last executing test programs: 10m24.036950639s ago: executing program 2 (id=1057): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r6, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r11 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) close(0xffffffffffffffff) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r8, @ANYRESOCT=r11, @ANYBLOB="f0f08029abb24f6c5e58e7d1b64589c184a172812d6cf8cf869e284c11e7727899cc3089e323c288ad9c3635c1dd9f46f5f6863f3f51585bbc06a014b992114d2bbe1d077d2d4bc50e789529832570b5a2805fd536613149a300803527e4bccca1897df1d4b83126f017ea6293afdd25f9d076a880631a124bf1609a80582ec175d76ab7f787b071452e83ebbb6fe849cbbf306065ad7d7e3b8fb93e069127ce99c7b9719da08bc1077d705f36bdb565911513685f7bf0a313a31f59dcbc", @ANYRES8=r2, @ANYRES64=r10, @ANYRES16=r3, @ANYRES8=r4, @ANYRES8=r12, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m22.468316123s ago: executing program 2 (id=1065): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/23, 0x17}, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe"], 0xffdd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8994, &(0x7f0000000080)) 10m20.0693263s ago: executing program 2 (id=1074): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x4b2a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x104200, 0xffffffffffffffff, 0x5, 0x0, 0x7fffffff}, r1, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000380), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x12, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x4000001) 10m19.328968851s ago: executing program 2 (id=1077): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10m19.040889346s ago: executing program 2 (id=1080): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000200000000000000000000000200000000000000"], 0x0, 0x56}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x9200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x1, 0x2, 0x0, 0x0, 0xd, 0x0, 0xf1a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 10m18.458492604s ago: executing program 2 (id=1086): socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000001b374af13bf7a5700000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) socket$kcm(0x21, 0x2, 0x2) r4 = syz_clone(0x40000200, &(0x7f0000001240), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x40, 0x5, 0x81, 0x6, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc6, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2140, 0x6, 0x217b, 0x2, 0xa000000000000000, 0x7fffffff, 0x7, 0x0, 0x10, 0x0, 0x5}, r4, 0x6, 0xffffffffffffffff, 0xb) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) 10m3.157158439s ago: executing program 32 (id=1086): socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000001b374af13bf7a5700000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) socket$kcm(0x21, 0x2, 0x2) r4 = syz_clone(0x40000200, &(0x7f0000001240), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x40, 0x5, 0x81, 0x6, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc6, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2140, 0x6, 0x217b, 0x2, 0xa000000000000000, 0x7fffffff, 0x7, 0x0, 0x10, 0x0, 0x5}, r4, 0x6, 0xffffffffffffffff, 0xb) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)="f2", 0x1}], 0x1}, 0x40084) 11.456321267s ago: executing program 4 (id=3331): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002100)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="56ef9f54a67e3689d894aef022948fb4489297d182b04dd846478a25f14c49e7cd2d3d64818fa4c6136fa3794e7ecb0738f6061386c47e221ac55d1576ce5188652b421c2d9c5d12c4340d7eb057243250c5dbd336a95dea6db225ad9ba5b6d2bc4155966e3de7de5da86144cbc56e0e4636bf70d713c71076021a5f9e986b1b5db0c9135bf78a5e4cd038f211528f2d706e416d8e9d6470c19c736df0c78e8bdad11f", 0xa3}, {&(0x7f0000001d80)="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", 0xfa}, {&(0x7f0000001e80)="57a2c24be928f0393e40a05447a9d353b8dd092d5b65b38b8334f87e09f98dfbe0c0d6e0cb5a8363fa4f99f127ff7e74b01b5d342bbb8e6c9e1a7f7a0e1d8e6b8f7b42c534c88747c26132dafabeb29c7cdaec05bd0c9c046907", 0x5a}, {&(0x7f0000001f00)="0358505e570658be8112287aec8d2c0bcbc2a44d0e8614fd1d2a749c41f58a2d3a1f5d40be30f5fd46ec8bbeb4abef2a07a8762a0e9aad8409c9e6717d6611eeb85ad5dbe5f83ac689805d1840fdaa6755852eed1e", 0x55}, {&(0x7f0000001f80)="b81c2ab0b91e8cc80862900a785bcbd97864bd214cba3b9fd7d5fbad", 0x1c}, {&(0x7f0000001fc0)="44768a0630e8eca7c05c3aaf6a738bb4bf451a5889bd051dbaed04a9c7533f82c3bfaf80d780f3e6473a3a59d9ba6d782b2db2af11a5e1a02ecbe6399100ffadb89c4e9dd4e4f6731188fe69c2f6c5e88b04c6f85648a307c440b8fed2f487e757cd75e30292bab54fd7c891cfa8a5bc81fbf380", 0x74}, {&(0x7f0000002040)="adeb7d5efbf92ddfb286d03cf43889f0beb4cbdea80677f36f496e1a9e606cdc1b3d6af04cb778fc48a77809328ef7eaa27a781a08ae1498fb82b788e0e12d0e7fed3b26cf00268d1b9be0949e045e842c8fc90d6ecf0a29d1de4972bb21184283bcf901c165e9e4e6882ccfb090c83479a24206f5fa13301757e3decab76f6d7890420595fb904c65bda52c00c1335a18fd791443bae97a34b522a7f1d6c04b078cbcfffb718aa0d4", 0xa9}], 0x8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000140)="e9020400", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f0000000300)=r6}, 0x20) r7 = syz_clone(0x1020000, &(0x7f0000000600)="03499afeb46141e94207", 0xa, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f00000021c0)="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") r8 = bpf$ITER_CREATE(0x21, &(0x7f00000031c0)={r3}, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x49, 0x1, 0x8, 0x0, 0x8, 0x2c, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x4}, 0x480, 0x6, 0x80000000, 0x2, 0x7, 0xddb, 0x5625, 0x0, 0x0, 0x0, 0x65}, r7, 0xd, r8, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) 9.699396464s ago: executing program 4 (id=3343): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bdf6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xcb1822199df87e74, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0xa, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x823, 0x4, 0xf125, 0x5, 0x0, 0x200, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80000000, &(0x7f00000003c0)="88d025c705ca8ac82f9590452f71f8e168fa6635e45a762f0685d7723ec489eb268e1a", 0x23, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)="378e1540a193d1e31247589102e5c9e812a251b0273c409ba80db9a1b694a5d20fa06021db80b8cbad2aa2038365fd350cb231b9a97d0968bf3499842eabfca4e8a4a50af8a2acdcfde3c697811487fe81e9f115888af29905a16cfcc06e8c088263ad80b6a6dc6dfc29e7e64a2ce1b90f56afa847b2426cb3341ae21e0f876af24a04d311cca4e6c1f215f5a5370e43ea03cacd7fc25e2e0cbdf071") r2 = syz_clone(0x22820000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r3, &(0x7f0000000f80)={&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000380)="0b0a32dd710b9311bfdba3f5dae47b", 0xf}, {0x0}, {&(0x7f0000000b40)="327b6df5a6b731494d3322264fbaefd9aa63e4a931cad0d27184b9f9898ba7c8a47b9108d5d2ebae77f9ea04c49b887f4e", 0x31}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="acc4774a9e4fa8460c7de584f4deb1891c7aa382d0d187fcc7eb39889b8c3e1fd59203a2eb2c2715771d78f6c1ee10afcb1fecc779fb4bfb07186884b9fd53281242540d0553711295ff4a37219f8333ab87e8c477f5ef621caaae5448ae9a7f97abce5d0c342a138f4cb0dd02d47c203748025a07573ba726ed7e1189c67ff930c86676ac2ee19c35c214d9f1c5d40f78a67bf24b5ad8ec5c9e68b13c3ea2cdfbfcc818e7e640e2da2bd75905980bc5f152ea22db4acb123c271e348a720f9aad", 0xc1}, {&(0x7f0000000dc0)="1d6d85d75f0ca9f1a645258a4b00b255686b9201eb718853956830b6aaa9f5e12dd5420d3598a943f38e2fcaedfa1c5a0199ffe8c42c6872b2542f24d40132c469470680c38522fb20ced9c5a1e7780748e38095bdd6a0bdb2235f193538bafc26b2eeb0b0f50cda62d040d0ae0d84de0a9a2fc3d4ea1a260584ee4ffde0d149fb3d2608839d46da9a33db6e37ba548289684ea19124a8bf29a99756e8646a1d0a527bfba4f69be430a5bea68aca884069a046e9ef33428ac17e217dc4381e78f904277a6aae71c07c5c785452298fb11e8f6569c92bf988f65877a547a0a2e26b0b7a68b1ff266c", 0xe8}, {&(0x7f0000000ec0)="0677aa72ceb2b1223cb042dbc1793ee425cb1991dbb6425dd5cad8cb9369e5568a0c45ac3ada5ad4", 0x28}], 0x7}, 0x40c0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x6, 0x0, 0xa, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24100200, &(0x7f0000000640)="16d32775ecaf63684acb88c4235e33a4754ab05d4059349052264c092dd4ba504efd8b81bb369625873e12582367b28bc250839063d14a4954ad24979b161350f50aee7e3f16ad83ac34df5184044d1e51a2dbb3e34b56d7a4d16eb5493d0e59a44d545f0d509e3043898a3ef1d0961f0f3dfdb6bff25d637f92d18e67ad7a47a87a4d29155b255d4a19be90ec4aaf807516262e8d519981a43a20118528381e86131b77a6e8b7d2195a6f63cc670201789a208a912c798986b5d58f5182c512926764897be0c9c5f71a65b22c54b334db299442760e217868fccf36bb9976b744", 0xe1, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="ad8bc45853245e7a02cb4493a84def3b2ff24e13887db0875514b381126f3af94bcc8740ee92522764f27b019fb8b381abccd9b0263532aa3fb1b7fcdb6830f0e2c5fcca9fb6868f52b9c1bb3732065bdea82b89dca8a100afd7b9f3d18dc893f08867fe8dbe1345557fd3bab272d76b9959") 8.414947273s ago: executing program 0 (id=3348): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r4) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001e6b113c00000000bef43b6b760085100000020000008500e5ff7500000095000000000000019500a5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001e6b113c00000000bef43b6b760085100000020000008500e5ff7500000095000000000000019500a5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x0, 0xe4, 0x55, &(0x7f00000002c0)="54411f9e2b812826c9f74929df23fead72270eec53e8103dde15b7c5352e8763053298fd6670269f33b641870a0170c7c19a625a55370955be4716713660468966aa17c8b0af2b89c55f73c94b10461420c8f22720e7011f99d87a60a13e2d299c913fca43647db2fef52365b51ac76bedf24ef9234cf133c9700fd3b7df4f800a557693b2ff132033c0af1b9958e3b3968cf7c721c00e5ad29c86da64cb47b2c3eed290f73779a3eae2011b924a1777d1d5bf7c041c525c5718b08f957838cec202d0d0dca514e8bb0aab2a43a11dd98030f999911320ac39999a4f762d00f28f9272fa", &(0x7f00000003c0)=""/85, 0xef, 0x0, 0xd5, 0x0, &(0x7f0000000640)="4b1e6bdc38329dede5e53b9b4e05220a1bc86c0be63a2d47f381a93321e5e03484604f8aa95b0ef9cbdbe04bedb6684636bc5fd343a18750825a579d6741f4c7ece82de76fcc5c06b45149e521ae82dcbbf338cee02bfa0f5b973e1e6cc70ccad9de6c502314d1ff22425d04b41b1bc47d607fc7cc869e3ce75a7c6994d052c639d06e86f84cd11c4eb128e389fc04175bb4351fff7331b394a969c0e2158813afac3c785a1c61398922724f7f84481ab9ebb5115a61f450756a741c0bbf576468e5438fc98126268084fb5a8fb333c746580bba9e", &(0x7f0000000740), 0x4, 0x0, 0x8}, 0x50) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.761078768s ago: executing program 0 (id=3350): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 6.66161771s ago: executing program 4 (id=3352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000040)={'vlan0\x00', @random="00009e0c1100"}) (fail_nth: 7) 6.490690212s ago: executing program 0 (id=3353): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r1, &(0x7f0000000700)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 6.403071863s ago: executing program 1 (id=3354): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4e00, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000d200, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000019c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100, 0x3fff7ffa}, 0xb410, 0x8, 0x8, 0x7, 0xfffffffffffffffc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+s', 0x2}], 0x1}, 0x4044004) 5.915315531s ago: executing program 0 (id=3363): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4e00, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000d200, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000019c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100, 0x3fff7ffa}, 0xb410, 0x8, 0x8, 0x7, 0xfffffffffffffffc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+s', 0x2}], 0x1}, 0x4044004) 5.691263804s ago: executing program 4 (id=3356): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x310}, {&(0x7f0000001b80)="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", 0x2fe}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) 5.460316618s ago: executing program 3 (id=3357): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0xd, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/175, 0x27, 0xaf, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 5.30934742s ago: executing program 1 (id=3358): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb440016988919c07b01aa482f61a139300724", 0x3e}], 0x1}, 0x24008010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000980)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, &(0x7f00000002c0)=""/176, &(0x7f0000000680)="615c584b57c3052ff9679a8fd2fa33cd125d5d12a36d193507bc0af6a8d063a4b22ea27a14d0623b871480a75ea2602cc4e98b9b45f873883532e89e176faa11a45c9fb23842ed202510c2c668856b9bc180ea11054952aa066765cc70f2df7ebb1e72817271478ebc4fb3baba46a378c0a0f9b39a64b5a0e1f8a3fd4f344c52f3ed1f6d51a3ce8721bdf724a86d92fb8c4264404ae7ecb5808712c3a460ca3f143dc816d475654ada1e5ab6c20bd134815474dce222609ab9459693bda54b6a", &(0x7f0000000740)="d2395a5c8919e3f00412b793b0f4170489522ebc7da5cf5b4276e71fed19c5efff52a62d59830b4ced893e2cf5e971322358fa80490f13b83fa7f628e433fff2e76ff5d253b115e5c0cfc03eb3a8e567cc72638e2ce2dd59afcf24b78e63b11cac02d5154c956467a61e02eeef137f0bd20589fb7795fbd2d70882be2038f40e9ba0559e530d12e69781262fff2777c4903d46ecdf21d3f0b09626b82f827b954c56edcab2fdec498e760dea729c06389a7f76e397cb17a760358d70b7616cf66d1d1b4a2c5bce75b52c56810b37e510e48714e50f0d892d897b08438811f05b0838", 0xffff, r1}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000480)=""/2, 0x28, 0x2, 0x1, 0x6}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x10, 0x0, &(0x7f0000000500)="f0b9547ee7affa9daabd309a75ccb56c", 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}, {0x5cb0c6720ed73bff, 'cpuacct'}, {0x2d, 'io'}, {0x2b, 'net_cls'}, {0x2b, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000bffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) 4.994903015s ago: executing program 4 (id=3359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x28, 0x11, 0x0, 0xfffff010}, {0x6, 0xac, 0xd, 0x1}]}) r2 = syz_clone(0x0, &(0x7f0000000640)="30bd7b41b84f4bfe8b02e1d237c383078075af0601976afdd552cf4404ca78c061ac216c07f058425c1e6912ae343af5d9fa63e43a2cc497", 0x38, 0x0, &(0x7f00000006c0), &(0x7f0000001b80)="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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x6, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xfff, 0x8001}, 0x900, 0xcdd, 0x43a1bd77, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, &(0x7f00000002c0)=""/218}, 0x20) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="200000000000000084000000020000009484"], 0x20}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fdf8ffffaeb4cf00d0956000"/30], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd648}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x5, 0x1, 0xf8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f00000003c0)=[0x0]}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 4.506611002s ago: executing program 0 (id=3360): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0xe6, 0x42}, 0x8000, 0x80005, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext={0x9, 0x100000000}, 0x0, 0xffff, 0x5, 0x8, 0xb, 0x200000a, 0x48, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0xb5, 0x0, 0x0, 0x61c00, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x4e04, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x8, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000a80)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000000940), 0x0, &(0x7f00000009c0)="32d27fc6d24b067c9d2774a7c719d08e8b1a05b7c12339e64a57c313d3b4c5c2d4d2c7ddb36923c6cc1929ea3f081d8607ff45922dbd5570910655fe625608c4c8816e53369ec7100ed37894c2e19dab7d82f27611ff966beb25e2a0bbfdd0cb2958899f0df742c331d0a7878dd02849ac3fa97da1b29b8d208fbb20bf7ef3a89257ee2b5ba264f28d20487ed15c4692220771f5383587fbb6b06e015d5e30c13d2a5b988dff", 0xa6, 0x24000010}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10003) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.839420172s ago: executing program 3 (id=3361): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 3.741066863s ago: executing program 1 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000800), &(0x7f0000000240), 0x2}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 3.690886524s ago: executing program 0 (id=3364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x1, 0xf8, 0x7, 0x0, 0x5, 0x40420, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x2}, 0x2080, 0x1, 0x9, 0x7, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x2, 0x0, 0xa8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb988"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x2, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0xca, 0x1ff, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES8=r7], 0x12) 3.612608536s ago: executing program 3 (id=3365): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b6c675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003c0a38a82000602000008000200", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 3.225934342s ago: executing program 4 (id=3366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x310}, {&(0x7f0000001b80)="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", 0x2fe}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) 3.039155014s ago: executing program 1 (id=3367): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4e00, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000d200, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000019c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100, 0x3fff7ffa}, 0xb410, 0x8, 0x8, 0x7, 0xfffffffffffffffc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+s', 0x2}], 0x1}, 0x4044004) 2.832726808s ago: executing program 3 (id=3368): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x20, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007'], 0x38}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, 0x0, 0x300060c1) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 2.299505136s ago: executing program 3 (id=3369): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5411, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x80, 0x0}, 0x240440d1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x4) r10 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000007fff92e", 0x14}], 0x1}, 0x0) 1.452889278s ago: executing program 1 (id=3370): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4e00, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000d200, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000019c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100, 0x3fff7ffa}, 0xb410, 0x8, 0x8, 0x7, 0xfffffffffffffffc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+s', 0x2}], 0x1}, 0x4044004) 1.452462218s ago: executing program 3 (id=3371): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb440016988919c07b01aa482f61a139300724", 0x3e}], 0x1}, 0x24008010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000980)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, &(0x7f00000002c0)=""/176, &(0x7f0000000680)="615c584b57c3052ff9679a8fd2fa33cd125d5d12a36d193507bc0af6a8d063a4b22ea27a14d0623b871480a75ea2602cc4e98b9b45f873883532e89e176faa11a45c9fb23842ed202510c2c668856b9bc180ea11054952aa066765cc70f2df7ebb1e72817271478ebc4fb3baba46a378c0a0f9b39a64b5a0e1f8a3fd4f344c52f3ed1f6d51a3ce8721bdf724a86d92fb8c4264404ae7ecb5808712c3a460ca3f143dc816d475654ada1e5ab6c20bd134815474dce222609ab9459693bda54b6a", &(0x7f0000000740)="d2395a5c8919e3f00412b793b0f4170489522ebc7da5cf5b4276e71fed19c5efff52a62d59830b4ced893e2cf5e971322358fa80490f13b83fa7f628e433fff2e76ff5d253b115e5c0cfc03eb3a8e567cc72638e2ce2dd59afcf24b78e63b11cac02d5154c956467a61e02eeef137f0bd20589fb7795fbd2d70882be2038f40e9ba0559e530d12e69781262fff2777c4903d46ecdf21d3f0b09626b82f827b954c56edcab2fdec498e760dea729c06389a7f76e397cb17a760358d70b7616cf66d1d1b4a2c5bce75b52c56810b37e510e48714e50f0d892d897b08438811f05b0838", 0xffff, r1}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000480)=""/2, 0x28, 0x2, 0x1, 0x6}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x10, 0x0, &(0x7f0000000500)="f0b9547ee7affa9daabd309a75ccb56c", 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}, {0x5cb0c6720ed73bff, 'cpuacct'}, {0x2d, 'io'}, {0x2b, 'net_cls'}, {0x2b, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000bffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) 0s ago: executing program 1 (id=3372): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext={0x9, 0x100000000}, 0x0, 0xffff, 0x5, 0x8, 0xb, 0x200000a, 0x48, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0xb5, 0x0, 0x0, 0x61c00, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x4e04, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x8, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000a80)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000000940), 0x0, &(0x7f00000009c0)="32d27fc6d24b067c9d2774a7c719d08e8b1a05b7c12339e64a57c313d3b4c5c2d4d2c7ddb36923c6cc1929ea3f081d8607ff45922dbd5570910655fe625608c4c8816e53369ec7100ed37894c2e19dab7d82f27611ff966beb25e2a0bbfdd0cb2958899f0df742c331d0a7878dd02849ac3fa97da1b29b8d208fbb20bf7ef3a89257ee2b5ba264f28d20487ed15c4692220771f5383587fbb6b06e015d5e30c13d2a5b988dff", 0xa6, 0x24000010}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10003) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): de [ 542.845688][T12236] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 542.864697][T12236] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2031'. [ 542.884982][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'. [ 542.914178][T12238] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 542.975475][T12238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2033'. [ 543.117065][T12242] sit0: left promiscuous mode [ 543.715050][T12245] sit0: entered promiscuous mode [ 544.347811][T12281] tun0: tun_chr_ioctl cmd 1074812118 [ 544.372787][T12281] tun0: tun_chr_ioctl cmd 2147767521 [ 545.058145][T12286] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 545.290107][T12286] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2044'. [ 546.267983][T12301] sit0: entered promiscuous mode [ 546.703872][T12314] netlink: 539 bytes leftover after parsing attributes in process `syz.3.2052'. [ 547.289517][T12323] Ù: renamed from bond_slave_1 (while UP) [ 547.666549][T12326] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 547.723687][T12326] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2056'. [ 548.065859][T12336] sit0: left promiscuous mode [ 548.522126][T12339] sit0: entered promiscuous mode [ 548.652230][T12345] Ù: renamed from bond_slave_1 (while UP) [ 549.137494][T12357] Ù: renamed from bond_slave_1 (while UP) [ 549.226326][T12361] sit0: entered allmulticast mode [ 549.285645][T12353] sit0: entered promiscuous mode [ 549.494755][T12363] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 549.505194][T12363] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2070'. [ 550.669504][T12383] sit0: left promiscuous mode [ 551.207954][T12404] sit0: entered allmulticast mode [ 551.245422][T12389] sit0: entered promiscuous mode [ 551.437978][T12402] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2081'. [ 551.469795][T12404] sit0: entered promiscuous mode [ 551.721991][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 551.731244][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 551.752645][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 551.784328][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 552.057523][T12418] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2093'. [ 553.274156][T12433] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2090'. [ 553.535398][T12438] sit0: left promiscuous mode [ 553.909020][T12443] sit0: entered promiscuous mode [ 554.130814][T12444] netlink: 'syz.0.2094': attribute type 10 has an invalid length. [ 554.168442][T12444] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2094'. [ 554.187098][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 554.512501][T12464] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2098'. [ 556.103679][T12500] netlink: 'syz.4.2108': attribute type 10 has an invalid length. [ 556.132685][T12500] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2108'. [ 557.250956][T12516] Ù: renamed from bond_slave_1 (while UP) [ 557.316187][T12517] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 557.340027][T12517] __nla_validate_parse: 2 callbacks suppressed [ 557.340065][T12517] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2121'. [ 557.379798][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 557.607746][T12523] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 557.618604][T12523] `: entered promiscuous mode [ 558.358969][T12523] bond0: (slave `): Enslaving as an active interface with an up link [ 558.380789][T12532] netlink: 'syz.1.2118': attribute type 10 has an invalid length. [ 558.449710][T12532] bond0: (slave `): Enslaving as an active interface with an up link [ 558.710087][T12542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2123'. [ 560.768494][T12549] netlink: 'syz.3.2125': attribute type 21 has an invalid length. [ 560.776923][T12549] netlink: 'syz.3.2125': attribute type 6 has an invalid length. [ 560.787430][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2125'. [ 560.803687][T12550] netlink: 'syz.4.2126': attribute type 29 has an invalid length. [ 560.832351][T12549] FAULT_INJECTION: forcing a failure. [ 560.832351][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 560.863510][T12549] CPU: 1 PID: 12549 Comm: syz.3.2125 Not tainted syzkaller #0 [ 560.871065][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.881163][T12549] Call Trace: [ 560.884470][T12549] [ 560.887429][T12549] dump_stack_lvl+0x18c/0x250 [ 560.892667][T12549] ? show_regs_print_info+0x20/0x20 [ 560.897900][T12549] ? load_image+0x420/0x420 [ 560.902445][T12549] ? __might_sleep+0xe0/0xe0 [ 560.907079][T12549] ? __lock_acquire+0x7d80/0x7d80 [ 560.912133][T12549] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 560.918139][T12549] ? __lock_acquire+0x7d80/0x7d80 [ 560.923194][T12549] should_fail_ex+0x394/0x4c0 [ 560.927919][T12549] should_failslab+0x9/0x20 [ 560.932454][T12549] slab_pre_alloc_hook+0x59/0x300 [ 560.937512][T12549] ? tnode_new+0xbf/0x370 [ 560.941879][T12549] ? tnode_new+0xbf/0x370 [ 560.946253][T12549] __kmem_cache_alloc_node+0x53/0x250 [ 560.951660][T12549] ? tnode_new+0xbf/0x370 [ 560.956021][T12549] __kmalloc+0xa7/0x240 [ 560.960209][T12549] tnode_new+0xbf/0x370 [ 560.964432][T12549] resize+0x3e7/0x2620 [ 560.968541][T12549] ? lockdep_rtnl_is_held+0x26/0x30 [ 560.973783][T12549] fib_insert_alias+0xea0/0x1280 [ 560.978752][T12549] ? rcu_is_watching+0x15/0xb0 [ 560.983561][T12549] fib_table_insert+0x672/0x1af0 [ 560.988546][T12549] ? fib_new_table+0x10a/0x2d0 [ 560.993342][T12549] inet_rtm_newroute+0x14b/0x240 [ 560.998309][T12549] ? rcu_read_unlock+0xa0/0xa0 [ 561.003138][T12549] ? rcu_read_unlock+0xa0/0xa0 [ 561.007959][T12549] rtnetlink_rcv_msg+0x843/0xf90 [ 561.012967][T12549] ? rtnetlink_rcv_msg+0x220/0xf90 [ 561.018126][T12549] ? rtnetlink_bind+0x80/0x80 [ 561.022847][T12549] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 561.028860][T12549] ? lock_chain_count+0x20/0x20 [ 561.033742][T12549] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.039243][T12549] ? lockdep_hardirqs_on+0x98/0x150 [ 561.044486][T12549] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.049894][T12549] ? _local_bh_enable+0xa0/0xa0 [ 561.054866][T12549] ? __dev_queue_xmit+0x275/0x3630 [ 561.060012][T12549] ? __dev_queue_xmit+0x1bc2/0x3630 [ 561.065250][T12549] ? __dev_queue_xmit+0x275/0x3630 [ 561.070414][T12549] ? ref_tracker_free+0x686/0x830 [ 561.075479][T12549] netlink_rcv_skb+0x235/0x4c0 [ 561.080322][T12549] ? rtnetlink_bind+0x80/0x80 [ 561.085037][T12549] ? netlink_ack+0x1160/0x1160 [ 561.089877][T12549] ? __lock_acquire+0x7d80/0x7d80 [ 561.094954][T12549] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.100204][T12549] netlink_unicast+0x7b1/0x930 [ 561.105010][T12549] netlink_sendmsg+0x8d0/0xbf0 [ 561.109810][T12549] ? netlink_getsockopt+0x590/0x590 [ 561.115050][T12549] ? aa_sock_msg_perm+0x94/0x150 [ 561.120022][T12549] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.125365][T12549] ? security_socket_sendmsg+0x80/0xa0 [ 561.130872][T12549] ? netlink_getsockopt+0x590/0x590 [ 561.136129][T12549] ____sys_sendmsg+0x61b/0x980 [ 561.140950][T12549] ? __asan_memset+0x22/0x40 [ 561.145602][T12549] ? __sys_sendmsg_sock+0x30/0x30 [ 561.150669][T12549] ? __import_iovec+0x5f2/0x850 [ 561.155558][T12549] ? import_iovec+0x73/0xa0 [ 561.160096][T12549] ___sys_sendmsg+0x2a6/0x360 [ 561.164818][T12549] ? get_pid_task+0x20/0x1e0 [ 561.169447][T12549] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.174262][T12549] ? __lock_acquire+0x7d80/0x7d80 [ 561.179340][T12549] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.184225][T12549] ? __x64_sys_sendmsg+0x80/0x80 [ 561.189220][T12549] ? lockdep_hardirqs_on+0x98/0x150 [ 561.194462][T12549] do_syscall_64+0x55/0xb0 [ 561.198911][T12549] ? clear_bhb_loop+0x40/0x90 [ 561.203633][T12549] ? clear_bhb_loop+0x40/0x90 [ 561.208337][T12549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.214438][T12549] RIP: 0033:0x7ff9abd9ce59 [ 561.218876][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.238510][T12549] RSP: 002b:00007ff9acb7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.246955][T12549] RAX: ffffffffffffffda RBX: 00007ff9ac015fa0 RCX: 00007ff9abd9ce59 [ 561.254958][T12549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 561.262950][T12549] RBP: 00007ff9acb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 561.270944][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.278946][T12549] R13: 00007ff9ac016038 R14: 00007ff9ac015fa0 R15: 00007fff71bc0538 [ 561.287213][T12549] [ 561.313317][T12550] netlink: 'syz.4.2126': attribute type 29 has an invalid length. [ 561.322716][T12550] FAULT_INJECTION: forcing a failure. [ 561.322716][T12550] name failslab, interval 1, probability 0, space 0, times 0 [ 561.347883][T12550] CPU: 1 PID: 12550 Comm: syz.4.2126 Not tainted syzkaller #0 [ 561.355440][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 561.365581][T12550] Call Trace: [ 561.368912][T12550] [ 561.371886][T12550] dump_stack_lvl+0x18c/0x250 [ 561.376626][T12550] ? show_regs_print_info+0x20/0x20 [ 561.381890][T12550] ? load_image+0x420/0x420 [ 561.386550][T12550] should_fail_ex+0x394/0x4c0 [ 561.391333][T12550] should_failslab+0x9/0x20 [ 561.395895][T12550] slab_pre_alloc_hook+0x59/0x300 [ 561.400985][T12550] kmem_cache_alloc+0x5a/0x2c0 [ 561.405808][T12550] ? skb_clone+0x1eb/0x370 [ 561.410304][T12550] skb_clone+0x1eb/0x370 [ 561.414615][T12550] __netlink_deliver_tap+0x411/0x7f0 [ 561.419968][T12550] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.425237][T12550] netlink_deliver_tap+0x19c/0x1b0 [ 561.430417][T12550] netlink_dump+0x95b/0xec0 [ 561.434995][T12550] ? netlink_lookup+0x200/0x200 [ 561.439926][T12550] ? netlink_lookup+0x30/0x200 [ 561.444747][T12550] ? netlink_lookup+0x30/0x200 [ 561.449616][T12550] __netlink_dump_start+0x57c/0x7a0 [ 561.454882][T12550] rtnetlink_rcv_msg+0xe19/0xf90 [ 561.459884][T12550] ? rtnetlink_rcv_msg+0x220/0xf90 [ 561.465344][T12550] ? rtnl_fdb_dump+0x1070/0x1070 [ 561.470346][T12550] ? rtnetlink_bind+0x80/0x80 [ 561.475145][T12550] ? rtnl_fdb_dump+0x1070/0x1070 [ 561.480177][T12550] ? ref_tracker_free+0x686/0x830 [ 561.485265][T12550] netlink_rcv_skb+0x235/0x4c0 [ 561.490088][T12550] ? rtnetlink_bind+0x80/0x80 [ 561.494835][T12550] ? netlink_ack+0x1160/0x1160 [ 561.499670][T12550] ? __lock_acquire+0x7d80/0x7d80 [ 561.504769][T12550] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.510037][T12550] netlink_unicast+0x7b1/0x930 [ 561.514870][T12550] netlink_sendmsg+0x8d0/0xbf0 [ 561.519699][T12550] ? netlink_getsockopt+0x590/0x590 [ 561.524963][T12550] ? aa_sock_msg_perm+0x94/0x150 [ 561.529967][T12550] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.535307][T12550] ? security_socket_sendmsg+0x80/0xa0 [ 561.540824][T12550] ? netlink_getsockopt+0x590/0x590 [ 561.546081][T12550] ____sys_sendmsg+0x61b/0x980 [ 561.550926][T12550] ? __asan_memset+0x22/0x40 [ 561.555571][T12550] ? __sys_sendmsg_sock+0x30/0x30 [ 561.560644][T12550] ? __import_iovec+0x5f2/0x850 [ 561.565555][T12550] ? import_iovec+0x73/0xa0 [ 561.570374][T12550] ___sys_sendmsg+0x2a6/0x360 [ 561.575108][T12550] ? get_pid_task+0x20/0x1e0 [ 561.579766][T12550] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.584613][T12550] ? __lock_acquire+0x7d80/0x7d80 [ 561.589720][T12550] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.594642][T12550] ? __x64_sys_sendmsg+0x80/0x80 [ 561.599663][T12550] ? lockdep_hardirqs_on+0x98/0x150 [ 561.604933][T12550] do_syscall_64+0x55/0xb0 [ 561.609407][T12550] ? clear_bhb_loop+0x40/0x90 [ 561.614399][T12550] ? clear_bhb_loop+0x40/0x90 [ 561.619126][T12550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.625085][T12550] RIP: 0033:0x7f5eb879ce59 [ 561.629548][T12550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.649210][T12550] RSP: 002b:00007f5eb69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.657691][T12550] RAX: ffffffffffffffda RBX: 00007f5eb8a15fa0 RCX: 00007f5eb879ce59 [ 561.665725][T12550] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 561.673747][T12550] RBP: 00007f5eb69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.681772][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.689815][T12550] R13: 00007f5eb8a16038 R14: 00007f5eb8a15fa0 R15: 00007ffcd4d2f978 [ 561.697857][T12550] [ 561.802244][T12560] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2130'. [ 561.822069][T12556] netlink: 'syz.1.2127': attribute type 10 has an invalid length. [ 561.842409][T12556] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2127'. [ 561.880361][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 562.450512][T12574] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2133'. [ 562.461119][T12570] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2132'. [ 562.899469][T12577] syzkaller0: entered promiscuous mode [ 562.918323][T12577] syzkaller0: entered allmulticast mode [ 563.068821][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.075580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.479106][T12601] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 568.489133][T12601] syzkaller1: linktype set to 769 [ 568.505325][T12603] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 568.527069][T12604] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2138'. [ 568.817117][T12611] netlink: 'syz.3.2141': attribute type 10 has an invalid length. [ 568.829688][T12611] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2141'. [ 568.956624][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 569.105946][T12623] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2144'. [ 569.793715][T12629] netlink: 52711 bytes leftover after parsing attributes in process `syz.4.2145'. [ 570.340612][T12649] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2150'. [ 571.646819][T12664] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 571.659543][T12664] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2154'. [ 571.694921][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 571.734819][T12675] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2157'. [ 573.080414][T12697] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2166'. [ 574.648880][T12720] FAULT_INJECTION: forcing a failure. [ 574.648880][T12720] name failslab, interval 1, probability 0, space 0, times 0 [ 574.752815][T12720] CPU: 0 PID: 12720 Comm: syz.0.2172 Not tainted syzkaller #0 [ 574.760382][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.770502][T12720] Call Trace: [ 574.773845][T12720] [ 574.776921][T12720] dump_stack_lvl+0x18c/0x250 [ 574.781859][T12720] ? show_regs_print_info+0x20/0x20 [ 574.787150][T12720] ? load_image+0x420/0x420 [ 574.791721][T12720] ? __lock_acquire+0x7d80/0x7d80 [ 574.796829][T12720] should_fail_ex+0x394/0x4c0 [ 574.801609][T12720] should_failslab+0x9/0x20 [ 574.806206][T12720] slab_pre_alloc_hook+0x59/0x300 [ 574.811300][T12720] ? apparmor_sk_alloc_security+0x77/0x100 [ 574.817175][T12720] __kmem_cache_alloc_node+0x53/0x250 [ 574.822641][T12720] ? apparmor_sk_alloc_security+0x77/0x100 [ 574.828522][T12720] kmalloc_trace+0x2a/0xe0 [ 574.832998][T12720] apparmor_sk_alloc_security+0x77/0x100 [ 574.838666][T12720] security_sk_alloc+0x6e/0xa0 [ 574.843475][T12720] sk_prot_alloc+0x101/0x210 [ 574.848134][T12720] ? sk_alloc+0x24/0x350 [ 574.852442][T12720] sk_alloc+0x3a/0x350 [ 574.856564][T12720] pptp_create+0x32/0x2f0 [ 574.860932][T12720] pppox_create+0x12b/0x1a0 [ 574.865474][T12720] __sock_create+0x49e/0x940 [ 574.870103][T12720] __sys_socketpair+0x236/0x550 [ 574.874989][T12720] __x64_sys_socketpair+0x9b/0xb0 [ 574.880048][T12720] do_syscall_64+0x55/0xb0 [ 574.884584][T12720] ? clear_bhb_loop+0x40/0x90 [ 574.889287][T12720] ? clear_bhb_loop+0x40/0x90 [ 574.894011][T12720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.900036][T12720] RIP: 0033:0x7fa31b59ce59 [ 574.904482][T12720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.924133][T12720] RSP: 002b:00007fa31c3ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 574.932584][T12720] RAX: ffffffffffffffda RBX: 00007fa31b816090 RCX: 00007fa31b59ce59 [ 574.940759][T12720] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 574.948764][T12720] RBP: 00007fa31c3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 574.956771][T12720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.964792][T12720] R13: 00007fa31b816128 R14: 00007fa31b816090 R15: 00007ffea0ea76b8 [ 574.972824][T12720] [ 575.517203][T12731] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2177'. [ 578.838786][T12744] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 578.845416][T12744] syzkaller1: linktype set to 769 [ 578.909372][T12751] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 578.951236][T12744] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2181'. [ 579.389882][T12763] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 579.452103][T12763] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2184'. [ 579.483097][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 579.999910][T12771] netlink: 'syz.1.2187': attribute type 3 has an invalid length. [ 580.014520][T12771] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2187'. [ 580.029640][T12771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2187'. [ 580.125611][T12773] netlink: 'syz.0.2188': attribute type 9 has an invalid length. [ 580.139239][T12773] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2188'. [ 580.150641][T12777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2190'. [ 580.292173][T12778] netlink: 'syz.0.2188': attribute type 9 has an invalid length. [ 580.323821][T12778] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2188'. [ 580.592824][T12784] netlink: 'syz.0.2188': attribute type 13 has an invalid length. [ 580.623342][T12784] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2188'. [ 583.270217][T12784] erspan0: refused to change device tx_queue_len [ 583.280310][T12784] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 583.628850][T12796] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 583.636208][T12796] syzkaller1: linktype set to 769 [ 583.668179][T12796] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 583.678086][T12796] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2195'. [ 583.939390][T12802] netlink: 'syz.1.2198': attribute type 10 has an invalid length. [ 583.960045][T12802] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2198'. [ 584.009858][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 584.241195][T12810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2200'. [ 587.479631][T12819] ªªªªªª: renamed from virt_wifi0 [ 587.493668][T12821] netlink: 'syz.4.2205': attribute type 9 has an invalid length. [ 587.517039][T12821] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2205'. [ 587.609387][T12824] netlink: 'syz.4.2205': attribute type 9 has an invalid length. [ 587.638594][T12824] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2205'. [ 587.833589][T12832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2210'. [ 588.072841][T12824] netlink: 'syz.4.2205': attribute type 13 has an invalid length. [ 588.080766][T12824] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2205'. [ 588.676084][T12824] erspan0: refused to change device tx_queue_len [ 588.692359][T12824] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 588.746644][T12837] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 588.762839][T12837] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2211'. [ 588.793476][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 592.001684][T12859] ªªªªªª: renamed from virt_wifi0 [ 592.007691][T12859] FAULT_INJECTION: forcing a failure. [ 592.007691][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 592.022902][T12859] CPU: 0 PID: 12859 Comm: syz.3.2218 Not tainted syzkaller #0 [ 592.030433][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.040533][T12859] Call Trace: [ 592.043846][T12859] [ 592.046802][T12859] dump_stack_lvl+0x18c/0x250 [ 592.051519][T12859] ? show_regs_print_info+0x20/0x20 [ 592.056745][T12859] ? load_image+0x420/0x420 [ 592.061284][T12859] ? __lock_acquire+0x7d80/0x7d80 [ 592.066350][T12859] should_fail_ex+0x394/0x4c0 [ 592.071070][T12859] should_failslab+0x9/0x20 [ 592.075603][T12859] slab_pre_alloc_hook+0x59/0x300 [ 592.080663][T12859] ? kobject_get_path+0xc3/0x2c0 [ 592.085664][T12859] ? kobject_get_path+0xc3/0x2c0 [ 592.090637][T12859] __kmem_cache_alloc_node+0x53/0x250 [ 592.096057][T12859] ? kobject_get_path+0xc3/0x2c0 [ 592.101028][T12859] __kmalloc+0xa7/0x240 [ 592.105218][T12859] kobject_get_path+0xc3/0x2c0 [ 592.110021][T12859] kobject_uevent_env+0x291/0x890 [ 592.115075][T12859] kobject_rename+0x3f6/0x4f0 [ 592.119787][T12859] ? kobject_init_and_add+0x1a0/0x1a0 [ 592.125207][T12859] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 592.130610][T12859] device_rename+0x15d/0x1e0 [ 592.135328][T12859] dev_change_name+0x308/0x8e0 [ 592.140120][T12859] ? end_current_label_crit_section+0x170/0x170 [ 592.146399][T12859] ? dev_ioctl+0x5dc/0x1140 [ 592.150935][T12859] ? __lock_acquire+0x7d80/0x7d80 [ 592.155987][T12859] ? dev_alloc_name+0x1d0/0x1d0 [ 592.160958][T12859] ? full_name_hash+0x92/0xe0 [ 592.165786][T12859] ? dev_ifsioc+0x316/0xc40 [ 592.170348][T12859] dev_ioctl+0x5ec/0x1140 [ 592.174731][T12859] sock_do_ioctl+0x239/0x310 [ 592.179376][T12859] ? sock_show_fdinfo+0xb0/0xb0 [ 592.184276][T12859] sock_ioctl+0x5be/0x7e0 [ 592.188643][T12859] ? sock_poll+0x3e0/0x3e0 [ 592.193098][T12859] ? bpf_lsm_file_ioctl+0x9/0x10 [ 592.198070][T12859] ? security_file_ioctl+0x80/0xa0 [ 592.203228][T12859] ? sock_poll+0x3e0/0x3e0 [ 592.207702][T12859] __se_sys_ioctl+0xfd/0x170 [ 592.212336][T12859] do_syscall_64+0x55/0xb0 [ 592.216790][T12859] ? clear_bhb_loop+0x40/0x90 [ 592.221501][T12859] ? clear_bhb_loop+0x40/0x90 [ 592.226204][T12859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.232144][T12859] RIP: 0033:0x7ff9abd9ce59 [ 592.236597][T12859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.256238][T12859] RSP: 002b:00007ff9acb7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.264683][T12859] RAX: ffffffffffffffda RBX: 00007ff9ac015fa0 RCX: 00007ff9abd9ce59 [ 592.272681][T12859] RDX: 0000200000000280 RSI: 0000000000008923 RDI: 0000000000000004 [ 592.280682][T12859] RBP: 00007ff9acb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 592.288683][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.296686][T12859] R13: 00007ff9ac016038 R14: 00007ff9ac015fa0 R15: 00007fff71bc0538 [ 592.304698][T12859] [ 592.469120][T12864] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 592.513042][T12864] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2220'. [ 592.550754][T12871] FAULT_INJECTION: forcing a failure. [ 592.550754][T12871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.565108][T12871] CPU: 1 PID: 12871 Comm: syz.3.2222 Not tainted syzkaller #0 [ 592.572631][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.582758][T12871] Call Trace: [ 592.586084][T12871] [ 592.589055][T12871] dump_stack_lvl+0x18c/0x250 [ 592.593783][T12871] ? show_regs_print_info+0x20/0x20 [ 592.599024][T12871] ? load_image+0x420/0x420 [ 592.603561][T12871] ? __lock_acquire+0x7d80/0x7d80 [ 592.608711][T12871] ? snprintf+0xe9/0x140 [ 592.612985][T12871] should_fail_ex+0x394/0x4c0 [ 592.617699][T12871] _copy_to_user+0x2f/0xa0 [ 592.622161][T12871] simple_read_from_buffer+0xe7/0x150 [ 592.627574][T12871] proc_fail_nth_read+0x1e8/0x260 [ 592.632636][T12871] ? proc_fault_inject_write+0x360/0x360 [ 592.638307][T12871] ? fsnotify_perm+0x271/0x5e0 [ 592.643123][T12871] ? proc_fault_inject_write+0x360/0x360 [ 592.648790][T12871] vfs_read+0x298/0x990 [ 592.652991][T12871] ? kernel_read+0x1e0/0x1e0 [ 592.657642][T12871] ? __fget_files+0x28/0x460 [ 592.662359][T12871] ? __fget_files+0x3fc/0x460 [ 592.667093][T12871] ? __fdget_pos+0x2a3/0x330 [ 592.671714][T12871] ? ksys_read+0x74/0x260 [ 592.676079][T12871] ksys_read+0x151/0x260 [ 592.680352][T12871] ? vfs_write+0x9a0/0x9a0 [ 592.684814][T12871] ? lockdep_hardirqs_on+0x98/0x150 [ 592.690047][T12871] do_syscall_64+0x55/0xb0 [ 592.694494][T12871] ? clear_bhb_loop+0x40/0x90 [ 592.699201][T12871] ? clear_bhb_loop+0x40/0x90 [ 592.703918][T12871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.709858][T12871] RIP: 0033:0x7ff9abd5d68e [ 592.714326][T12871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.734142][T12871] RSP: 002b:00007ff9acb7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.742584][T12871] RAX: ffffffffffffffda RBX: 00007ff9acb7c6c0 RCX: 00007ff9abd5d68e [ 592.750582][T12871] RDX: 000000000000000f RSI: 00007ff9acb7c0a0 RDI: 0000000000000004 [ 592.758580][T12871] RBP: 00007ff9acb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 592.766574][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.774574][T12871] R13: 00007ff9ac016038 R14: 00007ff9ac015fa0 R15: 00007fff71bc0538 [ 592.782596][T12871] [ 592.794376][T12869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2221'. [ 592.965721][T12875] netlink: 'syz.1.2223': attribute type 9 has an invalid length. [ 593.003552][T12875] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2223'. [ 593.177571][T12877] netlink: 'syz.1.2223': attribute type 9 has an invalid length. [ 593.202795][T12877] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2223'. [ 593.444512][T12881] netlink: 'syz.1.2223': attribute type 13 has an invalid length. [ 593.473712][T12881] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2223'. [ 593.511087][T12881] erspan0: refused to change device tx_queue_len [ 593.558469][T12881] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 593.582947][T12880] netlink: 'syz.3.2225': attribute type 10 has an invalid length. [ 593.602214][T12880] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2225'. [ 593.651719][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 596.959175][T12906] netlink: 'syz.1.2232': attribute type 1 has an invalid length. [ 596.969705][T12906] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2232'. [ 597.496369][T12915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2235'. [ 598.892062][T12926] delete_channel: no stack [ 599.117411][T12935] netlink: 'syz.3.2241': attribute type 9 has an invalid length. [ 599.129510][T12935] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2241'. [ 599.192664][T12936] netlink: 'syz.4.2238': attribute type 10 has an invalid length. [ 599.202174][T12936] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2238'. [ 599.239880][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2238'. [ 599.256645][T12937] netlink: 'syz.3.2241': attribute type 9 has an invalid length. [ 599.278085][T12937] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2241'. [ 599.622614][T12941] netlink: 'syz.3.2241': attribute type 13 has an invalid length. [ 599.662142][T12941] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2241'. [ 601.920529][T12941] erspan0: refused to change device tx_queue_len [ 601.934301][T12941] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 602.271617][T12947] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 602.302558][T12947] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2243'. [ 602.529699][T12957] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2245'. [ 602.681440][T12962] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2247'. [ 606.351173][T12985] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 606.372164][T12985] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2255'. [ 606.386133][T12986] sock: sock_set_timeout: `syz.4.2256' (pid 12986) tries to set negative timeout [ 606.450169][T12986] netlink: 'syz.4.2256': attribute type 10 has an invalid length. [ 606.481306][T12991] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2258'. [ 606.602503][T12989] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2257'. [ 606.835012][T12998] FAULT_INJECTION: forcing a failure. [ 606.835012][T12998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.848384][T12998] CPU: 0 PID: 12998 Comm: syz.4.2260 Not tainted syzkaller #0 [ 606.855904][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.866011][T12998] Call Trace: [ 606.869336][T12998] [ 606.872308][T12998] dump_stack_lvl+0x18c/0x250 [ 606.877082][T12998] ? show_regs_print_info+0x20/0x20 [ 606.882330][T12998] ? load_image+0x420/0x420 [ 606.886879][T12998] ? __might_fault+0xaa/0x120 [ 606.891619][T12998] ? __lock_acquire+0x7d80/0x7d80 [ 606.896709][T12998] should_fail_ex+0x394/0x4c0 [ 606.901453][T12998] _copy_from_user+0x2f/0xe0 [ 606.906107][T12998] ___sys_sendmsg+0x1c7/0x360 [ 606.910849][T12998] ? __sys_sendmsg+0x2b0/0x2b0 [ 606.915689][T12998] ? __lock_acquire+0x7d80/0x7d80 [ 606.920801][T12998] __se_sys_sendmsg+0x1d0/0x2c0 [ 606.925707][T12998] ? __x64_sys_sendmsg+0x80/0x80 [ 606.930717][T12998] ? lockdep_hardirqs_on+0x98/0x150 [ 606.935980][T12998] do_syscall_64+0x55/0xb0 [ 606.940452][T12998] ? clear_bhb_loop+0x40/0x90 [ 606.945182][T12998] ? clear_bhb_loop+0x40/0x90 [ 606.949915][T12998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.955899][T12998] RIP: 0033:0x7f5eb879ce59 [ 606.960364][T12998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.980031][T12998] RSP: 002b:00007f5eb69d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.988503][T12998] RAX: ffffffffffffffda RBX: 00007f5eb8a16090 RCX: 00007f5eb879ce59 [ 606.996532][T12998] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 607.004548][T12998] RBP: 00007f5eb69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 607.012579][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.020595][T12998] R13: 00007f5eb8a16128 R14: 00007f5eb8a16090 R15: 00007ffcd4d2f978 [ 607.028639][T12998] [ 608.203872][T13000] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2261'. [ 612.147349][T13037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2272'. [ 612.313617][T13038] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 612.343370][T13038] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2270'. [ 612.366627][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 612.454500][T13046] FAULT_INJECTION: forcing a failure. [ 612.454500][T13046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.480300][T13045] netlink: 152392 bytes leftover after parsing attributes in process `syz.3.2274'. [ 612.492561][T13045] netlink: zone id is out of range [ 612.498045][T13045] netlink: zone id is out of range [ 612.507440][T13046] CPU: 1 PID: 13046 Comm: syz.4.2273 Not tainted syzkaller #0 [ 612.514985][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.525088][T13046] Call Trace: [ 612.528442][T13046] [ 612.531416][T13046] dump_stack_lvl+0x18c/0x250 [ 612.536163][T13046] ? show_regs_print_info+0x20/0x20 [ 612.541416][T13046] ? load_image+0x420/0x420 [ 612.545973][T13046] ? __might_fault+0xaa/0x120 [ 612.550699][T13046] ? __lock_acquire+0x7d80/0x7d80 [ 612.555785][T13046] should_fail_ex+0x394/0x4c0 [ 612.560538][T13046] _copy_from_user+0x2f/0xe0 [ 612.565183][T13046] __sys_bpf+0x23e/0x890 [ 612.569483][T13046] ? bpf_link_show_fdinfo+0x390/0x390 [ 612.574921][T13046] ? lock_chain_count+0x20/0x20 [ 612.579835][T13046] __x64_sys_bpf+0x7c/0x90 [ 612.584301][T13046] do_syscall_64+0x55/0xb0 [ 612.588763][T13046] ? clear_bhb_loop+0x40/0x90 [ 612.593490][T13046] ? clear_bhb_loop+0x40/0x90 [ 612.598217][T13046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.604165][T13046] RIP: 0033:0x7f5eb879ce59 [ 612.608631][T13046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.628286][T13046] RSP: 002b:00007f5eb69b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.636763][T13046] RAX: ffffffffffffffda RBX: 00007f5eb8a16180 RCX: 00007f5eb879ce59 [ 612.644786][T13046] RDX: 0000000000000040 RSI: 0000200000000480 RDI: 0000000000000010 [ 612.652806][T13046] RBP: 00007f5eb69b4090 R08: 0000000000000000 R09: 0000000000000000 [ 612.660819][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.668837][T13046] R13: 00007f5eb8a16218 R14: 00007f5eb8a16180 R15: 00007ffcd4d2f978 [ 612.676882][T13046] [ 612.687456][T13045] netlink: zone id is out of range [ 612.697517][T13045] netlink: zone id is out of range [ 612.707641][T13045] netlink: zone id is out of range [ 612.721994][T13045] netlink: zone id is out of range [ 612.728017][T13045] netlink: zone id is out of range [ 612.738716][T13045] netlink: zone id is out of range [ 612.752527][T13045] netlink: zone id is out of range [ 612.757939][T13045] netlink: zone id is out of range [ 615.206284][T13061] netlink: 'syz.0.2278': attribute type 21 has an invalid length. [ 615.247924][T13061] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2278'. [ 615.777988][T13070] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2283'. [ 615.808649][T13070] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2283'. [ 616.225895][T13078] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2286'. [ 616.290032][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.300612][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.314152][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.330137][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.372433][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 616.380999][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.160867][T13079] chnl_net:caif_netlink_parms(): no params data found [ 617.376619][T13092] netlink: 'syz.4.2289': attribute type 21 has an invalid length. [ 617.405211][T13092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2289'. [ 617.579530][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.613796][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.621297][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.630393][T13079] bridge_slave_0: entered allmulticast mode [ 617.638513][T13079] bridge_slave_0: entered promiscuous mode [ 617.668140][T13090] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 617.682889][T13090] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2287'. [ 617.695908][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 617.826079][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.860901][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.872044][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.880731][T13079] bridge_slave_1: entered allmulticast mode [ 617.901266][T13079] bridge_slave_1: entered promiscuous mode [ 618.016392][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.039295][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.099978][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.155838][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 618.204260][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.295927][T13116] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2296'. [ 618.327497][T13079] team0: Port device team_slave_0 added [ 618.345296][T13079] team0: Port device team_slave_1 added [ 618.432718][ T5781] Bluetooth: hci3: command tx timeout [ 618.549195][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.586413][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.623448][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.679978][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.713873][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.790500][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.196811][T13079] hsr_slave_0: entered promiscuous mode [ 619.250842][T13079] hsr_slave_1: entered promiscuous mode [ 619.300414][T13079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.343185][T13079] Cannot create hsr debugfs directory [ 619.854554][T13143] netlink: 'syz.1.2301': attribute type 21 has an invalid length. [ 619.871350][T13143] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2301'. [ 619.978983][T13145] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2302'. [ 620.501949][ T5781] Bluetooth: hci3: command tx timeout [ 621.138812][T13174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2304'. [ 621.259989][T13175] netlink: 'syz.4.2303': attribute type 10 has an invalid length. [ 621.291996][T13175] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2303'. [ 621.341204][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 621.567561][T13079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 621.600385][T13185] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2307'. [ 621.715042][T13079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 621.808096][T13079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 621.935489][T13079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 622.466579][ T12] hsr_slave_0: left promiscuous mode [ 622.503224][ T12] hsr_slave_1: left promiscuous mode [ 622.514485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.526868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.539100][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.557775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.582050][ T5781] Bluetooth: hci3: command tx timeout [ 622.642949][T13199] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2313'. [ 622.652682][T13199] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2313'. [ 623.270440][ T12] team0 (unregistering): Port device team_slave_1 removed [ 623.318508][T13206] FAULT_INJECTION: forcing a failure. [ 623.318508][T13206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.331893][T13206] CPU: 1 PID: 13206 Comm: syz.4.2315 Not tainted syzkaller #0 [ 623.339460][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 623.349580][T13206] Call Trace: [ 623.352965][T13206] [ 623.355961][T13206] dump_stack_lvl+0x18c/0x250 [ 623.360717][T13206] ? show_regs_print_info+0x20/0x20 [ 623.365968][T13206] ? load_image+0x420/0x420 [ 623.370518][T13206] ? __might_fault+0xaa/0x120 [ 623.375235][T13206] ? __lock_acquire+0x7d80/0x7d80 [ 623.380305][T13206] should_fail_ex+0x394/0x4c0 [ 623.385039][T13206] _copy_to_user+0x2f/0xa0 [ 623.389498][T13206] bpf_test_finish+0x25a/0x650 [ 623.394340][T13206] ? dst_hold+0x70/0x70 [ 623.398555][T13206] ? convert_skb_to___skb+0x420/0x420 [ 623.403989][T13206] ? bpf_test_init+0x119/0x140 [ 623.408905][T13206] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 623.414328][T13206] ? __lock_acquire+0x7d80/0x7d80 [ 623.419427][T13206] ? dev_put+0x80/0x80 [ 623.423561][T13206] ? dev_put+0x80/0x80 [ 623.427676][T13206] bpf_prog_test_run+0x31f/0x390 [ 623.432661][T13206] __sys_bpf+0x49d/0x890 [ 623.436945][T13206] ? bpf_link_show_fdinfo+0x390/0x390 [ 623.442378][T13206] ? lock_chain_count+0x20/0x20 [ 623.447288][T13206] __x64_sys_bpf+0x7c/0x90 [ 623.451747][T13206] do_syscall_64+0x55/0xb0 [ 623.456205][T13206] ? clear_bhb_loop+0x40/0x90 [ 623.460916][T13206] ? clear_bhb_loop+0x40/0x90 [ 623.465632][T13206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.471564][T13206] RIP: 0033:0x7f5eb879ce59 [ 623.476016][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.495661][T13206] RSP: 002b:00007f5eb69b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 623.504135][T13206] RAX: ffffffffffffffda RBX: 00007f5eb8a16180 RCX: 00007f5eb879ce59 [ 623.512144][T13206] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 623.520150][T13206] RBP: 00007f5eb69b4090 R08: 0000000000000000 R09: 0000000000000000 [ 623.528152][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.536262][T13206] R13: 00007f5eb8a16218 R14: 00007f5eb8a16180 R15: 00007ffcd4d2f978 [ 623.544296][T13206] [ 623.573231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 623.630167][ T12] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 623.729590][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 624.020089][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 624.060352][ T12] bond0 (unregistering): Released all slaves [ 624.546090][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.552526][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.662877][ T5781] Bluetooth: hci3: command tx timeout [ 624.814124][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.975778][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.118205][T13227] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2320'. [ 625.133790][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.141001][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.213161][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.220373][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.887051][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.005398][T13079] veth0_vlan: entered promiscuous mode [ 626.055653][T13079] veth1_vlan: entered promiscuous mode [ 626.420482][ T5781] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 626.420524][ T5781] Bluetooth: unknown link type 101 [ 626.433279][ T5781] Bluetooth: hci4: connection err: -111 [ 629.383090][T13255] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2323'. [ 629.534904][T13079] veth0_macvtap: entered promiscuous mode [ 629.620977][T13079] veth1_macvtap: entered promiscuous mode [ 629.741260][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.776444][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.804871][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.831931][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.856649][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.882503][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.926384][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.949183][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.966289][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.986611][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.018068][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.040223][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.050813][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.063627][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.126996][T13079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.148876][T13079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.158284][T13079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.167709][T13079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.373855][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.381753][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.730368][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.744805][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.134338][T13304] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2331'. [ 631.552466][T13315] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 631.561538][T13315] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 632.535995][T13337] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 632.544069][T13345] FAULT_INJECTION: forcing a failure. [ 632.544069][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.546139][T13337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 632.582211][T13345] CPU: 1 PID: 13345 Comm: syz.4.2341 Not tainted syzkaller #0 [ 632.589748][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.599857][T13345] Call Trace: [ 632.603178][T13345] [ 632.606156][T13345] dump_stack_lvl+0x18c/0x250 [ 632.610892][T13345] ? show_regs_print_info+0x20/0x20 [ 632.616150][T13345] ? load_image+0x420/0x420 [ 632.620709][T13345] ? __might_fault+0xaa/0x120 [ 632.625437][T13345] ? __lock_acquire+0x7d80/0x7d80 [ 632.630523][T13345] ? __virt_addr_valid+0x10c/0x380 [ 632.635693][T13345] should_fail_ex+0x394/0x4c0 [ 632.640442][T13345] _copy_from_user+0x2f/0xe0 [ 632.645095][T13345] csum_and_copy_from_iter+0x1f3/0x1480 [ 632.650710][T13345] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 632.656398][T13345] ? mark_lock+0x94/0x320 [ 632.660791][T13345] ? __lock_acquire+0x1336/0x7d80 [ 632.665907][T13345] ip_generic_getfrag+0x163/0x2f0 [ 632.670996][T13345] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 632.675903][T13345] ? skb_page_frag_refill+0x1be/0x310 [ 632.681331][T13345] __ip_append_data+0x1e6a/0x3be0 [ 632.686437][T13345] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 632.691361][T13345] ? ip_setup_cork+0x840/0x840 [ 632.696184][T13345] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.701608][T13345] ? lockdep_hardirqs_on+0x98/0x150 [ 632.706871][T13345] ip_append_data+0x10d/0x180 [ 632.711613][T13345] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 632.716521][T13345] udp_sendmsg+0x459/0x23d0 [ 632.721099][T13345] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 632.726009][T13345] ? udp_cmsg_send+0x350/0x350 [ 632.730916][T13345] ? __lock_acquire+0x1262/0x7d80 [ 632.736003][T13345] ? aa_sk_perm+0x83c/0x970 [ 632.740559][T13345] ? aa_af_perm+0x330/0x330 [ 632.745133][T13345] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 632.750615][T13343] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2342'. [ 632.751591][T13345] ? sock_rps_record_flow+0x19/0x3f0 [ 632.766224][T13345] ? inet_sendmsg+0x7e/0x2a0 [ 632.770875][T13345] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 632.776219][T13345] ? inet_send_prepare+0x250/0x250 [ 632.781403][T13345] ____sys_sendmsg+0x61b/0x980 [ 632.786237][T13345] ? __asan_memset+0x22/0x40 [ 632.790890][T13345] ? __sys_sendmsg_sock+0x30/0x30 [ 632.795973][T13345] ? __import_iovec+0x5f2/0x850 [ 632.800893][T13345] ? import_iovec+0x73/0xa0 [ 632.805449][T13345] ___sys_sendmsg+0x2a6/0x360 [ 632.810148][T13345] ? get_pid_task+0x20/0x1e0 [ 632.814785][T13345] ? __sys_sendmsg+0x2b0/0x2b0 [ 632.819632][T13345] ? __lock_acquire+0x7d80/0x7d80 [ 632.824754][T13345] __se_sys_sendmsg+0x1d0/0x2c0 [ 632.829693][T13345] ? __x64_sys_sendmsg+0x80/0x80 [ 632.834713][T13345] ? lockdep_hardirqs_on+0x98/0x150 [ 632.839991][T13345] do_syscall_64+0x55/0xb0 [ 632.844481][T13345] ? clear_bhb_loop+0x40/0x90 [ 632.849214][T13345] ? clear_bhb_loop+0x40/0x90 [ 632.853954][T13345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.859916][T13345] RIP: 0033:0x7f5eb879ce59 [ 632.864415][T13345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.884106][T13345] RSP: 002b:00007f5eb69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.892558][T13345] RAX: ffffffffffffffda RBX: 00007f5eb8a15fa0 RCX: 00007f5eb879ce59 [ 632.900563][T13345] RDX: 0000000000008004 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 632.908565][T13345] RBP: 00007f5eb69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 632.916566][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.924564][T13345] R13: 00007f5eb8a16038 R14: 00007f5eb8a15fa0 R15: 00007ffcd4d2f978 [ 632.932588][T13345] [ 632.959734][T13337] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 632.977313][T13337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 633.257840][T13356] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2345'. [ 633.416792][T13362] FAULT_INJECTION: forcing a failure. [ 633.416792][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 633.429565][T13362] CPU: 1 PID: 13362 Comm: syz.1.2346 Not tainted syzkaller #0 [ 633.437519][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.447720][T13362] Call Trace: [ 633.451045][T13362] [ 633.454023][T13362] dump_stack_lvl+0x18c/0x250 [ 633.458757][T13362] ? show_regs_print_info+0x20/0x20 [ 633.464013][T13362] ? load_image+0x420/0x420 [ 633.468615][T13362] should_fail_ex+0x394/0x4c0 [ 633.473361][T13362] should_failslab+0x9/0x20 [ 633.477922][T13362] slab_pre_alloc_hook+0x59/0x300 [ 633.483009][T13362] kmem_cache_alloc+0x5a/0x2c0 [ 633.487829][T13362] ? skb_clone+0x1eb/0x370 [ 633.492293][T13362] skb_clone+0x1eb/0x370 [ 633.496576][T13362] bpf_clone_redirect+0x16d/0x4a0 [ 633.501639][T13362] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 633.507129][T13362] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 633.512988][T13362] ? perf_trace_preemptirq_template+0xac/0x330 [ 633.519184][T13362] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 633.525198][T13362] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 633.530515][T13362] ? lock_chain_count+0x20/0x20 [ 633.535391][T13362] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 633.541668][T13362] ? __local_bh_disable_ip+0x108/0x1a0 [ 633.547157][T13362] ? __cant_sleep+0x220/0x220 [ 633.551865][T13362] ? __local_bh_enable_ip+0x13a/0x1c0 [ 633.557267][T13362] ? _local_bh_enable+0xa0/0xa0 [ 633.562150][T13362] ? bpf_test_timer_continue+0x135/0x380 [ 633.567819][T13362] ? bpf_test_run+0x174/0x870 [ 633.572529][T13362] bpf_test_run+0x2df/0x870 [ 633.577080][T13362] ? bpf_test_run+0x174/0x870 [ 633.581795][T13362] ? dst_hold+0x70/0x70 [ 633.585993][T13362] ? eth_get_headlen+0x210/0x210 [ 633.590969][T13362] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 633.596392][T13362] ? cpu_online+0x60/0x60 [ 633.600759][T13362] bpf_prog_test_run+0x31f/0x390 [ 633.605730][T13362] __sys_bpf+0x49d/0x890 [ 633.610005][T13362] ? bpf_link_show_fdinfo+0x390/0x390 [ 633.615419][T13362] ? lock_chain_count+0x20/0x20 [ 633.620319][T13362] __x64_sys_bpf+0x7c/0x90 [ 633.624770][T13362] do_syscall_64+0x55/0xb0 [ 633.629218][T13362] ? clear_bhb_loop+0x40/0x90 [ 633.633919][T13362] ? clear_bhb_loop+0x40/0x90 [ 633.638626][T13362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.644551][T13362] RIP: 0033:0x7f6003f9ce59 [ 633.648989][T13362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.668624][T13362] RSP: 002b:00007f60021f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.677065][T13362] RAX: ffffffffffffffda RBX: 00007f6004215fa0 RCX: 00007f6003f9ce59 [ 633.685065][T13362] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 633.693070][T13362] RBP: 00007f60021f6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.701063][T13362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.709057][T13362] R13: 00007f6004216038 R14: 00007f6004215fa0 R15: 00007ffd9863a7d8 [ 633.717073][T13362] [ 635.026688][T13388] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 635.246140][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.341541][T13388] bond0: (slave team0): Enslaving as an active interface with an up link [ 635.940901][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.964434][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.977119][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.987167][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 635.998000][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 636.007038][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.361507][T13406] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2357'. [ 636.421706][ T7274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.508842][T13394] chnl_net:caif_netlink_parms(): no params data found [ 637.333779][ T7274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.419887][ T7274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.526362][ T7274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.593469][T13394] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.610976][T13394] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.630717][T13394] bridge_slave_0: entered allmulticast mode [ 637.642240][T13426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2362'. [ 637.646516][T13394] bridge_slave_0: entered promiscuous mode [ 637.676244][T13426] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 637.736459][T13394] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.753989][T13394] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.764821][T13394] bridge_slave_1: entered allmulticast mode [ 637.830267][T13394] bridge_slave_1: entered promiscuous mode [ 638.006557][T13394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.122213][ T5777] Bluetooth: hci0: command tx timeout [ 638.189657][T13432] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 638.237626][T13432] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 638.306970][T13394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.657566][T13394] team0: Port device team_slave_0 added [ 638.682977][T13438] netlink: 'syz.1.2363': attribute type 10 has an invalid length. [ 638.817693][T13394] team0: Port device team_slave_1 added [ 638.972463][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2365'. [ 640.183919][ T5777] Bluetooth: hci0: command tx timeout [ 640.305423][T13394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.335521][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.376447][T13394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.389403][T13456] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2369'. [ 640.508483][T13394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.524534][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.562534][T13394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.271901][ T5777] Bluetooth: hci0: command tx timeout [ 643.664483][T13394] hsr_slave_0: entered promiscuous mode [ 643.692269][T13394] hsr_slave_1: entered promiscuous mode [ 643.704685][T13394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.721829][T13394] Cannot create hsr debugfs directory [ 643.753073][T13478] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2373'. [ 643.845658][T13478] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 644.343805][ T5777] Bluetooth: hci0: command tx timeout [ 645.213124][T13512] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2380'. [ 645.510789][T13508] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 645.543822][T13508] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2379'. [ 646.309282][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 646.417216][ T7274] hsr_slave_0: left promiscuous mode [ 646.440216][ T7274] hsr_slave_1: left promiscuous mode [ 646.453274][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.460724][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.512880][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.520371][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.548625][ T7274] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 646.562210][ T7274] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 646.647422][ T7274] veth1_macvtap: left promiscuous mode [ 646.668057][ T7274] veth0_macvtap: left promiscuous mode [ 648.180494][ T7274] team0 (unregistering): Port device team_slave_1 removed [ 648.288868][ T7274] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 648.349735][ T7274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.774106][ T7274] bond0 (unregistering): Released all slaves [ 649.159665][T13552] netlink: 'syz.3.2386': attribute type 9 has an invalid length. [ 649.188512][T13552] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2386'. [ 649.251694][T13554] netlink: 'syz.1.2387': attribute type 10 has an invalid length. [ 649.344373][T13552] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 649.361476][T13552] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.369323][T13552] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.406661][T13552] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.414107][T13552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.421813][T13552] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.429044][T13552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.459217][T13552] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 649.539350][T13394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.568362][T13394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.615988][T13394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.660042][T13394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.951072][T13394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.016020][T13394] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.065874][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.073146][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.593914][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.601134][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.723466][T13394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.735033][T13394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.752960][T13575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2390'. [ 650.877473][T13577] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 650.961236][T13577] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2391'. [ 651.011045][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 651.517028][T13394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.744286][T13394] veth0_vlan: entered promiscuous mode [ 651.778630][T13394] veth1_vlan: entered promiscuous mode [ 651.908088][T13394] veth0_macvtap: entered promiscuous mode [ 651.998400][T13394] veth1_macvtap: entered promiscuous mode [ 652.077730][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.095752][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.109175][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.133805][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.151050][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.167644][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.180306][T13394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.210272][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.231278][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.248198][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.260249][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.276364][T13394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.296147][T13394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.316479][T13394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.366982][T13394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.406999][T13394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.437639][T13394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.449138][T13394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.750700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.783150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.812791][T13617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2398'. [ 652.881840][ T7276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.894262][ T7276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.112081][T13624] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2401'. [ 653.414561][T13635] netlink: 'syz.4.2402': attribute type 10 has an invalid length. [ 653.984085][T13635] team0: Port device geneve1 added [ 654.015462][T13637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.022915][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 654.030346][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 654.037727][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 654.274763][T13648] netlink: 'syz.0.2403': attribute type 10 has an invalid length. [ 654.317758][T13648] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2403'. [ 655.218131][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 655.231221][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 655.252616][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 655.260952][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 655.279457][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 655.299094][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 655.439966][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 655.929160][T13683] netlink: 'syz.3.2408': attribute type 10 has an invalid length. [ 656.091070][T13683] team0: Port device geneve1 added [ 656.141120][T13685] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2409'. [ 656.266817][T13663] chnl_net:caif_netlink_parms(): no params data found [ 656.400872][T13663] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.408750][T13663] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.426651][T13663] bridge_slave_0: entered allmulticast mode [ 656.445086][T13663] bridge_slave_0: entered promiscuous mode [ 656.473792][T13663] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.481134][T13663] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.489196][T13663] bridge_slave_1: entered allmulticast mode [ 656.497539][T13663] bridge_slave_1: entered promiscuous mode [ 656.564402][T13663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.603942][T13663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.695481][T13663] team0: Port device team_slave_0 added [ 656.709577][T13663] team0: Port device team_slave_1 added [ 656.756554][T13706] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2412'. [ 656.788539][T13663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.796658][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.828610][T13663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.851485][T13663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.891939][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.991858][T13663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.181076][T13663] hsr_slave_0: entered promiscuous mode [ 657.392126][ T5777] Bluetooth: hci2: command tx timeout [ 657.456978][T13663] hsr_slave_1: entered promiscuous mode [ 657.472395][T13663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.481272][T13663] Cannot create hsr debugfs directory [ 657.530612][T13714] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 657.537615][T13714] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 657.569104][T13715] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 657.579876][T13715] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 658.216300][T13663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.315884][T13663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.624467][T13663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.834103][T13663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.177671][T13663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.191325][T13741] FAULT_INJECTION: forcing a failure. [ 659.191325][T13741] name failslab, interval 1, probability 0, space 0, times 0 [ 659.211283][T13741] CPU: 0 PID: 13741 Comm: syz.4.2421 Not tainted syzkaller #0 [ 659.218837][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.228956][T13741] Call Trace: [ 659.232294][T13741] [ 659.235282][T13741] dump_stack_lvl+0x18c/0x250 [ 659.240025][T13741] ? sctp_sendmsg+0x1519/0x27b0 [ 659.244950][T13741] ? ___sys_sendmsg+0x2a6/0x360 [ 659.249861][T13741] ? show_regs_print_info+0x20/0x20 [ 659.255145][T13741] ? load_image+0x420/0x420 [ 659.259740][T13741] should_fail_ex+0x394/0x4c0 [ 659.264541][T13741] should_failslab+0x9/0x20 [ 659.269157][T13741] slab_pre_alloc_hook+0x59/0x300 [ 659.274249][T13741] ? sctp_add_bind_addr+0x8c/0x360 [ 659.279509][T13741] __kmem_cache_alloc_node+0x53/0x250 [ 659.284943][T13741] ? sctp_add_bind_addr+0x8c/0x360 [ 659.290116][T13741] kmalloc_trace+0x2a/0xe0 [ 659.294594][T13741] sctp_add_bind_addr+0x8c/0x360 [ 659.299592][T13741] sctp_copy_local_addr_list+0x31b/0x4e0 [ 659.305296][T13741] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 659.311121][T13741] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 659.317258][T13741] ? sctp_v4_is_any+0x35/0x60 [ 659.321995][T13741] ? sctp_copy_one_addr+0x8c/0x350 [ 659.327171][T13741] sctp_bind_addr_copy+0xb3/0x3c0 [ 659.332265][T13741] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 659.338672][T13741] sctp_connect_new_asoc+0x2f9/0x6a0 [ 659.344034][T13741] ? __sctp_connect+0xd80/0xd80 [ 659.348952][T13741] ? __local_bh_enable_ip+0x13a/0x1c0 [ 659.354386][T13741] ? _local_bh_enable+0xa0/0xa0 [ 659.359305][T13741] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 659.365182][T13741] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 659.371063][T13741] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 659.376669][T13741] ? security_sctp_bind_connect+0x89/0xb0 [ 659.382462][T13741] sctp_sendmsg+0x1519/0x27b0 [ 659.387215][T13741] ? sctp_getsockopt+0xb60/0xb60 [ 659.392217][T13741] ? aa_sk_perm+0x83c/0x970 [ 659.396773][T13741] ? aa_af_perm+0x330/0x330 [ 659.401310][T13741] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 659.407857][T13741] ? sock_rps_record_flow+0x19/0x3f0 [ 659.413281][T13741] ? inet_sendmsg+0x7e/0x2a0 [ 659.417916][T13741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 659.423330][T13741] ? inet_send_prepare+0x250/0x250 [ 659.428485][T13741] ____sys_sendmsg+0x61b/0x980 [ 659.433294][T13741] ? __asan_memset+0x22/0x40 [ 659.437924][T13741] ? __sys_sendmsg_sock+0x30/0x30 [ 659.442979][T13741] ? __import_iovec+0x5f2/0x850 [ 659.447877][T13741] ? import_iovec+0x73/0xa0 [ 659.452420][T13741] ___sys_sendmsg+0x2a6/0x360 [ 659.457135][T13741] ? get_pid_task+0x20/0x1e0 [ 659.461765][T13741] ? __sys_sendmsg+0x2b0/0x2b0 [ 659.466590][T13741] ? __lock_acquire+0x7d80/0x7d80 [ 659.471667][T13741] __se_sys_sendmsg+0x1d0/0x2c0 [ 659.476551][T13741] ? __x64_sys_sendmsg+0x80/0x80 [ 659.481549][T13741] ? lockdep_hardirqs_on+0x98/0x150 [ 659.486785][T13741] do_syscall_64+0x55/0xb0 [ 659.491239][T13741] ? clear_bhb_loop+0x40/0x90 [ 659.495946][T13741] ? clear_bhb_loop+0x40/0x90 [ 659.500657][T13741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.506623][T13741] RIP: 0033:0x7f5eb879ce59 [ 659.511072][T13741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.530704][T13741] RSP: 002b:00007f5eb69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.539147][T13741] RAX: ffffffffffffffda RBX: 00007f5eb8a15fa0 RCX: 00007f5eb879ce59 [ 659.547148][T13741] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 659.555147][T13741] RBP: 00007f5eb69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 659.563150][T13741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 659.571153][T13741] R13: 00007f5eb8a16038 R14: 00007f5eb8a15fa0 R15: 00007ffcd4d2f978 [ 659.579175][T13741] [ 659.608831][ T5777] Bluetooth: hci2: command tx timeout [ 659.653427][T13663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 659.674891][T13663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 659.725977][T13743] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 659.816332][T13743] team0: Port device geneve1 added [ 659.832725][T13663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 659.854286][T13747] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2422'. [ 660.066188][T13663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.091482][T13750] netlink: 'syz.0.2423': attribute type 29 has an invalid length. [ 660.122710][T13750] netlink: 'syz.0.2423': attribute type 29 has an invalid length. [ 660.146726][T13663] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.181079][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.188526][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.202323][T13750] netlink: 'syz.0.2423': attribute type 29 has an invalid length. [ 660.223966][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.231272][ T7276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.292790][T13755] netlink: 'syz.0.2423': attribute type 29 has an invalid length. [ 660.764155][T13761] netlink: 'syz.0.2426': attribute type 10 has an invalid length. [ 660.781995][T13761] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2426'. [ 660.808381][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 660.923801][T13765] netlink: 'syz.3.2427': attribute type 39 has an invalid length. [ 661.094159][T13765] hsr_slave_1 (unregistering): left promiscuous mode [ 661.245242][T13663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.299801][T13663] veth0_vlan: entered promiscuous mode [ 661.343443][T13663] veth1_vlan: entered promiscuous mode [ 661.447086][T13663] veth0_macvtap: entered promiscuous mode [ 661.477095][T13663] veth1_macvtap: entered promiscuous mode [ 661.540397][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.599043][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.622520][ T5781] Bluetooth: hci2: command tx timeout [ 661.744868][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.779702][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.801879][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.820959][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.831047][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.847906][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.861166][T13663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.872907][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.883703][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.893955][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.920266][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.946298][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.971066][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.988181][T13663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.001953][T13663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.030916][T13663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.097530][T13663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.113781][T13663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.133348][T13663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.162335][T13663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.820315][T13784] netlink: 'syz.3.2433': attribute type 21 has an invalid length. [ 662.841266][T13784] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2433'. [ 662.918491][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.943706][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.280509][ T7276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.335113][ T7276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.701922][ T5781] Bluetooth: hci2: command tx timeout [ 663.870358][T13797] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2435'. [ 666.436487][T13821] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2443'. [ 666.499214][T13821] net_ratelimit: 483 callbacks suppressed [ 666.499235][T13821] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 667.685079][T13836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2446'. [ 672.185423][T13859] netlink: 'syz.3.2453': attribute type 3 has an invalid length. [ 672.768349][T13868] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 672.786753][T13868] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2456'. [ 674.449791][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 674.474467][T13887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2459'. [ 675.239208][T13899] netlink: 'syz.3.2463': attribute type 10 has an invalid length. [ 675.519285][T13899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 677.310162][T13926] netlink: 'syz.4.2469': attribute type 4 has an invalid length. [ 677.330663][T13926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2469'. [ 677.380839][T13935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2471'. [ 677.423690][T13929] netlink: 'syz.1.2470': attribute type 10 has an invalid length. [ 677.433444][T13929] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2470'. [ 677.468496][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 679.268980][T13952] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2482'. [ 680.521334][T13968] FAULT_INJECTION: forcing a failure. [ 680.521334][T13968] name failslab, interval 1, probability 0, space 0, times 0 [ 680.562042][T13968] CPU: 1 PID: 13968 Comm: syz.0.2477 Not tainted syzkaller #0 [ 680.569585][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.579677][T13968] Call Trace: [ 680.582992][T13968] [ 680.585955][T13968] dump_stack_lvl+0x18c/0x250 [ 680.590678][T13968] ? sctp_sendmsg+0x1519/0x27b0 [ 680.595576][T13968] ? ___sys_sendmsg+0x2a6/0x360 [ 680.600494][T13968] ? show_regs_print_info+0x20/0x20 [ 680.605735][T13968] ? load_image+0x420/0x420 [ 680.610284][T13968] should_fail_ex+0x394/0x4c0 [ 680.615010][T13968] should_failslab+0x9/0x20 [ 680.619557][T13968] slab_pre_alloc_hook+0x59/0x300 [ 680.624629][T13968] ? sctp_add_bind_addr+0x8c/0x360 [ 680.629776][T13968] __kmem_cache_alloc_node+0x53/0x250 [ 680.635192][T13968] ? sctp_add_bind_addr+0x8c/0x360 [ 680.640343][T13968] kmalloc_trace+0x2a/0xe0 [ 680.644805][T13968] sctp_add_bind_addr+0x8c/0x360 [ 680.649783][T13968] sctp_copy_local_addr_list+0x31b/0x4e0 [ 680.655454][T13968] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 680.661220][T13968] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 680.667328][T13968] ? sctp_v4_is_any+0x35/0x60 [ 680.672049][T13968] ? sctp_copy_one_addr+0x8c/0x350 [ 680.677203][T13968] sctp_bind_addr_copy+0xb3/0x3c0 [ 680.682354][T13968] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 680.688730][T13968] sctp_connect_new_asoc+0x2f9/0x6a0 [ 680.694058][T13968] ? __sctp_connect+0xd80/0xd80 [ 680.698946][T13968] ? __local_bh_enable_ip+0x13a/0x1c0 [ 680.704348][T13968] ? _local_bh_enable+0xa0/0xa0 [ 680.709227][T13968] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 680.715070][T13968] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 680.720913][T13968] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 680.726498][T13968] ? security_sctp_bind_connect+0x89/0xb0 [ 680.732343][T13968] sctp_sendmsg+0x1519/0x27b0 [ 680.737063][T13968] ? sctp_getsockopt+0xb60/0xb60 [ 680.742055][T13968] ? aa_sk_perm+0x83c/0x970 [ 680.746606][T13968] ? aa_af_perm+0x330/0x330 [ 680.751131][T13968] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 680.757664][T13968] ? sock_rps_record_flow+0x19/0x3f0 [ 680.763077][T13968] ? inet_sendmsg+0x7e/0x2a0 [ 680.767723][T13968] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 680.773052][T13968] ? inet_send_prepare+0x250/0x250 [ 680.778217][T13968] ____sys_sendmsg+0x61b/0x980 [ 680.783047][T13968] ? __asan_memset+0x22/0x40 [ 680.787686][T13968] ? __sys_sendmsg_sock+0x30/0x30 [ 680.792745][T13968] ? __import_iovec+0x5f2/0x850 [ 680.797645][T13968] ? import_iovec+0x73/0xa0 [ 680.802186][T13968] ___sys_sendmsg+0x2a6/0x360 [ 680.806898][T13968] ? get_pid_task+0x20/0x1e0 [ 680.811529][T13968] ? __sys_sendmsg+0x2b0/0x2b0 [ 680.816388][T13968] ? __lock_acquire+0x7d80/0x7d80 [ 680.821468][T13968] __se_sys_sendmsg+0x1d0/0x2c0 [ 680.826369][T13968] ? __x64_sys_sendmsg+0x80/0x80 [ 680.831371][T13968] ? lockdep_hardirqs_on+0x98/0x150 [ 680.836613][T13968] do_syscall_64+0x55/0xb0 [ 680.841065][T13968] ? clear_bhb_loop+0x40/0x90 [ 680.845769][T13968] ? clear_bhb_loop+0x40/0x90 [ 680.850470][T13968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.856400][T13968] RIP: 0033:0x7f00e059ce59 [ 680.860842][T13968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.880483][T13968] RSP: 002b:00007f00e144e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.888930][T13968] RAX: ffffffffffffffda RBX: 00007f00e0816090 RCX: 00007f00e059ce59 [ 680.896933][T13968] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 680.904939][T13968] RBP: 00007f00e144e090 R08: 0000000000000000 R09: 0000000000000000 [ 680.912943][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.920941][T13968] R13: 00007f00e0816128 R14: 00007f00e0816090 R15: 00007fff1023a718 [ 680.928959][T13968] [ 682.093022][T13980] netlink: 'syz.3.2481': attribute type 10 has an invalid length. [ 682.112823][T13980] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2481'. [ 682.136062][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 682.213182][T13989] netlink: 'syz.4.2485': attribute type 21 has an invalid length. [ 682.251620][T13992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2486'. [ 682.617052][T14002] netlink: 'syz.0.2489': attribute type 10 has an invalid length. [ 682.819547][T14002] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 683.656984][T14017] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 684.903574][T14044] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 684.920973][T14044] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2498'. [ 684.940079][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 685.592577][T14048] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2500'. [ 685.983247][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.989692][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.083871][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2503'. [ 687.493706][T14072] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 687.567850][T14063] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 687.633135][T14063] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 688.045678][T14078] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 688.055454][T14078] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2509'. [ 688.071217][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 690.864368][T14104] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 690.906558][T14104] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2518'. [ 690.973423][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 691.122954][T14114] FAULT_INJECTION: forcing a failure. [ 691.122954][T14114] name failslab, interval 1, probability 0, space 0, times 0 [ 691.136336][T14114] CPU: 0 PID: 14114 Comm: syz.3.2520 Not tainted syzkaller #0 [ 691.144144][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.154354][T14114] Call Trace: [ 691.157688][T14114] [ 691.160667][T14114] dump_stack_lvl+0x18c/0x250 [ 691.165415][T14114] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.171660][T14114] ? show_regs_print_info+0x20/0x20 [ 691.176931][T14114] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.183179][T14114] should_fail_ex+0x394/0x4c0 [ 691.187935][T14114] should_failslab+0x9/0x20 [ 691.192507][T14114] slab_pre_alloc_hook+0x59/0x300 [ 691.197607][T14114] kmem_cache_alloc_node+0x5e/0x310 [ 691.202959][T14114] ? __alloc_skb+0x103/0x2c0 [ 691.207612][T14114] __alloc_skb+0x103/0x2c0 [ 691.212099][T14114] ip_frag_next+0xcd/0xb00 [ 691.216588][T14114] ? ip_do_fragment+0x7fa/0x1750 [ 691.221599][T14114] ip_do_fragment+0x778/0x1750 [ 691.226455][T14114] ? ip_fragment+0x210/0x210 [ 691.231122][T14114] ip_output+0x2a5/0x3a0 [ 691.235431][T14114] ? ip_output+0x5a/0x3a0 [ 691.239859][T14114] iptunnel_xmit+0x4d0/0x910 [ 691.244553][T14114] ip_tunnel_xmit+0x1d18/0x25b0 [ 691.249505][T14114] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 691.254679][T14114] ? validate_xmit_xfrm+0xbb/0x1340 [ 691.260398][T14114] ? skb_push+0x8e/0xe0 [ 691.264635][T14114] ipgre_xmit+0x7eb/0xb70 [ 691.269048][T14114] dev_hard_start_xmit+0x269/0x790 [ 691.274250][T14114] ? __dev_queue_xmit+0x275/0x3630 [ 691.279436][T14114] __dev_queue_xmit+0x198c/0x3630 [ 691.284543][T14114] ? __dev_queue_xmit+0x275/0x3630 [ 691.289766][T14114] ? netdev_core_pick_tx+0x370/0x370 [ 691.295131][T14114] ? pskb_expand_head+0x17a/0x1150 [ 691.300310][T14114] ? pskb_expand_head+0x17a/0x1150 [ 691.305583][T14114] ? skb_release_data+0x1de/0x7f0 [ 691.310680][T14114] ? __bpf_redirect+0x4d1/0xdf0 [ 691.315623][T14114] __bpf_tx_skb+0x181/0x260 [ 691.320190][T14114] bpf_clone_redirect+0x315/0x4a0 [ 691.325298][T14114] bpf_prog_208b094576c80b22+0x5e/0x63 [ 691.330821][T14114] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 691.336859][T14114] ? __lock_acquire+0x7d80/0x7d80 [ 691.341945][T14114] ? lock_chain_count+0x20/0x20 [ 691.346860][T14114] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 691.353170][T14114] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 691.358604][T14114] ? ktime_get+0x7f/0x280 [ 691.363004][T14114] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 691.369303][T14114] ? ktime_get_real_ts64+0x440/0x440 [ 691.374660][T14114] ? __local_bh_disable_ip+0x108/0x1a0 [ 691.380182][T14114] ? __cant_sleep+0x220/0x220 [ 691.384926][T14114] ? read_tsc+0x9/0x20 [ 691.389053][T14114] ? ktime_get+0x24b/0x280 [ 691.393538][T14114] ? bpf_test_run+0x174/0x870 [ 691.398288][T14114] bpf_test_run+0x2df/0x870 [ 691.402880][T14114] ? bpf_test_run+0x174/0x870 [ 691.407628][T14114] ? dst_hold+0x70/0x70 [ 691.411864][T14114] ? eth_get_headlen+0x210/0x210 [ 691.416876][T14114] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 691.422344][T14114] ? cpu_online+0x60/0x60 [ 691.426737][T14114] bpf_prog_test_run+0x31f/0x390 [ 691.431758][T14114] __sys_bpf+0x49d/0x890 [ 691.436070][T14114] ? bpf_link_show_fdinfo+0x390/0x390 [ 691.441551][T14114] ? lock_chain_count+0x20/0x20 [ 691.446474][T14114] __x64_sys_bpf+0x7c/0x90 [ 691.450954][T14114] do_syscall_64+0x55/0xb0 [ 691.455428][T14114] ? clear_bhb_loop+0x40/0x90 [ 691.460332][T14114] ? clear_bhb_loop+0x40/0x90 [ 691.465067][T14114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.471128][T14114] RIP: 0033:0x7f484299ce59 [ 691.475636][T14114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.495309][T14114] RSP: 002b:00007f484387e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.503794][T14114] RAX: ffffffffffffffda RBX: 00007f4842c15fa0 RCX: 00007f484299ce59 [ 691.511822][T14114] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 691.518682][T14109] netlink: 'syz.0.2519': attribute type 10 has an invalid length. [ 691.519827][T14114] RBP: 00007f484387e090 R08: 0000000000000000 R09: 0000000000000000 [ 691.519865][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.519880][T14114] R13: 00007f4842c16038 R14: 00007f4842c15fa0 R15: 00007ffcea0cbbf8 [ 691.519916][T14114] [ 691.591707][T14109] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2519'. [ 691.624874][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 691.884611][T14116] syzkaller0: entered promiscuous mode [ 691.895723][T14116] syzkaller0: entered allmulticast mode [ 692.720075][T14131] FAULT_INJECTION: forcing a failure. [ 692.720075][T14131] name failslab, interval 1, probability 0, space 0, times 0 [ 692.733275][T14131] CPU: 1 PID: 14131 Comm: syz.3.2527 Not tainted syzkaller #0 [ 692.740800][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.750913][T14131] Call Trace: [ 692.754244][T14131] [ 692.757223][T14131] dump_stack_lvl+0x18c/0x250 [ 692.761979][T14131] ? show_regs_print_info+0x20/0x20 [ 692.767247][T14131] ? load_image+0x420/0x420 [ 692.771796][T14131] ? trace_call_bpf+0xc3/0x6c0 [ 692.776616][T14131] ? trace_call_bpf+0x5e9/0x6c0 [ 692.781504][T14131] ? trace_call_bpf+0xc3/0x6c0 [ 692.786317][T14131] should_fail_ex+0x394/0x4c0 [ 692.791047][T14131] should_failslab+0x9/0x20 [ 692.795594][T14131] slab_pre_alloc_hook+0x59/0x300 [ 692.800677][T14131] kmem_cache_alloc+0x5a/0x2c0 [ 692.805477][T14131] ? skb_clone+0x1eb/0x370 [ 692.809934][T14131] skb_clone+0x1eb/0x370 [ 692.814220][T14131] bpf_clone_redirect+0x16d/0x4a0 [ 692.819290][T14131] ? lock_chain_count+0x20/0x20 [ 692.824181][T14131] bpf_prog_208b094576c80b22+0x5e/0x63 [ 692.829676][T14131] ? __static_call_text_end+0x11d5f8/0x11d5f8 [ 692.835803][T14131] ? lockdep_hardirqs_on+0x98/0x150 [ 692.841063][T14131] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.847275][T14131] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 692.853560][T14131] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 692.858881][T14131] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 692.865173][T14131] ? ktime_get_real_ts64+0x440/0x440 [ 692.870495][T14131] ? __local_bh_disable_ip+0x108/0x1a0 [ 692.875993][T14131] ? __cant_sleep+0x220/0x220 [ 692.880708][T14131] ? read_tsc+0x9/0x20 [ 692.884811][T14131] ? ktime_get+0x24b/0x280 [ 692.889266][T14131] ? bpf_test_run+0x174/0x870 [ 692.894071][T14131] bpf_test_run+0x2df/0x870 [ 692.898624][T14131] ? bpf_test_run+0x174/0x870 [ 692.903333][T14131] ? dst_hold+0x70/0x70 [ 692.907534][T14131] ? eth_get_headlen+0x210/0x210 [ 692.912516][T14131] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 692.917961][T14131] ? cpu_online+0x60/0x60 [ 692.922421][T14131] bpf_prog_test_run+0x31f/0x390 [ 692.927400][T14131] __sys_bpf+0x49d/0x890 [ 692.931770][T14131] ? bpf_link_show_fdinfo+0x390/0x390 [ 692.937192][T14131] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.943404][T14131] __x64_sys_bpf+0x7c/0x90 [ 692.947944][T14131] do_syscall_64+0x55/0xb0 [ 692.952396][T14131] ? clear_bhb_loop+0x40/0x90 [ 692.957107][T14131] ? clear_bhb_loop+0x40/0x90 [ 692.961818][T14131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.967756][T14131] RIP: 0033:0x7f484299ce59 [ 692.972208][T14131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.991856][T14131] RSP: 002b:00007f484387e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.000320][T14131] RAX: ffffffffffffffda RBX: 00007f4842c15fa0 RCX: 00007f484299ce59 [ 693.008317][T14131] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 693.016322][T14131] RBP: 00007f484387e090 R08: 0000000000000000 R09: 0000000000000000 [ 693.024315][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.032310][T14131] R13: 00007f4842c16038 R14: 00007f4842c15fa0 R15: 00007ffcea0cbbf8 [ 693.040332][T14131] [ 695.847010][T14133] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2528'. [ 695.857148][T14138] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2529'. [ 695.872088][T14145] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2531'. [ 696.292632][T14157] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 696.657261][T14161] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2537'. [ 697.611157][T14175] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2541'. [ 700.057651][T14183] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2542'. [ 700.086393][T14185] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2544'. [ 700.111296][T14185] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 702.565392][T14207] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2550'. [ 702.590593][T14208] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2552'. [ 702.889040][T14214] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 703.498388][T14214] syz_tun: entered promiscuous mode [ 703.561216][T14214] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 704.012413][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2562'. [ 704.074305][T14224] FAULT_INJECTION: forcing a failure. [ 704.074305][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 704.108309][T14224] CPU: 0 PID: 14224 Comm: syz.0.2555 Not tainted syzkaller #0 [ 704.115894][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.126029][T14224] Call Trace: [ 704.129431][T14224] [ 704.132429][T14224] dump_stack_lvl+0x18c/0x250 [ 704.137191][T14224] ? sctp_sendmsg+0x1519/0x27b0 [ 704.142126][T14224] ? ___sys_sendmsg+0x2a6/0x360 [ 704.147067][T14224] ? show_regs_print_info+0x20/0x20 [ 704.152358][T14224] ? load_image+0x420/0x420 [ 704.156996][T14224] should_fail_ex+0x394/0x4c0 [ 704.161779][T14224] should_failslab+0x9/0x20 [ 704.166364][T14224] slab_pre_alloc_hook+0x59/0x300 [ 704.171481][T14224] ? sctp_add_bind_addr+0x8c/0x360 [ 704.176680][T14224] __kmem_cache_alloc_node+0x53/0x250 [ 704.182154][T14224] ? sctp_add_bind_addr+0x8c/0x360 [ 704.187364][T14224] kmalloc_trace+0x2a/0xe0 [ 704.191879][T14224] sctp_add_bind_addr+0x8c/0x360 [ 704.196928][T14224] sctp_copy_local_addr_list+0x31b/0x4e0 [ 704.202657][T14224] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 704.208466][T14224] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 704.214640][T14224] ? sctp_v6_is_any+0x64/0x70 [ 704.219419][T14224] ? sctp_copy_one_addr+0x8c/0x350 [ 704.224662][T14224] sctp_bind_addr_copy+0xb3/0x3c0 [ 704.229789][T14224] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 704.236224][T14224] sctp_connect_new_asoc+0x2f9/0x6a0 [ 704.241619][T14224] ? __sctp_connect+0xd80/0xd80 [ 704.246554][T14224] ? __local_bh_enable_ip+0x13a/0x1c0 [ 704.252028][T14224] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 704.257658][T14224] ? security_sctp_bind_connect+0x89/0xb0 [ 704.263476][T14224] sctp_sendmsg+0x1519/0x27b0 [ 704.268301][T14224] ? sctp_getsockopt+0xb60/0xb60 [ 704.273339][T14224] ? aa_sk_perm+0x83c/0x970 [ 704.277966][T14224] ? aa_af_perm+0x330/0x330 [ 704.282638][T14224] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 704.289147][T14224] ? sock_rps_record_flow+0x19/0x3f0 [ 704.294548][T14224] ? inet_sendmsg+0xce/0x2a0 [ 704.299232][T14224] ? inet_send_prepare+0x250/0x250 [ 704.304442][T14224] ____sys_sendmsg+0x61b/0x980 [ 704.309327][T14224] ? __sys_sendmsg_sock+0x30/0x30 [ 704.314439][T14224] ? __import_iovec+0x5f2/0x850 [ 704.319414][T14224] ? import_iovec+0x73/0xa0 [ 704.324012][T14224] ___sys_sendmsg+0x2a6/0x360 [ 704.328798][T14224] ? __sys_sendmsg+0x2b0/0x2b0 [ 704.333825][T14224] ? __lock_acquire+0x7d80/0x7d80 [ 704.339125][T14224] __se_sys_sendmsg+0x1d0/0x2c0 [ 704.344087][T14224] ? __x64_sys_sendmsg+0x80/0x80 [ 704.349178][T14224] ? lockdep_hardirqs_on+0x98/0x150 [ 704.354495][T14224] do_syscall_64+0x55/0xb0 [ 704.358997][T14224] ? clear_bhb_loop+0x40/0x90 [ 704.363745][T14224] ? clear_bhb_loop+0x40/0x90 [ 704.368551][T14224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.374722][T14224] RIP: 0033:0x7f00e059ce59 [ 704.379224][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.398912][T14224] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.407419][T14224] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 704.415484][T14224] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 704.423544][T14224] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 704.431603][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.439658][T14224] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 704.447777][T14224] [ 704.801718][T14234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.070725][T14239] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2561'. [ 708.621821][T14251] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 708.690990][T14253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2567'. [ 708.712055][T14255] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 708.747046][T14255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2566'. [ 708.778594][T14255] team0: entered promiscuous mode [ 708.791617][T14255] team_slave_0: entered promiscuous mode [ 708.884062][T14255] team_slave_1: entered promiscuous mode [ 708.917019][T14255] geneve1: entered promiscuous mode [ 708.956974][T14255] team0: entered allmulticast mode [ 709.091907][T14255] team_slave_0: entered allmulticast mode [ 709.106897][T14255] team_slave_1: entered allmulticast mode [ 709.142345][T14255] geneve1: entered allmulticast mode [ 709.149386][T14255] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.159279][T14255] bond0: (slave team0): Releasing backup interface [ 709.240769][T14255] bridge0: port 3(team0) entered blocking state [ 709.258785][T14255] bridge0: port 3(team0) entered disabled state [ 710.007453][T14262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2568'. [ 711.026362][T14283] syzkaller0: entered promiscuous mode [ 711.074725][T14283] syzkaller0: entered allmulticast mode [ 713.656375][T14288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2577'. [ 713.872905][T14311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2584'. [ 713.884352][T14311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2584'. [ 713.901589][T14311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2584'. [ 713.915477][T14311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2584'. [ 713.943918][T14311] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2584'. [ 714.430351][T14331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2591'. [ 714.636120][T14333] netlink: 'syz.1.2590': attribute type 39 has an invalid length. [ 715.296661][T14335] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.526484][T14340] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 715.556982][T14340] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2595'. [ 715.633909][T14342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2594'. [ 715.801232][T14345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2596'. [ 716.269628][T14354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2608'. [ 716.876858][T14370] netlink: 'syz.3.2604': attribute type 39 has an invalid length. [ 718.094333][T14383] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 719.413681][T14411] netlink: 'syz.4.2618': attribute type 39 has an invalid length. [ 719.763148][T14410] __nla_validate_parse: 3 callbacks suppressed [ 719.763173][T14410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2617'. [ 720.150534][T14420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2621'. [ 720.331928][T14418] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 720.349097][T14418] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2622'. [ 721.689579][T14435] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2627'. [ 721.720516][T14438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2627'. [ 722.301502][T14430] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 722.547789][T14430] syzkaller0: entered promiscuous mode [ 722.556132][T14430] syzkaller0: entered allmulticast mode [ 724.981221][T14461] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2632'. [ 724.997728][T14461] openvswitch: netlink: Key type 4112 is out of range max 32 [ 725.178204][T14464] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 725.204795][T14464] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2634'. [ 725.318529][T14471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2637'. [ 725.553802][T14477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2640'. [ 725.568403][T14479] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2641'. [ 725.590912][T14477] FAULT_INJECTION: forcing a failure. [ 725.590912][T14477] name failslab, interval 1, probability 0, space 0, times 0 [ 725.640401][T14477] CPU: 0 PID: 14477 Comm: syz.4.2640 Not tainted syzkaller #0 [ 725.647975][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.658097][T14477] Call Trace: [ 725.661435][T14477] [ 725.664420][T14477] dump_stack_lvl+0x18c/0x250 [ 725.669174][T14477] ? show_regs_print_info+0x20/0x20 [ 725.674479][T14477] ? load_image+0x420/0x420 [ 725.679047][T14477] ? __might_sleep+0xe0/0xe0 [ 725.683702][T14477] ? __lock_acquire+0x7d80/0x7d80 [ 725.688808][T14477] should_fail_ex+0x394/0x4c0 [ 725.693567][T14477] should_failslab+0x9/0x20 [ 725.698145][T14477] slab_pre_alloc_hook+0x59/0x300 [ 725.703246][T14477] ? lockdep_hardirqs_on+0x98/0x150 [ 725.708539][T14477] kmem_cache_alloc_node+0x5e/0x310 [ 725.713805][T14477] ? __alloc_skb+0x103/0x2c0 [ 725.718457][T14477] __alloc_skb+0x103/0x2c0 [ 725.722934][T14477] netlink_ack+0x377/0x1160 [ 725.727520][T14477] ? netlink_dump+0xec0/0xec0 [ 725.732259][T14477] ? perf_trace_lock+0xfc/0x3b0 [ 725.737184][T14477] netlink_rcv_skb+0x2b3/0x4c0 [ 725.742013][T14477] ? rtnetlink_bind+0x80/0x80 [ 725.746762][T14477] ? netlink_ack+0x1160/0x1160 [ 725.751610][T14477] ? __lock_acquire+0x7d80/0x7d80 [ 725.756708][T14477] ? netlink_deliver_tap+0x2e/0x1b0 [ 725.761975][T14477] netlink_unicast+0x7b1/0x930 [ 725.766812][T14477] netlink_sendmsg+0x8d0/0xbf0 [ 725.771648][T14477] ? netlink_getsockopt+0x590/0x590 [ 725.776909][T14477] ? aa_sock_msg_perm+0x94/0x150 [ 725.781919][T14477] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 725.787267][T14477] ? security_socket_sendmsg+0x80/0xa0 [ 725.792889][T14477] ? netlink_getsockopt+0x590/0x590 [ 725.798156][T14477] ____sys_sendmsg+0x61b/0x980 [ 725.802988][T14477] ? __asan_memset+0x22/0x40 [ 725.807616][T14477] ? __sys_sendmsg_sock+0x30/0x30 [ 725.812669][T14477] ? __import_iovec+0x5f2/0x850 [ 725.817562][T14477] ? import_iovec+0x73/0xa0 [ 725.822097][T14477] ___sys_sendmsg+0x2a6/0x360 [ 725.826811][T14477] ? __sys_sendmsg+0x2b0/0x2b0 [ 725.831625][T14477] ? __lock_acquire+0x7d80/0x7d80 [ 725.836707][T14477] __se_sys_sendmsg+0x1d0/0x2c0 [ 725.841592][T14477] ? __x64_sys_sendmsg+0x80/0x80 [ 725.846591][T14477] ? lockdep_hardirqs_on+0x98/0x150 [ 725.851856][T14477] do_syscall_64+0x55/0xb0 [ 725.856335][T14477] ? clear_bhb_loop+0x40/0x90 [ 725.861049][T14477] ? clear_bhb_loop+0x40/0x90 [ 725.865763][T14477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.871697][T14477] RIP: 0033:0x7f5eb879ce59 [ 725.876147][T14477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.895810][T14477] RSP: 002b:00007f5eb69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.904263][T14477] RAX: ffffffffffffffda RBX: 00007f5eb8a15fa0 RCX: 00007f5eb879ce59 [ 725.912269][T14477] RDX: 0000000020004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 725.920277][T14477] RBP: 00007f5eb69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 725.928283][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.936278][T14477] R13: 00007f5eb8a16038 R14: 00007f5eb8a15fa0 R15: 00007ffcd4d2f978 [ 725.944298][T14477] [ 726.395832][T14491] syzkaller0: entered promiscuous mode [ 726.401406][T14491] syzkaller0: entered allmulticast mode [ 726.694007][T14498] FAULT_INJECTION: forcing a failure. [ 726.694007][T14498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.707691][T14498] CPU: 0 PID: 14498 Comm: syz.1.2646 Not tainted syzkaller #0 [ 726.715206][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.725311][T14498] Call Trace: [ 726.728637][T14498] [ 726.731619][T14498] dump_stack_lvl+0x18c/0x250 [ 726.736359][T14498] ? show_regs_print_info+0x20/0x20 [ 726.741618][T14498] ? load_image+0x420/0x420 [ 726.746186][T14498] ? __lock_acquire+0x7d80/0x7d80 [ 726.751294][T14498] should_fail_ex+0x394/0x4c0 [ 726.756043][T14498] _copy_from_user+0x2f/0xe0 [ 726.760702][T14498] __copy_msghdr+0x388/0x560 [ 726.765357][T14498] ___sys_sendmsg+0x214/0x360 [ 726.770098][T14498] ? get_pid_task+0x20/0x1e0 [ 726.774759][T14498] ? __sys_sendmsg+0x2b0/0x2b0 [ 726.779645][T14498] ? __lock_acquire+0x7d80/0x7d80 [ 726.784772][T14498] __se_sys_sendmsg+0x1d0/0x2c0 [ 726.789690][T14498] ? __x64_sys_sendmsg+0x80/0x80 [ 726.794705][T14498] ? lockdep_hardirqs_on+0x98/0x150 [ 726.799968][T14498] do_syscall_64+0x55/0xb0 [ 726.804441][T14498] ? clear_bhb_loop+0x40/0x90 [ 726.809171][T14498] ? clear_bhb_loop+0x40/0x90 [ 726.813902][T14498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.819852][T14498] RIP: 0033:0x7fcddcb9ce59 [ 726.824320][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.843981][T14498] RSP: 002b:00007fcddda19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.852465][T14498] RAX: ffffffffffffffda RBX: 00007fcddce15fa0 RCX: 00007fcddcb9ce59 [ 726.860491][T14498] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 726.868516][T14498] RBP: 00007fcddda19090 R08: 0000000000000000 R09: 0000000000000000 [ 726.876539][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.884602][T14498] R13: 00007fcddce16038 R14: 00007fcddce15fa0 R15: 00007ffe2df86f98 [ 726.892669][T14498] [ 727.003321][T14501] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 727.011834][T14501] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2647'. [ 729.601246][T14495] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2645'. [ 729.618146][T14509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2649'. [ 729.630084][T14512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2650'. [ 730.014223][T14521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2655'. [ 730.318228][T14531] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2657'. [ 730.335893][T14531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 730.349274][T14531] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 730.916209][T14531] IPv6: NLM_F_CREATE should be specified when creating new route [ 730.924892][T14535] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 730.937012][T14536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2657'. [ 730.947098][T14535] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2658'. [ 731.009762][T14539] netlink: 'syz.3.2659': attribute type 39 has an invalid length. [ 731.162590][T14541] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2660'. [ 732.184606][T14544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2661'. [ 732.556356][T14554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2663'. [ 732.831176][T14562] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2669'. [ 732.878725][T14562] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 733.011029][T14562] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 733.069665][T14562] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.206868][T14562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2669'. [ 733.428525][T14574] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2671'. [ 733.780117][T14584] sctp: [Deprecated]: syz.4.2675 (pid 14584) Use of int in maxseg socket option. [ 733.780117][T14584] Use struct sctp_assoc_value instead [ 735.119171][T14615] __nla_validate_parse: 1 callbacks suppressed [ 735.119194][T14615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2684'. [ 735.151963][T14615] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 735.178614][T14615] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 735.239517][T14615] IPv6: NLM_F_CREATE should be specified when creating new route [ 735.445902][T14623] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2687'. [ 735.511688][T14615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2684'. [ 738.182192][T14650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2697'. [ 738.227941][T14650] team0: Port device team_slave_0 removed [ 738.253559][T14650] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 739.005376][T14664] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2702'. [ 739.227366][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 739.523011][T14671] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2712'. [ 742.727111][T14708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2717'. [ 743.040800][T14707] netlink: 'syz.4.2716': attribute type 1 has an invalid length. [ 743.112535][T14707] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2716'. [ 743.529124][T14717] netlink: 'syz.0.2720': attribute type 39 has an invalid length. [ 743.971258][T14729] netlink: 'syz.3.2724': attribute type 29 has an invalid length. [ 743.994886][T14729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 744.110252][T14731] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 744.256973][T14734] FAULT_INJECTION: forcing a failure. [ 744.256973][T14734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.322714][T14734] CPU: 1 PID: 14734 Comm: syz.0.2725 Not tainted syzkaller #0 [ 744.330277][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.340389][T14734] Call Trace: [ 744.343725][T14734] [ 744.346710][T14734] dump_stack_lvl+0x18c/0x250 [ 744.351460][T14734] ? show_regs_print_info+0x20/0x20 [ 744.356734][T14734] ? load_image+0x420/0x420 [ 744.361303][T14734] ? __might_fault+0xaa/0x120 [ 744.366045][T14734] ? __lock_acquire+0x7d80/0x7d80 [ 744.371146][T14734] should_fail_ex+0x394/0x4c0 [ 744.375913][T14734] _copy_from_user+0x2f/0xe0 [ 744.380579][T14734] __sys_bpf+0x23e/0x890 [ 744.384896][T14734] ? bpf_link_show_fdinfo+0x390/0x390 [ 744.390345][T14734] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.396596][T14734] __x64_sys_bpf+0x7c/0x90 [ 744.401092][T14734] do_syscall_64+0x55/0xb0 [ 744.405754][T14734] ? clear_bhb_loop+0x40/0x90 [ 744.410506][T14734] ? clear_bhb_loop+0x40/0x90 [ 744.415254][T14734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.421225][T14734] RIP: 0033:0x7f00e059ce59 [ 744.425705][T14734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.445379][T14734] RSP: 002b:00007f00e144e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.453859][T14734] RAX: ffffffffffffffda RBX: 00007f00e0816090 RCX: 00007f00e059ce59 [ 744.461894][T14734] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000000 [ 744.469923][T14734] RBP: 00007f00e144e090 R08: 0000000000000000 R09: 0000000000000000 [ 744.477939][T14734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.485951][T14734] R13: 00007f00e0816128 R14: 00007f00e0816090 R15: 00007fff1023a718 [ 744.493989][T14734] [ 744.649682][T14739] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2727'. [ 745.319275][T14747] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 745.328233][T14747] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2729'. [ 746.804896][T14774] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2741'. [ 747.176613][T14776] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 747.206788][T14776] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2742'. [ 747.417020][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.423738][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.942091][T14790] netlink: 'syz.3.2747': attribute type 49 has an invalid length. [ 747.950303][T14790] netlink: 'syz.3.2747': attribute type 49 has an invalid length. [ 748.006188][T14791] netlink: set zone limit has 8 unknown bytes [ 748.410614][T14810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2753'. [ 748.440230][T14805] bridge0: port 3(team0) entered disabled state [ 748.474849][T14805] bridge_slave_1: left allmulticast mode [ 748.497764][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.543547][T14811] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2750'. [ 748.887237][T14805] bridge_slave_0: left promiscuous mode [ 748.900627][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.277619][T14814] netlink: 'syz.3.2754': attribute type 39 has an invalid length. [ 749.639073][T14819] netlink: 'syz.3.2756': attribute type 29 has an invalid length. [ 749.655340][T14819] netlink: 'syz.3.2756': attribute type 29 has an invalid length. [ 750.161077][T14839] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2763'. [ 750.180289][T14833] netlink: 'syz.3.2761': attribute type 3 has an invalid length. [ 750.190114][T14833] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2761'. [ 750.986946][T14841] vcan0: entered allmulticast mode [ 751.007920][T14846] netlink: 'syz.4.2764': attribute type 10 has an invalid length. [ 751.041840][T14846] veth0_macvtap: left promiscuous mode [ 751.471705][T14862] bridge_slave_1: left allmulticast mode [ 751.499718][T14862] bridge_slave_1: left promiscuous mode [ 751.515693][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.538910][T14862] bridge_slave_0: left promiscuous mode [ 751.546568][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.592897][T14865] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2768'. [ 752.045861][T14876] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2776'. [ 752.809879][T14888] syzkaller0: entered promiscuous mode [ 752.822710][T14888] syzkaller0: entered allmulticast mode [ 755.387776][T14908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2787'. [ 755.531924][T14910] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2788'. [ 755.695681][T14918] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2790'. [ 759.430803][T14943] syzkaller0: entered promiscuous mode [ 759.458635][T14943] syzkaller0: entered allmulticast mode [ 759.702191][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 764.534795][T14952] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2803'. [ 765.029851][T14978] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2807'. [ 765.443568][T14991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2812'. [ 765.534310][T14995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2815'. [ 765.628814][T14997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'. [ 765.675997][T14997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'. [ 765.711563][T14997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'. [ 765.743723][T14997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'. [ 766.047137][T15002] syzkaller0: entered promiscuous mode [ 766.058025][T15002] syzkaller0: entered allmulticast mode [ 770.903313][T15015] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2822'. [ 770.922570][T15020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2824'. [ 771.683041][T15038] netlink: 'syz.1.2831': attribute type 39 has an invalid length. [ 771.800475][T15045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2834'. [ 771.898989][T15048] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 771.923312][T15048] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2833'. [ 772.020212][T15047] syzkaller0: entered promiscuous mode [ 772.029083][T15047] syzkaller0: entered allmulticast mode [ 772.043363][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 774.902239][T15065] batadv0: entered promiscuous mode [ 775.181292][T15074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2845'. [ 775.225366][T15072] netlink: 'syz.3.2844': attribute type 39 has an invalid length. [ 775.392677][T15081] netlink: 'syz.1.2847': attribute type 10 has an invalid length. [ 775.411563][T15081] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2847'. [ 775.429210][T15081] hsr0: entered promiscuous mode [ 775.749427][T15086] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2849'. [ 775.896365][T15102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2855'. [ 776.121189][T15105] netlink: 'syz.4.2856': attribute type 39 has an invalid length. [ 776.391006][T15113] batadv0: entered promiscuous mode [ 777.282954][T15124] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2864'. [ 777.442507][T15129] lo: entered allmulticast mode [ 777.465107][T15129] lo: entered promiscuous mode [ 777.469966][T15129] lo: left allmulticast mode [ 777.605496][T15130] netlink: 'syz.1.2866': attribute type 39 has an invalid length. [ 777.966095][T15147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2875'. [ 778.020700][T15148] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 778.031100][T15148] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2874'. [ 778.058118][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 778.127276][T15150] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2876'. [ 779.270036][T15156] netlink: 'syz.4.2878': attribute type 39 has an invalid length. [ 779.610004][T15167] batadv0: entered promiscuous mode [ 779.751670][T15173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2884'. [ 780.182353][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 780.237875][T15181] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2886'. [ 780.785265][T15188] netlink: 'syz.4.2887': attribute type 10 has an invalid length. [ 780.820406][T15188] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2887'. [ 780.851912][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 781.684150][T15196] netlink: 'syz.3.2892': attribute type 39 has an invalid length. [ 781.912892][T15207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2896'. [ 782.314502][T15220] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2902'. [ 782.365572][T15218] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2901'. [ 782.629855][T15230] netlink: 'syz.4.2903': attribute type 10 has an invalid length. [ 782.652059][T15230] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2903'. [ 782.724462][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2903'. [ 784.306289][T15233] netlink: 'syz.1.2905': attribute type 39 has an invalid length. [ 784.685158][T15249] netlink: 'syz.1.2913': attribute type 46 has an invalid length. [ 784.693439][T15249] netlink: 'syz.1.2913': attribute type 46 has an invalid length. [ 784.882141][T15253] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2914'. [ 785.187402][T15256] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 785.211229][T15256] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2916'. [ 785.240220][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 785.432681][T15266] netlink: 'syz.1.2919': attribute type 39 has an invalid length. [ 785.818660][T15277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2923'. [ 785.899681][T15277] netlink: 'syz.1.2923': attribute type 12 has an invalid length. [ 785.909776][T15277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2923'. [ 786.026836][T15279] lo: entered allmulticast mode [ 786.053092][T15279] lo: entered promiscuous mode [ 786.058366][T15279] lo: left allmulticast mode [ 786.424827][T15288] netlink: 'syz.1.2929': attribute type 39 has an invalid length. [ 786.476165][T15293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2932'. [ 786.810943][T15308] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 787.958518][T15324] netlink: 'syz.3.2940': attribute type 3 has an invalid length. [ 787.997095][T15324] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 788.013125][T15324] __nla_validate_parse: 3 callbacks suppressed [ 788.013174][T15324] netlink: 54563 bytes leftover after parsing attributes in process `syz.3.2940'. [ 788.544603][T15327] syzkaller0: entered promiscuous mode [ 788.550735][T15327] syzkaller0: entered allmulticast mode [ 788.591111][T15338] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2946'. [ 788.730232][T15349] netlink: 'syz.0.2949': attribute type 3 has an invalid length. [ 788.797934][T15349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2949'. [ 789.057137][T15335] syzkaller0: entered promiscuous mode [ 789.064005][T15335] syzkaller0: entered allmulticast mode [ 793.862904][T15365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'. [ 793.877128][T15368] netlink: 'syz.3.2956': attribute type 12 has an invalid length. [ 793.885230][T15368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'. [ 794.072108][T15377] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2960'. [ 794.447672][T15392] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 794.465581][T15392] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2963'. [ 794.484848][T15393] netlink: 'syz.1.2964': attribute type 1 has an invalid length. [ 794.511935][T15393] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2964'. [ 797.317380][T15404] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 797.340676][T15404] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2975'. [ 797.436304][T15401] syzkaller0: entered promiscuous mode [ 797.446572][T15401] syzkaller0: entered allmulticast mode [ 799.797558][T15411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2969'. [ 799.813185][T15416] netlink: 'syz.4.2969': attribute type 12 has an invalid length. [ 799.821318][T15416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2969'. [ 800.134681][T15424] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 800.152177][T15424] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2974'. [ 800.246908][T15431] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 800.262796][T15431] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2977'. [ 800.739249][T15446] FAULT_INJECTION: forcing a failure. [ 800.739249][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.778026][T15446] CPU: 0 PID: 15446 Comm: syz.0.2982 Not tainted syzkaller #0 [ 800.785588][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.795697][T15446] Call Trace: [ 800.799029][T15446] [ 800.802006][T15446] dump_stack_lvl+0x18c/0x250 [ 800.806749][T15446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 800.812984][T15446] ? show_regs_print_info+0x20/0x20 [ 800.818242][T15446] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 800.824490][T15446] should_fail_ex+0x394/0x4c0 [ 800.829243][T15446] _copy_from_user+0x2f/0xe0 [ 800.833904][T15446] __sys_bpf+0x23e/0x890 [ 800.838207][T15446] ? bpf_link_show_fdinfo+0x390/0x390 [ 800.843660][T15446] ? lock_chain_count+0x20/0x20 [ 800.848587][T15446] __x64_sys_bpf+0x7c/0x90 [ 800.853060][T15446] do_syscall_64+0x55/0xb0 [ 800.857541][T15446] ? clear_bhb_loop+0x40/0x90 [ 800.862295][T15446] ? clear_bhb_loop+0x40/0x90 [ 800.867025][T15446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.872987][T15446] RIP: 0033:0x7f00e059ce59 [ 800.877457][T15446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.897124][T15446] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.905601][T15446] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 800.913634][T15446] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 800.921674][T15446] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 800.929705][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.937724][T15446] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 800.945772][T15446] [ 801.430672][T15442] syzkaller0: entered promiscuous mode [ 801.441233][T15442] syzkaller0: entered allmulticast mode [ 801.462536][T15455] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 801.532243][T15455] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2986'. [ 801.757816][T15460] netlink: 'syz.4.2988': attribute type 1 has an invalid length. [ 801.771925][T15460] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2988'. [ 804.207505][T15480] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 804.229055][T15480] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2998'. [ 804.638505][T15489] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 804.659786][T15489] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3002'. [ 805.152358][T15482] syzkaller0: entered promiscuous mode [ 805.158486][T15482] syzkaller0: entered allmulticast mode [ 805.394033][T15501] syzkaller0: entered promiscuous mode [ 805.399600][T15501] syzkaller0: entered allmulticast mode [ 808.827973][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.834656][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.016012][T15535] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 811.024432][T15535] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3013'. [ 812.777811][T15543] netlink: 'syz.0.3016': attribute type 10 has an invalid length. [ 812.787211][T15543] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3016'. [ 812.797133][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 813.209948][T15549] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 813.224715][T15549] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3017'. [ 813.254396][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 813.393506][T15563] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 813.430331][T15563] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3022'. [ 813.766892][T15571] netlink: 'syz.1.3025': attribute type 10 has an invalid length. [ 813.783907][T15571] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3025'. [ 813.812712][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 814.104283][T15575] syzkaller0: entered promiscuous mode [ 814.110669][T15575] syzkaller0: entered allmulticast mode [ 814.130375][T15578] netlink: 'syz.0.3027': attribute type 10 has an invalid length. [ 814.230865][T15578] team0 (unregistering): Port device team_slave_0 removed [ 814.255976][T15578] team0 (unregistering): Port device team_slave_1 removed [ 814.297029][T15578] team0 (unregistering): Port device geneve1 removed [ 815.020779][T15592] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 815.029057][T15592] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3032'. [ 817.188467][T15604] netlink: 'syz.1.3036': attribute type 10 has an invalid length. [ 817.224671][T15604] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3036'. [ 817.249400][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 817.260751][T15614] netlink: 'syz.3.3038': attribute type 10 has an invalid length. [ 817.280705][T15614] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3038'. [ 817.329092][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'. [ 817.495889][T15622] netlink: 'syz.0.3041': attribute type 1 has an invalid length. [ 817.507724][T15622] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3041'. [ 817.999960][T15637] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3049'. [ 818.123662][T15639] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3048'. [ 818.884846][T15634] syzkaller0: entered promiscuous mode [ 818.890406][T15634] syzkaller0: entered allmulticast mode [ 819.195945][T15649] netlink: 'syz.4.3052': attribute type 1 has an invalid length. [ 819.212911][T15649] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3052'. [ 821.282149][T15662] netlink: 'syz.0.3057': attribute type 10 has an invalid length. [ 821.290146][T15662] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3057'. [ 821.299944][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 821.309460][T15661] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 821.698351][T15683] veth0_to_bridge: entered allmulticast mode [ 823.172736][T15702] syzkaller0: entered promiscuous mode [ 823.179836][T15702] syzkaller0: entered allmulticast mode [ 823.194629][T15708] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 823.207233][T15709] netlink: 'syz.3.3068': attribute type 10 has an invalid length. [ 823.217087][T15709] __nla_validate_parse: 4 callbacks suppressed [ 823.217122][T15709] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3068'. [ 826.292068][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 826.301629][T15725] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3075'. [ 826.499876][T15740] FAULT_INJECTION: forcing a failure. [ 826.499876][T15740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.530503][T15738] netlink: 'syz.4.3078': attribute type 10 has an invalid length. [ 826.532983][T15740] CPU: 1 PID: 15740 Comm: syz.0.3077 Not tainted syzkaller #0 [ 826.545969][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.556076][T15740] Call Trace: [ 826.559429][T15740] [ 826.562410][T15740] dump_stack_lvl+0x18c/0x250 [ 826.567163][T15740] ? show_regs_print_info+0x20/0x20 [ 826.572416][T15740] ? load_image+0x420/0x420 [ 826.576966][T15740] ? __lock_acquire+0x7d80/0x7d80 [ 826.582060][T15740] should_fail_ex+0x394/0x4c0 [ 826.586804][T15740] _copy_from_user+0x2f/0xe0 [ 826.591448][T15740] __copy_msghdr+0x388/0x560 [ 826.596100][T15740] ___sys_sendmsg+0x214/0x360 [ 826.600825][T15740] ? get_pid_task+0x20/0x1e0 [ 826.605488][T15740] ? __sys_sendmsg+0x2b0/0x2b0 [ 826.610334][T15740] ? __lock_acquire+0x7d80/0x7d80 [ 826.615519][T15740] __se_sys_sendmsg+0x1d0/0x2c0 [ 826.620420][T15740] ? __x64_sys_sendmsg+0x80/0x80 [ 826.625422][T15740] ? lockdep_hardirqs_on+0x98/0x150 [ 826.630669][T15740] do_syscall_64+0x55/0xb0 [ 826.635142][T15740] ? clear_bhb_loop+0x40/0x90 [ 826.639858][T15740] ? clear_bhb_loop+0x40/0x90 [ 826.644574][T15740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.650512][T15740] RIP: 0033:0x7f00e059ce59 [ 826.654975][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.674623][T15740] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.683077][T15740] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 826.691112][T15740] RDX: 0000000000009c00 RSI: 0000200000000040 RDI: 0000000000000003 [ 826.699126][T15740] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 826.707223][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.715231][T15740] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 826.723260][T15740] [ 826.785334][T15738] team_slave_0: left promiscuous mode [ 826.791048][T15738] team_slave_0: left allmulticast mode [ 826.899272][T15738] team0 (unregistering): Port device team_slave_0 removed [ 826.931538][T15738] team_slave_1: left promiscuous mode [ 826.943814][T15738] team_slave_1: left allmulticast mode [ 826.989720][T15738] team0 (unregistering): Port device team_slave_1 removed [ 827.003833][T15738] geneve1: left promiscuous mode [ 827.009388][T15738] geneve1: left allmulticast mode [ 827.042314][T15738] team0 (unregistering): Port device geneve1 removed [ 827.328391][T15754] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3085'. [ 827.616049][T15761] netlink: 'syz.1.3084': attribute type 10 has an invalid length. [ 827.636806][T15761] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3084'. [ 827.650973][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3084'. [ 828.030193][T15764] syzkaller0: entered promiscuous mode [ 828.036521][T15764] syzkaller0: entered allmulticast mode [ 828.376790][T15771] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3088'. [ 830.879228][T15796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3098'. [ 830.990137][T15798] netlink: 'syz.3.3097': attribute type 10 has an invalid length. [ 831.020805][T15798] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3097'. [ 831.056660][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 834.349918][T15803] syzkaller0: entered promiscuous mode [ 834.356395][T15803] syzkaller0: entered allmulticast mode [ 834.374798][T15813] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3104'. [ 834.391424][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3104'. [ 834.419627][T15819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.431875][T15819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.450273][T15819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.458455][T15819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.433393][T15820] syzkaller0: entered promiscuous mode [ 839.438916][T15820] syzkaller0: entered allmulticast mode [ 841.451791][T15841] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3109'. [ 841.482121][T15847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3110'. [ 841.491506][T15847] FAULT_INJECTION: forcing a failure. [ 841.491506][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 841.505858][T15847] CPU: 0 PID: 15847 Comm: syz.0.3110 Not tainted syzkaller #0 [ 841.513386][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.523486][T15847] Call Trace: [ 841.526806][T15847] [ 841.529799][T15847] dump_stack_lvl+0x18c/0x250 [ 841.534540][T15847] ? show_regs_print_info+0x20/0x20 [ 841.539793][T15847] ? load_image+0x420/0x420 [ 841.544352][T15847] ? __might_sleep+0xe0/0xe0 [ 841.548989][T15847] ? __lock_acquire+0x7d80/0x7d80 [ 841.554067][T15847] should_fail_ex+0x394/0x4c0 [ 841.558806][T15847] should_failslab+0x9/0x20 [ 841.563372][T15847] slab_pre_alloc_hook+0x59/0x300 [ 841.568454][T15847] ? lockdep_hardirqs_on+0x98/0x150 [ 841.573715][T15847] kmem_cache_alloc_node+0x5e/0x310 [ 841.579004][T15847] ? __alloc_skb+0x103/0x2c0 [ 841.583651][T15847] __alloc_skb+0x103/0x2c0 [ 841.588121][T15847] netlink_ack+0x377/0x1160 [ 841.592688][T15847] ? netlink_dump+0xec0/0xec0 [ 841.597409][T15847] ? ref_tracker_free+0x686/0x830 [ 841.602489][T15847] netlink_rcv_skb+0x2b3/0x4c0 [ 841.607294][T15847] ? rtnetlink_bind+0x80/0x80 [ 841.612022][T15847] ? netlink_ack+0x1160/0x1160 [ 841.616830][T15847] ? __lock_acquire+0x7d80/0x7d80 [ 841.621893][T15847] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.627122][T15847] netlink_unicast+0x7b1/0x930 [ 841.631923][T15847] netlink_sendmsg+0x8d0/0xbf0 [ 841.636721][T15847] ? netlink_getsockopt+0x590/0x590 [ 841.641976][T15847] ? aa_sock_msg_perm+0x94/0x150 [ 841.646986][T15847] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 841.652314][T15847] ? security_socket_sendmsg+0x80/0xa0 [ 841.657847][T15847] ? netlink_getsockopt+0x590/0x590 [ 841.663096][T15847] ____sys_sendmsg+0x61b/0x980 [ 841.667907][T15847] ? __asan_memset+0x22/0x40 [ 841.672628][T15847] ? __sys_sendmsg_sock+0x30/0x30 [ 841.677713][T15847] ? __import_iovec+0x5f2/0x850 [ 841.682609][T15847] ? import_iovec+0x73/0xa0 [ 841.687142][T15847] ___sys_sendmsg+0x2a6/0x360 [ 841.691874][T15847] ? get_pid_task+0x20/0x1e0 [ 841.696545][T15847] ? __sys_sendmsg+0x2b0/0x2b0 [ 841.701378][T15847] ? __lock_acquire+0x7d80/0x7d80 [ 841.706463][T15847] __se_sys_sendmsg+0x1d0/0x2c0 [ 841.711358][T15847] ? __x64_sys_sendmsg+0x80/0x80 [ 841.716364][T15847] ? lockdep_hardirqs_on+0x98/0x150 [ 841.721620][T15847] do_syscall_64+0x55/0xb0 [ 841.726078][T15847] ? clear_bhb_loop+0x40/0x90 [ 841.730785][T15847] ? clear_bhb_loop+0x40/0x90 [ 841.735526][T15847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.741497][T15847] RIP: 0033:0x7f00e059ce59 [ 841.745953][T15847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.766440][T15847] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.775014][T15847] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 841.783046][T15847] RDX: 0000000000008800 RSI: 0000200000000080 RDI: 0000000000000003 [ 841.791081][T15847] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 841.799110][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.807119][T15847] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 841.815246][T15847] [ 843.393987][T15880] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3122'. [ 844.300899][T15892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3125'. [ 844.888547][T15901] syzkaller0: entered promiscuous mode [ 844.894648][T15901] syzkaller0: entered allmulticast mode [ 849.702626][T15927] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3135'. [ 850.004792][T15927] debugfs: Directory '!!ôp' with parent 'ieee80211' already present! [ 850.737483][T15942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3140'. [ 852.168399][T15957] syzkaller0: entered promiscuous mode [ 852.177640][T15962] FAULT_INJECTION: forcing a failure. [ 852.177640][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.182285][T15957] syzkaller0: entered allmulticast mode [ 852.214637][T15962] CPU: 0 PID: 15962 Comm: syz.0.3145 Not tainted syzkaller #0 [ 852.222263][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.232382][T15962] Call Trace: [ 852.235708][T15962] [ 852.238683][T15962] dump_stack_lvl+0x18c/0x250 [ 852.243418][T15962] ? show_regs_print_info+0x20/0x20 [ 852.248675][T15962] ? load_image+0x420/0x420 [ 852.253247][T15962] should_fail_ex+0x394/0x4c0 [ 852.257998][T15962] _copy_from_iter+0x1cd/0x1290 [ 852.262919][T15962] ? dev_get_by_index+0x22/0x2d0 [ 852.267915][T15962] ? __lock_acquire+0x7d80/0x7d80 [ 852.273000][T15962] ? copyout_mc+0x70/0x70 [ 852.277403][T15962] ? dev_get_by_index+0x22/0x2d0 [ 852.282401][T15962] ? dev_get_by_index+0x22/0x2d0 [ 852.287404][T15962] packet_sendmsg+0x2d14/0x4c70 [ 852.292315][T15962] ? aa_sk_perm+0x970/0x970 [ 852.296887][T15962] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 852.302761][T15962] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 852.308807][T15962] ? lock_chain_count+0x20/0x20 [ 852.313719][T15962] ? aa_sk_perm+0x83c/0x970 [ 852.318278][T15962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.324544][T15962] ? packet_getsockopt+0xad0/0xad0 [ 852.329717][T15962] ? tomoyo_path_number_perm+0x170/0x5e0 [ 852.335409][T15962] ? tomoyo_socket_sendmsg+0x16/0x30 [ 852.340755][T15962] ? aa_sock_msg_perm+0x94/0x150 [ 852.345760][T15962] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 852.351099][T15962] ? security_socket_sendmsg+0x80/0xa0 [ 852.356615][T15962] ? packet_getsockopt+0xad0/0xad0 [ 852.361788][T15962] ____sys_sendmsg+0x61b/0x980 [ 852.366631][T15962] ? __asan_memset+0x22/0x40 [ 852.371285][T15962] ? __sys_sendmsg_sock+0x30/0x30 [ 852.376358][T15962] ? __import_iovec+0x5f2/0x850 [ 852.381251][T15962] ? import_iovec+0x73/0xa0 [ 852.385793][T15962] ___sys_sendmsg+0x2a6/0x360 [ 852.390517][T15962] ? __sys_sendmsg+0x2b0/0x2b0 [ 852.395353][T15962] __se_sys_sendmsg+0x1d0/0x2c0 [ 852.400235][T15962] ? __x64_sys_sendmsg+0x80/0x80 [ 852.405222][T15962] do_syscall_64+0x55/0xb0 [ 852.409670][T15962] ? clear_bhb_loop+0x40/0x90 [ 852.414381][T15962] ? clear_bhb_loop+0x40/0x90 [ 852.419088][T15962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.425018][T15962] RIP: 0033:0x7f00e059ce59 [ 852.429463][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.449321][T15962] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.457775][T15962] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 852.465773][T15962] RDX: 00000000000000c4 RSI: 00002000000000c0 RDI: 000000000000000b [ 852.473770][T15962] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 852.481777][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.489774][T15962] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 852.497961][T15962] [ 853.003486][T15969] FAULT_INJECTION: forcing a failure. [ 853.003486][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 853.031893][T15969] CPU: 0 PID: 15969 Comm: syz.4.3146 Not tainted syzkaller #0 [ 853.039452][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.049562][T15969] Call Trace: [ 853.052885][T15969] [ 853.055861][T15969] dump_stack_lvl+0x18c/0x250 [ 853.060604][T15969] ? show_regs_print_info+0x20/0x20 [ 853.065863][T15969] ? load_image+0x420/0x420 [ 853.070427][T15969] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 853.076462][T15969] ? lock_chain_count+0x20/0x20 [ 853.081368][T15969] should_fail_ex+0x394/0x4c0 [ 853.086113][T15969] should_failslab+0x9/0x20 [ 853.090664][T15969] slab_pre_alloc_hook+0x59/0x300 [ 853.095778][T15969] kmem_cache_alloc+0x5a/0x2c0 [ 853.100606][T15969] ? skb_clone+0x1eb/0x370 [ 853.105079][T15969] skb_clone+0x1eb/0x370 [ 853.109377][T15969] __netlink_deliver_tap+0x411/0x7f0 [ 853.114724][T15969] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.119974][T15969] netlink_deliver_tap+0x19c/0x1b0 [ 853.125147][T15969] netlink_unicast+0x77b/0x930 [ 853.129978][T15969] netlink_sendmsg+0x8d0/0xbf0 [ 853.134809][T15969] ? lockdep_hardirqs_on+0x98/0x150 [ 853.140092][T15969] ? netlink_getsockopt+0x590/0x590 [ 853.145355][T15969] ? aa_sock_msg_perm+0x94/0x150 [ 853.150356][T15969] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 853.155696][T15969] ? security_socket_sendmsg+0x80/0xa0 [ 853.161212][T15969] ? netlink_getsockopt+0x590/0x590 [ 853.166479][T15969] ____sys_sendmsg+0x61b/0x980 [ 853.171317][T15969] ? __asan_memset+0x22/0x40 [ 853.175977][T15969] ? __sys_sendmsg_sock+0x30/0x30 [ 853.181056][T15969] ? __import_iovec+0x5f2/0x850 [ 853.185964][T15969] ? import_iovec+0x73/0xa0 [ 853.190525][T15969] ___sys_sendmsg+0x2a6/0x360 [ 853.195270][T15969] ? __sys_sendmsg+0x2b0/0x2b0 [ 853.200148][T15969] __se_sys_sendmsg+0x1d0/0x2c0 [ 853.205063][T15969] ? __x64_sys_sendmsg+0x80/0x80 [ 853.210087][T15969] do_syscall_64+0x55/0xb0 [ 853.214558][T15969] ? clear_bhb_loop+0x40/0x90 [ 853.219287][T15969] ? clear_bhb_loop+0x40/0x90 [ 853.224017][T15969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.229974][T15969] RIP: 0033:0x7f5eb879ce59 [ 853.234435][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.254091][T15969] RSP: 002b:00007f5eb69d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.262559][T15969] RAX: ffffffffffffffda RBX: 00007f5eb8a16090 RCX: 00007f5eb879ce59 [ 853.270585][T15969] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000a [ 853.278610][T15969] RBP: 00007f5eb69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 853.286637][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.294659][T15969] R13: 00007f5eb8a16128 R14: 00007f5eb8a16090 R15: 00007ffcd4d2f978 [ 853.302703][T15969] [ 856.438503][T15965] tap0: tun_chr_ioctl cmd 1074025677 [ 856.444294][T15965] tap0: linktype set to 778 [ 856.937588][T15982] netlink: 'syz.4.3149': attribute type 10 has an invalid length. [ 857.001929][T15982] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3149'. [ 857.091033][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3149'. [ 857.297096][T15992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3153'. [ 858.005241][T15999] syzkaller0: entered promiscuous mode [ 858.046208][T15999] syzkaller0: entered allmulticast mode [ 862.141644][T16017] netlink: 'syz.0.3161': attribute type 21 has an invalid length. [ 862.596167][T16028] netlink: 'syz.3.3164': attribute type 10 has an invalid length. [ 862.629505][T16028] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3164'. [ 862.678350][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 864.276097][T16043] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3166'. [ 865.538430][T16061] netlink: 'syz.0.3171': attribute type 10 has an invalid length. [ 865.559797][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.567768][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.610971][T16061] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.618353][T16061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.626111][T16061] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.633440][T16061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.706730][T16061] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 865.763894][T16067] netlink: 'syz.3.3172': attribute type 13 has an invalid length. [ 865.772428][T16067] netlink: 'syz.3.3172': attribute type 58 has an invalid length. [ 865.780297][T16067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3172'. [ 865.887705][T16070] syzkaller0: entered promiscuous mode [ 865.917774][T16070] syzkaller0: entered allmulticast mode [ 870.282637][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.289006][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.051244][T16079] netlink: 'syz.0.3175': attribute type 10 has an invalid length. [ 872.059262][T16079] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3175'. [ 872.068530][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 872.656357][T16123] FAULT_INJECTION: forcing a failure. [ 872.656357][T16123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.690866][T16123] CPU: 0 PID: 16123 Comm: syz.0.3187 Not tainted syzkaller #0 [ 872.698502][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.708593][T16123] Call Trace: [ 872.711903][T16123] [ 872.714858][T16123] dump_stack_lvl+0x18c/0x250 [ 872.719586][T16123] ? show_regs_print_info+0x20/0x20 [ 872.724885][T16123] ? load_image+0x420/0x420 [ 872.729441][T16123] ? __might_fault+0xaa/0x120 [ 872.734177][T16123] ? __lock_acquire+0x7d80/0x7d80 [ 872.739321][T16123] should_fail_ex+0x394/0x4c0 [ 872.744060][T16123] _copy_from_iter+0x1cd/0x1290 [ 872.748964][T16123] ? rep_movs_alternative+0x4a/0x90 [ 872.754208][T16123] ? copyout_mc+0x70/0x70 [ 872.758579][T16123] ? copyout_mc+0x70/0x70 [ 872.762943][T16123] ? __virt_addr_valid+0x10c/0x380 [ 872.768170][T16123] ? page_copy_sane+0x4e/0x270 [ 872.772986][T16123] copy_page_from_iter+0x7b/0x100 [ 872.778063][T16123] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 872.783921][T16123] unix_dgram_sendmsg+0x659/0x16e0 [ 872.789073][T16123] ? __lock_acquire+0x1262/0x7d80 [ 872.794682][T16123] ? verify_lock_unused+0x140/0x140 [ 872.801165][T16123] ? aa_sk_perm+0x83c/0x970 [ 872.805715][T16123] ? unix_dgram_poll+0x680/0x680 [ 872.810700][T16123] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 872.817170][T16123] ? aa_sock_msg_perm+0x94/0x150 [ 872.822156][T16123] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 872.827751][T16123] ? unix_dgram_peer_wake_me+0x430/0x430 [ 872.833429][T16123] ____sys_sendmsg+0x61b/0x980 [ 872.838263][T16123] ? __asan_memset+0x22/0x40 [ 872.842888][T16123] ? __sys_sendmsg_sock+0x30/0x30 [ 872.847963][T16123] ? __import_iovec+0x5f2/0x850 [ 872.852868][T16123] ? import_iovec+0x73/0xa0 [ 872.857500][T16123] ___sys_sendmsg+0x2a6/0x360 [ 872.862233][T16123] ? __sys_sendmsg+0x2b0/0x2b0 [ 872.867313][T16123] ? __lock_acquire+0x7d80/0x7d80 [ 872.872392][T16123] __se_sys_sendmsg+0x1d0/0x2c0 [ 872.877279][T16123] ? __x64_sys_sendmsg+0x80/0x80 [ 872.882264][T16123] ? lockdep_hardirqs_on+0x98/0x150 [ 872.887506][T16123] do_syscall_64+0x55/0xb0 [ 872.891973][T16123] ? clear_bhb_loop+0x40/0x90 [ 872.896774][T16123] ? clear_bhb_loop+0x40/0x90 [ 872.901485][T16123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.907513][T16123] RIP: 0033:0x7f00e059ce59 [ 872.911965][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.931784][T16123] RSP: 002b:00007f00e146f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.940328][T16123] RAX: ffffffffffffffda RBX: 00007f00e0815fa0 RCX: 00007f00e059ce59 [ 872.948525][T16123] RDX: 0000000000008800 RSI: 0000200000001000 RDI: 0000000000000004 [ 872.956535][T16123] RBP: 00007f00e146f090 R08: 0000000000000000 R09: 0000000000000000 [ 872.964568][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.972570][T16123] R13: 00007f00e0816038 R14: 00007f00e0815fa0 R15: 00007fff1023a718 [ 872.980614][T16123] [ 875.136823][T16152] netlink: 'syz.3.3191': attribute type 10 has an invalid length. [ 875.207944][T16152] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3191'. [ 875.366178][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 876.013197][T16163] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3197'. [ 876.062193][T16163] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 876.237045][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 877.341118][T16186] hsr0: VLAN not yet supported [ 878.262343][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 879.695714][T16211] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 879.822779][T16211] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3208'. [ 880.013974][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 880.620599][T16218] sit0: left promiscuous mode [ 882.194349][T16249] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3218'. [ 882.234086][T16249] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3218'. [ 882.547834][T16249] bond0: (slave bond_slave_0): Releasing backup interface [ 882.772038][T16249] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 882.847505][T16251] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3218'. [ 883.068212][T16258] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3220'. [ 883.203813][T16258] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3220'. [ 883.256946][T16259] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3220'. [ 883.955037][T16261] netlink: 'syz.1.3221': attribute type 10 has an invalid length. [ 884.173996][T16261] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3221'. [ 884.392095][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'. [ 884.824187][T16278] netlink: 'syz.3.3226': attribute type 9 has an invalid length. [ 884.836435][T16278] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3226'. [ 884.996444][T16287] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3227'. [ 886.350193][T16307] netlink: 'syz.4.3232': attribute type 29 has an invalid length. [ 886.482092][T16307] netlink: 'syz.4.3232': attribute type 29 has an invalid length. [ 886.544590][T16308] netlink: 'syz.4.3232': attribute type 29 has an invalid length. [ 886.721916][T16307] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3232'. [ 886.802747][T16308] netlink: 'syz.4.3232': attribute type 29 has an invalid length. [ 889.406779][T16329] netlink: 'syz.0.3238': attribute type 10 has an invalid length. [ 889.451955][T16329] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3238'. [ 889.513292][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 889.751908][T16334] netlink: 'syz.3.3239': attribute type 39 has an invalid length. [ 892.456116][T16370] FAULT_INJECTION: forcing a failure. [ 892.456116][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 892.482191][T16370] CPU: 0 PID: 16370 Comm: syz.0.3248 Not tainted syzkaller #0 [ 892.489739][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.499847][T16370] Call Trace: [ 892.503175][T16370] [ 892.506153][T16370] dump_stack_lvl+0x18c/0x250 [ 892.510900][T16370] ? show_regs_print_info+0x20/0x20 [ 892.516163][T16370] ? load_image+0x420/0x420 [ 892.520734][T16370] ? __might_sleep+0xe0/0xe0 [ 892.525384][T16370] ? __lock_acquire+0x7d80/0x7d80 [ 892.530473][T16370] should_fail_ex+0x394/0x4c0 [ 892.535222][T16370] should_failslab+0x9/0x20 [ 892.539816][T16370] slab_pre_alloc_hook+0x59/0x300 [ 892.544916][T16370] ? sk_prot_alloc+0xe7/0x210 [ 892.549654][T16370] ? sk_prot_alloc+0xe7/0x210 [ 892.554397][T16370] __kmem_cache_alloc_node+0x53/0x250 [ 892.559832][T16370] ? sk_prot_alloc+0xe7/0x210 [ 892.564574][T16370] __kmalloc+0xa7/0x240 [ 892.568807][T16370] sk_prot_alloc+0xe7/0x210 [ 892.573366][T16370] ? sk_alloc+0x24/0x350 [ 892.577666][T16370] sk_alloc+0x3a/0x350 [ 892.581819][T16370] alg_create+0xa4/0x140 [ 892.586132][T16370] __sock_create+0x49e/0x940 [ 892.590807][T16370] __sys_socketpair+0x236/0x550 [ 892.595725][T16370] __x64_sys_socketpair+0x9b/0xb0 [ 892.600808][T16370] do_syscall_64+0x55/0xb0 [ 892.605278][T16370] ? clear_bhb_loop+0x40/0x90 [ 892.609996][T16370] ? clear_bhb_loop+0x40/0x90 [ 892.614742][T16370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.620697][T16370] RIP: 0033:0x7f00e059ce59 [ 892.625175][T16370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.644846][T16370] RSP: 002b:00007f00e142d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 892.653318][T16370] RAX: ffffffffffffffda RBX: 00007f00e0816180 RCX: 00007f00e059ce59 [ 892.661353][T16370] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 892.669373][T16370] RBP: 00007f00e142d090 R08: 0000000000000000 R09: 0000000000000000 [ 892.677404][T16370] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 892.685427][T16370] R13: 00007f00e0816218 R14: 00007f00e0816180 R15: 00007fff1023a718 [ 892.693476][T16370] [ 893.417682][T16373] netlink: 'syz.0.3251': attribute type 10 has an invalid length. [ 893.440267][T16373] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3251'. [ 893.463635][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 893.515864][T16375] netlink: 'syz.4.3250': attribute type 39 has an invalid length. [ 893.695887][T16378] netlink: 'syz.3.3249': attribute type 8 has an invalid length. [ 893.812516][T16378] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3249'. [ 893.963803][T16383] netlink: 'syz.1.3252': attribute type 27 has an invalid length. [ 894.924404][T16401] netlink: 'syz.4.3258': attribute type 2 has an invalid length. [ 894.968084][T16401] netlink: 'syz.4.3258': attribute type 8 has an invalid length. [ 895.011864][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3258'. [ 896.413308][T16417] netlink: 'syz.4.3260': attribute type 10 has an invalid length. [ 896.743224][T16415] netlink: 'syz.0.3261': attribute type 39 has an invalid length. [ 897.373810][T16426] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 897.500261][T16426] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3263'. [ 897.582934][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 897.646489][T16434] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3265'. [ 897.725889][T16434] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3265'. [ 897.866060][T16434] bond0: (slave bond_slave_0): Releasing backup interface [ 898.143871][T16434] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 898.780477][T16450] netlink: 'syz.1.3272': attribute type 39 has an invalid length. [ 899.892038][T16467] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3276'. [ 903.312383][T16485] netlink: 'syz.4.3280': attribute type 2 has an invalid length. [ 903.332922][T16485] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3280'. [Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe