last executing test programs: 1m26.670459117s ago: executing program 0 (id=12194): bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m26.409335373s ago: executing program 0 (id=12184): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320088a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m25.633424378s ago: executing program 0 (id=12188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) 1m25.565336282s ago: executing program 0 (id=12189): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x8080, 0x5, 0x0, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) 1m24.773742609s ago: executing program 0 (id=12197): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129800, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'bond_slave_0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'caif0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m24.276248817s ago: executing program 0 (id=12203): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xd512d7b0805b023a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r1, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x2001) 1m9.171057641s ago: executing program 32 (id=12203): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xd512d7b0805b023a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103400000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r1, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x2001) 51.374389211s ago: executing program 5 (id=12335): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000040000007114120000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'macsec0\x00'}) 50.300665893s ago: executing program 5 (id=12340): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf4, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r0) 49.3227192s ago: executing program 5 (id=12344): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="950000000000000018450000050000140677e32600b56004c156bb8d94bc0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x1811}) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0xfffffffffffffffe, 0x49) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="350400004100054cc6a119e30c80a8430111d25a35400c0002000200002037153e370c040180060410004500ec002a560000e7ff00400000ac377653c6de2a7c3af4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000000000516c006c154938456646efee34b951a0789325687ed8934d4780bae8ba0a55a6c130214043ff8ad5086d9792a86372c10fa470195646e9c6", 0x94}, {&(0x7f0000000a40)="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", 0x3a1}], 0x2}, 0x10049014) sendmsg$kcm(r1, 0x0, 0x48800) recvmsg(r7, &(0x7f0000000340)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, &(0x7f00000003c0)=""/133, 0x85}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) 46.839080835s ago: executing program 5 (id=12357): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.925308159s ago: executing program 5 (id=12360): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x13, 0x10, 0x2, 0x0, 0x40006, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000300f0950c343dc19f0bb8c7611b89285039b0cd61f860000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6,5'], 0x31) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 45.100185357s ago: executing program 5 (id=12363): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.985578369s ago: executing program 33 (id=12363): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.33874349s ago: executing program 2 (id=12544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406) 5.793228071s ago: executing program 2 (id=12548): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x18000) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000) 4.197208004s ago: executing program 2 (id=12559): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, 0x0, 0x0) 3.780430269s ago: executing program 2 (id=12561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.757234249s ago: executing program 6 (id=12569): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea608641626f3650400410038000a007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c53b5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x3) socketpair(0xf, 0x3, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x104000040000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76cc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.756716129s ago: executing program 1 (id=12570): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffb, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) 2.693410142s ago: executing program 4 (id=12571): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, 0x0, 0x0) 2.481665345s ago: executing program 1 (id=12573): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) write$cgroup_devices(r0, &(0x7f0000000240)={'a', ' *:* ', 'rm\x00'}, 0x9) 2.374213271s ago: executing program 2 (id=12575): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x6, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5d8, 0x29, 0x3, "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"}], 0x5c8}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000), 0x8) socket$kcm(0x29, 0x2, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000bc0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2.373990721s ago: executing program 4 (id=12576): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) 2.187378512s ago: executing program 1 (id=12577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x13, 0x10, 0x2, 0x0, 0x40006, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000300f0950c343dc19f0bb8c7611b89285039b0cd61f860000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6,5'], 0x31) 2.175942753s ago: executing program 4 (id=12579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80000002, r0, 0x2000000000000000}, 0x38) 1.785177685s ago: executing program 4 (id=12580): getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfa6f}, 0x114815, 0x4, 0x20, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x11, &(0x7f0000000000)=r0, 0x4) 1.784780915s ago: executing program 3 (id=12581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 1.737145498s ago: executing program 1 (id=12582): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 1.545849929s ago: executing program 4 (id=12583): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.395121408s ago: executing program 3 (id=12584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.393611708s ago: executing program 1 (id=12585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.341539142s ago: executing program 6 (id=12586): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, 0x0, 0x0) 1.02938191s ago: executing program 3 (id=12587): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xec0}], 0x12}, 0x52) 995.603132ms ago: executing program 6 (id=12588): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x2, 0x1}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000001000)=0xffffffffffffff6b) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) 609.227674ms ago: executing program 6 (id=12589): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) 609.045484ms ago: executing program 3 (id=12590): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 393.234607ms ago: executing program 3 (id=12591): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x32}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 336.21788ms ago: executing program 6 (id=12592): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x111efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x11, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d72069a0", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) 183.156809ms ago: executing program 4 (id=12593): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x13, 0x10, 0x2, 0x0, 0x40006, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000300f0950c343dc19f0bb8c7611b89285039b0cd61f860000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6,5'], 0x31) 178.419159ms ago: executing program 2 (id=12594): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21d, 0x4, @perf_bp={0x0, 0x4}, 0x100040, 0xfffffffffffffffd, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x8000000}) 110.581674ms ago: executing program 1 (id=12595): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000140), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 52.702667ms ago: executing program 3 (id=12596): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0xfa, 0xd, 0x2, 0x0, 0x7, 0x20010, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x6, 0x2}, 0x12, 0x100000001, 0x0, 0x1, 0x1, 0x7, 0xf, 0x0, 0x13, 0x0, 0x10001}, 0x0, 0xd, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e", 0x9}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x61, 0x0}, 0x20000004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2, 0x6}, 0x0, 0xfffffffffffffffd, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 6 (id=12597): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRESDEC], 0x12) kernel console output (not intermixed with test programs): em_cache_alloc_node+0x47/0x2d0 [ 1368.501542][ T4451] ? __alloc_skb+0xf4/0x750 [ 1368.506054][ T4451] __alloc_skb+0xf4/0x750 [ 1368.510403][ T4451] alloc_skb_with_frags+0xa7/0x730 [ 1368.515536][ T4451] sock_alloc_send_pskb+0x87f/0x9a0 [ 1368.520767][ T4451] ? sock_kzfree_s+0x50/0x50 [ 1368.525365][ T4451] ? do_raw_spin_lock+0x128/0x2f0 [ 1368.530400][ T4451] ? __rwlock_init+0x140/0x140 [ 1368.535181][ T4451] ? do_raw_spin_unlock+0x11d/0x230 [ 1368.540398][ T4451] unix_dgram_sendmsg+0x5fc/0x18a0 [ 1368.545557][ T4451] ? aa_sk_perm+0x7dc/0x910 [ 1368.550090][ T4451] ? unix_dgram_poll+0x680/0x680 [ 1368.555038][ T4451] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1368.561475][ T4451] ? aa_sock_msg_perm+0x94/0x150 [ 1368.566430][ T4451] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1368.571726][ T4451] ? security_socket_sendmsg+0x7c/0xa0 [ 1368.577192][ T4451] ? unix_dgram_poll+0x680/0x680 [ 1368.582140][ T4451] ____sys_sendmsg+0x5b7/0x8f0 [ 1368.586918][ T4451] ? __sys_sendmsg_sock+0x30/0x30 [ 1368.591966][ T4451] ? import_iovec+0x6f/0xa0 [ 1368.596481][ T4451] ___sys_sendmsg+0x236/0x2e0 [ 1368.601183][ T4451] ? __sys_sendmsg+0x2a0/0x2a0 [ 1368.605991][ T4451] __se_sys_sendmsg+0x1af/0x290 [ 1368.610853][ T4451] ? __x64_sys_sendmsg+0x80/0x80 [ 1368.615817][ T4451] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1368.621815][ T4451] ? lockdep_hardirqs_on+0x94/0x140 [ 1368.627132][ T4451] do_syscall_64+0x4c/0xa0 [ 1368.631734][ T4451] ? clear_bhb_loop+0x30/0x80 [ 1368.636422][ T4451] ? clear_bhb_loop+0x30/0x80 [ 1368.641114][ T4451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1368.647013][ T4451] RIP: 0033:0x7f68aa1f8cb9 [ 1368.651441][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.671328][ T4451] RSP: 002b:00007f68a8454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.679761][ T4451] RAX: ffffffffffffffda RBX: 00007f68aa473fa0 RCX: 00007f68aa1f8cb9 [ 1368.687738][ T4451] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1368.695723][ T4451] RBP: 00007f68a8454090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.703704][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.711690][ T4451] R13: 00007f68aa474038 R14: 00007f68aa473fa0 R15: 00007ffc9ce367d8 [ 1368.719690][ T4451] [ 1368.866282][ T4465] netlink: 'syz.0.11554': attribute type 2 has an invalid length. [ 1368.875505][ T4465] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.11554'. [ 1369.064054][ T4469] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11552'. [ 1369.187788][ T4476] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11557'. [ 1369.259723][ T4477] netlink: 'syz.0.11558': attribute type 3 has an invalid length. [ 1369.271401][ T4477] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.11558'. [ 1369.388442][ T4485] IPv6: Can't replace route, no match found [ 1369.659018][ T4498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11565'. [ 1369.911735][ T4502] FAULT_INJECTION: forcing a failure. [ 1369.911735][ T4502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.935597][ T4502] CPU: 0 PID: 4502 Comm: syz.2.11566 Not tainted syzkaller #0 [ 1369.943097][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.953392][ T4502] Call Trace: [ 1369.956684][ T4502] [ 1369.959621][ T4502] dump_stack_lvl+0x188/0x250 [ 1369.964328][ T4502] ? show_regs_print_info+0x20/0x20 [ 1369.969694][ T4502] ? load_image+0x400/0x400 [ 1369.974215][ T4502] ? __lock_acquire+0x7d10/0x7d10 [ 1369.979252][ T4502] should_fail+0x38c/0x4c0 [ 1369.983688][ T4502] _copy_from_user+0x2e/0x170 [ 1369.988381][ T4502] __copy_msghdr_from_user+0xc9/0x630 [ 1369.993764][ T4502] ? verify_lock_unused+0x140/0x140 [ 1369.998985][ T4502] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1370.004302][ T4502] ___sys_sendmsg+0x19a/0x2e0 [ 1370.009001][ T4502] ? __sys_sendmsg+0x2a0/0x2a0 [ 1370.013794][ T4502] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1370.019579][ T4502] __se_sys_sendmsg+0x1af/0x290 [ 1370.024451][ T4502] ? __x64_sys_sendmsg+0x80/0x80 [ 1370.029417][ T4502] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1370.035323][ T4502] do_syscall_64+0x4c/0xa0 [ 1370.039776][ T4502] ? clear_bhb_loop+0x30/0x80 [ 1370.044476][ T4502] ? clear_bhb_loop+0x30/0x80 [ 1370.049171][ T4502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1370.055198][ T4502] RIP: 0033:0x7f8f07c94cb9 [ 1370.059624][ T4502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.066749][ T4506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11568'. [ 1370.079673][ T4502] RSP: 002b:00007f8f05ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1370.079702][ T4502] RAX: ffffffffffffffda RBX: 00007f8f07f0ffa0 RCX: 00007f8f07c94cb9 [ 1370.079714][ T4502] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1370.079723][ T4502] RBP: 00007f8f05ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.079732][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.079740][ T4502] R13: 00007f8f07f10038 R14: 00007f8f07f0ffa0 R15: 00007ffd61d21508 [ 1370.079765][ T4502] [ 1370.276241][ T4518] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1370.565439][ T4535] netlink: 'syz.0.11575': attribute type 27 has an invalid length. [ 1370.579349][ T4535] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.11575'. [ 1370.814796][ T4553] FAULT_INJECTION: forcing a failure. [ 1370.814796][ T4553] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.838795][ T4553] CPU: 1 PID: 4553 Comm: syz.0.11584 Not tainted syzkaller #0 [ 1370.846307][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1370.856389][ T4553] Call Trace: [ 1370.859678][ T4553] [ 1370.862612][ T4553] dump_stack_lvl+0x188/0x250 [ 1370.867305][ T4553] ? show_regs_print_info+0x20/0x20 [ 1370.872517][ T4553] ? load_image+0x400/0x400 [ 1370.877052][ T4553] ? __lock_acquire+0x7d10/0x7d10 [ 1370.882101][ T4553] should_fail+0x38c/0x4c0 [ 1370.886542][ T4553] should_failslab+0x5/0x20 [ 1370.891057][ T4553] slab_pre_alloc_hook+0x51/0xc0 [ 1370.896023][ T4553] __kmalloc+0x6b/0x330 [ 1370.900182][ T4553] ? sk_prot_alloc+0xe7/0x210 [ 1370.904872][ T4553] sk_prot_alloc+0xe7/0x210 [ 1370.909374][ T4553] ? sk_alloc+0x1d/0x310 [ 1370.913606][ T4553] sk_alloc+0x2f/0x310 [ 1370.917666][ T4553] bpf_prog_test_run_skb+0x240/0x1180 [ 1370.923026][ T4553] ? __fget_files+0x40f/0x480 [ 1370.927701][ T4553] ? cpu_online+0x60/0x60 [ 1370.932020][ T4553] bpf_prog_test_run+0x31e/0x390 [ 1370.937034][ T4553] __sys_bpf+0x5a5/0x6f0 [ 1370.941355][ T4553] ? bpf_link_show_fdinfo+0x380/0x380 [ 1370.946731][ T4553] ? vtime_user_exit+0x2c8/0x3e0 [ 1370.951886][ T4553] __x64_sys_bpf+0x78/0x90 [ 1370.956313][ T4553] do_syscall_64+0x4c/0xa0 [ 1370.960719][ T4553] ? clear_bhb_loop+0x30/0x80 [ 1370.965476][ T4553] ? clear_bhb_loop+0x30/0x80 [ 1370.970141][ T4553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1370.976020][ T4553] RIP: 0033:0x7f2221cd7cb9 [ 1370.980426][ T4553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.000022][ T4553] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1371.008426][ T4553] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1371.016498][ T4553] RDX: 0000000000000050 RSI: 0000200000000d40 RDI: 000000000000000a [ 1371.024462][ T4553] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.032422][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.040385][ T4553] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1371.048360][ T4553] [ 1371.065597][ T4556] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11585'. [ 1371.166117][ T4566] netlink: 'syz.3.11588': attribute type 4 has an invalid length. [ 1371.174313][ T4566] netlink: 'syz.3.11588': attribute type 10 has an invalid length. [ 1371.185729][ T4566] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11588'. [ 1371.235537][ T4566] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1371.410186][ T4577] netlink: 'syz.0.11593': attribute type 25 has an invalid length. [ 1374.843235][ T4597] netlink: 'syz.3.11599': attribute type 16 has an invalid length. [ 1374.851159][ T4597] __nla_validate_parse: 1 callbacks suppressed [ 1374.851171][ T4597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11599'. [ 1374.885593][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.900575][ T4596] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11600'. [ 1374.956668][ T4605] netlink: 'syz.3.11603': attribute type 20 has an invalid length. [ 1375.126885][ T4611] netlink: 703 bytes leftover after parsing attributes in process `syz.4.11605'. [ 1375.569536][ T4637] device syzkaller0 entered promiscuous mode [ 1375.571372][ T4642] FAULT_INJECTION: forcing a failure. [ 1375.571372][ T4642] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.590775][ T4640] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.11617'. [ 1375.597487][ T4642] CPU: 1 PID: 4642 Comm: syz.2.11616 Not tainted syzkaller #0 [ 1375.601532][ T4638] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.11614'. [ 1375.607526][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1375.607538][ T4642] Call Trace: [ 1375.607544][ T4642] [ 1375.607551][ T4642] dump_stack_lvl+0x188/0x250 [ 1375.607578][ T4642] ? show_regs_print_info+0x20/0x20 [ 1375.607595][ T4642] ? load_image+0x400/0x400 [ 1375.647426][ T4642] ? __might_sleep+0xf0/0xf0 [ 1375.652040][ T4642] ? __lock_acquire+0x7d10/0x7d10 [ 1375.657088][ T4642] should_fail+0x38c/0x4c0 [ 1375.661530][ T4642] should_failslab+0x5/0x20 [ 1375.666043][ T4642] slab_pre_alloc_hook+0x51/0xc0 [ 1375.670999][ T4642] kmem_cache_alloc_trace+0x47/0x2a0 [ 1375.676299][ T4642] ? apparmor_sk_alloc_security+0x74/0x100 [ 1375.682118][ T4642] apparmor_sk_alloc_security+0x74/0x100 [ 1375.687853][ T4642] security_sk_alloc+0x6a/0xa0 [ 1375.692651][ T4642] sk_prot_alloc+0x101/0x210 [ 1375.697264][ T4642] ? sk_alloc+0x1d/0x310 [ 1375.701518][ T4642] sk_alloc+0x2f/0x310 [ 1375.705604][ T4642] bpf_prog_test_run_skb+0x240/0x1180 [ 1375.711001][ T4642] ? __fget_files+0x40f/0x480 [ 1375.715788][ T4642] ? cpu_online+0x60/0x60 [ 1375.720136][ T4642] bpf_prog_test_run+0x31e/0x390 [ 1375.725086][ T4642] __sys_bpf+0x5a5/0x6f0 [ 1375.729337][ T4642] ? bpf_link_show_fdinfo+0x380/0x380 [ 1375.734712][ T4642] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 1375.740966][ T4642] ? vtime_user_exit+0x2c8/0x3e0 [ 1375.745915][ T4642] __x64_sys_bpf+0x78/0x90 [ 1375.750339][ T4642] do_syscall_64+0x4c/0xa0 [ 1375.754754][ T4642] ? clear_bhb_loop+0x30/0x80 [ 1375.759615][ T4642] ? clear_bhb_loop+0x30/0x80 [ 1375.764293][ T4642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1375.770186][ T4642] RIP: 0033:0x7f8f07c94cb9 [ 1375.774619][ T4642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.794237][ T4642] RSP: 002b:00007f8f05ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1375.802658][ T4642] RAX: ffffffffffffffda RBX: 00007f8f07f0ffa0 RCX: 00007f8f07c94cb9 [ 1375.810640][ T4642] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1375.818619][ T4642] RBP: 00007f8f05ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.826597][ T4642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.834661][ T4642] R13: 00007f8f07f10038 R14: 00007f8f07f0ffa0 R15: 00007ffd61d21508 [ 1375.842672][ T4642] [ 1375.985741][ T4656] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.11621'. [ 1376.001401][ T4658] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 1376.013738][ T4658] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 1376.030985][ T4658] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 1376.041465][ T4658] netlink: 'syz.0.11622': attribute type 2 has an invalid length. [ 1376.049944][ T4658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1376.156788][ T4669] netlink: set zone limit has 8 unknown bytes [ 1376.216051][ T4674] FAULT_INJECTION: forcing a failure. [ 1376.216051][ T4674] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.219779][ T4675] netlink: set zone limit has 8 unknown bytes [ 1376.239145][ T4674] CPU: 0 PID: 4674 Comm: syz.0.11625 Not tainted syzkaller #0 [ 1376.246640][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1376.256701][ T4674] Call Trace: [ 1376.259987][ T4674] [ 1376.262932][ T4674] dump_stack_lvl+0x188/0x250 [ 1376.267632][ T4674] ? show_regs_print_info+0x20/0x20 [ 1376.272847][ T4674] ? load_image+0x400/0x400 [ 1376.277372][ T4674] ? __might_sleep+0xf0/0xf0 [ 1376.281970][ T4674] ? __lock_acquire+0x7d10/0x7d10 [ 1376.287010][ T4674] ? netlink_insert+0xe95/0x11f0 [ 1376.292066][ T4674] should_fail+0x38c/0x4c0 [ 1376.296507][ T4674] should_failslab+0x5/0x20 [ 1376.301022][ T4674] slab_pre_alloc_hook+0x51/0xc0 [ 1376.305950][ T4674] kmem_cache_alloc_node+0x47/0x2d0 [ 1376.311140][ T4674] ? __alloc_skb+0xf4/0x750 [ 1376.315661][ T4674] __alloc_skb+0xf4/0x750 [ 1376.320006][ T4674] netlink_sendmsg+0x654/0xbe0 [ 1376.324766][ T4674] ? netlink_getsockopt+0x570/0x570 [ 1376.329951][ T4674] ? aa_sock_msg_perm+0x94/0x150 [ 1376.335087][ T4674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1376.340417][ T4674] ? security_socket_sendmsg+0x7c/0xa0 [ 1376.345991][ T4674] ? netlink_getsockopt+0x570/0x570 [ 1376.351203][ T4674] ____sys_sendmsg+0x5b7/0x8f0 [ 1376.355990][ T4674] ? __sys_sendmsg_sock+0x30/0x30 [ 1376.361049][ T4674] ? import_iovec+0x6f/0xa0 [ 1376.365572][ T4674] ___sys_sendmsg+0x236/0x2e0 [ 1376.370280][ T4674] ? __sys_sendmsg+0x2a0/0x2a0 [ 1376.375063][ T4674] ? vfs_write+0x8b2/0xd60 [ 1376.379499][ T4674] __se_sys_sendmsg+0x1af/0x290 [ 1376.384355][ T4674] ? __x64_sys_sendmsg+0x80/0x80 [ 1376.389291][ T4674] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1376.395272][ T4674] ? lockdep_hardirqs_on+0x94/0x140 [ 1376.400663][ T4674] do_syscall_64+0x4c/0xa0 [ 1376.405073][ T4674] ? clear_bhb_loop+0x30/0x80 [ 1376.409796][ T4674] ? clear_bhb_loop+0x30/0x80 [ 1376.414457][ T4674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.420332][ T4674] RIP: 0033:0x7f2221cd7cb9 [ 1376.424733][ T4674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.444329][ T4674] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.452733][ T4674] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1376.460691][ T4674] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1376.468655][ T4674] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.476614][ T4674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.484568][ T4674] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1376.492631][ T4674] [ 1376.669549][ T4687] FAULT_INJECTION: forcing a failure. [ 1376.669549][ T4687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.684312][ T4687] CPU: 1 PID: 4687 Comm: syz.0.11632 Not tainted syzkaller #0 [ 1376.691973][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1376.702226][ T4687] Call Trace: [ 1376.705519][ T4687] [ 1376.708478][ T4687] dump_stack_lvl+0x188/0x250 [ 1376.713196][ T4687] ? lockdep_hardirqs_on+0x94/0x140 [ 1376.718424][ T4687] ? show_regs_print_info+0x20/0x20 [ 1376.723705][ T4687] ? dump_stack+0x5/0x20 [ 1376.727997][ T4687] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1376.733488][ T4687] should_fail+0x38c/0x4c0 [ 1376.737935][ T4687] _copy_from_user+0x2e/0x170 [ 1376.742653][ T4687] __copy_msghdr_from_user+0xc9/0x630 [ 1376.748053][ T4687] ? lock_chain_count+0x20/0x20 [ 1376.753019][ T4687] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1376.758346][ T4687] ___sys_sendmsg+0x19a/0x2e0 [ 1376.763056][ T4687] ? __sys_sendmsg+0x2a0/0x2a0 [ 1376.767878][ T4687] __se_sys_sendmsg+0x1af/0x290 [ 1376.772898][ T4687] ? __x64_sys_sendmsg+0x80/0x80 [ 1376.777959][ T4687] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1376.783884][ T4687] do_syscall_64+0x4c/0xa0 [ 1376.788324][ T4687] ? clear_bhb_loop+0x30/0x80 [ 1376.793053][ T4687] ? clear_bhb_loop+0x30/0x80 [ 1376.797771][ T4687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1376.803700][ T4687] RIP: 0033:0x7f2221cd7cb9 [ 1376.808143][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.827888][ T4687] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.836323][ T4687] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1376.841351][ T4693] netlink: 'syz.3.11630': attribute type 29 has an invalid length. [ 1376.844309][ T4687] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 1376.844330][ T4687] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.844340][ T4687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.844351][ T4687] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1376.844377][ T4687] [ 1376.896501][ T4693] netlink: 'syz.3.11630': attribute type 29 has an invalid length. [ 1376.904907][ T4679] can: request_module (can-proto-0) failed. [ 1377.060015][ T4703] netlink: 'syz.0.11635': attribute type 19 has an invalid length. [ 1377.122819][ T4705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11636'. [ 1377.171434][ T4709] FAULT_INJECTION: forcing a failure. [ 1377.171434][ T4709] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.193927][ T4709] CPU: 0 PID: 4709 Comm: syz.0.11638 Not tainted syzkaller #0 [ 1377.201469][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.211731][ T4709] Call Trace: [ 1377.215034][ T4709] [ 1377.217977][ T4709] dump_stack_lvl+0x188/0x250 [ 1377.222680][ T4709] ? show_regs_print_info+0x20/0x20 [ 1377.228333][ T4709] ? load_image+0x400/0x400 [ 1377.232866][ T4709] ? __might_sleep+0xf0/0xf0 [ 1377.237505][ T4709] ? __lock_acquire+0x7d10/0x7d10 [ 1377.242654][ T4709] should_fail+0x38c/0x4c0 [ 1377.247093][ T4709] should_failslab+0x5/0x20 [ 1377.251603][ T4709] slab_pre_alloc_hook+0x51/0xc0 [ 1377.256551][ T4709] __kmalloc+0x6b/0x330 [ 1377.260719][ T4709] ? tomoyo_encode+0x27e/0x540 [ 1377.265496][ T4709] tomoyo_encode+0x27e/0x540 [ 1377.270095][ T4709] tomoyo_realpath_from_path+0x5cd/0x610 [ 1377.275732][ T4709] tomoyo_path_number_perm+0x242/0x660 [ 1377.281193][ T4709] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1377.286641][ T4709] ? perf_trace_lock+0xe4/0x390 [ 1377.291488][ T4709] ? perf_trace_lock+0xe4/0x390 [ 1377.296368][ T4709] security_file_ioctl+0x6c/0xa0 [ 1377.301325][ T4709] __se_sys_ioctl+0x48/0x170 [ 1377.305906][ T4709] do_syscall_64+0x4c/0xa0 [ 1377.310327][ T4709] ? clear_bhb_loop+0x30/0x80 [ 1377.314996][ T4709] ? clear_bhb_loop+0x30/0x80 [ 1377.319759][ T4709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1377.325752][ T4709] RIP: 0033:0x7f2221cd7cb9 [ 1377.330252][ T4709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.349955][ T4709] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.358360][ T4709] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1377.366729][ T4709] RDX: 0000000000000000 RSI: 000000000000891a RDI: 0000000000000003 [ 1377.376383][ T4709] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.384687][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.392659][ T4709] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1377.400636][ T4709] [ 1377.523648][ T4705] delete_channel: no stack [ 1377.533035][ T4705] delete_channel: no stack [ 1377.613722][ T4709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1377.702702][ T4726] delete_channel: no stack [ 1377.718263][ T4726] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.11644'. [ 1377.742046][ T4726] netlink: zone id is out of range [ 1377.747511][ T4726] netlink: zone id is out of range [ 1377.773686][ T4726] netlink: del zone limit has 8 unknown bytes [ 1378.139789][ T4733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1378.347187][ T4725] delete_channel: no stack [ 1378.420569][ T4739] delete_channel: no stack [ 1378.432948][ T4739] delete_channel: no stack [ 1378.826866][ T4761] FAULT_INJECTION: forcing a failure. [ 1378.826866][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.844412][ T4761] CPU: 1 PID: 4761 Comm: syz.4.11652 Not tainted syzkaller #0 [ 1378.851911][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1378.861988][ T4761] Call Trace: [ 1378.865272][ T4761] [ 1378.868196][ T4761] dump_stack_lvl+0x188/0x250 [ 1378.872867][ T4761] ? show_regs_print_info+0x20/0x20 [ 1378.878055][ T4761] ? load_image+0x400/0x400 [ 1378.882551][ T4761] ? __lock_acquire+0x7d10/0x7d10 [ 1378.887564][ T4761] should_fail+0x38c/0x4c0 [ 1378.891972][ T4761] _copy_to_user+0x2e/0x130 [ 1378.896464][ T4761] simple_read_from_buffer+0xe3/0x150 [ 1378.901824][ T4761] proc_fail_nth_read+0x1a6/0x220 [ 1378.906837][ T4761] ? proc_fault_inject_write+0x310/0x310 [ 1378.912457][ T4761] ? fsnotify_perm+0x254/0x560 [ 1378.917210][ T4761] ? proc_fault_inject_write+0x310/0x310 [ 1378.922828][ T4761] vfs_read+0x301/0xd60 [ 1378.926978][ T4761] ? kernel_read+0x1e0/0x1e0 [ 1378.931561][ T4761] ? __fget_files+0x40f/0x480 [ 1378.936253][ T4761] ? mutex_lock_nested+0x17/0x20 [ 1378.941176][ T4761] ? __fdget_pos+0x2bf/0x370 [ 1378.945770][ T4761] ? ksys_read+0x71/0x260 [ 1378.950086][ T4761] ksys_read+0x152/0x260 [ 1378.954324][ T4761] ? vfs_write+0xd60/0xd60 [ 1378.958730][ T4761] ? lockdep_hardirqs_on+0x94/0x140 [ 1378.963915][ T4761] do_syscall_64+0x4c/0xa0 [ 1378.968385][ T4761] ? clear_bhb_loop+0x30/0x80 [ 1378.973066][ T4761] ? clear_bhb_loop+0x30/0x80 [ 1378.977756][ T4761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1378.983653][ T4761] RIP: 0033:0x7f68aa1b958e [ 1378.988065][ T4761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1379.007658][ T4761] RSP: 002b:00007f68a8453fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.016067][ T4761] RAX: ffffffffffffffda RBX: 00007f68a84546c0 RCX: 00007f68aa1b958e [ 1379.024025][ T4761] RDX: 000000000000000f RSI: 00007f68a84540a0 RDI: 0000000000000005 [ 1379.031980][ T4761] RBP: 00007f68a8454090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.039934][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.047891][ T4761] R13: 00007f68aa474038 R14: 00007f68aa473fa0 R15: 00007ffc9ce367d8 [ 1379.055952][ T4761] [ 1379.169950][ T4772] netlink: 'syz.1.11658': attribute type 19 has an invalid length. [ 1379.203787][ T4775] FAULT_INJECTION: forcing a failure. [ 1379.203787][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.242679][ T4775] CPU: 1 PID: 4775 Comm: syz.3.11655 Not tainted syzkaller #0 [ 1379.250294][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1379.260437][ T4775] Call Trace: [ 1379.263708][ T4775] [ 1379.266626][ T4775] dump_stack_lvl+0x188/0x250 [ 1379.271380][ T4775] ? show_regs_print_info+0x20/0x20 [ 1379.276660][ T4775] ? load_image+0x400/0x400 [ 1379.281157][ T4775] ? __might_sleep+0xf0/0xf0 [ 1379.285732][ T4775] ? __lock_acquire+0x7d10/0x7d10 [ 1379.290747][ T4775] should_fail+0x38c/0x4c0 [ 1379.295153][ T4775] should_failslab+0x5/0x20 [ 1379.299644][ T4775] slab_pre_alloc_hook+0x51/0xc0 [ 1379.304582][ T4775] kmem_cache_alloc_node+0x47/0x2d0 [ 1379.309849][ T4775] ? __alloc_skb+0xf4/0x750 [ 1379.314344][ T4775] __alloc_skb+0xf4/0x750 [ 1379.318664][ T4775] alloc_skb_with_frags+0xa7/0x730 [ 1379.323774][ T4775] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1379.330359][ T4775] sock_alloc_send_pskb+0x87f/0x9a0 [ 1379.335555][ T4775] ? sock_kzfree_s+0x50/0x50 [ 1379.340258][ T4775] ? do_raw_spin_lock+0x128/0x2f0 [ 1379.345293][ T4775] ? __rwlock_init+0x140/0x140 [ 1379.350057][ T4775] ? do_raw_spin_unlock+0x11d/0x230 [ 1379.355244][ T4775] unix_dgram_sendmsg+0x5fc/0x18a0 [ 1379.360439][ T4775] ? aa_sk_perm+0x7dc/0x910 [ 1379.365186][ T4775] ? unix_dgram_poll+0x680/0x680 [ 1379.370274][ T4775] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1379.377115][ T4775] ? aa_sock_msg_perm+0x94/0x150 [ 1379.382043][ T4775] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 1379.387580][ T4775] ? unix_dgram_peer_wake_me+0x430/0x430 [ 1379.393201][ T4775] ____sys_sendmsg+0x5b7/0x8f0 [ 1379.397965][ T4775] ? __sys_sendmsg_sock+0x30/0x30 [ 1379.402979][ T4775] ? import_iovec+0x6f/0xa0 [ 1379.407474][ T4775] ___sys_sendmsg+0x236/0x2e0 [ 1379.412190][ T4775] ? __sys_sendmsg+0x2a0/0x2a0 [ 1379.416993][ T4775] ? vfs_write+0x8b2/0xd60 [ 1379.421430][ T4775] __se_sys_sendmsg+0x1af/0x290 [ 1379.426275][ T4775] ? __x64_sys_sendmsg+0x80/0x80 [ 1379.431198][ T4775] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1379.437188][ T4775] ? lockdep_hardirqs_on+0x94/0x140 [ 1379.442391][ T4775] do_syscall_64+0x4c/0xa0 [ 1379.446803][ T4775] ? clear_bhb_loop+0x30/0x80 [ 1379.451468][ T4775] ? clear_bhb_loop+0x30/0x80 [ 1379.456131][ T4775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1379.462101][ T4775] RIP: 0033:0x7fdac194bcb9 [ 1379.466504][ T4775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.486093][ T4775] RSP: 002b:00007fdabfb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1379.494502][ T4775] RAX: ffffffffffffffda RBX: 00007fdac1bc7090 RCX: 00007fdac194bcb9 [ 1379.502456][ T4775] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1379.510406][ T4775] RBP: 00007fdabfb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.518361][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.526319][ T4775] R13: 00007fdac1bc7128 R14: 00007fdac1bc7090 R15: 00007ffe26e6fdd8 [ 1379.534439][ T4775] [ 1379.977838][ T4800] delete_channel: no stack [ 1379.985746][ T4802] netlink: 'syz.0.11667': attribute type 10 has an invalid length. [ 1379.995200][ T4802] __nla_validate_parse: 1 callbacks suppressed [ 1379.995218][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11667'. [ 1380.020682][ T4800] delete_channel: no stack [ 1380.023913][ T4802] batman_adv: batadv0: Adding interface: vlan1 [ 1380.031351][ T4802] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.032802][ T4800] delete_channel: no stack [ 1380.064226][ T4802] batman_adv: batadv0: Interface activated: vlan1 [ 1380.085934][ T4799] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1380.144600][ T4800] delete_channel: no stack [ 1380.149188][ T4800] delete_channel: no stack [ 1380.222269][ T4814] netlink: 'syz.1.11668': attribute type 22 has an invalid length. [ 1380.232817][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11668'. [ 1380.242535][ T4800] delete_channel: no stack [ 1380.247112][ T4800] delete_channel: no stack [ 1380.251674][ T4800] delete_channel: no stack [ 1380.290451][ T4800] delete_channel: no stack [ 1380.316635][ T4800] delete_channel: no stack [ 1380.321233][ T4800] delete_channel: no stack [ 1380.352508][ T4800] delete_channel: no stack [ 1380.357089][ T4800] delete_channel: no stack [ 1380.361626][ T4800] delete_channel: no stack [ 1380.396017][ T4829] netlink: 'syz.1.11674': attribute type 19 has an invalid length. [ 1380.414334][ T4800] delete_channel: no stack [ 1380.418915][ T4800] delete_channel: no stack [ 1380.422119][ T4829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11674'. [ 1380.432576][ T4800] delete_channel: no stack [ 1380.439898][ T4800] delete_channel: no stack [ 1380.453568][ T4800] delete_channel: no stack [ 1380.465395][ T4800] delete_channel: no stack [ 1380.472893][ T4829] FAULT_INJECTION: forcing a failure. [ 1380.472893][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.512517][ T4800] delete_channel: no stack [ 1380.517117][ T4800] delete_channel: no stack [ 1380.521649][ T4800] delete_channel: no stack [ 1380.540351][ T4829] CPU: 0 PID: 4829 Comm: syz.1.11674 Not tainted syzkaller #0 [ 1380.547862][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1380.557937][ T4829] Call Trace: [ 1380.561238][ T4829] [ 1380.564194][ T4829] dump_stack_lvl+0x188/0x250 [ 1380.568902][ T4829] ? show_regs_print_info+0x20/0x20 [ 1380.574235][ T4829] ? load_image+0x400/0x400 [ 1380.578774][ T4829] ? do_syscall_64+0x4c/0xa0 [ 1380.583494][ T4829] should_fail+0x38c/0x4c0 [ 1380.587937][ T4829] should_failslab+0x5/0x20 [ 1380.592448][ T4829] slab_pre_alloc_hook+0x51/0xc0 [ 1380.597393][ T4829] ? skb_clone+0x1bd/0x350 [ 1380.601925][ T4829] kmem_cache_alloc+0x3d/0x290 [ 1380.606686][ T4829] skb_clone+0x1bd/0x350 [ 1380.610930][ T4829] __netlink_deliver_tap+0x3cd/0x7c0 [ 1380.616226][ T4829] netlink_deliver_tap+0x16c/0x180 [ 1380.621328][ T4829] netlink_sendskb+0x64/0x130 [ 1380.626048][ T4829] netlink_ack+0x87d/0xb50 [ 1380.630472][ T4829] ? netlink_dump+0xcf0/0xcf0 [ 1380.635149][ T4829] ? __skb_clone+0x480/0x790 [ 1380.639749][ T4829] netlink_rcv_skb+0x27a/0x440 [ 1380.644518][ T4829] ? rtnetlink_bind+0x80/0x80 [ 1380.649200][ T4829] ? netlink_ack+0xb50/0xb50 [ 1380.653807][ T4829] netlink_unicast+0x774/0x920 [ 1380.658566][ T4829] netlink_sendmsg+0x8ba/0xbe0 [ 1380.663320][ T4829] ? netlink_getsockopt+0x570/0x570 [ 1380.668505][ T4829] ? aa_sock_msg_perm+0x94/0x150 [ 1380.673608][ T4829] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1380.678885][ T4829] ? security_socket_sendmsg+0x7c/0xa0 [ 1380.684336][ T4829] ? netlink_getsockopt+0x570/0x570 [ 1380.689525][ T4829] ____sys_sendmsg+0x5b7/0x8f0 [ 1380.694287][ T4829] ? __sys_sendmsg_sock+0x30/0x30 [ 1380.699305][ T4829] ? import_iovec+0x6f/0xa0 [ 1380.703802][ T4829] ___sys_sendmsg+0x236/0x2e0 [ 1380.708478][ T4829] ? __sys_sendmsg+0x2a0/0x2a0 [ 1380.713324][ T4829] ? vfs_write+0x8b2/0xd60 [ 1380.717761][ T4829] __se_sys_sendmsg+0x1af/0x290 [ 1380.722626][ T4829] ? __x64_sys_sendmsg+0x80/0x80 [ 1380.727569][ T4829] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1380.733553][ T4829] ? lockdep_hardirqs_on+0x94/0x140 [ 1380.738743][ T4829] do_syscall_64+0x4c/0xa0 [ 1380.743144][ T4829] ? clear_bhb_loop+0x30/0x80 [ 1380.747817][ T4829] ? clear_bhb_loop+0x30/0x80 [ 1380.752484][ T4829] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1380.758368][ T4829] RIP: 0033:0x7fb3d25d7cb9 [ 1380.762773][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.782376][ T4829] RSP: 002b:00007fb3d0833028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.790798][ T4829] RAX: ffffffffffffffda RBX: 00007fb3d2852fa0 RCX: 00007fb3d25d7cb9 [ 1380.799211][ T4829] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1380.807174][ T4829] RBP: 00007fb3d0833090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.815132][ T4829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.823090][ T4829] R13: 00007fb3d2853038 R14: 00007fb3d2852fa0 R15: 00007ffc290d2248 [ 1380.831068][ T4829] [ 1380.892651][ T4800] delete_channel: no stack [ 1380.902806][ T4800] delete_channel: no stack [ 1380.913532][ T4800] delete_channel: no stack [ 1380.926527][ T4800] delete_channel: no stack [ 1380.941811][ T4800] delete_channel: no stack [ 1380.951941][ T4800] delete_channel: no stack [ 1380.972264][ T4800] delete_channel: no stack [ 1380.977210][ T4800] delete_channel: no stack [ 1380.981791][ T4800] delete_channel: no stack [ 1380.996761][ T4800] delete_channel: no stack [ 1381.001347][ T4800] delete_channel: no stack [ 1381.017083][ T4800] delete_channel: no stack [ 1381.021667][ T4800] delete_channel: no stack [ 1381.037377][ T4800] delete_channel: no stack [ 1381.041978][ T4800] delete_channel: no stack [ 1381.062585][ T4800] delete_channel: no stack [ 1381.078321][ T4800] delete_channel: no stack [ 1381.083752][ T4800] delete_channel: no stack [ 1381.088460][ T4800] delete_channel: no stack [ 1381.093513][ T4800] delete_channel: no stack [ 1381.098471][ T4800] delete_channel: no stack [ 1381.105415][ T4800] delete_channel: no stack [ 1381.110375][ T4800] delete_channel: no stack [ 1381.115724][ T4800] delete_channel: no stack [ 1381.121179][ T4800] delete_channel: no stack [ 1381.127745][ T4800] delete_channel: no stack [ 1381.133332][ T4800] delete_channel: no stack [ 1381.139007][ T4800] delete_channel: no stack [ 1381.141232][ T4846] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11679'. [ 1381.144262][ T4800] delete_channel: no stack [ 1381.157892][ T4800] delete_channel: no stack [ 1381.164462][ T4800] delete_channel: no stack [ 1381.169109][ T4800] delete_channel: no stack [ 1381.174083][ T4800] delete_channel: no stack [ 1381.178618][ T4800] delete_channel: no stack [ 1381.183612][ T4800] delete_channel: no stack [ 1381.188145][ T4800] delete_channel: no stack [ 1381.218535][ T4800] delete_channel: no stack [ 1381.224313][ T4800] delete_channel: no stack [ 1381.229657][ T4800] delete_channel: no stack [ 1381.241540][ T4800] delete_channel: no stack [ 1381.251917][ T4800] delete_channel: no stack [ 1381.258679][ T4800] delete_channel: no stack [ 1381.267484][ T4850] netlink: 'syz.0.11681': attribute type 10 has an invalid length. [ 1381.277499][ T4850] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11681'. [ 1381.312943][ T4850] batman_adv: batadv0: Interface deactivated: vlan1 [ 1381.394510][ T4854] FAULT_INJECTION: forcing a failure. [ 1381.394510][ T4854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1381.426199][ T4854] CPU: 0 PID: 4854 Comm: syz.3.11683 Not tainted syzkaller #0 [ 1381.433699][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1381.443765][ T4854] Call Trace: [ 1381.447145][ T4854] [ 1381.450086][ T4854] dump_stack_lvl+0x188/0x250 [ 1381.454768][ T4854] ? show_regs_print_info+0x20/0x20 [ 1381.459968][ T4854] ? load_image+0x400/0x400 [ 1381.464477][ T4854] ? __lock_acquire+0x7d10/0x7d10 [ 1381.469502][ T4854] should_fail+0x38c/0x4c0 [ 1381.473920][ T4854] _copy_from_user+0x2e/0x170 [ 1381.478593][ T4854] kstrtouint_from_user+0xd3/0x220 [ 1381.483705][ T4854] ? kstrtol_from_user+0x2a0/0x2a0 [ 1381.488845][ T4854] proc_fail_nth_write+0x8b/0x200 [ 1381.493880][ T4854] ? proc_fail_nth_read+0x220/0x220 [ 1381.499071][ T4854] ? common_file_perm+0x171/0x1c0 [ 1381.504203][ T4854] ? proc_fail_nth_read+0x220/0x220 [ 1381.509491][ T4854] vfs_write+0x30b/0xd60 [ 1381.513728][ T4854] ? file_end_write+0x250/0x250 [ 1381.518575][ T4854] ? __fget_files+0x40f/0x480 [ 1381.523249][ T4854] ? mutex_lock_nested+0x17/0x20 [ 1381.528186][ T4854] ? __fdget_pos+0x2bf/0x370 [ 1381.532784][ T4854] ? ksys_write+0x71/0x260 [ 1381.537220][ T4854] ksys_write+0x152/0x260 [ 1381.541567][ T4854] ? __ia32_sys_read+0x80/0x80 [ 1381.546341][ T4854] ? lockdep_hardirqs_on+0x94/0x140 [ 1381.551535][ T4854] do_syscall_64+0x4c/0xa0 [ 1381.555950][ T4854] ? clear_bhb_loop+0x30/0x80 [ 1381.560635][ T4854] ? clear_bhb_loop+0x30/0x80 [ 1381.565308][ T4854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1381.571301][ T4854] RIP: 0033:0x7fdac190c58e [ 1381.575709][ T4854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1381.595431][ T4854] RSP: 002b:00007fdabfba6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1381.603851][ T4854] RAX: ffffffffffffffda RBX: 00007fdabfba76c0 RCX: 00007fdac190c58e [ 1381.611837][ T4854] RDX: 0000000000000001 RSI: 00007fdabfba70a0 RDI: 0000000000000004 [ 1381.619803][ T4854] RBP: 00007fdabfba7090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.627767][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.635735][ T4854] R13: 00007fdac1bc7038 R14: 00007fdac1bc6fa0 R15: 00007ffe26e6fdd8 [ 1381.643729][ T4854] [ 1381.722704][ T4850] batman_adv: batadv0: Removing interface: vlan1 [ 1381.809242][ T4857] netlink: 'syz.3.11685': attribute type 21 has an invalid length. [ 1381.818723][ T4861] syz.2.11684[4861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1381.829059][ T4857] netlink: 'syz.3.11685': attribute type 6 has an invalid length. [ 1381.865490][ T4857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11685'. [ 1382.161479][ T4877] netlink: 'syz.0.11691': attribute type 3 has an invalid length. [ 1382.169573][ T4877] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.11691'. [ 1382.261932][ T4886] netlink: 'syz.2.11693': attribute type 5 has an invalid length. [ 1382.314411][ T4886] netlink: 'syz.2.11693': attribute type 15 has an invalid length. [ 1382.490023][ T4904] netlink: 'syz.1.11701': attribute type 21 has an invalid length. [ 1382.541627][ T4904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11701'. [ 1382.588352][ T4913] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11705'. [ 1384.253290][ T4913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1384.867494][ T4949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.914476][ T4949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.971511][ T4949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.984819][ T4949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.335391][ T4960] validate_nla: 4 callbacks suppressed [ 1385.335421][ T4960] netlink: 'syz.0.11720': attribute type 21 has an invalid length. [ 1385.349505][ T4960] netlink: 'syz.0.11720': attribute type 6 has an invalid length. [ 1385.359350][ T4960] __nla_validate_parse: 3 callbacks suppressed [ 1385.359386][ T4960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11720'. [ 1385.495995][ T4963] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11721'. [ 1385.574358][ T4966] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11722'. [ 1385.630266][ T4968] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11723'. [ 1385.652253][ T4968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11723'. [ 1385.676781][ T4970] netlink: 'syz.4.11724': attribute type 10 has an invalid length. [ 1385.697351][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.704875][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.726989][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.734157][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.741654][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.748806][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.781207][ T4970] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1385.812886][ T4974] netlink: 'syz.0.11726': attribute type 5 has an invalid length. [ 1385.889316][ T4970] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1386.115301][ T4988] netlink: zone id is out of range [ 1386.120520][ T4988] netlink: set zone limit has 8 unknown bytes [ 1386.135073][ T4988] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.11740'. [ 1386.543848][ T4993] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.11731'. [ 1386.590394][ T4993] netlink: 16770 bytes leftover after parsing attributes in process `syz.2.11731'. [ 1386.623746][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11731'. [ 1386.747806][ T4999] netlink: 'syz.4.11732': attribute type 21 has an invalid length. [ 1386.810604][ T4999] netlink: 'syz.4.11732': attribute type 6 has an invalid length. [ 1386.927508][ T5009] netlink: 'syz.4.11735': attribute type 4 has an invalid length. [ 1387.681099][ T5015] FAULT_INJECTION: forcing a failure. [ 1387.681099][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.701880][ T5015] CPU: 0 PID: 5015 Comm: syz.0.11738 Not tainted syzkaller #0 [ 1387.709380][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1387.719451][ T5015] Call Trace: [ 1387.722739][ T5015] [ 1387.725673][ T5015] dump_stack_lvl+0x188/0x250 [ 1387.730090][ T5016] netlink: 'syz.2.11736': attribute type 3 has an invalid length. [ 1387.730365][ T5015] ? show_regs_print_info+0x20/0x20 [ 1387.743356][ T5015] ? load_image+0x400/0x400 [ 1387.747885][ T5015] ? __might_sleep+0xf0/0xf0 [ 1387.752693][ T5015] ? __lock_acquire+0x7d10/0x7d10 [ 1387.757739][ T5015] should_fail+0x38c/0x4c0 [ 1387.762195][ T5015] should_failslab+0x5/0x20 [ 1387.766813][ T5015] slab_pre_alloc_hook+0x51/0xc0 [ 1387.771775][ T5015] kmem_cache_alloc_trace+0x47/0x2a0 [ 1387.777071][ T5015] ? apparmor_sk_alloc_security+0x74/0x100 [ 1387.783066][ T5015] apparmor_sk_alloc_security+0x74/0x100 [ 1387.788710][ T5015] security_sk_alloc+0x6a/0xa0 [ 1387.793480][ T5015] sk_prot_alloc+0x101/0x210 [ 1387.798063][ T5015] ? sk_alloc+0x1d/0x310 [ 1387.802466][ T5015] sk_alloc+0x2f/0x310 [ 1387.806524][ T5015] bpf_prog_test_run_skb+0x240/0x1180 [ 1387.811889][ T5015] ? __fget_files+0x40f/0x480 [ 1387.816571][ T5015] ? cpu_online+0x60/0x60 [ 1387.820897][ T5015] bpf_prog_test_run+0x31e/0x390 [ 1387.825826][ T5015] __sys_bpf+0x5a5/0x6f0 [ 1387.830059][ T5015] ? bpf_link_show_fdinfo+0x380/0x380 [ 1387.835427][ T5015] ? vtime_user_exit+0x2c8/0x3e0 [ 1387.840355][ T5015] __x64_sys_bpf+0x78/0x90 [ 1387.844760][ T5015] do_syscall_64+0x4c/0xa0 [ 1387.849158][ T5015] ? clear_bhb_loop+0x30/0x80 [ 1387.853818][ T5015] ? clear_bhb_loop+0x30/0x80 [ 1387.858487][ T5015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1387.864367][ T5015] RIP: 0033:0x7f2221cd7cb9 [ 1387.868785][ T5015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.888383][ T5015] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1387.896827][ T5015] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1387.904791][ T5015] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1387.912764][ T5015] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.920721][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.928678][ T5015] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1387.936648][ T5015] [ 1387.960187][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.993633][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.116272][ T5029] FAULT_INJECTION: forcing a failure. [ 1388.116272][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.135173][ T5029] CPU: 0 PID: 5029 Comm: syz.0.11745 Not tainted syzkaller #0 [ 1388.142851][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1388.152923][ T5029] Call Trace: [ 1388.156203][ T5029] [ 1388.159134][ T5029] dump_stack_lvl+0x188/0x250 [ 1388.163825][ T5029] ? show_regs_print_info+0x20/0x20 [ 1388.169027][ T5029] ? load_image+0x400/0x400 [ 1388.173627][ T5029] ? __might_sleep+0xf0/0xf0 [ 1388.178220][ T5029] ? __lock_acquire+0x7d10/0x7d10 [ 1388.183245][ T5029] ? __local_bh_enable_ip+0x136/0x1c0 [ 1388.188624][ T5029] should_fail+0x38c/0x4c0 [ 1388.193055][ T5029] should_failslab+0x5/0x20 [ 1388.197562][ T5029] slab_pre_alloc_hook+0x51/0xc0 [ 1388.202534][ T5029] kmem_cache_alloc_node_trace+0x4a/0x300 [ 1388.208267][ T5029] ? __get_vm_area_node+0x119/0x2d0 [ 1388.213504][ T5029] __get_vm_area_node+0x119/0x2d0 [ 1388.218648][ T5029] __vmalloc_node_range+0xef/0x8b0 [ 1388.223853][ T5029] ? netlink_sendmsg+0x5ec/0xbe0 [ 1388.228798][ T5029] ? netlink_data_ready+0x10/0x10 [ 1388.233854][ T5029] ? netlink_sendmsg+0x5ec/0xbe0 [ 1388.238801][ T5029] vmalloc+0x75/0x80 [ 1388.242703][ T5029] ? netlink_sendmsg+0x5ec/0xbe0 [ 1388.247733][ T5029] netlink_sendmsg+0x5ec/0xbe0 [ 1388.252536][ T5029] ? netlink_getsockopt+0x570/0x570 [ 1388.257742][ T5029] ? aa_sock_msg_perm+0x94/0x150 [ 1388.262701][ T5029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1388.267986][ T5029] ? security_socket_sendmsg+0x7c/0xa0 [ 1388.273465][ T5029] ? netlink_getsockopt+0x570/0x570 [ 1388.278679][ T5029] ____sys_sendmsg+0x5b7/0x8f0 [ 1388.283473][ T5029] ? __sys_sendmsg_sock+0x30/0x30 [ 1388.288512][ T5029] ? import_iovec+0x6f/0xa0 [ 1388.293033][ T5029] ___sys_sendmsg+0x236/0x2e0 [ 1388.297728][ T5029] ? __sys_sendmsg+0x2a0/0x2a0 [ 1388.302733][ T5029] ? trace_event_raw_event_lock+0x270/0x270 [ 1388.309010][ T5029] ? vfs_write+0x8b2/0xd60 [ 1388.313477][ T5029] __se_sys_sendmsg+0x1af/0x290 [ 1388.318344][ T5029] ? __x64_sys_sendmsg+0x80/0x80 [ 1388.323284][ T5029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1388.329287][ T5029] ? lockdep_hardirqs_on+0x94/0x140 [ 1388.334501][ T5029] do_syscall_64+0x4c/0xa0 [ 1388.338921][ T5029] ? clear_bhb_loop+0x30/0x80 [ 1388.343757][ T5029] ? clear_bhb_loop+0x30/0x80 [ 1388.348471][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1388.354377][ T5029] RIP: 0033:0x7f2221cd7cb9 [ 1388.358812][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.378433][ T5029] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.386857][ T5029] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1388.394837][ T5029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1388.402812][ T5029] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.410790][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.418767][ T5029] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1388.426783][ T5029] [ 1388.591962][ T5029] syz.0.11745: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1388.618242][ T5029] CPU: 0 PID: 5029 Comm: syz.0.11745 Not tainted syzkaller #0 [ 1388.625745][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1388.635825][ T5029] Call Trace: [ 1388.639108][ T5029] [ 1388.642040][ T5029] dump_stack_lvl+0x188/0x250 [ 1388.646730][ T5029] ? rcu_lock_release+0x5/0x20 [ 1388.651501][ T5029] ? show_regs_print_info+0x20/0x20 [ 1388.656707][ T5029] ? load_image+0x400/0x400 [ 1388.661496][ T5029] warn_alloc+0x243/0x320 [ 1388.666035][ T5029] ? zone_watermark_ok_safe+0x240/0x240 [ 1388.671600][ T5029] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 1388.677608][ T5029] ? __get_vm_area_node+0x119/0x2d0 [ 1388.682860][ T5029] __vmalloc_node_range+0x2b1/0x8b0 [ 1388.688172][ T5029] ? netlink_data_ready+0x10/0x10 [ 1388.693230][ T5029] ? netlink_sendmsg+0x5ec/0xbe0 [ 1388.698192][ T5029] vmalloc+0x75/0x80 [ 1388.702095][ T5029] ? netlink_sendmsg+0x5ec/0xbe0 [ 1388.707033][ T5029] netlink_sendmsg+0x5ec/0xbe0 [ 1388.711805][ T5029] ? netlink_getsockopt+0x570/0x570 [ 1388.717007][ T5029] ? aa_sock_msg_perm+0x94/0x150 [ 1388.722473][ T5029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1388.727957][ T5029] ? security_socket_sendmsg+0x7c/0xa0 [ 1388.733425][ T5029] ? netlink_getsockopt+0x570/0x570 [ 1388.738633][ T5029] ____sys_sendmsg+0x5b7/0x8f0 [ 1388.743411][ T5029] ? __sys_sendmsg_sock+0x30/0x30 [ 1388.748441][ T5029] ? import_iovec+0x6f/0xa0 [ 1388.752949][ T5029] ___sys_sendmsg+0x236/0x2e0 [ 1388.757722][ T5029] ? __sys_sendmsg+0x2a0/0x2a0 [ 1388.762493][ T5029] ? trace_event_raw_event_lock+0x270/0x270 [ 1388.768394][ T5029] ? vfs_write+0x8b2/0xd60 [ 1388.772831][ T5029] __se_sys_sendmsg+0x1af/0x290 [ 1388.777688][ T5029] ? __x64_sys_sendmsg+0x80/0x80 [ 1388.782631][ T5029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1388.788635][ T5029] ? lockdep_hardirqs_on+0x94/0x140 [ 1388.793838][ T5029] do_syscall_64+0x4c/0xa0 [ 1388.798251][ T5029] ? clear_bhb_loop+0x30/0x80 [ 1388.802930][ T5029] ? clear_bhb_loop+0x30/0x80 [ 1388.807612][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1388.813505][ T5029] RIP: 0033:0x7f2221cd7cb9 [ 1388.817930][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.837674][ T5029] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.846112][ T5029] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1388.854094][ T5029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1388.862079][ T5029] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.870050][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.878025][ T5029] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1388.886019][ T5029] [ 1388.895462][ T5029] Mem-Info: [ 1388.898711][ T5029] active_anon:276 inactive_anon:8624 isolated_anon:0 [ 1388.898711][ T5029] active_file:26776 inactive_file:35740 isolated_file:0 [ 1388.898711][ T5029] unevictable:768 dirty:283 writeback:0 [ 1388.898711][ T5029] slab_reclaimable:21016 slab_unreclaimable:100383 [ 1388.898711][ T5029] mapped:30327 shmem:1629 pagetables:601 bounce:0 [ 1388.898711][ T5029] kernel_misc_reclaimable:0 [ 1388.898711][ T5029] free:1357047 free_pcp:11550 free_cma:0 [ 1388.951743][ T5029] Node 0 active_anon:1072kB inactive_anon:33988kB active_file:106900kB inactive_file:142960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121308kB dirty:1128kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12656kB pagetables:2404kB all_unreclaimable? no [ 1388.990203][ T5029] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1389.028997][ T5029] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.055955][ T5029] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1389.061739][ T5029] Node 0 DMA32 free:1500312kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:33988kB active_file:106900kB inactive_file:142960kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:42708kB local_pcp:21320kB free_cma:0kB [ 1389.092284][ T5029] lowmem_reserve[]: 0 0 0 0 0 [ 1389.097049][ T5029] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1389.124885][ T5029] lowmem_reserve[]: 0 0 0 0 0 [ 1389.129720][ T5029] Node 1 Normal free:3910908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3424kB local_pcp:0kB free_cma:0kB [ 1389.158835][ T5029] lowmem_reserve[]: 0 0 0 0 0 [ 1389.163774][ T5029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1389.176774][ T5029] Node 0 DMA32: 2126*4kB (UME) 3373*8kB (UME) 709*16kB (UME) 3205*32kB (UME) 2681*64kB (UME) 1003*128kB (UME) 315*256kB (UME) 208*512kB (UM) 100*1024kB (UM) 32*2048kB (UM) 170*4096kB (UM) = 1500752kB [ 1389.196663][ T5029] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1389.208862][ T5029] Node 1 Normal: 205*4kB (UE) 53*8kB (UME) 28*16kB (UME) 225*32kB (UE) 107*64kB (UME) 27*128kB (UME) 8*256kB (UM) 7*512kB (U) 1*1024kB (E) 3*2048kB (UME) 947*4096kB (M) = 3910908kB [ 1389.227190][ T5029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.239029][ T5029] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1389.248635][ T5029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.259679][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.268177][ T5029] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1389.277889][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.285193][ T5029] 64145 total pagecache pages [ 1389.289926][ T5029] 0 pages in swap cache [ 1389.294136][ T5029] Swap cache stats: add 0, delete 0, find 0/0 [ 1389.300208][ T5029] Free swap = 124996kB [ 1389.304458][ T5029] Total swap = 124996kB [ 1389.308616][ T5029] 2097051 pages RAM [ 1389.312765][ T5029] 0 pages HighMem/MovableOnly [ 1389.317570][ T5029] 411488 pages reserved [ 1389.321870][ T5029] 0 pages cma reserved [ 1389.495288][ T5016] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1389.513213][ T5016] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1390.521681][ T5026] netlink: 'syz.3.11742': attribute type 10 has an invalid length. [ 1390.530532][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.562046][ T5026] team0: Port device bridge0 removed [ 1390.569499][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.576661][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.585749][ T5026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1390.652686][ T5038] netlink: zone id is out of range [ 1390.660101][ T5038] netlink: set zone limit has 8 unknown bytes [ 1390.832778][ T5038] __nla_validate_parse: 6 callbacks suppressed [ 1390.832815][ T5038] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.11747'. [ 1390.926446][ T5043] netlink: 'syz.3.11748': attribute type 8 has an invalid length. [ 1390.940153][ T5056] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11750'. [ 1390.949691][ T5043] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11748'. [ 1391.431943][ T5076] netlink: 'syz.0.11762': attribute type 3 has an invalid length. [ 1391.440430][ T5076] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11762'. [ 1391.510389][T19625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1391.598794][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.607685][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.621564][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.632811][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.762725][ T5084] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11754'. [ 1391.835461][ T5085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11754'. [ 1391.989618][ T5090] netlink: 'syz.3.11755': attribute type 4 has an invalid length. [ 1392.000069][ T5090] netlink: 'syz.3.11755': attribute type 10 has an invalid length. [ 1392.009197][ T5090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11755'. [ 1392.021475][ T5090] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1392.039144][ T5092] netlink: 'syz.2.11756': attribute type 21 has an invalid length. [ 1392.161226][ T3090] bond0: (slave wlan1): Releasing backup interface [ 1392.221343][ T5102] netlink: 'syz.0.11759': attribute type 10 has an invalid length. [ 1392.232134][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.250036][ T5102] device bridge0 left promiscuous mode [ 1392.289258][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.296441][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.322274][ T5103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11759'. [ 1392.335691][ T5102] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1392.536936][ T3090] device hsr_slave_0 left promiscuous mode [ 1392.546130][ T3090] device hsr_slave_1 left promiscuous mode [ 1392.553971][ T3090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.561695][ T3090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.570789][ T3090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.585688][ T3090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.597554][ T3090] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1392.610532][ T3090] device bridge_slave_1 left promiscuous mode [ 1392.617186][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.638154][ T3090] device bridge_slave_0 left promiscuous mode [ 1392.645174][ T5118] netlink: zone id is out of range [ 1392.650613][ T5118] netlink: set zone limit has 8 unknown bytes [ 1392.661184][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.684843][ T3090] device veth1_macvtap left promiscuous mode [ 1392.691122][ T3090] device veth0_macvtap left promiscuous mode [ 1392.701707][ T3090] device veth1_vlan left promiscuous mode [ 1392.708975][ T3090] device veth0_vlan left promiscuous mode [ 1392.779504][ T5120] netlink: 'syz.4.11766': attribute type 8 has an invalid length. [ 1392.789766][ T5120] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11766'. [ 1393.286147][ T3090] team0 (unregistering): Port device team_slave_1 removed [ 1393.308970][ T3090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.324431][ T3090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.408060][ T3090] team0 (unregistering): Port device bridge0 removed [ 1393.431749][ T3090] bond0 (unregistering): Released all slaves [ 1393.497015][ T5118] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.11765'. [ 1393.671110][ T5133] netlink: 'syz.4.11769': attribute type 3 has an invalid length. [ 1393.728933][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.789611][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.974914][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.001126][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.214645][ T5153] FAULT_INJECTION: forcing a failure. [ 1394.214645][ T5153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.238771][ T5153] CPU: 1 PID: 5153 Comm: syz.2.11774 Not tainted syzkaller #0 [ 1394.246352][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1394.256414][ T5153] Call Trace: [ 1394.259781][ T5153] [ 1394.262726][ T5153] dump_stack_lvl+0x188/0x250 [ 1394.267417][ T5153] ? show_regs_print_info+0x20/0x20 [ 1394.272611][ T5153] ? load_image+0x400/0x400 [ 1394.277130][ T5153] ? __lock_acquire+0x7d10/0x7d10 [ 1394.282194][ T5153] should_fail+0x38c/0x4c0 [ 1394.286650][ T5153] _copy_from_user+0x2e/0x170 [ 1394.291462][ T5153] iovec_from_user+0x142/0x370 [ 1394.296251][ T5153] __import_iovec+0x70/0x490 [ 1394.300859][ T5153] import_iovec+0x6f/0xa0 [ 1394.305183][ T5153] ___sys_sendmsg+0x1fd/0x2e0 [ 1394.309856][ T5153] ? __sys_sendmsg+0x2a0/0x2a0 [ 1394.314623][ T5153] __se_sys_sendmsg+0x1af/0x290 [ 1394.319545][ T5153] ? __x64_sys_sendmsg+0x80/0x80 [ 1394.324487][ T5153] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1394.330460][ T5153] ? lockdep_hardirqs_on+0x94/0x140 [ 1394.335653][ T5153] do_syscall_64+0x4c/0xa0 [ 1394.340080][ T5153] ? clear_bhb_loop+0x30/0x80 [ 1394.344746][ T5153] ? clear_bhb_loop+0x30/0x80 [ 1394.349408][ T5153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1394.355282][ T5153] RIP: 0033:0x7f8f07c94cb9 [ 1394.359698][ T5153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.379395][ T5153] RSP: 002b:00007f8f05ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.387810][ T5153] RAX: ffffffffffffffda RBX: 00007f8f07f0ffa0 RCX: 00007f8f07c94cb9 [ 1394.395797][ T5153] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 1394.403755][ T5153] RBP: 00007f8f05ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.411712][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.419660][ T5153] R13: 00007f8f07f10038 R14: 00007f8f07f0ffa0 R15: 00007ffd61d21508 [ 1394.427624][ T5153] [ 1394.589072][ T5156] netlink: 'syz.3.11776': attribute type 10 has an invalid length. [ 1394.634947][ T5155] delete_channel: no stack [ 1395.110602][ T5170] netlink: zone id is out of range [ 1395.126509][ T5170] netlink: set zone limit has 8 unknown bytes [ 1395.668883][ T5192] validate_nla: 1 callbacks suppressed [ 1395.668902][ T5192] netlink: 'syz.1.11782': attribute type 8 has an invalid length. [ 1395.932143][ T5192] __nla_validate_parse: 7 callbacks suppressed [ 1395.932165][ T5192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11782'. [ 1396.485181][ T5210] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11789'. [ 1397.356610][ T5219] netlink: 'syz.1.11796': attribute type 3 has an invalid length. [ 1397.368943][ T5223] FAULT_INJECTION: forcing a failure. [ 1397.368943][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.392552][ T5223] CPU: 1 PID: 5223 Comm: syz.4.11799 Not tainted syzkaller #0 [ 1397.392709][ T5219] netlink: 194448 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1397.400058][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1397.400074][ T5223] Call Trace: [ 1397.400084][ T5223] [ 1397.400096][ T5223] dump_stack_lvl+0x188/0x250 [ 1397.400133][ T5223] ? show_regs_print_info+0x20/0x20 [ 1397.435674][ T5223] ? load_image+0x400/0x400 [ 1397.440306][ T5223] ? __lock_acquire+0x7d10/0x7d10 [ 1397.445348][ T5223] ? trace_call_bpf+0x515/0x5b0 [ 1397.450245][ T5223] should_fail+0x38c/0x4c0 [ 1397.454709][ T5223] _copy_from_user+0x2e/0x170 [ 1397.459419][ T5223] iovec_from_user+0x142/0x370 [ 1397.464233][ T5223] __import_iovec+0x70/0x490 [ 1397.468885][ T5223] import_iovec+0x6f/0xa0 [ 1397.473252][ T5223] ___sys_sendmsg+0x1fd/0x2e0 [ 1397.477755][ T5226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11797'. [ 1397.477971][ T5223] ? __sys_sendmsg+0x2a0/0x2a0 [ 1397.491848][ T5223] ? trace_event_raw_event_lock+0x270/0x270 [ 1397.497773][ T5223] ? vfs_write+0x8b2/0xd60 [ 1397.502291][ T5223] __se_sys_sendmsg+0x1af/0x290 [ 1397.507204][ T5223] ? __x64_sys_sendmsg+0x80/0x80 [ 1397.512196][ T5223] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1397.518330][ T5223] ? lockdep_hardirqs_on+0x94/0x140 [ 1397.523566][ T5223] do_syscall_64+0x4c/0xa0 [ 1397.527996][ T5223] ? clear_bhb_loop+0x30/0x80 [ 1397.532683][ T5223] ? clear_bhb_loop+0x30/0x80 [ 1397.537389][ T5223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1397.543293][ T5223] RIP: 0033:0x7f68aa1f8cb9 [ 1397.547727][ T5223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.567352][ T5223] RSP: 002b:00007f68a8454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.575802][ T5223] RAX: ffffffffffffffda RBX: 00007f68aa473fa0 RCX: 00007f68aa1f8cb9 [ 1397.583791][ T5223] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1397.591775][ T5223] RBP: 00007f68a8454090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.599981][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.607976][ T5223] R13: 00007f68aa474038 R14: 00007f68aa473fa0 R15: 00007ffc9ce367d8 [ 1397.616021][ T5223] [ 1397.673594][ T5228] netlink: 'syz.0.11811': attribute type 3 has an invalid length. [ 1397.681444][ T5228] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.11811'. [ 1397.816766][ T5236] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11802'. [ 1398.216152][ T5243] netlink: 'syz.4.11805': attribute type 3 has an invalid length. [ 1398.252433][ T5243] netlink: 194448 bytes leftover after parsing attributes in process `syz.4.11805'. [ 1399.139842][ T5259] FAULT_INJECTION: forcing a failure. [ 1399.139842][ T5259] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.183063][ T5259] CPU: 0 PID: 5259 Comm: syz.2.11813 Not tainted syzkaller #0 [ 1399.190570][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1399.200636][ T5259] Call Trace: [ 1399.203926][ T5259] [ 1399.206877][ T5259] dump_stack_lvl+0x188/0x250 [ 1399.211596][ T5259] ? show_regs_print_info+0x20/0x20 [ 1399.216809][ T5259] ? load_image+0x400/0x400 [ 1399.221334][ T5259] ? __might_sleep+0xf0/0xf0 [ 1399.225930][ T5259] ? __lock_acquire+0x7d10/0x7d10 [ 1399.230962][ T5259] ? netlink_insert+0xe95/0x11f0 [ 1399.235925][ T5259] should_fail+0x38c/0x4c0 [ 1399.240357][ T5259] should_failslab+0x5/0x20 [ 1399.244861][ T5259] slab_pre_alloc_hook+0x51/0xc0 [ 1399.249815][ T5259] kmem_cache_alloc_node+0x47/0x2d0 [ 1399.255032][ T5259] ? __alloc_skb+0xf4/0x750 [ 1399.259569][ T5259] __alloc_skb+0xf4/0x750 [ 1399.263912][ T5259] netlink_sendmsg+0x654/0xbe0 [ 1399.268712][ T5259] ? netlink_getsockopt+0x570/0x570 [ 1399.273925][ T5259] ? aa_sock_msg_perm+0x94/0x150 [ 1399.278995][ T5259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1399.284313][ T5259] ? security_socket_sendmsg+0x7c/0xa0 [ 1399.289790][ T5259] ? netlink_getsockopt+0x570/0x570 [ 1399.295006][ T5259] ____sys_sendmsg+0x5b7/0x8f0 [ 1399.299789][ T5259] ? __sys_sendmsg_sock+0x30/0x30 [ 1399.304876][ T5259] ? import_iovec+0x6f/0xa0 [ 1399.309399][ T5259] ___sys_sendmsg+0x236/0x2e0 [ 1399.314100][ T5259] ? __sys_sendmsg+0x2a0/0x2a0 [ 1399.318894][ T5259] ? vfs_write+0x8b2/0xd60 [ 1399.323350][ T5259] __se_sys_sendmsg+0x1af/0x290 [ 1399.328234][ T5259] ? __x64_sys_sendmsg+0x80/0x80 [ 1399.333189][ T5259] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1399.339200][ T5259] ? lockdep_hardirqs_on+0x94/0x140 [ 1399.344444][ T5259] do_syscall_64+0x4c/0xa0 [ 1399.348873][ T5259] ? clear_bhb_loop+0x30/0x80 [ 1399.353546][ T5259] ? clear_bhb_loop+0x30/0x80 [ 1399.358234][ T5259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1399.364113][ T5259] RIP: 0033:0x7f8f07c94cb9 [ 1399.368542][ T5259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.388309][ T5259] RSP: 002b:00007f8f05ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1399.396804][ T5259] RAX: ffffffffffffffda RBX: 00007f8f07f0ffa0 RCX: 00007f8f07c94cb9 [ 1399.404770][ T5259] RDX: 0000000000000084 RSI: 0000200000000200 RDI: 0000000000000003 [ 1399.412734][ T5259] RBP: 00007f8f05ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.420695][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.428659][ T5259] R13: 00007f8f07f10038 R14: 00007f8f07f0ffa0 R15: 00007ffd61d21508 [ 1399.436637][ T5259] [ 1399.546911][ T5271] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.11818'. [ 1399.744777][ T5283] netlink: 'syz.1.11822': attribute type 10 has an invalid length. [ 1399.753221][ T5283] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11822'. [ 1399.991932][ T5299] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11823'. [ 1400.631851][ T5315] FAULT_INJECTION: forcing a failure. [ 1400.631851][ T5315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.648694][ T5315] CPU: 0 PID: 5315 Comm: syz.4.11829 Not tainted syzkaller #0 [ 1400.656187][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.666264][ T5315] Call Trace: [ 1400.669550][ T5315] [ 1400.672483][ T5315] dump_stack_lvl+0x188/0x250 [ 1400.677178][ T5315] ? show_regs_print_info+0x20/0x20 [ 1400.682383][ T5315] ? load_image+0x400/0x400 [ 1400.686908][ T5315] ? __lock_acquire+0x7d10/0x7d10 [ 1400.691952][ T5315] should_fail+0x38c/0x4c0 [ 1400.696383][ T5315] _copy_from_user+0x2e/0x170 [ 1400.701087][ T5315] __sys_bpf+0x26d/0x6f0 [ 1400.705331][ T5315] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 1400.711580][ T5315] ? bpf_link_show_fdinfo+0x380/0x380 [ 1400.716962][ T5315] ? rcu_nmi_exit+0x6f/0xf0 [ 1400.721485][ T5315] ? vtime_user_exit+0x2c8/0x3e0 [ 1400.726445][ T5315] __x64_sys_bpf+0x78/0x90 [ 1400.730876][ T5315] do_syscall_64+0x4c/0xa0 [ 1400.735301][ T5315] ? clear_bhb_loop+0x30/0x80 [ 1400.740070][ T5315] ? clear_bhb_loop+0x30/0x80 [ 1400.744752][ T5315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1400.750656][ T5315] RIP: 0033:0x7f68aa1f8cb9 [ 1400.755084][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.774703][ T5315] RSP: 002b:00007f68a8454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1400.783130][ T5315] RAX: ffffffffffffffda RBX: 00007f68aa473fa0 RCX: 00007f68aa1f8cb9 [ 1400.791117][ T5315] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1400.799102][ T5315] RBP: 00007f68a8454090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.807089][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.815071][ T5315] R13: 00007f68aa474038 R14: 00007f68aa473fa0 R15: 00007ffc9ce367d8 [ 1400.823074][ T5315] [ 1401.348654][ T5322] __nla_validate_parse: 3 callbacks suppressed [ 1401.348692][ T5322] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11832'. [ 1403.390799][ T5330] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11836'. [ 1403.460526][ T5330] netlink: 'syz.0.11836': attribute type 29 has an invalid length. [ 1403.467443][ T5332] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11838'. [ 1403.529723][ T5330] netlink: 'syz.0.11836': attribute type 29 has an invalid length. [ 1403.563848][ T5330] netlink: 'syz.0.11836': attribute type 4 has an invalid length. [ 1403.575051][ T5330] netlink: 205184 bytes leftover after parsing attributes in process `syz.0.11836'. [ 1403.628833][ T5336] netlink: 'syz.0.11836': attribute type 29 has an invalid length. [ 1403.651093][ T5328] FAULT_INJECTION: forcing a failure. [ 1403.651093][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.658098][ T5332] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11838'. [ 1403.664545][ T5328] CPU: 1 PID: 5328 Comm: syz.1.11837 Not tainted syzkaller #0 [ 1403.664570][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.664580][ T5328] Call Trace: [ 1403.664587][ T5328] [ 1403.664595][ T5328] dump_stack_lvl+0x188/0x250 [ 1403.664621][ T5328] ? lock_chain_count+0x20/0x20 [ 1403.664643][ T5328] ? show_regs_print_info+0x20/0x20 [ 1403.664662][ T5328] ? load_image+0x400/0x400 [ 1403.664682][ T5328] ? lockdep_hardirqs_on+0x94/0x140 [ 1403.683190][ T5341] netlink: 'syz.4.11835': attribute type 10 has an invalid length. [ 1403.691278][ T5328] should_fail+0x38c/0x4c0 [ 1403.691318][ T5328] should_failslab+0x5/0x20 [ 1403.691335][ T5328] slab_pre_alloc_hook+0x51/0xc0 [ 1403.691354][ T5328] kmem_cache_alloc_trace+0x47/0x2a0 [ 1403.691369][ T5328] ? call_usermodehelper_setup+0x8a/0x260 [ 1403.691391][ T5328] call_usermodehelper_setup+0x8a/0x260 [ 1403.691405][ T5328] ? __request_module+0x980/0x980 [ 1403.691423][ T5328] __request_module+0x3ea/0x980 [ 1403.691439][ T5328] ? rcu_nmi_exit+0x6f/0xf0 [ 1403.691463][ T5328] ? umd_cleanup+0x110/0x110 [ 1403.691490][ T5328] ? __lock_acquire+0x7d10/0x7d10 [ 1403.691519][ T5328] inet_create+0x373/0xef0 [ 1403.691545][ T5328] __sock_create+0x47b/0x900 [ 1403.691570][ T5328] __sys_socket+0xe2/0x170 [ 1403.691591][ T5328] __x64_sys_socket+0x76/0x80 [ 1403.691609][ T5328] do_syscall_64+0x4c/0xa0 [ 1403.691623][ T5328] ? clear_bhb_loop+0x30/0x80 [ 1403.691639][ T5328] ? clear_bhb_loop+0x30/0x80 [ 1403.691657][ T5328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1403.691672][ T5328] RIP: 0033:0x7fb3d25d7cb9 [ 1403.691692][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.691706][ T5328] RSP: 002b:00007fb3d0833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1403.691726][ T5328] RAX: ffffffffffffffda RBX: 00007fb3d2852fa0 RCX: 00007fb3d25d7cb9 [ 1403.691738][ T5328] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 1403.691749][ T5328] RBP: 00007fb3d0833090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.691759][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.691768][ T5328] R13: 00007fb3d2853038 R14: 00007fb3d2852fa0 R15: 00007ffc290d2248 [ 1403.691793][ T5328] [ 1403.906051][ T5341] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11835'. [ 1404.017147][ T5349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11843'. [ 1404.266910][ T5357] netlink: 'syz.0.11855': attribute type 10 has an invalid length. [ 1404.276115][ T5357] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11855'. [ 1404.338728][ T5359] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11845'. [ 1404.734886][ T5363] netlink: 'syz.1.11847': attribute type 10 has an invalid length. [ 1404.761119][ T5363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11847'. [ 1404.783463][ T5363] batman_adv: batadv0: Adding interface: vlan1 [ 1404.795641][ T5363] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.827752][ T5363] batman_adv: batadv0: Interface activated: vlan1 [ 1404.845708][ T5365] -: renamed from syzkaller0 [ 1404.896977][ T5371] netlink: 'syz.3.11849': attribute type 21 has an invalid length. [ 1404.917745][ T5371] netlink: 'syz.3.11849': attribute type 1 has an invalid length. [ 1405.011145][ T5374] FAULT_INJECTION: forcing a failure. [ 1405.011145][ T5374] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.025739][ T5374] CPU: 0 PID: 5374 Comm: syz.0.11850 Not tainted syzkaller #0 [ 1405.033776][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1405.043855][ T5374] Call Trace: [ 1405.047249][ T5374] [ 1405.050216][ T5374] dump_stack_lvl+0x188/0x250 [ 1405.054939][ T5374] ? show_regs_print_info+0x20/0x20 [ 1405.060180][ T5374] ? load_image+0x400/0x400 [ 1405.064714][ T5374] ? __might_sleep+0xf0/0xf0 [ 1405.069332][ T5374] ? __lock_acquire+0x7d10/0x7d10 [ 1405.074369][ T5374] ? netlink_insert+0xe95/0x11f0 [ 1405.079336][ T5374] should_fail+0x38c/0x4c0 [ 1405.083766][ T5374] should_failslab+0x5/0x20 [ 1405.088268][ T5374] slab_pre_alloc_hook+0x51/0xc0 [ 1405.093296][ T5374] kmem_cache_alloc_node+0x47/0x2d0 [ 1405.098490][ T5374] ? __alloc_skb+0xf4/0x750 [ 1405.103005][ T5374] __alloc_skb+0xf4/0x750 [ 1405.107352][ T5374] netlink_sendmsg+0x654/0xbe0 [ 1405.112131][ T5374] ? netlink_getsockopt+0x570/0x570 [ 1405.117342][ T5374] ? aa_sock_msg_perm+0x94/0x150 [ 1405.122293][ T5374] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1405.127587][ T5374] ? security_socket_sendmsg+0x7c/0xa0 [ 1405.133599][ T5374] ? netlink_getsockopt+0x570/0x570 [ 1405.138840][ T5374] ____sys_sendmsg+0x5b7/0x8f0 [ 1405.143713][ T5374] ? __sys_sendmsg_sock+0x30/0x30 [ 1405.148758][ T5374] ? import_iovec+0x6f/0xa0 [ 1405.153279][ T5374] ___sys_sendmsg+0x236/0x2e0 [ 1405.157973][ T5374] ? __sys_sendmsg+0x2a0/0x2a0 [ 1405.162815][ T5374] __se_sys_sendmsg+0x1af/0x290 [ 1405.167672][ T5374] ? __x64_sys_sendmsg+0x80/0x80 [ 1405.172604][ T5374] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1405.178613][ T5374] ? lockdep_hardirqs_on+0x94/0x140 [ 1405.183822][ T5374] do_syscall_64+0x4c/0xa0 [ 1405.188232][ T5374] ? clear_bhb_loop+0x30/0x80 [ 1405.192910][ T5374] ? clear_bhb_loop+0x30/0x80 [ 1405.197585][ T5374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1405.203476][ T5374] RIP: 0033:0x7f2221cd7cb9 [ 1405.207916][ T5374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.227610][ T5374] RSP: 002b:00007f221ff33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.236029][ T5374] RAX: ffffffffffffffda RBX: 00007f2221f52fa0 RCX: 00007f2221cd7cb9 [ 1405.244003][ T5374] RDX: 0200000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 1405.251974][ T5374] RBP: 00007f221ff33090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.260024][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.267995][ T5374] R13: 00007f2221f53038 R14: 00007f2221f52fa0 R15: 00007ffd2493d408 [ 1405.275995][ T5374] [ 1405.487206][ T5377] netlink: 'syz.0.11863': attribute type 21 has an invalid length. [ 1406.363698][ T5415] __nla_validate_parse: 5 callbacks suppressed [ 1406.363714][ T5415] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11864'. [ 1406.634128][ T5425] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1406.846340][ T5433] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.11869'. [ 1407.013743][ T5442] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11872'. [ 1407.263746][ T5450] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.11876'. [ 1407.618333][ T5458] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1407.777919][ T5459] netlink: 205184 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1409.673523][ T5052] Bluetooth: hci1: command 0x0406 tx timeout [ 1410.410802][ T5466] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1410.455628][ T5466] device syzkaller0 entered promiscuous mode [ 1410.691132][ T5477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1410.716565][ T5479] validate_nla: 14 callbacks suppressed [ 1410.716588][ T5479] netlink: 'syz.1.11883': attribute type 21 has an invalid length. [ 1410.742491][ T5479] netlink: 'syz.1.11883': attribute type 1 has an invalid length. [ 1410.750679][ T5479] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.11883'. [ 1411.040985][ T5484] IPv6: Can't replace route, no match found [ 1411.489738][ T5496] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11889'. [ 1412.256110][ T5505] FAULT_INJECTION: forcing a failure. [ 1412.256110][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.304319][ T5505] CPU: 1 PID: 5505 Comm: syz.4.11896 Not tainted syzkaller #0 [ 1412.311829][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1412.321900][ T5505] Call Trace: [ 1412.325180][ T5505] [ 1412.328102][ T5505] dump_stack_lvl+0x188/0x250 [ 1412.332774][ T5505] ? show_regs_print_info+0x20/0x20 [ 1412.337958][ T5505] ? load_image+0x400/0x400 [ 1412.342450][ T5505] ? __lock_acquire+0x7d10/0x7d10 [ 1412.347475][ T5505] should_fail+0x38c/0x4c0 [ 1412.351906][ T5505] should_failslab+0x5/0x20 [ 1412.356577][ T5505] slab_pre_alloc_hook+0x51/0xc0 [ 1412.361519][ T5505] __kmalloc+0x6b/0x330 [ 1412.365664][ T5505] ? sk_prot_alloc+0xe7/0x210 [ 1412.370513][ T5505] sk_prot_alloc+0xe7/0x210 [ 1412.375005][ T5505] ? sk_alloc+0x1d/0x310 [ 1412.379237][ T5505] sk_alloc+0x2f/0x310 [ 1412.383377][ T5505] bpf_prog_test_run_skb+0x240/0x1180 [ 1412.388738][ T5505] ? __fget_files+0x40f/0x480 [ 1412.393409][ T5505] ? cpu_online+0x60/0x60 [ 1412.397728][ T5505] bpf_prog_test_run+0x31e/0x390 [ 1412.402662][ T5505] __sys_bpf+0x5a5/0x6f0 [ 1412.406894][ T5505] ? bpf_link_show_fdinfo+0x380/0x380 [ 1412.412250][ T5505] ? rcu_nmi_exit+0x6f/0xf0 [ 1412.416747][ T5505] ? vtime_user_exit+0x2c8/0x3e0 [ 1412.421673][ T5505] __x64_sys_bpf+0x78/0x90 [ 1412.426225][ T5505] do_syscall_64+0x4c/0xa0 [ 1412.430731][ T5505] ? clear_bhb_loop+0x30/0x80 [ 1412.435578][ T5505] ? clear_bhb_loop+0x30/0x80 [ 1412.440304][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1412.446202][ T5505] RIP: 0033:0x7f68aa1f8cb9 [ 1412.450622][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.470221][ T5505] RSP: 002b:00007f68a8454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.479076][ T5505] RAX: ffffffffffffffda RBX: 00007f68aa473fa0 RCX: 00007f68aa1f8cb9 [ 1412.487178][ T5505] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 1412.495228][ T5505] RBP: 00007f68a8454090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.503732][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.511701][ T5505] R13: 00007f68aa474038 R14: 00007f68aa473fa0 R15: 00007ffc9ce367d8 [ 1412.519685][ T5505] [ 1412.524072][ T5510] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11907'. [ 1412.545611][ T5509] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11895'. [ 1412.655714][ T5519] netlink: 'syz.3.11895': attribute type 29 has an invalid length. [ 1412.900050][ T5519] netlink: 'syz.3.11895': attribute type 29 has an invalid length. [ 1413.288898][ T5541] IPv6: Can't replace route, no match found [ 1413.901759][ T5563] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11918'. [ 1413.986948][ T5567] netlink: 'syz.2.11918': attribute type 29 has an invalid length. [ 1414.003744][ T5567] netlink: 'syz.2.11918': attribute type 29 has an invalid length. [ 1414.035833][ T5569] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1414.049137][ T5563] netlink: 'syz.2.11918': attribute type 29 has an invalid length. [ 1414.077788][ T5563] netlink: 'syz.2.11918': attribute type 4 has an invalid length. [ 1414.102661][ T5563] netlink: 205184 bytes leftover after parsing attributes in process `syz.2.11918'. [ 1414.823838][ T5572] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11932'. [ 1414.988692][ T5586] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1415.674177][ T9] device hsr_slave_0 left promiscuous mode [ 1415.683588][ T9] device hsr_slave_1 left promiscuous mode [ 1415.717372][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.728172][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.741371][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.750313][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.773458][ T9] device bridge_slave_1 left promiscuous mode [ 1415.780028][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.790147][ T9] device bridge_slave_0 left promiscuous mode [ 1415.796701][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.824122][ T9] device veth1_macvtap left promiscuous mode [ 1415.830510][ T9] device veth0_macvtap left promiscuous mode [ 1415.839669][ T9] device veth1_vlan left promiscuous mode [ 1415.846242][ T9] device veth0_vlan left promiscuous mode [ 1416.258356][ T9] team0 (unregistering): Port device geneve1 removed [ 1416.647461][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1416.775189][ T9] team0 (unregistering): Port device bridge0 removed [ 1416.869146][ T5604] device sit0 entered promiscuous mode [ 1416.992665][ T5601] IPv6: Can't replace route, no match found [ 1417.003503][ T5612] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1417.211777][ T5626] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11939'. [ 1417.240985][ T5630] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11942'. [ 1417.488417][ T5641] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11947'. [ 1417.525919][ T5639] netlink: 'syz.1.11946': attribute type 27 has an invalid length. [ 1417.553606][ T5639] C: renamed from team_slave_0 [ 1417.945408][ T5655] IPv6: Can't replace route, no match found [ 1418.374748][ T5670] IPv6: Can't replace route, no match found [ 1418.617569][ T5677] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11959'. [ 1418.979401][ T5684] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11962'. [ 1419.009989][ T5681] netlink: 'syz.2.11961': attribute type 27 has an invalid length. [ 1419.056675][ T5681] C: renamed from team_slave_0 [ 1419.155645][ T5691] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11963'. [ 1420.220012][ T5712] netlink: 'syz.4.11974': attribute type 10 has an invalid length. [ 1420.294317][ T5712] team0: Port device geneve1 added [ 1420.376652][ T5717] IPv6: Can't replace route, no match found [ 1420.784347][ T5729] netlink: 'syz.4.11978': attribute type 27 has an invalid length. [ 1420.880415][ T5729] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1421.177616][ T5745] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11985'. [ 1421.223207][ T5748] netlink: 763 bytes leftover after parsing attributes in process `syz.0.12001'. [ 1421.277072][ T5750] IPv6: Can't replace route, no match found [ 1421.399271][ T5757] netlink: 'syz.1.11991': attribute type 10 has an invalid length. [ 1421.460688][ T5757] team0: Port device geneve1 added [ 1421.544056][ T5768] netlink: 'syz.0.11998': attribute type 10 has an invalid length. [ 1421.552128][ T5768] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11998'. [ 1421.599829][ T5771] netlink: 'syz.1.11999': attribute type 3 has an invalid length. [ 1421.700976][ T5779] IPv6: Can't replace route, no match found [ 1422.088962][ T5798] netlink: 'syz.2.12011': attribute type 10 has an invalid length. [ 1422.314105][ T5798] team0: Port device geneve1 added [ 1422.445592][ T5816] __nla_validate_parse: 2 callbacks suppressed [ 1422.445611][ T5816] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12019'. [ 1422.654845][ T5820] netlink: 763 bytes leftover after parsing attributes in process `syz.2.12020'. [ 1422.955237][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.961750][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.974207][ T5829] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12022'. [ 1423.265031][ T5837] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12028'. [ 1423.334720][ T5846] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12034'. [ 1424.397479][ T5881] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12046'. [ 1424.468661][ T5887] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:8d00:0023 with DS=0x31 [ 1424.582449][ T5890] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.12049'. [ 1424.823001][ T5907] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1425.259972][ T5921] netlink: 'syz.1.12065': attribute type 16 has an invalid length. [ 1425.310303][ T5921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12065'. [ 1425.699091][ T5933] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1425.712524][ T5933] device syzkaller0 entered promiscuous mode [ 1426.086925][ T5944] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12074'. [ 1426.262972][ T5937] device syzkaller0 entered promiscuous mode [ 1426.545348][ T5950] IPv6: Can't replace route, no match found [ 1427.372559][ T5984] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1427.398144][ T5984] device syzkaller0 entered promiscuous mode [ 1427.716365][ T5996] __nla_validate_parse: 2 callbacks suppressed [ 1427.716385][ T5996] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12091'. [ 1427.826731][ T5987] device syzkaller0 entered promiscuous mode [ 1428.019134][ T6007] IPv6: Can't replace route, no match found [ 1429.347789][ T6046] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12110'. [ 1432.447886][ T6110] netlink: 'syz.1.12136': attribute type 9 has an invalid length. [ 1432.488957][ T6110] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.12136'. [ 1432.718858][ T6124] netlink: 'syz.0.12142': attribute type 21 has an invalid length. [ 1432.727909][ T6124] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12142'. [ 1434.247181][ T6157] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1434.417923][ T6151] netlink: 'syz.4.12151': attribute type 2 has an invalid length. [ 1434.475514][ T6151] netlink: 'syz.4.12151': attribute type 8 has an invalid length. [ 1434.592835][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1435.272867][ T3946] Bluetooth: hci3: command 0x0406 tx timeout [ 1437.124537][ T6198] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 1437.224751][ T6198] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1437.337188][ T6198] device veth0_to_bridge entered promiscuous mode [ 1437.891228][ T6210] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.12168'. [ 1442.134063][ T6272] netlink: 'syz.3.12195': attribute type 27 has an invalid length. [ 1442.142131][ T6272] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12195'. [ 1442.237610][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.245366][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.377894][ T6273] device bridge_slave_1 left promiscuous mode [ 1442.442599][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.685962][ T6273] device bridge_slave_0 left promiscuous mode [ 1442.694421][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.720407][ T6273] bond0: (slave bridge0): Releasing backup interface [ 1445.637139][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.567155][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.574792][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.694460][ T6400] device bridge_slave_1 left promiscuous mode [ 1449.768107][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.777195][ T6400] device bridge_slave_0 left promiscuous mode [ 1449.791636][ T6406] ref_ctr_offset mismatch. inode: 0x4fe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 1449.794269][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.890024][ T6406] GPL: port 1(erspan0) entered blocking state [ 1451.897442][ T6406] GPL: port 1(erspan0) entered disabled state [ 1451.978894][ T6406] device erspan0 entered promiscuous mode [ 1453.266759][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.275186][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.150623][ T6473] netlink: 'syz.3.12262': attribute type 2 has an invalid length. [ 1454.198747][ T6473] netlink: 'syz.3.12262': attribute type 8 has an invalid length. [ 1454.244898][ T6473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1455.755374][ T3949] Bluetooth: hci0: command 0x0406 tx timeout [ 1459.787222][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 1460.132568][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.139748][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.193681][ T6527] device bridge_slave_0 entered promiscuous mode [ 1460.241368][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.294720][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.344839][ T6527] device bridge_slave_1 entered promiscuous mode [ 1460.482924][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.554562][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.693247][ T6527] team0: Port device team_slave_0 added [ 1460.735237][ T6527] team0: Port device team_slave_1 added [ 1460.834676][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.841659][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.953074][ T5052] Bluetooth: hci4: command 0x0409 tx timeout [ 1460.964800][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.012549][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.019518][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.135112][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.246307][ T6527] device hsr_slave_0 entered promiscuous mode [ 1461.283082][ T6527] device hsr_slave_1 entered promiscuous mode [ 1461.334746][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1461.355210][ T6527] Cannot create hsr debugfs directory [ 1461.735427][ T6527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1461.777729][ T6527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1461.816150][ T6527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1461.847759][ T6527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1462.159529][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.201507][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1462.223212][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.241650][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.276749][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1462.305930][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1462.342940][T31811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.350041][T31811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.395850][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1462.423456][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1462.465941][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.493263][T31811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.500495][T31811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.558705][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1462.573328][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1462.623148][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1462.675271][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1462.703252][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1462.735880][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1462.765277][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1462.805860][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.827542][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1462.863602][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1462.896243][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1462.913942][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1462.955941][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1463.032820][ T5060] Bluetooth: hci4: command 0x041b tx timeout [ 1463.439646][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1463.464747][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1463.489809][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.070293][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1464.093187][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1464.128481][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1464.145441][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1464.178829][ T6527] device veth0_vlan entered promiscuous mode [ 1464.187269][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1464.198179][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1464.230961][ T6527] device veth1_vlan entered promiscuous mode [ 1464.281873][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1464.291097][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1464.317730][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1464.346000][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1464.357672][ T6527] device veth0_macvtap entered promiscuous mode [ 1464.378938][ T6527] device veth1_macvtap entered promiscuous mode [ 1464.417523][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.430697][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.445370][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.453345][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1464.461762][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1464.473761][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1464.484449][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1464.500727][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.513268][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.526858][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.536293][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1464.547241][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1464.564300][ T6527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.574598][ T6527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.585308][ T6527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.595671][ T6527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.681585][T31811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.697474][T31811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.718981][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1464.741860][T19621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.753604][T19621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.770732][T31811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1465.114593][ T5052] Bluetooth: hci4: command 0x040f tx timeout [ 1467.195036][ T5052] Bluetooth: hci4: command 0x0419 tx timeout [ 1468.707350][ T6620] device bridge_slave_1 left promiscuous mode [ 1468.764183][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.838373][ T6620] device bridge_slave_0 left promiscuous mode [ 1468.861715][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.142306][ T6727] device veth1_macvtap left promiscuous mode [ 1478.238311][ T6764] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12344'. [ 1479.818234][ T6761] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.12344'. [ 1482.840420][ T6829] netlink: 'syz.4.12365': attribute type 13 has an invalid length. [ 1482.901274][ T6829] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.12365'. [ 1484.473490][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.479876][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.651595][ T6850] device syzkaller0 entered promiscuous mode [ 1490.915053][ T6885] delete_channel: no stack [ 1491.216241][ T6894] netlink: 'syz.3.12386': attribute type 3 has an invalid length. [ 1491.354458][ T6894] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.12386'. [ 1491.483808][ T6900] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12386'. [ 1491.709628][ T6906] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12392'. [ 1492.036929][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12396'. [ 1492.111207][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12396'. [ 1492.366376][ T6919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12396'. [ 1492.454399][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12396'. [ 1492.520415][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12396'. [ 1493.010280][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 1493.500179][ T6961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1493.588795][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.676416][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.707980][ T6918] device bridge_slave_0 entered promiscuous mode [ 1493.794563][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.852932][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.902182][ T6918] device bridge_slave_1 entered promiscuous mode [ 1493.930370][ T6972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12417'. [ 1494.087143][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.197233][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.237790][T23663] Bluetooth: hci5: command 0x0409 tx timeout [ 1494.330304][ T6976] netlink: 'syz.4.12419': attribute type 10 has an invalid length. [ 1494.419649][ T6981] netlink: 'syz.1.12420': attribute type 1 has an invalid length. [ 1495.911043][ T6918] team0: Port device team_slave_0 added [ 1495.973207][ T6918] team0: Port device team_slave_1 added [ 1496.140664][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.162302][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.351155][ T3952] Bluetooth: hci5: command 0x041b tx timeout [ 1496.358098][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.563542][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.570808][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.710631][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.037853][ T6918] device hsr_slave_0 entered promiscuous mode [ 1497.172190][ T6918] device hsr_slave_1 entered promiscuous mode [ 1497.211538][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1497.266298][ T6918] Cannot create hsr debugfs directory [ 1497.999085][ T6918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.319691][ T6918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.663417][ T6918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.830597][ T6918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.042912][ T3952] Bluetooth: hci5: command 0x040f tx timeout [ 1499.054593][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 1499.321448][ T7049] netlink: 'syz.4.12442': attribute type 29 has an invalid length. [ 1499.488169][ T7057] netlink: 'syz.3.12444': attribute type 3 has an invalid length. [ 1499.550586][ T6918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1499.568453][ T7057] __nla_validate_parse: 3 callbacks suppressed [ 1499.570853][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12444'. [ 1499.653221][ T7055] netlink: 'syz.3.12444': attribute type 10 has an invalid length. [ 1499.714930][ T7055] device hsr_slave_0 left promiscuous mode [ 1499.763392][ T7055] device hsr_slave_1 left promiscuous mode [ 1499.976826][ T7061] netlink: 'syz.3.12444': attribute type 10 has an invalid length. [ 1500.133052][ T7061] team0: Port device wlan1 added [ 1500.154943][ T6918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1500.163007][T23663] Bluetooth: hci6: command 0x0409 tx timeout [ 1500.220564][ T6918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1500.343705][ T6918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1500.376414][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.447911][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.518154][ T7028] device bridge_slave_0 entered promiscuous mode [ 1500.635047][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.642177][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.672027][ T7028] device bridge_slave_1 entered promiscuous mode [ 1500.698108][ T7085] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12451'. [ 1500.753146][ T7080] device macvlan1 entered promiscuous mode [ 1500.865150][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.938482][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.979139][T31811] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.098931][ T7028] team0: Port device team_slave_0 added [ 1501.114086][T31811] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.130648][T23663] Bluetooth: hci5: command 0x0419 tx timeout [ 1501.164990][ T7028] team0: Port device team_slave_1 added [ 1501.205987][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.244095][T31811] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.320905][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.378051][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1501.393223][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1501.429934][T31811] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.464953][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.471934][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.546501][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.597110][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1501.614368][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1501.633777][T19621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.640876][T19621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.674055][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1501.694078][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1501.722781][T19621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.729971][T19621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.773109][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.780082][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.853187][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.910630][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1501.921456][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1501.946012][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1502.039857][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1502.071099][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1502.086861][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1502.117382][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1502.196950][ T6918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1502.223670][ T6918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1502.238481][T23663] Bluetooth: hci6: command 0x041b tx timeout [ 1502.264033][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1502.273279][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1502.299358][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1502.337567][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1502.353215][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1502.386742][ T7028] device hsr_slave_0 entered promiscuous mode [ 1502.404156][ T7028] device hsr_slave_1 entered promiscuous mode [ 1502.456579][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1502.478617][ T7028] Cannot create hsr debugfs directory [ 1502.501200][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1503.222036][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.253140][T19634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1503.260801][T19634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1503.398641][ T7028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1503.478528][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1503.488828][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1503.523404][ T7028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1503.548383][ T6918] device veth0_vlan entered promiscuous mode [ 1503.583773][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1503.607482][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1503.632204][ T7028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1503.661705][ T6918] device veth1_vlan entered promiscuous mode [ 1503.809461][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1503.819503][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1503.859123][ T7028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1504.045394][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1504.064489][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1504.105977][ T6918] device veth0_macvtap entered promiscuous mode [ 1504.190743][ T6918] device veth1_macvtap entered promiscuous mode [ 1504.313085][ T3949] Bluetooth: hci6: command 0x040f tx timeout [ 1504.339687][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.364792][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.403348][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.435553][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.457027][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.498204][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1504.509365][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1504.538691][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1504.571317][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1504.618993][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.640789][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.666574][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.703036][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.749724][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.793943][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.804686][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1504.823724][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1504.906722][ T6918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.923369][ T6918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.932103][ T6918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.951417][ T6918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.976061][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.993270][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.010346][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.099269][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.114293][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.131970][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.139109][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.157334][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1505.171675][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.181087][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.188215][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.289266][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1505.305477][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1505.327373][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1505.360207][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1505.389885][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1505.407235][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1505.431864][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1505.463382][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1505.497942][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1505.565233][ T7028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.604779][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1505.637980][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1505.647188][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1505.660606][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1505.785195][T19634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.833962][T19634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.896884][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1505.990811][T19634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.049737][T19634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.128682][T19625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1506.554937][ T3929] Bluetooth: hci6: command 0x0419 tx timeout [ 1506.589472][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.639459][ T7137] netlink: 'syz.4.12462': attribute type 4 has an invalid length. [ 1506.696191][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1506.722151][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1507.212465][ T7161] netlink: 'syz.4.12453': attribute type 21 has an invalid length. [ 1507.264911][ T7161] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12453'. [ 1507.310935][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12453'. [ 1508.182588][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1508.191631][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1508.306114][ T7028] device veth0_vlan entered promiscuous mode [ 1508.366609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1508.393031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1508.466424][ T7028] device veth1_vlan entered promiscuous mode [ 1508.648405][T31811] device hsr_slave_0 left promiscuous mode [ 1508.665806][T31811] device hsr_slave_1 left promiscuous mode [ 1508.711900][T31811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.762682][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12470'. [ 1508.782565][T31811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.819795][T31811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.853800][T31811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.898395][T31811] device bridge_slave_1 left promiscuous mode [ 1508.927993][T31811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.998731][T31811] device bridge_slave_0 left promiscuous mode [ 1509.008419][T31811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.107601][T31811] device veth0_macvtap left promiscuous mode [ 1509.145946][T31811] device veth1_vlan left promiscuous mode [ 1509.174865][T31811] device veth0_vlan left promiscuous mode [ 1509.195137][T31811] device veth1_vlan left promiscuous mode [ 1509.201240][T31811] device veth0_vlan left promiscuous mode [ 1509.731478][T31811] team0 (unregistering): Port device team_slave_1 removed [ 1509.768287][T31811] team0 (unregistering): Port device team_slave_0 removed [ 1509.798866][T31811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.819813][T31811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.953491][T31811] bond0 (unregistering): Released all slaves [ 1510.072082][T31811] team0 (unregistering): Port device geneve1 removed [ 1510.290818][T31811] team0 (unregistering): Port device team_slave_1 removed [ 1510.327220][T31811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.349369][T31811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.477003][T31811] bond0 (unregistering): Released all slaves [ 1510.500011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1510.513442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1510.532779][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12470'. [ 1510.612003][ T7028] device veth0_macvtap entered promiscuous mode [ 1510.691696][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1510.747182][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1510.838715][ T7028] device veth1_macvtap entered promiscuous mode [ 1510.868729][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1510.919068][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1511.091877][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1511.182010][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.243550][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1511.393413][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.579585][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.680552][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1511.724123][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1511.813612][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1511.894293][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.980319][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.052159][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.169244][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.210897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1512.235447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1512.446779][ T7028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.487559][ T7028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.542158][ T7028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.589091][ T7028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.046419][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.120407][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.236629][T19621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1513.329643][ T3090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.364542][ T3090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.446442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1514.707086][ T7340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1514.714370][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 1514.721688][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 1514.728962][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 1515.455744][ T7352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1515.462599][ T7352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1516.667495][ T7380] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12523'. [ 1516.892055][ T7388] netlink: 'syz.4.12525': attribute type 13 has an invalid length. [ 1517.048982][ T7388] device macvtap0 entered promiscuous mode [ 1519.680808][ T7388] macvtap0: refused to change device tx_queue_len [ 1519.746267][ T7391] netlink: 'syz.3.12524': attribute type 1 has an invalid length. [ 1519.804320][ T7391] netlink: 'syz.3.12524': attribute type 4 has an invalid length. [ 1519.894130][ T7391] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12524'. [ 1520.771479][ T7435] netlink: 'syz.1.12542': attribute type 10 has an invalid length. [ 1520.902563][ T7435] netlink: 143 bytes leftover after parsing attributes in process `syz.1.12542'. [ 1521.205974][ T7442] netlink: 'syz.6.12545': attribute type 13 has an invalid length. [ 1521.302665][ T7442] device macvtap0 entered promiscuous mode [ 1521.411775][ T7442] macvtap0: refused to change device tx_queue_len [ 1521.554981][ T7454] dvmrp1: tun_chr_ioctl cmd 1074025684 [ 1522.953390][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12558'. [ 1523.050778][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12558'. [ 1523.156911][ T7498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12558'. [ 1523.242632][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12558'. [ 1523.343333][ T7478] delete_channel: no stack [ 1523.348372][ T7478] delete_channel: no stack [ 1523.580053][ T7506] netlink: 'syz.1.12563': attribute type 13 has an invalid length. [ 1524.672169][ T7528] netlink: 'syz.6.12569': attribute type 10 has an invalid length. [ 1524.867580][ T7528] netlink: 'syz.6.12569': attribute type 10 has an invalid length. [ 1525.415864][ T7558] netlink: 'syz.3.12581': attribute type 13 has an invalid length. [ 1527.201415][ T7602] ------------[ cut here ]------------ [ 1527.262684][ T7602] trace type BPF program uses run-time allocation [ 1527.269255][ T7602] WARNING: CPU: 1 PID: 7602 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870 [ 1527.467301][ T7602] Modules linked in: [ 1527.490719][ T7602] CPU: 1 PID: 7602 Comm: syz.1.12595 Not tainted syzkaller #0 [ 1527.525404][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1527.569931][ T7602] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1527.600102][ T7602] Code: ff e8 f5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 e4 b6 ef ff c6 05 d3 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 91 90 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1527.701177][ T7602] RSP: 0018:ffffc90002def450 EFLAGS: 00010246 [ 1527.737773][ T7602] RAX: 11725748b9db1c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 1527.757758][ T7602] RDX: ffffc90006211000 RSI: 0000000000004306 RDI: 0000000000004307 [ 1527.782668][ T7602] RBP: ffff8880541c0000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 1527.807015][ T7602] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffc90001246038 [ 1527.835589][ T7602] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000248c07 [ 1527.873020][ T7602] FS: 00007fb3d08336c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1527.906580][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1527.943432][ T7602] CR2: 00007f56e49e7f50 CR3: 00000000595e2000 CR4: 00000000003506e0 [ 1527.966667][ T7602] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1528.004462][ T7602] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1528.041283][ T7602] Call Trace: [ 1528.051576][ T7602] [ 1528.065184][ T7602] resolve_pseudo_ldimm64+0x681/0x1040 [ 1528.092027][ T7602] ? check_attach_btf_id+0xe70/0xe70 [ 1528.109307][ T7602] ? __mark_reg_known+0x1a0/0x1a0 [ 1528.124099][ T7602] bpf_check+0x4e00/0xf270 [ 1528.137146][ T7602] ? mark_lock+0x94/0x320 [ 1528.150619][ T7602] ? __lock_acquire+0x13bc/0x7d10 [ 1528.170455][ T7602] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1528.190461][ T7602] ? mark_lock+0x94/0x320 [ 1528.216681][ T7602] ? verify_lock_unused+0x140/0x140 [ 1528.231457][ T7602] ? __mutex_trylock_common+0x155/0x260 [ 1528.250896][ T7602] ? verify_lock_unused+0x140/0x140 [ 1528.267730][ T7602] ? rcu_lock_release+0x5/0x20 [ 1528.280638][ T7602] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1528.299314][ T7602] ? lock_chain_count+0x20/0x20 [ 1528.321660][ T7602] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1528.347877][ T7602] ? lockdep_hardirqs_on+0x94/0x140 [ 1528.366893][ T7602] ? ktime_get_with_offset+0xff/0x320 [ 1528.388530][ T7602] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1528.399926][ T7602] ? ktime_get_real_ts64+0x440/0x440 [ 1528.405687][ T7602] ? pcpu_alloc+0x1121/0x1770 [ 1528.411650][ T7602] ? __might_fault+0xb3/0x110 [ 1528.423131][ T7602] ? memset+0x1e/0x40 [ 1528.427285][ T7602] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1528.436757][ T7602] bpf_prog_load+0xfec/0x1510 [ 1528.447485][ T7602] ? map_freeze+0x350/0x350 [ 1528.452143][ T7602] ? __might_fault+0xb7/0x110 [ 1528.460494][ T7602] ? __might_fault+0xb3/0x110 [ 1528.465955][ T7602] ? bpf_lsm_bpf+0x5/0x10 [ 1528.472064][ T7602] ? security_bpf+0x7a/0xa0 [ 1528.482859][ T7602] __sys_bpf+0x532/0x6f0 [ 1528.487397][ T7602] ? bpf_link_show_fdinfo+0x380/0x380 [ 1528.496571][ T7602] ? vtime_user_exit+0x2c8/0x3e0 [ 1528.507290][ T7602] __x64_sys_bpf+0x78/0x90 [ 1528.520945][ T7602] do_syscall_64+0x4c/0xa0 [ 1528.532787][ T7602] ? clear_bhb_loop+0x30/0x80 [ 1528.547514][ T7602] ? clear_bhb_loop+0x30/0x80 [ 1528.559889][ T7602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1528.577015][ T7602] RIP: 0033:0x7fb3d25d7cb9 [ 1528.581592][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.605237][ T7602] RSP: 002b:00007fb3d0833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1528.626257][ T7602] RAX: ffffffffffffffda RBX: 00007fb3d2852fa0 RCX: 00007fb3d25d7cb9 [ 1528.637337][ T7602] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1528.650205][ T7602] RBP: 00007fb3d2645bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1528.659463][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.671098][ T7602] R13: 00007fb3d2853038 R14: 00007fb3d2852fa0 R15: 00007ffc290d2248 [ 1528.679787][ T7602] [ 1528.686508][ T7602] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1528.693816][ T7602] CPU: 1 PID: 7602 Comm: syz.1.12595 Not tainted syzkaller #0 [ 1528.701274][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1528.711330][ T7602] Call Trace: [ 1528.714624][ T7602] [ 1528.717558][ T7602] dump_stack_lvl+0x188/0x250 [ 1528.722373][ T7602] ? show_regs_print_info+0x20/0x20 [ 1528.727675][ T7602] ? load_image+0x400/0x400 [ 1528.732197][ T7602] panic+0x2e5/0x810 [ 1528.736106][ T7602] ? bpf_jit_dump+0xd0/0xd0 [ 1528.740625][ T7602] ? check_map_prog_compatibility+0x6cf/0x870 [ 1528.746693][ T7602] __warn+0x248/0x2b0 [ 1528.750685][ T7602] ? check_map_prog_compatibility+0x6cf/0x870 [ 1528.756755][ T7602] report_bug+0x1b7/0x2e0 [ 1528.761101][ T7602] handle_bug+0x3a/0x70 [ 1528.765258][ T7602] exc_invalid_op+0x16/0x40 [ 1528.769762][ T7602] asm_exc_invalid_op+0x16/0x20 [ 1528.774615][ T7602] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1528.781397][ T7602] Code: ff e8 f5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 e4 b6 ef ff c6 05 d3 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 91 90 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1528.801010][ T7602] RSP: 0018:ffffc90002def450 EFLAGS: 00010246 [ 1528.807124][ T7602] RAX: 11725748b9db1c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 1528.815370][ T7602] RDX: ffffc90006211000 RSI: 0000000000004306 RDI: 0000000000004307 [ 1528.823343][ T7602] RBP: ffff8880541c0000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 1528.831321][ T7602] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffc90001246038 [ 1528.839297][ T7602] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000248c07 [ 1528.847295][ T7602] resolve_pseudo_ldimm64+0x681/0x1040 [ 1528.852962][ T7602] ? check_attach_btf_id+0xe70/0xe70 [ 1528.858342][ T7602] ? __mark_reg_known+0x1a0/0x1a0 [ 1528.863470][ T7602] bpf_check+0x4e00/0xf270 [ 1528.868063][ T7602] ? mark_lock+0x94/0x320 [ 1528.872406][ T7602] ? __lock_acquire+0x13bc/0x7d10 [ 1528.877443][ T7602] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1528.882555][ T7602] ? mark_lock+0x94/0x320 [ 1528.886910][ T7602] ? verify_lock_unused+0x140/0x140 [ 1528.892124][ T7602] ? __mutex_trylock_common+0x155/0x260 [ 1528.897689][ T7602] ? verify_lock_unused+0x140/0x140 [ 1528.902901][ T7602] ? rcu_lock_release+0x5/0x20 [ 1528.907683][ T7602] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1528.913663][ T7602] ? lock_chain_count+0x20/0x20 [ 1528.918524][ T7602] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1528.924770][ T7602] ? lockdep_hardirqs_on+0x94/0x140 [ 1528.929991][ T7602] ? ktime_get_with_offset+0xff/0x320 [ 1528.935362][ T7602] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1528.941612][ T7602] ? ktime_get_real_ts64+0x440/0x440 [ 1528.946898][ T7602] ? pcpu_alloc+0x1121/0x1770 [ 1528.951587][ T7602] ? __might_fault+0xb3/0x110 [ 1528.956261][ T7602] ? memset+0x1e/0x40 [ 1528.960243][ T7602] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1528.965276][ T7602] bpf_prog_load+0xfec/0x1510 [ 1528.969970][ T7602] ? map_freeze+0x350/0x350 [ 1528.974498][ T7602] ? __might_fault+0xb7/0x110 [ 1528.979215][ T7602] ? __might_fault+0xb3/0x110 [ 1528.983904][ T7602] ? bpf_lsm_bpf+0x5/0x10 [ 1528.988234][ T7602] ? security_bpf+0x7a/0xa0 [ 1528.992738][ T7602] __sys_bpf+0x532/0x6f0 [ 1528.996986][ T7602] ? bpf_link_show_fdinfo+0x380/0x380 [ 1529.002456][ T7602] ? vtime_user_exit+0x2c8/0x3e0 [ 1529.007400][ T7602] __x64_sys_bpf+0x78/0x90 [ 1529.011820][ T7602] do_syscall_64+0x4c/0xa0 [ 1529.016257][ T7602] ? clear_bhb_loop+0x30/0x80 [ 1529.021023][ T7602] ? clear_bhb_loop+0x30/0x80 [ 1529.025716][ T7602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1529.031608][ T7602] RIP: 0033:0x7fb3d25d7cb9 [ 1529.036111][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.055723][ T7602] RSP: 002b:00007fb3d0833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1529.064151][ T7602] RAX: ffffffffffffffda RBX: 00007fb3d2852fa0 RCX: 00007fb3d25d7cb9 [ 1529.072125][ T7602] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1529.080195][ T7602] RBP: 00007fb3d2645bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1529.088171][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.096245][ T7602] R13: 00007fb3d2853038 R14: 00007fb3d2852fa0 R15: 00007ffc290d2248 [ 1529.104233][ T7602] [ 1529.107728][ T7602] Kernel Offset: disabled [ 1529.112062][ T7602] Rebooting in 86400 seconds..