge_slave_1 added [ 668.117398][T12710] netlink: 'syz.2.2641': attribute type 10 has an invalid length. [ 668.125651][T12710] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2641'. [ 668.161495][T12719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2644'. [ 668.213626][T12719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2644'. [ 668.682665][T12733] netlink: 'syz.3.2649': attribute type 3 has an invalid length. [ 668.701796][T12733] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2649'. [ 671.436583][T12749] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 671.489722][T12749] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2656'. [ 671.688946][T12753] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 671.752130][T12753] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2654'. [ 671.882928][T12760] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2659'. [ 671.988892][T12759] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2658'. [ 671.995864][T12753] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2654'. [ 672.011070][T12756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2654'. [ 672.021321][T12753] netlink: zone id is out of range [ 672.031545][T12753] netlink: zone id is out of range [ 672.036997][T12753] netlink: zone id is out of range [ 672.051462][T12753] netlink: zone id is out of range [ 672.057361][T12753] netlink: zone id is out of range [ 672.107034][T12753] netlink: zone id is out of range [ 672.159215][T12753] netlink: zone id is out of range [ 672.164532][T12753] netlink: zone id is out of range [ 672.202694][T12756] netlink: 'syz.2.2654': attribute type 2 has an invalid length. [ 672.210868][T12753] netlink: zone id is out of range [ 672.216246][T12753] netlink: zone id is out of range [ 672.260790][T12756] netlink: 192312 bytes leftover after parsing attributes in process `syz.2.2654'. [ 672.777984][T12776] netlink: 'syz.2.2663': attribute type 3 has an invalid length. [ 672.799015][T12776] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2663'. [ 675.760021][T12796] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 675.771644][T12796] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2669'. [ 676.613856][T12811] netlink: 'syz.3.2673': attribute type 9 has an invalid length. [ 676.647218][T12811] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2673'. [ 677.098329][T12820] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2676'. [ 677.181607][T12825] netlink: 'syz.3.2679': attribute type 3 has an invalid length. [ 677.250746][T12825] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2679'. [ 680.053142][T12841] netlink: 'syz.1.2683': attribute type 10 has an invalid length. [ 680.104397][T12841] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2683'. [ 680.624683][T12859] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2690'. [ 680.760353][T12863] netlink: 'syz.2.2691': attribute type 3 has an invalid length. [ 680.785861][T12863] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2691'. [ 681.435945][T12873] FAULT_INJECTION: forcing a failure. [ 681.435945][T12873] name failslab, interval 1, probability 0, space 0, times 0 [ 681.505823][T12873] CPU: 0 PID: 12873 Comm: syz.1.2695 Not tainted syzkaller #0 [ 681.513389][T12873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.523503][T12873] Call Trace: [ 681.526821][T12873] [ 681.529799][T12873] dump_stack_lvl+0x188/0x24e [ 681.534550][T12873] ? show_regs_print_info+0x12/0x12 [ 681.539813][T12873] ? load_image+0x400/0x400 [ 681.544376][T12873] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 681.550432][T12873] should_fail_ex+0x399/0x4d0 [ 681.555165][T12873] should_failslab+0x5/0x20 [ 681.559724][T12873] slab_pre_alloc_hook+0x59/0x310 [ 681.564824][T12873] kmem_cache_alloc+0x56/0x2f0 [ 681.569647][T12873] ? __build_skb+0x2a/0x3c0 [ 681.574231][T12873] __build_skb+0x2a/0x3c0 [ 681.578633][T12873] build_skb+0x1e/0x230 [ 681.582864][T12873] bpf_prog_test_run_skb+0x37e/0x12a0 [ 681.588285][T12873] ? __fget_files+0x28/0x4b0 [ 681.592916][T12873] ? __fget_files+0x43d/0x4b0 [ 681.597644][T12873] ? cpu_online+0xa0/0xa0 [ 681.602017][T12873] bpf_prog_test_run+0x31e/0x390 [ 681.607003][T12873] __sys_bpf+0x62b/0x780 [ 681.611287][T12873] ? bpf_link_show_fdinfo+0x380/0x380 [ 681.616718][T12873] ? lock_chain_count+0x20/0x20 [ 681.621618][T12873] __x64_sys_bpf+0x78/0x90 [ 681.626072][T12873] do_syscall_64+0x4c/0xa0 [ 681.630546][T12873] ? clear_bhb_loop+0x60/0xb0 [ 681.635295][T12873] ? clear_bhb_loop+0x60/0xb0 [ 681.640027][T12873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.645966][T12873] RIP: 0033:0x7fd77ff9ce59 [ 681.650415][T12873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.670239][T12873] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 681.678692][T12873] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 681.686695][T12873] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 681.694700][T12873] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 681.702700][T12873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.710699][T12873] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 681.718844][T12873] [ 681.909028][T12879] netlink: 'syz.3.2697': attribute type 10 has an invalid length. [ 681.917443][T12879] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2697'. [ 682.056188][T12881] netlink: 'syz.4.2699': attribute type 21 has an invalid length. [ 682.367737][T12889] netlink: 'syz.0.2701': attribute type 21 has an invalid length. [ 682.386132][T12889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2701'. [ 682.407902][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'. [ 684.639004][T12894] FAULT_INJECTION: forcing a failure. [ 684.639004][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 684.674527][T12894] CPU: 0 PID: 12894 Comm: syz.1.2702 Not tainted syzkaller #0 [ 684.682168][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.692267][T12894] Call Trace: [ 684.695586][T12894] [ 684.698550][T12894] dump_stack_lvl+0x188/0x24e [ 684.703280][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.709490][T12894] ? show_regs_print_info+0x12/0x12 [ 684.714746][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.720963][T12894] should_fail_ex+0x399/0x4d0 [ 684.725698][T12894] should_failslab+0x5/0x20 [ 684.730245][T12894] slab_pre_alloc_hook+0x59/0x310 [ 684.735311][T12894] kmem_cache_alloc+0x56/0x2f0 [ 684.740107][T12894] ? skb_clone+0x1e7/0x370 [ 684.744566][T12894] skb_clone+0x1e7/0x370 [ 684.748846][T12894] bpf_clone_redirect+0x163/0x4a0 [ 684.753997][T12894] bpf_prog_bf17f61a12bc632f+0x56/0x5b [ 684.759483][T12894] ? ct_nmi_exit+0x145/0x1c0 [ 684.764104][T12894] ? ct_irq_exit_irqson+0x113/0x170 [ 684.769353][T12894] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 684.775378][T12894] ? lock_chain_count+0x20/0x20 [ 684.780296][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.786514][T12894] ? lockdep_hardirqs_on+0x94/0x140 [ 684.791746][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.797933][T12894] ? __cant_sleep+0x220/0x220 [ 684.802647][T12894] ? bpf_test_timer_continue+0x142/0x380 [ 684.808313][T12894] bpf_test_run+0x2b6/0x830 [ 684.812844][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.819035][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.825230][T12894] ? convert___skb_to_skb+0x580/0x580 [ 684.830633][T12894] ? eth_get_headlen+0x200/0x200 [ 684.835688][T12894] ? __build_skb+0x257/0x3c0 [ 684.840320][T12894] ? convert___skb_to_skb+0x3d/0x580 [ 684.845639][T12894] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 684.851055][T12894] ? cpu_online+0xa0/0xa0 [ 684.855417][T12894] bpf_prog_test_run+0x31e/0x390 [ 684.860405][T12894] __sys_bpf+0x62b/0x780 [ 684.864685][T12894] ? bpf_link_show_fdinfo+0x380/0x380 [ 684.870105][T12894] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.876327][T12894] __x64_sys_bpf+0x78/0x90 [ 684.880782][T12894] do_syscall_64+0x4c/0xa0 [ 684.885227][T12894] ? clear_bhb_loop+0x60/0xb0 [ 684.889936][T12894] ? clear_bhb_loop+0x60/0xb0 [ 684.894661][T12894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.900583][T12894] RIP: 0033:0x7fd77ff9ce59 [ 684.905026][T12894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.924658][T12894] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.933103][T12894] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 684.941108][T12894] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 684.949104][T12894] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 684.957106][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.965104][T12894] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 684.973112][T12894] [ 685.182169][T12900] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2703'. [ 685.311386][T12905] netlink: 'syz.4.2704': attribute type 3 has an invalid length. [ 685.363620][T12905] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2704'. [ 685.662573][T12918] netlink: 'syz.4.2710': attribute type 10 has an invalid length. [ 685.690702][T12918] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2710'. [ 685.860523][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.866933][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.630430][T12953] netlink: 'syz.1.2721': attribute type 3 has an invalid length. [ 687.660639][T12960] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 687.705191][T12953] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2721'. [ 687.719467][T12960] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2724'. [ 687.782987][T12951] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2720'. [ 687.803874][T12960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2724'. [ 687.822945][T12960] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2724'. [ 687.832832][T12960] net_ratelimit: 6 callbacks suppressed [ 687.832848][T12960] netlink: zone id is out of range [ 687.856837][T12967] netlink: 'syz.4.2723': attribute type 2 has an invalid length. [ 687.887793][T12967] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2723'. [ 687.897196][T12960] netlink: zone id is out of range [ 687.916908][T12960] netlink: zone id is out of range [ 687.932177][T12960] netlink: zone id is out of range [ 687.962006][T12961] netlink: 'syz.0.2724': attribute type 2 has an invalid length. [ 687.980453][T12960] netlink: zone id is out of range [ 687.985663][T12960] netlink: zone id is out of range [ 687.988395][T12961] netlink: 192312 bytes leftover after parsing attributes in process `syz.0.2724'. [ 688.056111][T12960] netlink: zone id is out of range [ 688.108997][T12960] netlink: zone id is out of range [ 688.128068][T12960] netlink: zone id is out of range [ 688.133477][T12960] netlink: zone id is out of range [ 688.688104][T12983] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2731'. [ 689.157341][T12988] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.2733'. [ 689.338742][T12995] netlink: 'syz.2.2732': attribute type 4 has an invalid length. [ 689.360352][T12995] netlink: 'syz.2.2732': attribute type 9 has an invalid length. [ 689.377838][T12995] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2732'. [ 689.467430][T12997] netlink: 'syz.1.2736': attribute type 3 has an invalid length. [ 689.565989][T13002] netlink: 'syz.3.2737': attribute type 2 has an invalid length. [ 689.610745][T13002] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 689.787066][T13014] netlink: 'syz.4.2739': attribute type 1 has an invalid length. [ 692.917060][T13094] validate_nla: 2 callbacks suppressed [ 692.917101][T13094] netlink: 'syz.1.2767': attribute type 3 has an invalid length. [ 692.933416][T13094] __nla_validate_parse: 11 callbacks suppressed [ 692.933455][T13094] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2767'. [ 693.801150][ T4286] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 694.124804][T13123] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.2777'. [ 695.009610][T13142] netlink: 'syz.3.2783': attribute type 10 has an invalid length. [ 695.039081][T13142] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2783'. [ 695.572528][T13151] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2787'. [ 695.601529][T13162] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.2790'. [ 696.326531][T13182] netlink: 'syz.4.2798': attribute type 10 has an invalid length. [ 696.360557][T13182] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2798'. [ 696.393149][T13184] netlink: 'syz.2.2797': attribute type 21 has an invalid length. [ 696.428412][T13184] netlink: 'syz.2.2797': attribute type 1 has an invalid length. [ 696.527789][T13184] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2797'. [ 696.710688][T13188] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2799'. [ 697.964389][T13213] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.2804'. [ 698.724281][T13228] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 698.758450][T13228] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2809'. [ 699.034984][T13221] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2807'. [ 699.251703][T13239] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.2814'. [ 699.356050][T13239] net_ratelimit: 23 callbacks suppressed [ 699.356065][T13239] openvswitch: netlink: Flow actions attr not present in new flow. [ 699.615824][T13244] netlink: 'syz.3.2816': attribute type 3 has an invalid length. [ 699.717830][T13244] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2816'. [ 700.261653][T13256] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.2819'. [ 700.475286][T13263] netlink: 'syz.0.2821': attribute type 4 has an invalid length. [ 700.511011][T13263] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2821'. [ 700.616488][T13263] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 700.792920][T13273] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2824'. [ 701.248157][T13283] netlink: 'syz.2.2827': attribute type 10 has an invalid length. [ 701.286871][T13121] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 701.539114][T13278] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2825'. [ 701.766464][T13294] netlink: 'syz.2.2832': attribute type 3 has an invalid length. [ 701.812295][T13294] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2832'. [ 701.930122][T13300] openvswitch: netlink: Flow actions attr not present in new flow. [ 703.193642][T13324] __nla_validate_parse: 2 callbacks suppressed [ 703.193663][T13324] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2840'. [ 703.278085][T13322] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2840'. [ 703.375565][T13329] FAULT_INJECTION: forcing a failure. [ 703.375565][T13329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.389841][T13329] CPU: 1 PID: 13329 Comm: syz.0.2843 Not tainted syzkaller #0 [ 703.397378][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.407579][T13329] Call Trace: [ 703.410899][T13329] [ 703.413879][T13329] dump_stack_lvl+0x188/0x24e [ 703.418716][T13329] ? show_regs_print_info+0x12/0x12 [ 703.423988][T13329] ? load_image+0x400/0x400 [ 703.428559][T13329] ? __lock_acquire+0x7d10/0x7d10 [ 703.433734][T13329] should_fail_ex+0x399/0x4d0 [ 703.438454][T13329] _copy_from_user+0x2c/0x170 [ 703.443177][T13329] do_ip_setsockopt+0x30d/0x2ed0 [ 703.448160][T13329] ? ip_sock_set_pktinfo+0x60/0x60 [ 703.453338][T13329] ? aa_sk_perm+0x81f/0x950 [ 703.457910][T13329] ? aa_af_perm+0x340/0x340 [ 703.462555][T13329] ? __fget_files+0x43d/0x4b0 [ 703.467279][T13329] ? aa_sock_opt_perm+0x74/0x100 [ 703.472255][T13329] ip_setsockopt+0x5d/0x100 [ 703.476806][T13329] ? sock_common_recvmsg+0x190/0x190 [ 703.482131][T13329] __sys_setsockopt+0x2bf/0x3d0 [ 703.487083][T13329] __x64_sys_setsockopt+0xb1/0xc0 [ 703.492529][T13329] do_syscall_64+0x4c/0xa0 [ 703.496999][T13329] ? clear_bhb_loop+0x60/0xb0 [ 703.501711][T13329] ? clear_bhb_loop+0x60/0xb0 [ 703.506452][T13329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.512384][T13329] RIP: 0033:0x7f1b0a59ce59 [ 703.516830][T13329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.536469][T13329] RSP: 002b:00007f1b0b432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 703.544910][T13329] RAX: ffffffffffffffda RBX: 00007f1b0a815fa0 RCX: 00007f1b0a59ce59 [ 703.552908][T13329] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000003 [ 703.560903][T13329] RBP: 00007f1b0b432090 R08: 000000000000a4ff R09: 0000000000000000 [ 703.568901][T13329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.576897][T13329] R13: 00007f1b0a816038 R14: 00007f1b0a815fa0 R15: 00007ffdef76b378 [ 703.584937][T13329] [ 703.799256][T13336] netlink: 'syz.4.2845': attribute type 10 has an invalid length. [ 703.826118][T13336] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2845'. [ 704.279746][T13353] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.2849'. [ 704.395263][T13356] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2851'. [ 705.424936][T13372] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.2853'. [ 705.589344][T13372] openvswitch: netlink: Flow actions attr not present in new flow. [ 705.656146][T13360] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2854'. [ 706.023916][T13382] netlink: 'syz.4.2859': attribute type 10 has an invalid length. [ 706.077843][T13382] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2859'. [ 706.313561][T13387] netlink: 'syz.1.2871': attribute type 10 has an invalid length. [ 706.348622][T13387] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2871'. [ 706.630011][T13405] netlink: 'syz.4.2865': attribute type 10 has an invalid length. [ 706.691386][T13401] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.2864'. [ 708.356423][T13431] delete_channel: no stack [ 708.378915][T13431] delete_channel: no stack [ 708.462706][T13427] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.2872'. [ 708.476819][T13434] netlink: 'syz.4.2875': attribute type 10 has an invalid length. [ 708.489748][T13434] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2875'. [ 708.515836][T13436] FAULT_INJECTION: forcing a failure. [ 708.515836][T13436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.631647][T13436] CPU: 0 PID: 13436 Comm: syz.1.2874 Not tainted syzkaller #0 [ 708.639217][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.649346][T13436] Call Trace: [ 708.652670][T13436] [ 708.655643][T13436] dump_stack_lvl+0x188/0x24e [ 708.660389][T13436] ? show_regs_print_info+0x12/0x12 [ 708.665665][T13436] ? load_image+0x400/0x400 [ 708.670220][T13436] ? __lock_acquire+0x7d10/0x7d10 [ 708.675306][T13436] should_fail_ex+0x399/0x4d0 [ 708.680035][T13436] _copy_to_user+0x2c/0x130 [ 708.684592][T13436] bpf_test_finish+0x266/0x600 [ 708.689413][T13436] ? convert___skb_to_skb+0x580/0x580 [ 708.694842][T13436] ? convert_skb_to___skb+0x420/0x420 [ 708.700278][T13436] ? __build_skb+0x257/0x3c0 [ 708.704936][T13436] bpf_prog_test_run_skb+0xc99/0x12a0 [ 708.710375][T13436] ? cpu_online+0xa0/0xa0 [ 708.714761][T13436] bpf_prog_test_run+0x31e/0x390 [ 708.719764][T13436] __sys_bpf+0x62b/0x780 [ 708.724153][T13436] ? bpf_link_show_fdinfo+0x380/0x380 [ 708.729598][T13436] ? lock_chain_count+0x20/0x20 [ 708.734529][T13436] __x64_sys_bpf+0x78/0x90 [ 708.739010][T13436] do_syscall_64+0x4c/0xa0 [ 708.743501][T13436] ? clear_bhb_loop+0x60/0xb0 [ 708.748279][T13436] ? clear_bhb_loop+0x60/0xb0 [ 708.753021][T13436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.758976][T13436] RIP: 0033:0x7fd77ff9ce59 [ 708.763444][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.783093][T13436] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.791653][T13436] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 708.799688][T13436] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 708.807698][T13436] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 708.815795][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.823933][T13436] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 708.831962][T13436] [ 709.441947][T13451] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.2878'. [ 710.309292][T13459] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2883'. [ 710.324273][T13469] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2886'. [ 710.347733][T13470] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2886'. [ 710.451739][T13121] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 710.459421][T13121] Bluetooth: hci0: Unable to find connection with handle 0x5900 [ 710.864216][T13479] netlink: 'syz.3.2888': attribute type 10 has an invalid length. [ 710.927362][T13479] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2888'. [ 711.072564][T13484] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.2890'. [ 711.725356][T13496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2894'. [ 711.762741][T13504] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.2895'. [ 712.081932][T13509] netlink: 'syz.1.2898': attribute type 3 has an invalid length. [ 712.950657][T13519] netlink: 'syz.0.2902': attribute type 10 has an invalid length. [ 713.826132][T13535] netlink: 'syz.3.2908': attribute type 3 has an invalid length. [ 713.869145][T13535] __nla_validate_parse: 2 callbacks suppressed [ 713.869183][T13535] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2908'. [ 713.922013][T13532] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2907'. [ 714.366791][T13547] netlink: 'syz.3.2912': attribute type 3 has an invalid length. [ 714.397333][T13550] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2913'. [ 714.444741][T13547] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2912'. [ 714.467937][T13553] IPv6: NLM_F_CREATE should be specified when creating new route [ 714.475890][T13553] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2911'. [ 714.716066][T13556] netlink: 'syz.0.2915': attribute type 27 has an invalid length. [ 714.731671][T13556] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2915'. [ 714.887060][T13561] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 714.896073][T13561] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2916'. [ 715.495985][T13568] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2919'. [ 716.947573][T13591] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2924'. [ 717.230504][T13604] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 717.271241][T13604] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2930'. [ 717.937751][T13614] netlink: 'syz.1.2934': attribute type 10 has an invalid length. [ 718.479097][T13614] device team_slave_0 left promiscuous mode [ 718.944001][T13614] team0 (unregistering): Port device team_slave_0 removed [ 718.971820][T13614] device team_slave_1 left promiscuous mode [ 718.994813][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 719.025810][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 719.034677][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 719.045078][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 719.053131][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 719.062696][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 719.201423][T13614] team0 (unregistering): Port device team_slave_1 removed [ 719.221328][T13614] device wlan1 left promiscuous mode [ 719.309277][T13614] team0 (unregistering): Port device wlan1 removed [ 719.321263][T13614] device geneve1 left promiscuous mode [ 719.422472][T13614] team0 (unregistering): Port device geneve1 removed [ 719.536637][T13612] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2933'. [ 720.275596][T13633] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2939'. [ 720.507269][T13642] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2943'. [ 720.600645][T13625] chnl_net:caif_netlink_parms(): no params data found [ 720.812751][T13648] netlink: 'syz.1.2944': attribute type 10 has an invalid length. [ 720.821342][T13648] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2944'. [ 720.851683][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.863972][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.873103][T13625] device bridge_slave_0 entered promiscuous mode [ 720.901164][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.909094][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.929665][T13625] device bridge_slave_1 entered promiscuous mode [ 720.992843][T13625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.004639][T13625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.038500][T13625] team0: Port device team_slave_0 added [ 721.065698][T13625] team0: Port device team_slave_1 added [ 721.097824][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 721.185134][T13625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.210656][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.324235][T13625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.402208][T13625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.448295][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.584585][T13625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.702269][T13657] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2948'. [ 721.838851][ T8327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.888191][T13625] device hsr_slave_0 entered promiscuous mode [ 721.916282][T13625] device hsr_slave_1 entered promiscuous mode [ 721.956766][T13625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.977328][T13625] Cannot create hsr debugfs directory [ 722.051896][ T8327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.192105][ T8327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.249803][T13663] netlink: 'syz.3.2950': attribute type 10 has an invalid length. [ 722.744704][T13663] team0 (unregistering): Port device team_slave_0 removed [ 722.921829][T13663] team0 (unregistering): Port device team_slave_1 removed [ 722.957451][T13663] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.968629][T13663] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.109872][T13663] team0 (unregistering): Port device bridge0 removed [ 723.160837][T13663] team0 (unregistering): Port device wlan1 removed [ 723.177747][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 723.233422][ T8327] bond0: (slave netdevsim0): Releasing backup interface [ 723.244938][ T8327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.268072][T13675] netlink: 'syz.1.2955': attribute type 10 has an invalid length. [ 723.275979][T13675] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2955'. [ 723.379904][T13678] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2956'. [ 723.763873][T13691] FAULT_INJECTION: forcing a failure. [ 723.763873][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 723.765813][ T8327] tipc: Left network mode [ 723.778875][T13691] CPU: 1 PID: 13691 Comm: syz.2.2960 Not tainted syzkaller #0 [ 723.788847][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.798958][T13691] Call Trace: [ 723.802284][T13691] [ 723.805249][T13691] dump_stack_lvl+0x188/0x24e [ 723.809973][T13691] ? show_regs_print_info+0x12/0x12 [ 723.815209][T13691] ? load_image+0x400/0x400 [ 723.819752][T13691] ? __might_sleep+0xd0/0xd0 [ 723.824369][T13691] ? __lock_acquire+0x7d10/0x7d10 [ 723.829432][T13691] should_fail_ex+0x399/0x4d0 [ 723.834149][T13691] should_failslab+0x5/0x20 [ 723.838689][T13691] slab_pre_alloc_hook+0x59/0x310 [ 723.843747][T13691] ? prepend_path+0xa68/0xc20 [ 723.848533][T13691] ? tomoyo_encode+0x27e/0x540 [ 723.853347][T13691] __kmem_cache_alloc_node+0x4f/0x260 [ 723.858755][T13691] ? tomoyo_encode+0x27e/0x540 [ 723.863576][T13691] __kmalloc+0xa0/0x240 [ 723.867774][T13691] tomoyo_encode+0x27e/0x540 [ 723.872404][T13691] tomoyo_realpath_from_path+0x58e/0x5d0 [ 723.878084][T13691] ? tomoyo_path_number_perm+0x205/0x650 [ 723.883756][T13691] tomoyo_path_number_perm+0x22f/0x650 [ 723.889252][T13691] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 723.894744][T13691] ? ksys_write+0x1c0/0x250 [ 723.899310][T13691] ? common_file_perm+0x171/0x1c0 [ 723.904391][T13691] ? __fget_files+0x28/0x4b0 [ 723.909032][T13691] ? __fget_files+0x28/0x4b0 [ 723.913672][T13691] security_file_ioctl+0x6c/0xa0 [ 723.918648][T13691] __se_sys_ioctl+0x48/0x170 [ 723.923271][T13691] do_syscall_64+0x4c/0xa0 [ 723.927721][T13691] ? clear_bhb_loop+0x60/0xb0 [ 723.932429][T13691] ? clear_bhb_loop+0x60/0xb0 [ 723.937144][T13691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.943075][T13691] RIP: 0033:0x7f1c29f9ce59 [ 723.947516][T13691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.967154][T13691] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.975643][T13691] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 723.983642][T13691] RDX: 00002000000013c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 723.991640][T13691] RBP: 00007f1c2ada8090 R08: 0000000000000000 R09: 0000000000000000 [ 723.999638][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.007645][T13691] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 724.015665][T13691] [ 724.087932][T13691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.176103][T13684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2959'. [ 725.183791][T13722] netlink: 'syz.1.2968': attribute type 10 has an invalid length. [ 725.199081][T13722] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2968'. [ 725.261226][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 725.421286][T13726] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2969'. [ 725.442906][T13730] netlink: 'syz.0.2967': attribute type 10 has an invalid length. [ 725.602343][T13730] team0 (unregistering): Port device team_slave_0 removed [ 725.653305][T13730] team0 (unregistering): Port device team_slave_1 removed [ 725.680585][T13730] team0 (unregistering): Port device bridge0 removed [ 725.780057][T13730] team0 (unregistering): Port device geneve1 removed [ 725.856789][T13730] team0 (unregistering): Port device bridge_slave_1 removed [ 725.910390][T13739] netlink: 'syz.2.2971': attribute type 21 has an invalid length. [ 725.919384][T13739] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2971'. [ 726.515488][T13743] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2973'. [ 726.560484][T13625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.694633][ T8327] device gretap0 left promiscuous mode [ 726.727765][ T8327] Ÿë: port 1(gretap0) entered disabled state [ 726.760159][T13625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 726.774433][T13745] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2972'. [ 726.791970][T13625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 726.856890][T13625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.337914][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 727.886372][T13758] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2977'. [ 728.037020][T13625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.220648][ T8327] team0: Port device wlan1 removed [ 728.293032][T13771] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2989'. [ 728.357325][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 728.377024][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.541449][T13625] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.579408][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 728.600873][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.641734][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.649048][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.703320][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 728.719042][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 728.738513][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.765266][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.773562][ T8310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.782799][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 728.793097][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 728.803850][ T8327] device veth0_to_team left promiscuous mode [ 728.811795][ T8327] Ÿë: port 2(veth0_to_team) entered disabled state [ 728.827489][ T8327] device hsr_slave_0 left promiscuous mode [ 728.840206][ T8327] device hsr_slave_1 left promiscuous mode [ 728.847408][ T8327] bridge0: port 5(hsr0) entered disabled state [ 728.858079][ T8327] bridge0: port 4(team0) entered disabled state [ 728.866537][ T8327] device bridge_slave_0 left promiscuous mode [ 728.875021][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.911614][ T8327] device veth1_macvtap left promiscuous mode [ 728.918391][ T8327] device veth0_macvtap left promiscuous mode [ 729.431986][ T8327] device team_slave_1 left promiscuous mode [ 729.440810][ T8327] team0 (unregistering): Port device team_slave_1 removed [ 729.483016][ T8327] device team_slave_0 left promiscuous mode [ 729.490047][ T8327] team0 (unregistering): Port device team_slave_0 removed [ 729.536276][ T8327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.618355][ T8327] device bridge_slave_1 left promiscuous mode [ 729.625688][ T8327] team0 (unregistering): Port device bridge_slave_1 removed [ 729.877227][ T8327] bond0 (unregistering): Released all slaves [ 729.970475][T13788] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2983'. [ 729.999991][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 730.013971][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 730.066883][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 730.079763][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 730.120111][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 730.146457][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 730.156018][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 730.174892][T13625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.193860][T13625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 730.211747][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 730.222597][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 730.239625][T13798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2987'. [ 730.371840][T13802] netlink: 'syz.2.2986': attribute type 10 has an invalid length. [ 730.494677][T13802] team0 (unregistering): Port device team_slave_0 removed [ 730.542213][T13802] team0 (unregistering): Port device team_slave_1 removed [ 730.572279][T13795] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2996'. [ 731.130772][T13811] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2991'. [ 731.311686][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 731.328466][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 731.374850][T13625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.542932][T13820] netlink: 'syz.2.2995': attribute type 10 has an invalid length. [ 731.551841][T13820] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2995'. [ 732.691790][T13839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3000'. [ 733.021366][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.038793][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.081376][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 733.117391][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 733.142731][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 733.151863][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 733.165900][T13625] device veth0_vlan entered promiscuous mode [ 733.180040][T13853] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3001'. [ 733.203474][T13854] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3005'. [ 733.285528][T13625] device veth1_vlan entered promiscuous mode [ 733.393188][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 733.416892][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 733.453997][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 733.474309][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 733.505569][T13858] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 733.541009][T13858] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3006'. [ 733.595637][T13625] device veth0_macvtap entered promiscuous mode [ 733.631654][T13625] device veth1_macvtap entered promiscuous mode [ 733.734477][T13625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.753631][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 733.768424][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 733.791677][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 733.816208][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 733.974669][T13625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.020757][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 734.035877][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 734.068755][T13625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.092189][T13625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.119876][T13625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.143745][T13625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.711455][ T8310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.741424][ T8310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.846474][ T8327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 736.871921][ T8312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.882535][ T8312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.916832][ T8327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 736.967013][T13877] FAULT_INJECTION: forcing a failure. [ 736.967013][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 736.997899][T13877] CPU: 1 PID: 13877 Comm: syz.1.3012 Not tainted syzkaller #0 [ 737.005583][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.015707][T13877] Call Trace: [ 737.019142][T13877] [ 737.022225][T13877] dump_stack_lvl+0x188/0x24e [ 737.027531][T13877] ? show_regs_print_info+0x12/0x12 [ 737.033818][T13877] ? load_image+0x400/0x400 [ 737.038675][T13877] ? __might_sleep+0xd0/0xd0 [ 737.043516][T13877] ? __lock_acquire+0x7d10/0x7d10 [ 737.048894][T13877] should_fail_ex+0x399/0x4d0 [ 737.053647][T13877] should_failslab+0x5/0x20 [ 737.058211][T13877] slab_pre_alloc_hook+0x59/0x310 [ 737.063296][T13877] ? __kmem_cache_alloc_node+0x140/0x260 [ 737.069000][T13877] kmem_cache_alloc_node+0x5a/0x320 [ 737.074283][T13877] ? __alloc_skb+0xfc/0x7e0 [ 737.078870][T13877] __alloc_skb+0xfc/0x7e0 [ 737.083258][T13877] ? ip_make_skb+0x153/0x440 [ 737.087919][T13877] __ip_append_data+0x26b8/0x3850 [ 737.093036][T13877] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 737.097951][T13877] ? ip_setup_cork+0x850/0x850 [ 737.102795][T13877] ? ip_setup_cork+0x532/0x850 [ 737.107624][T13877] ip_make_skb+0x227/0x440 [ 737.112114][T13877] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 737.117034][T13877] ? ip_flush_pending_frames+0x250/0x250 [ 737.122759][T13877] udp_sendmsg+0x1afb/0x23b0 [ 737.127433][T13877] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 737.132368][T13877] ? udp_cmsg_send+0x350/0x350 [ 737.137427][T13877] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 737.143673][T13877] ? lock_chain_count+0x20/0x20 [ 737.148659][T13877] ? __local_bh_enable_ip+0x136/0x1c0 [ 737.154103][T13877] ? _local_bh_enable+0xa0/0xa0 [ 737.159050][T13877] ? inet_sendmsg+0x147/0x2f0 [ 737.163823][T13877] ? inet_sendmsg+0x147/0x2f0 [ 737.168575][T13877] ? inet_send_prepare+0x260/0x260 [ 737.173756][T13877] ____sys_sendmsg+0x5be/0x970 [ 737.178602][T13877] ? __sys_sendmsg_sock+0x30/0x30 [ 737.183769][T13877] ? __import_iovec+0x315/0x500 [ 737.188778][T13877] ? import_iovec+0x6f/0xa0 [ 737.193348][T13877] ___sys_sendmsg+0x2a2/0x360 [ 737.201205][T13877] ? __sys_sendmsg+0x290/0x290 [ 737.206970][T13877] ? __lock_acquire+0x7d10/0x7d10 [ 737.214038][T13877] __se_sys_sendmsg+0x1bb/0x2a0 [ 737.218976][T13877] ? __x64_sys_sendmsg+0x80/0x80 [ 737.224096][T13877] ? lockdep_hardirqs_on+0x94/0x140 [ 737.229362][T13877] do_syscall_64+0x4c/0xa0 [ 737.233957][T13877] ? clear_bhb_loop+0x60/0xb0 [ 737.238751][T13877] ? clear_bhb_loop+0x60/0xb0 [ 737.243503][T13877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.249497][T13877] RIP: 0033:0x7fd77ff9ce59 [ 737.253977][T13877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.273644][T13877] RSP: 002b:00007fd780f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.282130][T13877] RAX: ffffffffffffffda RBX: 00007fd780215fa0 RCX: 00007fd77ff9ce59 [ 737.290171][T13877] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000016 [ 737.298197][T13877] RBP: 00007fd780f34090 R08: 0000000000000000 R09: 0000000000000000 [ 737.306222][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.314333][T13877] R13: 00007fd780216038 R14: 00007fd780215fa0 R15: 00007ffd503eb308 [ 737.322382][T13877] [ 737.554132][T13883] netlink: 'syz.4.2935': attribute type 3 has an invalid length. [ 737.575633][T13883] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2935'. [ 737.982024][T13897] netlink: 'syz.0.3017': attribute type 2 has an invalid length. [ 738.004744][T13894] netlink: 'syz.2.3018': attribute type 10 has an invalid length. [ 738.087860][T13894] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3018'. [ 738.358511][T13897] device 0 entered promiscuous mode [ 738.537112][T13121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 738.572649][T13121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 738.581794][T13121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 738.592434][T13121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 738.600547][T13121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 738.608234][T13121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 738.916793][ T4934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.125937][ T4934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.232947][T13909] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3023'. [ 739.416760][ T4934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.442824][T13923] FAULT_INJECTION: forcing a failure. [ 739.442824][T13923] name failslab, interval 1, probability 0, space 0, times 0 [ 739.489418][T13923] CPU: 1 PID: 13923 Comm: syz.4.3027 Not tainted syzkaller #0 [ 739.496973][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 739.507059][T13923] Call Trace: [ 739.510366][T13923] [ 739.513326][T13923] dump_stack_lvl+0x188/0x24e [ 739.518132][T13923] ? sctp_sendmsg+0x15b0/0x2940 [ 739.523022][T13923] ? ___sys_sendmsg+0x2a2/0x360 [ 739.527913][T13923] ? show_regs_print_info+0x12/0x12 [ 739.533158][T13923] ? load_image+0x400/0x400 [ 739.537700][T13923] should_fail_ex+0x399/0x4d0 [ 739.542435][T13923] should_failslab+0x5/0x20 [ 739.546968][T13923] slab_pre_alloc_hook+0x59/0x310 [ 739.552196][T13923] ? sctp_add_bind_addr+0x89/0x350 [ 739.557371][T13923] __kmem_cache_alloc_node+0x4f/0x260 [ 739.562783][T13923] ? sctp_add_bind_addr+0x89/0x350 [ 739.567933][T13923] kmalloc_trace+0x26/0xe0 [ 739.572387][T13923] sctp_add_bind_addr+0x89/0x350 [ 739.577371][T13923] sctp_copy_local_addr_list+0x311/0x4e0 [ 739.583053][T13923] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 739.588984][T13923] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 739.595101][T13923] ? sctp_v6_is_any+0x60/0x70 [ 739.599841][T13923] ? sctp_copy_one_addr+0x93/0x660 [ 739.605039][T13923] sctp_bind_addr_copy+0xaf/0x3c0 [ 739.610125][T13923] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 739.616501][T13923] sctp_connect_new_asoc+0x2f5/0x6a0 [ 739.621834][T13923] ? __sctp_connect+0xd80/0xd80 [ 739.626712][T13923] ? __local_bh_enable_ip+0x136/0x1c0 [ 739.632116][T13923] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 739.637700][T13923] ? security_sctp_bind_connect+0x85/0xb0 [ 739.643463][T13923] sctp_sendmsg+0x15b0/0x2940 [ 739.648231][T13923] ? sctp_getsockopt+0x8a0/0x8a0 [ 739.653231][T13923] ? __lock_acquire+0x7d10/0x7d10 [ 739.658304][T13923] ? aa_af_perm+0x340/0x340 [ 739.662854][T13923] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 739.669492][T13923] ? inet_sendmsg+0xe5/0x2f0 [ 739.674117][T13923] ? inet_send_prepare+0x260/0x260 [ 739.679357][T13923] ____sys_sendmsg+0x5be/0x970 [ 739.684204][T13923] ? __sys_sendmsg_sock+0x30/0x30 [ 739.689276][T13923] ? __import_iovec+0x315/0x500 [ 739.694184][T13923] ? import_iovec+0x6f/0xa0 [ 739.698725][T13923] ___sys_sendmsg+0x2a2/0x360 [ 739.703450][T13923] ? __sys_sendmsg+0x290/0x290 [ 739.708618][T13923] ? __lock_acquire+0x7d10/0x7d10 [ 739.713709][T13923] __se_sys_sendmsg+0x1bb/0x2a0 [ 739.718605][T13923] ? __x64_sys_sendmsg+0x80/0x80 [ 739.723683][T13923] ? lockdep_hardirqs_on+0x94/0x140 [ 739.728918][T13923] do_syscall_64+0x4c/0xa0 [ 739.733982][T13923] ? clear_bhb_loop+0x60/0xb0 [ 739.738712][T13923] ? clear_bhb_loop+0x60/0xb0 [ 739.743430][T13923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.749448][T13923] RIP: 0033:0x7f8f0539ce59 [ 739.753900][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.773731][T13923] RSP: 002b:00007f8f06232028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.782197][T13923] RAX: ffffffffffffffda RBX: 00007f8f05615fa0 RCX: 00007f8f0539ce59 [ 739.790381][T13923] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 739.798396][T13923] RBP: 00007f8f06232090 R08: 0000000000000000 R09: 0000000000000000 [ 739.806400][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.814591][T13923] R13: 00007f8f05616038 R14: 00007f8f05615fa0 R15: 00007fff08aa8698 [ 739.823353][T13923] [ 739.860395][T13918] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3024'. [ 740.040204][ T4934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.062704][T13927] netlink: 'syz.2.3028': attribute type 3 has an invalid length. [ 740.130772][T13927] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3028'. [ 740.387079][T13937] netlink: 'syz.4.3031': attribute type 10 has an invalid length. [ 740.416539][T13937] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3031'. [ 740.569200][T13944] netlink: 'syz.2.3034': attribute type 2 has an invalid length. [ 740.699674][T13121] Bluetooth: hci1: command 0x0409 tx timeout [ 741.427312][T13944] device 0 entered promiscuous mode [ 741.514817][T13906] chnl_net:caif_netlink_parms(): no params data found [ 742.461016][T13906] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.497998][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.506504][T13906] device bridge_slave_0 entered promiscuous mode [ 742.640283][T13906] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.647475][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.686335][T13906] device bridge_slave_1 entered promiscuous mode [ 742.761359][T13977] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3039'. [ 742.779051][T13121] Bluetooth: hci1: command 0x041b tx timeout [ 742.868028][T13987] netlink: 'syz.0.3041': attribute type 3 has an invalid length. [ 742.876019][T13987] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 742.944914][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.071577][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.124031][T13986] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3042'. [ 743.202946][T13994] netlink: 'syz.4.3043': attribute type 3 has an invalid length. [ 743.216246][T13906] team0: Port device team_slave_0 added [ 743.228231][T13994] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3043'. [ 743.235496][T13906] team0: Port device team_slave_1 added [ 743.357694][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.389921][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.417302][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.443183][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.502662][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.622939][T14005] netlink: 'syz.4.3045': attribute type 2 has an invalid length. [ 743.633680][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.735412][T14006] netlink: 'syz.2.3046': attribute type 10 has an invalid length. [ 743.767927][T14006] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3046'. [ 743.911428][T14005] device 0 entered promiscuous mode [ 744.434483][T13906] device hsr_slave_0 entered promiscuous mode [ 744.461961][T13906] device hsr_slave_1 entered promiscuous mode [ 744.511503][T13906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.521617][T13906] Cannot create hsr debugfs directory [ 744.840647][ T4934] device hsr_slave_0 left promiscuous mode [ 744.857751][T13121] Bluetooth: hci1: command 0x040f tx timeout [ 744.864091][ T4934] device hsr_slave_1 left promiscuous mode [ 745.706933][T14039] netlink: 'syz.4.3055': attribute type 3 has an invalid length. [ 745.727501][T14039] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3055'. [ 746.206084][ T4934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.339253][ T4934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.688308][ T4934] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 746.723555][ T4934] bond0 (unregistering): Released all slaves [ 746.937853][T13121] Bluetooth: hci1: command 0x0419 tx timeout [ 747.071195][T14049] netlink: 'syz.2.3058': attribute type 10 has an invalid length. [ 747.111140][T14049] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3058'. [ 747.260667][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.267088][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.275989][T14067] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 748.283989][T14067] #PF: supervisor instruction fetch in kernel mode [ 748.290512][T14067] #PF: error_code(0x0010) - not-present page [ 748.296520][T14067] PGD 5dc3e067 P4D 5dc3e067 PUD 0 [ 748.301700][T14067] Oops: 0010 [#1] PREEMPT SMP KASAN [ 748.306942][T14067] CPU: 1 PID: 14067 Comm: syz.2.3061 Not tainted syzkaller #0 [ 748.314521][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.324603][T14067] RIP: 0010:0x0 [ 748.328103][T14067] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 748.335503][T14067] RSP: 0018:ffffc900032c7458 EFLAGS: 00010246 [ 748.341600][T14067] RAX: 1ffffffff1629747 RBX: 1ffff92000658e9c RCX: 0000000000000001 [ 748.349597][T14067] RDX: ffffc900032c7500 RSI: 0000000000000001 RDI: ffff888059532000 [ 748.357598][T14067] RBP: ffffc900032c7570 R08: ffff88805953203f R09: 1ffff1100b2a6407 [ 748.365609][T14067] R10: dffffc0000000000 R11: ffffed100b2a6408 R12: ffffe8ffffd46b10 [ 748.373606][T14067] R13: ffffffff8b14ba38 R14: 0000000000000000 R15: ffff888059532000 [ 748.381611][T14067] FS: 00007f1c2ada86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 748.390572][T14067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.397185][T14067] CR2: ffffffffffffffd6 CR3: 0000000047231000 CR4: 00000000003506e0 [ 748.405187][T14067] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.413181][T14067] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 748.421183][T14067] Call Trace: [ 748.424491][T14067] [ 748.427442][T14067] bond_xdp_xmit+0x31e/0x550 [ 748.432152][T14067] ? bond_xdp_xmit+0x94/0x550 [ 748.436867][T14067] ? bond_xdp+0x850/0x850 [ 748.441227][T14067] ? __next_zones_zonelist+0x99/0x120 [ 748.446632][T14067] bq_xmit_all+0xd3f/0x11b0 [ 748.451267][T14067] ? zone_statistics+0x170/0x170 [ 748.456257][T14067] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 748.462279][T14067] ? __dev_flush+0x1b0/0x1b0 [ 748.466911][T14067] ? __alloc_pages_bulk+0x49a/0x920 [ 748.472146][T14067] ? xdp_test_run_init_page+0x33b/0x440 [ 748.477808][T14067] ? memcpy+0x3c/0x60 [ 748.481816][T14067] ? rcu_is_watching+0x11/0xa0 [ 748.486615][T14067] ? bq_enqueue+0x2ee/0x3d0 [ 748.491166][T14067] ? rcu_is_watching+0x11/0xa0 [ 748.496014][T14067] ? trace_xdp_redirect+0xb3/0x2b0 [ 748.501175][T14067] __dev_flush+0xbf/0x1b0 [ 748.505550][T14067] xdp_do_flush+0xa/0x20 [ 748.509821][T14067] bpf_test_run_xdp_live+0x1545/0x1a90 [ 748.515324][T14067] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 748.520998][T14067] ? xdp_convert_md_to_buff+0x330/0x330 [ 748.526596][T14067] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 748.532872][T14067] ? bpf_test_init+0x119/0x140 [ 748.537670][T14067] ? xdp_convert_md_to_buff+0x5b/0x330 [ 748.543168][T14067] bpf_prog_test_run_xdp+0x736/0xf10 [ 748.548490][T14067] ? dev_put+0x80/0x80 [ 748.552590][T14067] ? dev_put+0x80/0x80 [ 748.556684][T14067] bpf_prog_test_run+0x31e/0x390 [ 748.561653][T14067] __sys_bpf+0x62b/0x780 [ 748.565934][T14067] ? bpf_link_show_fdinfo+0x380/0x380 [ 748.571366][T14067] ? lock_chain_count+0x20/0x20 [ 748.576275][T14067] __x64_sys_bpf+0x78/0x90 [ 748.580736][T14067] do_syscall_64+0x4c/0xa0 [ 748.585196][T14067] ? clear_bhb_loop+0x60/0xb0 [ 748.589911][T14067] ? clear_bhb_loop+0x60/0xb0 [ 748.594713][T14067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.600647][T14067] RIP: 0033:0x7f1c29f9ce59 [ 748.605086][T14067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.624724][T14067] RSP: 002b:00007f1c2ada8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.633236][T14067] RAX: ffffffffffffffda RBX: 00007f1c2a215fa0 RCX: 00007f1c29f9ce59 [ 748.641268][T14067] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 748.649273][T14067] RBP: 00007f1c2a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.657283][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.665288][T14067] R13: 00007f1c2a216038 R14: 00007f1c2a215fa0 R15: 00007fff23fe53e8 [ 748.673322][T14067] [ 748.676475][T14067] Modules linked in: [ 748.680402][T14067] CR2: 0000000000000000 [ 748.684589][T14067] ---[ end trace 0000000000000000 ]--- [ 748.690074][T14067] RIP: 0010:0x0 [ 748.693576][T14067] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 748.700968][T14067] RSP: 0018:ffffc900032c7458 EFLAGS: 00010246 [ 748.707065][T14067] RAX: 1ffffffff1629747 RBX: 1ffff92000658e9c RCX: 0000000000000001 [ 748.715076][T14067] RDX: ffffc900032c7500 RSI: 0000000000000001 RDI: ffff888059532000 [ 748.723078][T14067] RBP: ffffc900032c7570 R08: ffff88805953203f R09: 1ffff1100b2a6407 [ 748.731118][T14067] R10: dffffc0000000000 R11: ffffed100b2a6408 R12: ffffe8ffffd46b10 [ 748.739114][T14067] R13: ffffffff8b14ba38 R14: 0000000000000000 R15: ffff888059532000 [ 748.747125][T14067] FS: 00007f1c2ada86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 748.756094][T14067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.762706][T14067] CR2: ffffffffffffffd6 CR3: 0000000047231000 CR4: 00000000003506e0 [ 748.770719][T14067] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.778713][T14067] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 748.786707][T14067] Kernel panic - not syncing: Fatal exception in interrupt [ 748.794480][T14067] Kernel Offset: disabled [ 748.798848][T14067] Rebooting in 86400 seconds..