last executing test programs: 34.937377714s ago: executing program 2 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000239500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', r2, 0x4000, r0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a07f10bcb4478d062b001dd41ff60ef0f354f65f6462918b39d4a6126cfef1d070d6d44688f1865f9aed8f5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x175f2217b773327c}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000007c0)="76389e147583ddd0579ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace22001011"], 0xcfa4) r10 = socket$kcm(0x2c, 0x3, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x6, &(0x7f0000000000)=r11, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r12, &(0x7f0000001c80)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/101, 0x65}, {&(0x7f00000017c0)=""/98, 0x62}, {&(0x7f0000001840)=""/120, 0x78}, {&(0x7f00000018c0)=""/80, 0x50}, {&(0x7f0000001940)=""/14, 0xe}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/252, 0xfc}], 0x8, &(0x7f0000001b80)=""/237, 0xed}, 0x2) 33.896323828s ago: executing program 2 (id=978): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000280)=""/209, 0xd1}], 0x2, &(0x7f0000000680)=""/249, 0xf9}, 0x20) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) 32.600345819s ago: executing program 3 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040cc) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x200400c5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00') socketpair(0x1a, 0xa, 0x3, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r1, 0x8004b709, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.55141037s ago: executing program 0 (id=990): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xc, 0xfb, 0x0, 0x3c, 0x89541, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x18842, 0x8b17, 0x7, 0x7, 0x9, 0x3, 0x7, 0x0, 0x4d, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xb, 0x5, 0xb, 0x7, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18a62, 0x5, 0x7ffffffc, 0x3, 0x7, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYRESHEX], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001300)={&(0x7f0000000080), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x355703, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7907b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(r4, 0xb702, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000100), 0x120) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe, 0x2}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001380)={0x7, &(0x7f0000001340)=[{0xff, 0x6, 0x0, 0x8df9}, {0xbad, 0x6, 0xc6, 0x78af1a5b}, {0x386e, 0x40, 0xfd, 0xffffffff}, {0x1, 0x3, 0xfa, 0x2}, {0x8, 0x10, 0x2, 0x80000000}, {0x2, 0xe, 0x9, 0x58}, {0x3, 0x40, 0x6, 0xffff}]}) 31.837868827s ago: executing program 1 (id=994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe4, 0xea96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf07, 0x4000}, 0x10, 0xc8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x6, 0x8, 0x2, 0x0, 0xffffffff, 0xa0000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x80, 0x9, 0x6, 0x3, 0x18b6, 0x8, 0xcbb5, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x81, 0x9, 0x1, 0xbf, 0x0, 0xb, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={0x0, 0x8}, 0x13c, 0x7, 0x0, 0x2, 0x80, 0x9, 0x7fff, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 31.302072779s ago: executing program 3 (id=995): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a800160020000140017c0000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00470000000000000000851000000600000018000000f431e5c02ab022afff54151292aa9d2e9915747c789355538f11c0eb89a58226", @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x10) r7 = getpid() r8 = perf_event_open$cgroup(&(0x7f0000000d00)={0x2, 0x80, 0x5, 0x4, 0x8, 0x9, 0x0, 0x3, 0x80000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7fff, 0x1}, 0x8447080d8c6b021c, 0x5, 0x0, 0x0, 0x6, 0x7f, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffac}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000880)={0x4, 0x80, 0x7, 0x3, 0x0, 0x8, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7, 0x5}, 0x3a00, 0x4, 0x0, 0xa, 0x5, 0x9, 0x5, 0x0, 0x1000, 0x0, 0x1846}, r7, 0xa, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r9}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@typedef={0x10, 0x0, 0x0, 0x8, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000780)=""/76, 0x36, 0x4c, 0x0, 0x7ff}, 0x28) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x7, 0x10}, 0xc) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r4}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x8, 0x10000, 0x7fffffff, 0x14000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0xc}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r16, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2, 0x1b388507, 0x7, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x17, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0xa6, 0x34, &(0x7f0000000700)=""/52, 0x40f00, 0x37, '\x00', r9, 0x25, r11, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0xffffffffffffffff, 0x1, r12, 0x1, 0xffffffffffffffff, r13, r14, 0xffffffffffffffff, r15, r17], &(0x7f0000000bc0)=[{0x5, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x9, 0xc}, {0x5, 0x1, 0x0, 0xa}, {0x0, 0x1, 0x7, 0x8}], 0x10, 0xfff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r11}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', r9, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 31.225306031s ago: executing program 0 (id=996): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (fail_nth: 1) 31.218875272s ago: executing program 1 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc00011f0000000000000e1208000f0100810401a8001600200001400300000803c80cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.87750646s ago: executing program 2 (id=998): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x4001, 0x1f00c00e}, 0x44010) 30.84756968s ago: executing program 1 (id=999): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000700)="62042700020000000000032f1eafbcf706e12b30087f5c582d26116642c47a5f8786eeb8bf4a81cb3e249920751346e30d3bc32d658f31f34730209f3c71f8a7835cc8b809a52bbcd4", 0x49}], 0x1}, 0x8045) 30.778682452s ago: executing program 3 (id=1000): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$tipc(r1, &(0x7f0000000d40)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000840)="b8f3bbe79d22b7b589b115ca7cb9f1e942c946c768369751fd4d828fef16fc22526c3201cfe8ba814e0d536219f9c69269b96ae4dfcce75f971cd52aafa08a9559cc5184b3a324303243db5a1bbf8aae38fc4da20ac6cb0d2d3a18019e7d829688392fd4d200302df3b30a50615cd66d1bc2eae4b71e41939e50c592cebf49a925e2abcb93ab70ea0f4be159643c9128614fa820180bb1145f6f94659b3c858ab0dbc9400ab598fd5244a0bc5da52702e9a6e4e248465ea8c7b3788a5d530dd06ca1d981b56092c1363eb4179532daa86da7b38b69c3dd8a", 0xd8}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x4008040}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x41d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 30.715657924s ago: executing program 0 (id=1001): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000122f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 30.600008926s ago: executing program 1 (id=1002): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xf6, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc601400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 30.508926608s ago: executing program 0 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.363514232s ago: executing program 2 (id=1004): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xc, 0xfb, 0x0, 0x3c, 0x89541, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x18842, 0x8b17, 0x7, 0x7, 0x9, 0x3, 0x7, 0x0, 0x4d, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xb, 0x5, 0xb, 0x7, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18a62, 0x5, 0x7ffffffc, 0x3, 0x7, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x3) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000006df500000000000000000000000000000000c7988afe50da9c602311769ec4117a896fd743afb04efcbb15995e0f4bef5e920ee209af6ffe69c98d852e49a91c8baee2385f0b8668d6bebf0f417109336b0b43bfe248b37bc735d79a0955492c7f847bc587e7410968114a86578718c71f6935e45bf26ba1c62664bbf0d33ca46d2489076f7c72a1556e154231061381a245296f9f26eea344ef02944fccdec5b2968631dff9c5abc6b15cc6870c710e523985"], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETFILTEREBPF(r5, 0xb702, 0x0) (async) r6 = getpid() (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x55) sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x18, 0x1, 0x1, [r4]}}], 0x38}, 0x8841) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc) (async) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599e6d0e00009bd029ef801bab070011000523a608463a3f"], 0xfe33) 30.174142526s ago: executing program 1 (id=1006): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x13, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0082ffee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r0}, 0x18) 29.947642862s ago: executing program 3 (id=1007): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 29.942946722s ago: executing program 0 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) 29.434358444s ago: executing program 1 (id=1009): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000e04003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 29.321937197s ago: executing program 3 (id=1010): recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/39, 0x27}], 0x2, &(0x7f00000012c0)=""/35, 0x23}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x9, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff90}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x94) 29.237847368s ago: executing program 2 (id=1011): perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048841) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d20000"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x84, 0x8}], 0x10}, 0x4045) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532315ad340eb", 0x27}, {&(0x7f00000007c0)="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", 0x774}], 0x3, 0x0, 0x0, 0x500}, 0x400c0c8) 29.15750809s ago: executing program 3 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xe169, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x0, 0x2, 0x0, 0xe4, 0xea96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x4000}, 0x10, 0xc8, 0x1, 0x5, 0x2, 0x0, 0x0, 0x0, 0x102, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000080008000000000000000000809500000000000000"], &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x6, 0x8, 0x2, 0x0, 0xffffffff, 0xa0000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x80, 0x9, 0x6, 0x3, 0x18b6, 0x8, 0xcbb5, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x81, 0x9, 0x1, 0xbf, 0x0, 0xb, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x4, @perf_config_ext={0x40, 0x4}, 0x8113e, 0x7, 0x0, 0x2, 0x80, 0x9, 0x7fff, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.237472821s ago: executing program 32 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) 1.109808734s ago: executing program 33 (id=1009): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000e04003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 731.949453ms ago: executing program 34 (id=1011): perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048841) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d20000"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x84, 0x8}], 0x10}, 0x4045) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532315ad340eb", 0x27}, {&(0x7f00000007c0)="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", 0x774}], 0x3, 0x0, 0x0, 0x500}, 0x400c0c8) 0s ago: executing program 35 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xe169, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x0, 0x2, 0x0, 0xe4, 0xea96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x4000}, 0x10, 0xc8, 0x1, 0x5, 0x2, 0x0, 0x0, 0x0, 0x102, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000080008000000000000000000809500000000000000"], &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x6, 0x8, 0x2, 0x0, 0xffffffff, 0xa0000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x80, 0x9, 0x6, 0x3, 0x18b6, 0x8, 0xcbb5, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x81, 0x9, 0x1, 0xbf, 0x0, 0xb, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x4, @perf_config_ext={0x40, 0x4}, 0x8113e, 0x7, 0x0, 0x2, 0x80, 0x9, 0x7fff, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 77.015531][ T5764] cgroup: Unknown subsys name 'net' [ 77.150899][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.679455][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.149319][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.158320][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.167687][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.176277][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.184069][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.192236][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.200468][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.208259][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.215642][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.221891][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.226304][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.243324][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.251176][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.265742][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.273418][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.280900][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.290021][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.298526][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.299647][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.313018][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.314895][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.345576][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.354089][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.361432][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.781353][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.792298][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.907643][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.991431][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.999466][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.007020][ T5778] bridge_slave_0: entered allmulticast mode [ 81.014826][ T5778] bridge_slave_0: entered promiscuous mode [ 81.027796][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.035079][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.042201][ T5778] bridge_slave_1: entered allmulticast mode [ 81.049177][ T5778] bridge_slave_1: entered promiscuous mode [ 81.090627][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.103311][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.110459][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.117713][ T5777] bridge_slave_0: entered allmulticast mode [ 81.126617][ T5777] bridge_slave_0: entered promiscuous mode [ 81.157528][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.164945][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.172114][ T5777] bridge_slave_1: entered allmulticast mode [ 81.179720][ T5777] bridge_slave_1: entered promiscuous mode [ 81.197714][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.252751][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.283044][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.292543][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.299838][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.307283][ T5775] bridge_slave_0: entered allmulticast mode [ 81.314683][ T5775] bridge_slave_0: entered promiscuous mode [ 81.340551][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.351196][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.358425][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.366055][ T5775] bridge_slave_1: entered allmulticast mode [ 81.372923][ T5775] bridge_slave_1: entered promiscuous mode [ 81.393709][ T5778] team0: Port device team_slave_0 added [ 81.437877][ T5778] team0: Port device team_slave_1 added [ 81.458231][ T5777] team0: Port device team_slave_0 added [ 81.467576][ T5777] team0: Port device team_slave_1 added [ 81.496566][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.515998][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.524261][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.531596][ T5776] bridge_slave_0: entered allmulticast mode [ 81.539270][ T5776] bridge_slave_0: entered promiscuous mode [ 81.560142][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.581087][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.588501][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.595986][ T5776] bridge_slave_1: entered allmulticast mode [ 81.602845][ T5776] bridge_slave_1: entered promiscuous mode [ 81.620365][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.627354][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.653299][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.666879][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.673989][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.700066][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.728178][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.735254][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.761231][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.783628][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.790605][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.816662][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.841430][ T5775] team0: Port device team_slave_0 added [ 81.860994][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.878590][ T5775] team0: Port device team_slave_1 added [ 81.896889][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.949606][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.956849][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.983176][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.008319][ T5776] team0: Port device team_slave_0 added [ 82.027031][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.036641][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.066038][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.089253][ T5776] team0: Port device team_slave_1 added [ 82.099851][ T5778] hsr_slave_0: entered promiscuous mode [ 82.106809][ T5778] hsr_slave_1: entered promiscuous mode [ 82.135206][ T5777] hsr_slave_0: entered promiscuous mode [ 82.141996][ T5777] hsr_slave_1: entered promiscuous mode [ 82.148837][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.157097][ T5777] Cannot create hsr debugfs directory [ 82.218337][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.225406][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.251399][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.273350][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.280427][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.306826][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.324600][ T5789] Bluetooth: hci3: command tx timeout [ 82.336487][ T5775] hsr_slave_0: entered promiscuous mode [ 82.343539][ T5775] hsr_slave_1: entered promiscuous mode [ 82.349872][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.357528][ T5775] Cannot create hsr debugfs directory [ 82.404989][ T5087] Bluetooth: hci1: command tx timeout [ 82.405010][ T51] Bluetooth: hci0: command tx timeout [ 82.416383][ T5789] Bluetooth: hci2: command tx timeout [ 82.444252][ T5776] hsr_slave_0: entered promiscuous mode [ 82.450851][ T5776] hsr_slave_1: entered promiscuous mode [ 82.457878][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.465532][ T5776] Cannot create hsr debugfs directory [ 82.826385][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.838988][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.851378][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.861373][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.937645][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.951123][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.961173][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.987466][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.055684][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.069312][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.089310][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.102043][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.172397][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.183289][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.195054][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.207667][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.269260][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.294969][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.342097][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.390932][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.398337][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.408449][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.415663][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.433964][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.462884][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.470056][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.501847][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.509011][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.563058][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.647385][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.661244][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.701991][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.709175][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.748753][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.756110][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.806696][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.855839][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.862994][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.879218][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.886515][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.012212][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.127680][ T5778] veth0_vlan: entered promiscuous mode [ 84.157651][ T5778] veth1_vlan: entered promiscuous mode [ 84.270997][ T5778] veth0_macvtap: entered promiscuous mode [ 84.298821][ T5778] veth1_macvtap: entered promiscuous mode [ 84.360024][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.386196][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.414740][ T5087] Bluetooth: hci3: command tx timeout [ 84.429808][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.451880][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.461719][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.470718][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.481862][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.486649][ T5087] Bluetooth: hci0: command tx timeout [ 84.494471][ T51] Bluetooth: hci2: command tx timeout [ 84.501511][ T5789] Bluetooth: hci1: command tx timeout [ 84.520500][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.530869][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.627689][ T5777] veth0_vlan: entered promiscuous mode [ 84.677537][ T5776] veth0_vlan: entered promiscuous mode [ 84.699878][ T5775] veth0_vlan: entered promiscuous mode [ 84.709112][ T5777] veth1_vlan: entered promiscuous mode [ 84.739159][ T5775] veth1_vlan: entered promiscuous mode [ 84.747098][ T5776] veth1_vlan: entered promiscuous mode [ 84.769130][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.797689][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.868203][ T5777] veth0_macvtap: entered promiscuous mode [ 84.879940][ T5777] veth1_macvtap: entered promiscuous mode [ 84.886335][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.894331][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.944072][ T5776] veth0_macvtap: entered promiscuous mode [ 84.972935][ T5776] veth1_macvtap: entered promiscuous mode [ 85.027039][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.042729][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.061347][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.075963][ T5775] veth0_macvtap: entered promiscuous mode [ 85.098071][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.110932][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.127538][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.144349][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.156627][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.169000][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.180043][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.192175][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.209110][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.220755][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.228337][ C0] hrtimer: interrupt took 62737 ns [ 85.238756][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.249607][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.266389][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.295792][ T5775] veth1_macvtap: entered promiscuous mode [ 85.310798][ T5837] bridge_slave_1: left allmulticast mode [ 85.318141][ T5837] bridge_slave_1: left promiscuous mode [ 85.326720][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.347938][ T5837] bridge_slave_0: left allmulticast mode [ 85.354291][ T5837] bridge_slave_0: left promiscuous mode [ 85.362233][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.574435][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.583305][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.592053][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601359][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616962][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.630873][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.640093][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.649612][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.717985][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.729852][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.739969][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.750676][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.761798][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.775246][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.786977][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.817048][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.829679][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.840162][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.854596][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.865485][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.877346][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.888917][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.928528][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.942013][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.951116][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.960790][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.025795][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.062745][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.125381][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.129337][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.141389][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.149491][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.209768][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.234734][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.257942][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.281467][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.375503][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.413133][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.506386][ T5087] Bluetooth: hci3: command tx timeout [ 86.564257][ T5087] Bluetooth: hci0: command tx timeout [ 86.569779][ T5087] Bluetooth: hci1: command tx timeout [ 86.570171][ T5789] Bluetooth: hci2: command tx timeout [ 87.275044][ T5837] syz.2.3 (5837) used greatest stack depth: 20456 bytes left [ 88.321629][ T5869] FAULT_INJECTION: forcing a failure. [ 88.321629][ T5869] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.337582][ T5869] CPU: 1 PID: 5869 Comm: syz.1.11 Not tainted syzkaller #0 [ 88.344852][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.354986][ T5869] Call Trace: [ 88.358331][ T5869] [ 88.361309][ T5869] dump_stack_lvl+0x18c/0x250 [ 88.366064][ T5869] ? show_regs_print_info+0x20/0x20 [ 88.371318][ T5869] ? load_image+0x420/0x420 [ 88.375907][ T5869] ? __might_fault+0xaa/0x120 [ 88.380655][ T5869] ? __lock_acquire+0x7d80/0x7d80 [ 88.385769][ T5869] should_fail_ex+0x394/0x4c0 [ 88.390524][ T5869] _copy_from_iter+0x1cd/0x1290 [ 88.395449][ T5869] ? rcu_is_watching+0x15/0xb0 [ 88.400314][ T5869] ? copyout_mc+0x70/0x70 [ 88.404738][ T5869] ? __virt_addr_valid+0x10c/0x380 [ 88.409924][ T5869] ? __virt_addr_valid+0x10c/0x380 [ 88.415101][ T5869] ? __virt_addr_valid+0x10c/0x380 [ 88.420342][ T5869] ? __check_object_size+0x4fc/0xa40 [ 88.425706][ T5869] netlink_sendmsg+0x76b/0xbf0 [ 88.430579][ T5869] ? netlink_getsockopt+0x590/0x590 [ 88.435865][ T5869] ? apparmor_socket_sendmsg+0x8e/0x330 [ 88.441477][ T5869] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 88.446816][ T5869] ? security_socket_sendmsg+0x80/0xa0 [ 88.452330][ T5869] ? netlink_getsockopt+0x590/0x590 [ 88.457589][ T5869] ____sys_sendmsg+0x61b/0x980 [ 88.462429][ T5869] ? __asan_memset+0x22/0x40 [ 88.467074][ T5869] ? __sys_sendmsg_sock+0x30/0x30 [ 88.472139][ T5869] ? __import_iovec+0x5f2/0x850 [ 88.477070][ T5869] ? import_iovec+0x73/0xa0 [ 88.481717][ T5869] ___sys_sendmsg+0x2a6/0x360 [ 88.486458][ T5869] ? get_pid_task+0x20/0x1e0 [ 88.491126][ T5869] ? __sys_sendmsg+0x2b0/0x2b0 [ 88.495982][ T5869] ? __lock_acquire+0x7d80/0x7d80 [ 88.501105][ T5869] __se_sys_sendmsg+0x1d0/0x2c0 [ 88.505997][ T5869] ? __x64_sys_sendmsg+0x80/0x80 [ 88.510998][ T5869] ? lockdep_hardirqs_on+0x98/0x150 [ 88.516258][ T5869] do_syscall_64+0x55/0xb0 [ 88.520719][ T5869] ? clear_bhb_loop+0x40/0x90 [ 88.525438][ T5869] ? clear_bhb_loop+0x40/0x90 [ 88.530172][ T5869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.536126][ T5869] RIP: 0033:0x7fe2ec99de99 [ 88.540592][ T5869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.560239][ T5869] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.568803][ T5869] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 88.576803][ T5869] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 88.584800][ T5869] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 88.592795][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.600821][ T5869] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 88.608864][ T5869] [ 88.648658][ T5789] Bluetooth: hci3: command tx timeout [ 88.654405][ T5789] Bluetooth: hci1: command tx timeout [ 88.661268][ T5789] Bluetooth: hci0: command tx timeout [ 88.666900][ T5789] Bluetooth: hci2: command tx timeout [ 90.171251][ T5878] netlink: 'syz.2.13': attribute type 20 has an invalid length. [ 90.245633][ T5878] netlink: 'syz.2.13': attribute type 21 has an invalid length. [ 90.319616][ T5878] netlink: 'syz.2.13': attribute type 23 has an invalid length. [ 90.374439][ T5878] netlink: 'syz.2.13': attribute type 25 has an invalid length. [ 90.382165][ T5878] netlink: 'syz.2.13': attribute type 27 has an invalid length. [ 90.396260][ T5883] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8'. [ 90.521447][ T5878] netlink: 'syz.2.13': attribute type 28 has an invalid length. [ 90.550049][ T5878] netlink: 'syz.2.13': attribute type 29 has an invalid length. [ 90.587504][ T5878] netlink: 'syz.2.13': attribute type 30 has an invalid length. [ 91.223187][ T5893] bridge_slave_1: left allmulticast mode [ 91.234453][ T5893] bridge_slave_1: left promiscuous mode [ 91.249010][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.270377][ T5893] bridge_slave_0: left allmulticast mode [ 91.310120][ T5893] bridge_slave_0: left promiscuous mode [ 91.342080][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.846794][ T9] cfg80211: failed to load regulatory.db [ 91.953267][ T5908] netlink: 'syz.2.21': attribute type 22 has an invalid length. [ 91.973794][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 92.226415][ T5918] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 92.273425][ T5915] netlink: 'syz.1.24': attribute type 12 has an invalid length. [ 92.308515][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24'. [ 92.413307][ T5908] syz.2.21 (5908) used greatest stack depth: 19624 bytes left [ 93.098498][ T5940] bridge_slave_1: left allmulticast mode [ 93.105082][ T5940] bridge_slave_1: left promiscuous mode [ 93.111367][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.635732][ T5940] bridge_slave_0: left allmulticast mode [ 93.641451][ T5940] bridge_slave_0: left promiscuous mode [ 93.661886][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.120480][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41'. [ 94.181648][ T5960] batman_adv: batadv0: Adding interface: virt_wifi0 [ 94.192651][ T5960] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.229055][ T5960] batman_adv: batadv0: Interface activated: virt_wifi0 [ 94.699325][ T5973] team0: Device hsr_slave_0 failed to register rx_handler [ 94.998777][ T5981] bridge_slave_1: left allmulticast mode [ 95.017463][ T5981] bridge_slave_1: left promiscuous mode [ 95.028576][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.287395][ T5981] bridge_slave_0: left allmulticast mode [ 95.332951][ T5981] bridge_slave_0: left promiscuous mode [ 95.373025][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.438301][ T5998] FAULT_INJECTION: forcing a failure. [ 95.438301][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.456190][ T5998] CPU: 0 PID: 5998 Comm: syz.3.55 Not tainted syzkaller #0 [ 95.463603][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.473722][ T5998] Call Trace: [ 95.477057][ T5998] [ 95.480047][ T5998] dump_stack_lvl+0x18c/0x250 [ 95.484799][ T5998] ? show_regs_print_info+0x20/0x20 [ 95.490047][ T5998] ? load_image+0x420/0x420 [ 95.494616][ T5998] ? __might_fault+0xaa/0x120 [ 95.499364][ T5998] ? __lock_acquire+0x7d80/0x7d80 [ 95.504472][ T5998] should_fail_ex+0x394/0x4c0 [ 95.509266][ T5998] _copy_from_iter+0x1cd/0x1290 [ 95.514191][ T5998] ? rcu_is_watching+0x15/0xb0 [ 95.519128][ T5998] ? copyout_mc+0x70/0x70 [ 95.523512][ T5998] ? __virt_addr_valid+0x10c/0x380 [ 95.528712][ T5998] ? __virt_addr_valid+0x10c/0x380 [ 95.533876][ T5998] ? __virt_addr_valid+0x10c/0x380 [ 95.539049][ T5998] ? __check_object_size+0x4fc/0xa40 [ 95.544377][ T5998] netlink_sendmsg+0x76b/0xbf0 [ 95.549164][ T5998] ? netlink_getsockopt+0x590/0x590 [ 95.554377][ T5998] ? apparmor_socket_sendmsg+0x8e/0x330 [ 95.559936][ T5998] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 95.565244][ T5998] ? security_socket_sendmsg+0x80/0xa0 [ 95.570736][ T5998] ? netlink_getsockopt+0x590/0x590 [ 95.575982][ T5998] ____sys_sendmsg+0x61b/0x980 [ 95.580790][ T5998] ? __asan_memset+0x22/0x40 [ 95.585403][ T5998] ? __sys_sendmsg_sock+0x30/0x30 [ 95.590444][ T5998] ? __import_iovec+0x5f2/0x850 [ 95.595342][ T5998] ? import_iovec+0x73/0xa0 [ 95.599884][ T5998] ___sys_sendmsg+0x2a6/0x360 [ 95.604601][ T5998] ? __sys_sendmsg+0x2b0/0x2b0 [ 95.609401][ T5998] ? __lock_acquire+0x7d80/0x7d80 [ 95.614457][ T5998] __se_sys_sendmsg+0x1d0/0x2c0 [ 95.619340][ T5998] ? __x64_sys_sendmsg+0x80/0x80 [ 95.624412][ T5998] ? lockdep_hardirqs_on+0x98/0x150 [ 95.629647][ T5998] do_syscall_64+0x55/0xb0 [ 95.634078][ T5998] ? clear_bhb_loop+0x40/0x90 [ 95.638766][ T5998] ? clear_bhb_loop+0x40/0x90 [ 95.643453][ T5998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.649350][ T5998] RIP: 0033:0x7ff66f99de99 [ 95.653770][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.673381][ T5998] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.681800][ T5998] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 95.689788][ T5998] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 95.697787][ T5998] RBP: 00007ff670864090 R08: 0000000000000000 R09: 0000000000000000 [ 95.705777][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.713757][ T5998] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 95.721748][ T5998] [ 95.923812][ T5986] netlink: 144 bytes leftover after parsing attributes in process `syz.2.52'. [ 96.016496][ T5986] team0: Port device team_slave_0 removed [ 96.027747][ T5986] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 96.079067][ T5986] syz.2.52 (5986) used greatest stack depth: 19304 bytes left [ 96.377128][ T6010] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 97.628768][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.652400][ T6076] netlink: 168 bytes leftover after parsing attributes in process `syz.2.89'. [ 99.041075][ T6088] FAULT_INJECTION: forcing a failure. [ 99.041075][ T6088] name failslab, interval 1, probability 0, space 0, times 1 [ 99.056980][ T6088] CPU: 1 PID: 6088 Comm: syz.1.94 Not tainted syzkaller #0 [ 99.064241][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.074340][ T6088] Call Trace: [ 99.077655][ T6088] [ 99.080620][ T6088] dump_stack_lvl+0x18c/0x250 [ 99.085346][ T6088] ? show_regs_print_info+0x20/0x20 [ 99.090593][ T6088] ? load_image+0x420/0x420 [ 99.095190][ T6088] ? __might_sleep+0xe0/0xe0 [ 99.099819][ T6088] ? __lock_acquire+0x7d80/0x7d80 [ 99.104885][ T6088] should_fail_ex+0x394/0x4c0 [ 99.109605][ T6088] should_failslab+0x9/0x20 [ 99.114156][ T6088] slab_pre_alloc_hook+0x59/0x300 [ 99.119240][ T6088] ? sk_prot_alloc+0xe7/0x210 [ 99.123949][ T6088] ? sk_prot_alloc+0xe7/0x210 [ 99.128651][ T6088] __kmem_cache_alloc_node+0x53/0x250 [ 99.134051][ T6088] ? sk_prot_alloc+0xe7/0x210 [ 99.138755][ T6088] __kmalloc+0xa7/0x240 [ 99.142932][ T6088] sk_prot_alloc+0xe7/0x210 [ 99.147455][ T6088] ? sk_alloc+0x24/0x350 [ 99.151715][ T6088] sk_alloc+0x3a/0x350 [ 99.155811][ T6088] ? bpf_ctx_init+0x154/0x190 [ 99.160525][ T6088] bpf_prog_test_run_skb+0x371/0x18f0 [ 99.165916][ T6088] ? lockdep_hardirqs_on+0x98/0x150 [ 99.171145][ T6088] ? cpu_online+0x60/0x60 [ 99.175490][ T6088] bpf_prog_test_run+0x31f/0x390 [ 99.180453][ T6088] __sys_bpf+0x49d/0x890 [ 99.184732][ T6088] ? bpf_link_show_fdinfo+0x390/0x390 [ 99.190140][ T6088] ? lock_chain_count+0x20/0x20 [ 99.195010][ T6088] __x64_sys_bpf+0x7c/0x90 [ 99.199446][ T6088] do_syscall_64+0x55/0xb0 [ 99.203877][ T6088] ? clear_bhb_loop+0x40/0x90 [ 99.208596][ T6088] ? clear_bhb_loop+0x40/0x90 [ 99.213290][ T6088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.219206][ T6088] RIP: 0033:0x7fe2ec99de99 [ 99.223648][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.243277][ T6088] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.251706][ T6088] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 99.259700][ T6088] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 99.267687][ T6088] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 99.275769][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.283761][ T6088] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 99.291768][ T6088] [ 99.419788][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97'. [ 99.431839][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97'. [ 101.321502][ T6127] sctp: [Deprecated]: syz.3.106 (pid 6127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.321502][ T6127] Use struct sctp_sack_info instead [ 102.571460][ T6115] netlink: 148 bytes leftover after parsing attributes in process `syz.1.102'. [ 102.592191][ T6135] validate_nla: 2 callbacks suppressed [ 102.592201][ T6135] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 102.734629][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.746493][ T6135] batman_adv: batadv0: Adding interface: virt_wifi0 [ 102.753176][ T6135] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.779292][ T6135] batman_adv: batadv0: Interface activated: virt_wifi0 [ 102.813158][ T6122] syz.2.104 (6122) used greatest stack depth: 18504 bytes left [ 106.094841][ T6156] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 106.102651][ T6156] netlink: 55 bytes leftover after parsing attributes in process `syz.0.118'. [ 106.171659][ T6156] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 106.248187][ T6156] batman_adv: batadv0: Removing interface: virt_wifi0 [ 106.306173][ T6159] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 106.427266][ T6174] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 106.435583][ T6174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 106.465134][ T6174] batman_adv: batadv0: Adding interface: virt_wifi0 [ 106.471781][ T6174] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.515982][ T6174] batman_adv: batadv0: Interface activated: virt_wifi0 [ 106.808256][ T6183] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 106.865713][ T6183] team0: Port device geneve1 added [ 106.987321][ T6183] Zero length message leads to an empty skb [ 107.599328][ T6198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.132'. [ 107.663000][ T6198] bond0: (slave bond_slave_0): Releasing backup interface [ 107.716152][ T6198] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 107.848321][ T6200] netlink: 152 bytes leftover after parsing attributes in process `syz.3.135'. [ 107.889766][ T6200] bond0: (slave bond_slave_0): Releasing backup interface [ 107.948168][ T6200] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 109.046818][ T6241] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 109.055723][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.151'. [ 109.176859][ T6247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.184994][ T6247] IPv6: NLM_F_CREATE should be set when creating new route [ 109.192922][ T6247] IPv6: NLM_F_CREATE should be set when creating new route [ 109.200453][ T6247] IPv6: NLM_F_CREATE should be set when creating new route [ 112.617139][ T6263] netlink: 'syz.3.159': attribute type 21 has an invalid length. [ 112.638201][ T6263] netlink: 164 bytes leftover after parsing attributes in process `syz.3.159'. [ 112.662083][ T6263] netlink: 'syz.3.159': attribute type 21 has an invalid length. [ 112.690464][ T6263] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 114.935519][ T6310] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 115.014506][ T6310] veth1_macvtap: left promiscuous mode [ 115.098935][ T6310] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 115.187710][ T6315] netlink: 'syz.1.175': attribute type 21 has an invalid length. [ 115.245576][ T6315] netlink: 'syz.1.175': attribute type 6 has an invalid length. [ 116.233638][ T6336] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.184'. [ 116.273317][ T6336] bridge_slave_1: entered promiscuous mode [ 117.145870][ T6345] netlink: 140 bytes leftover after parsing attributes in process `syz.3.188'. [ 117.770570][ T6366] netlink: 10 bytes leftover after parsing attributes in process `syz.1.195'. [ 118.570404][ T6381] netlink: 'syz.0.200': attribute type 39 has an invalid length. [ 118.785195][ T6386] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 120.748587][ T6423] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.218'. [ 121.867955][ T6441] netlink: 10 bytes leftover after parsing attributes in process `syz.3.223'. [ 121.896544][ T6442] FAULT_INJECTION: forcing a failure. [ 121.896544][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.983727][ T6442] CPU: 1 PID: 6442 Comm: syz.1.224 Not tainted syzkaller #0 [ 121.991088][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.001203][ T6442] Call Trace: [ 122.004513][ T6442] [ 122.007479][ T6442] dump_stack_lvl+0x18c/0x250 [ 122.012212][ T6442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.018409][ T6442] ? show_regs_print_info+0x20/0x20 [ 122.023655][ T6442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.029903][ T6442] should_fail_ex+0x394/0x4c0 [ 122.034634][ T6442] _copy_from_user+0x2f/0xe0 [ 122.039284][ T6442] ___sys_sendmsg+0x1c7/0x360 [ 122.044015][ T6442] ? get_pid_task+0x20/0x1e0 [ 122.048667][ T6442] ? __sys_sendmsg+0x2b0/0x2b0 [ 122.053503][ T6442] ? __lock_acquire+0x7d80/0x7d80 [ 122.058613][ T6442] __se_sys_sendmsg+0x1d0/0x2c0 [ 122.063504][ T6442] ? __x64_sys_sendmsg+0x80/0x80 [ 122.068533][ T6442] ? lockdep_hardirqs_on+0x98/0x150 [ 122.073784][ T6442] do_syscall_64+0x55/0xb0 [ 122.078246][ T6442] ? clear_bhb_loop+0x40/0x90 [ 122.082963][ T6442] ? clear_bhb_loop+0x40/0x90 [ 122.087674][ T6442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.093629][ T6442] RIP: 0033:0x7fe2ec99de99 [ 122.098090][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.117721][ T6442] RSP: 002b:00007fe2ed79a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.126164][ T6442] RAX: ffffffffffffffda RBX: 00007fe2ecc26090 RCX: 00007fe2ec99de99 [ 122.134156][ T6442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 122.142155][ T6442] RBP: 00007fe2ed79a090 R08: 0000000000000000 R09: 0000000000000000 [ 122.150245][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.158234][ T6442] R13: 00007fe2ecc26128 R14: 00007fe2ecc26090 R15: 00007ffe5aa40b08 [ 122.166273][ T6442] [ 122.493748][ T6444] netlink: 'syz.2.225': attribute type 16 has an invalid length. [ 122.541195][ T6444] netlink: 164 bytes leftover after parsing attributes in process `syz.2.225'. [ 122.579674][ T6448] netlink: 'syz.2.225': attribute type 9 has an invalid length. [ 122.627667][ T6448] netlink: 'syz.2.225': attribute type 23 has an invalid length. [ 122.714642][ T6448] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.225'. [ 123.401899][ T6467] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 124.952267][ T6483] netlink: 10 bytes leftover after parsing attributes in process `syz.0.240'. [ 125.108825][ T6493] netlink: 'syz.3.244': attribute type 12 has an invalid length. [ 125.149482][ T6493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.244'. [ 126.396925][ T6507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 126.470026][ T6507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 126.542025][ T6509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 126.592499][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 127.094627][ T6517] warning: `syz.2.254' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.915340][ T6536] netlink: 'syz.2.262': attribute type 10 has an invalid length. [ 128.050607][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.109486][ T6536] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.717085][ T6544] netlink: 'syz.2.265': attribute type 10 has an invalid length. [ 128.726496][ T6544] netlink: 2 bytes leftover after parsing attributes in process `syz.2.265'. [ 128.744604][ T6544] hsr0: entered promiscuous mode [ 128.949354][ T2993] tipc: Subscription rejected, illegal request [ 129.751760][ T6569] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.275'. [ 130.175455][ T6585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.183429][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 130.191360][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 130.200056][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 130.398685][ T6585] netlink: 'syz.3.280': attribute type 9 has an invalid length. [ 130.409860][ T6585] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.280'. [ 131.065681][ T6605] FAULT_INJECTION: forcing a failure. [ 131.065681][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.088579][ T6605] CPU: 0 PID: 6605 Comm: syz.0.289 Not tainted syzkaller #0 [ 131.095917][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.106007][ T6605] Call Trace: [ 131.109317][ T6605] [ 131.112301][ T6605] dump_stack_lvl+0x18c/0x250 [ 131.117026][ T6605] ? show_regs_print_info+0x20/0x20 [ 131.122255][ T6605] ? load_image+0x420/0x420 [ 131.126796][ T6605] ? __lock_acquire+0x7d80/0x7d80 [ 131.131954][ T6605] should_fail_ex+0x394/0x4c0 [ 131.136681][ T6605] _copy_from_user+0x2f/0xe0 [ 131.141327][ T6605] bpf_prog_test_run_skb+0x267/0x18f0 [ 131.146747][ T6605] ? __fget_files+0x28/0x460 [ 131.151388][ T6605] ? __fget_files+0x3fc/0x460 [ 131.156120][ T6605] ? cpu_online+0x60/0x60 [ 131.160493][ T6605] bpf_prog_test_run+0x31f/0x390 [ 131.165500][ T6605] __sys_bpf+0x49d/0x890 [ 131.169778][ T6605] ? bpf_link_show_fdinfo+0x390/0x390 [ 131.175191][ T6605] ? lock_chain_count+0x20/0x20 [ 131.180062][ T6605] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.186074][ T6605] __x64_sys_bpf+0x7c/0x90 [ 131.190505][ T6605] do_syscall_64+0x55/0xb0 [ 131.194970][ T6605] ? clear_bhb_loop+0x40/0x90 [ 131.199669][ T6605] ? clear_bhb_loop+0x40/0x90 [ 131.204373][ T6605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.210295][ T6605] RIP: 0033:0x7f623819de99 [ 131.214733][ T6605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.234363][ T6605] RSP: 002b:00007f6239107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.242801][ T6605] RAX: ffffffffffffffda RBX: 00007f6238425fa0 RCX: 00007f623819de99 [ 131.250816][ T6605] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 131.258887][ T6605] RBP: 00007f6239107090 R08: 0000000000000000 R09: 0000000000000000 [ 131.266876][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.274865][ T6605] R13: 00007f6238426038 R14: 00007f6238425fa0 R15: 00007ffda83f8f58 [ 131.282865][ T6605] [ 131.981493][ T6626] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 132.023367][ T6626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'. [ 132.071648][ T6626] caif0: entered promiscuous mode [ 132.081573][ T6626] caif0: entered allmulticast mode [ 132.087702][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.810244][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818064][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.965782][ T6664] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.312'. [ 133.226239][ T6670] FAULT_INJECTION: forcing a failure. [ 133.226239][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.264278][ T6670] CPU: 1 PID: 6670 Comm: syz.3.314 Not tainted syzkaller #0 [ 133.271663][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.281835][ T6670] Call Trace: [ 133.285154][ T6670] [ 133.288117][ T6670] dump_stack_lvl+0x18c/0x250 [ 133.292840][ T6670] ? show_regs_print_info+0x20/0x20 [ 133.298066][ T6670] ? load_image+0x420/0x420 [ 133.302623][ T6670] ? __might_fault+0xaa/0x120 [ 133.307331][ T6670] ? __lock_acquire+0x7d80/0x7d80 [ 133.312394][ T6670] should_fail_ex+0x394/0x4c0 [ 133.317110][ T6670] _copy_from_user+0x2f/0xe0 [ 133.321739][ T6670] __sys_bpf+0x23e/0x890 [ 133.326035][ T6670] ? bpf_link_show_fdinfo+0x390/0x390 [ 133.331469][ T6670] ? lock_chain_count+0x20/0x20 [ 133.336378][ T6670] __x64_sys_bpf+0x7c/0x90 [ 133.340839][ T6670] do_syscall_64+0x55/0xb0 [ 133.345284][ T6670] ? clear_bhb_loop+0x40/0x90 [ 133.349993][ T6670] ? clear_bhb_loop+0x40/0x90 [ 133.354711][ T6670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.360639][ T6670] RIP: 0033:0x7ff66f99de99 [ 133.365088][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.384733][ T6670] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.393207][ T6670] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 133.401207][ T6670] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 133.409205][ T6670] RBP: 00007ff670864090 R08: 0000000000000000 R09: 0000000000000000 [ 133.417218][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.425214][ T6670] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 133.433258][ T6670] [ 134.781435][ T6722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.336'. [ 134.790603][ T6722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.336'. [ 134.967986][ T6722] syzkaller0: entered promiscuous mode [ 134.974166][ T6722] syzkaller0: entered allmulticast mode [ 135.170745][ T6732] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 135.186526][ T6732] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.340'. [ 135.627147][ T6738] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.343'. [ 137.932193][ T6770] netlink: 'syz.0.355': attribute type 3 has an invalid length. [ 137.941352][ T6770] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.355'. [ 138.159701][ T6775] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 138.181719][ T6775] netlink: 2 bytes leftover after parsing attributes in process `syz.1.357'. [ 138.203525][ T6775] hsr0: entered promiscuous mode [ 138.224346][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.237793][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.249867][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.264503][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.287834][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.357'. [ 138.323647][ T6775] bridge_slave_0: entered allmulticast mode [ 138.337266][ T6775] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 138.371003][ T6775] netlink: 6 bytes leftover after parsing attributes in process `syz.1.357'. [ 138.744098][ T6796] netlink: 135056 bytes leftover after parsing attributes in process `syz.3.368'. [ 138.753817][ T6796] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 143.669555][ T6909] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 143.677506][ T6909] __nla_validate_parse: 1 callbacks suppressed [ 143.677518][ T6909] netlink: 2 bytes leftover after parsing attributes in process `syz.2.414'. [ 143.694090][ T6909] batadv_slave_1: entered promiscuous mode [ 143.700190][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.708149][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.765349][ T6944] syzkaller0: entered promiscuous mode [ 145.770902][ T6944] syzkaller0: entered allmulticast mode [ 145.911536][ T6950] netlink: 'syz.1.426': attribute type 9 has an invalid length. [ 145.939895][ T6950] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.426'. [ 146.030825][ T6955] netlink: 'syz.3.428': attribute type 29 has an invalid length. [ 146.053451][ T6955] netlink: 'syz.3.428': attribute type 29 has an invalid length. [ 146.096573][ T6950] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.426'. [ 146.130367][ T6960] FAULT_INJECTION: forcing a failure. [ 146.130367][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.143866][ T6960] CPU: 0 PID: 6960 Comm: syz.0.430 Not tainted syzkaller #0 [ 146.151196][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.161273][ T6960] Call Trace: [ 146.164584][ T6960] [ 146.167523][ T6960] dump_stack_lvl+0x18c/0x250 [ 146.172216][ T6960] ? show_regs_print_info+0x20/0x20 [ 146.177420][ T6960] ? load_image+0x420/0x420 [ 146.181947][ T6960] ? __might_fault+0xaa/0x120 [ 146.186642][ T6960] ? __lock_acquire+0x7d80/0x7d80 [ 146.191678][ T6960] should_fail_ex+0x394/0x4c0 [ 146.196373][ T6960] _copy_from_iter+0x1cd/0x1290 [ 146.201228][ T6960] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 146.206619][ T6960] ? copyout_mc+0x70/0x70 [ 146.210946][ T6960] ? __virt_addr_valid+0x10c/0x380 [ 146.216060][ T6960] ? __virt_addr_valid+0x10c/0x380 [ 146.221175][ T6960] ? __virt_addr_valid+0x10c/0x380 [ 146.226297][ T6960] ? __check_object_size+0x4fc/0xa40 [ 146.231601][ T6960] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 146.237353][ T6960] ? sock_def_readable+0xad/0x420 [ 146.242395][ T6960] ? sock_def_readable+0xad/0x420 [ 146.247451][ T6960] ? skb_put+0x112/0x210 [ 146.251754][ T6960] unix_stream_sendmsg+0x562/0xbf0 [ 146.256887][ T6960] ? unix_show_fdinfo+0x280/0x280 [ 146.261909][ T6960] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 146.268341][ T6960] ? apparmor_socket_sendmsg+0x8e/0x330 [ 146.273899][ T6960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 146.279209][ T6960] ? security_socket_sendmsg+0x80/0xa0 [ 146.284690][ T6960] sock_write_iter+0x2dc/0x420 [ 146.289500][ T6960] ? sock_read_iter+0x3f0/0x3f0 [ 146.294368][ T6960] ? common_file_perm+0x198/0x1f0 [ 146.299413][ T6960] vfs_write+0x474/0x9a0 [ 146.303691][ T6960] ? file_end_write+0x250/0x250 [ 146.308561][ T6960] ? __fget_files+0x3fc/0x460 [ 146.313276][ T6960] ? __fdget_pos+0x1d8/0x330 [ 146.317875][ T6960] ? ksys_write+0x74/0x260 [ 146.322292][ T6960] ksys_write+0x151/0x260 [ 146.326648][ T6960] ? __ia32_sys_read+0x90/0x90 [ 146.331458][ T6960] ? lockdep_hardirqs_on+0x98/0x150 [ 146.336690][ T6960] do_syscall_64+0x55/0xb0 [ 146.341132][ T6960] ? clear_bhb_loop+0x40/0x90 [ 146.345828][ T6960] ? clear_bhb_loop+0x40/0x90 [ 146.350507][ T6960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.356399][ T6960] RIP: 0033:0x7f623819de99 [ 146.360816][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.380429][ T6960] RSP: 002b:00007f6239107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.388856][ T6960] RAX: ffffffffffffffda RBX: 00007f6238425fa0 RCX: 00007f623819de99 [ 146.396831][ T6960] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 146.404810][ T6960] RBP: 00007f6239107090 R08: 0000000000000000 R09: 0000000000000000 [ 146.412874][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.420850][ T6960] R13: 00007f6238426038 R14: 00007f6238425fa0 R15: 00007ffda83f8f58 [ 146.428838][ T6960] [ 150.712682][ T7040] FAULT_INJECTION: forcing a failure. [ 150.712682][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.757185][ T7040] CPU: 0 PID: 7040 Comm: syz.3.462 Not tainted syzkaller #0 [ 150.764535][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 150.774656][ T7040] Call Trace: [ 150.778074][ T7040] [ 150.781045][ T7040] dump_stack_lvl+0x18c/0x250 [ 150.785766][ T7040] ? show_regs_print_info+0x20/0x20 [ 150.790997][ T7040] ? load_image+0x420/0x420 [ 150.795543][ T7040] ? __might_fault+0xaa/0x120 [ 150.800282][ T7040] ? __lock_acquire+0x7d80/0x7d80 [ 150.805348][ T7040] should_fail_ex+0x394/0x4c0 [ 150.810067][ T7040] _copy_from_user+0x2f/0xe0 [ 150.814704][ T7040] ___sys_sendmsg+0x1c7/0x360 [ 150.819454][ T7040] ? __sys_sendmsg+0x2b0/0x2b0 [ 150.824309][ T7040] __se_sys_sendmsg+0x1d0/0x2c0 [ 150.829214][ T7040] ? __x64_sys_sendmsg+0x80/0x80 [ 150.834207][ T7040] ? syscall_enter_from_user_mode+0x2e/0x80 [ 150.840154][ T7040] do_syscall_64+0x55/0xb0 [ 150.844620][ T7040] ? clear_bhb_loop+0x40/0x90 [ 150.849341][ T7040] ? clear_bhb_loop+0x40/0x90 [ 150.854058][ T7040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.859982][ T7040] RIP: 0033:0x7ff66f99de99 [ 150.864421][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.884060][ T7040] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.892500][ T7040] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 150.900504][ T7040] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 150.908495][ T7040] RBP: 00007ff670864090 R08: 0000000000000000 R09: 0000000000000000 [ 150.916483][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.924472][ T7040] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 150.932560][ T7040] [ 152.061272][ T7060] netlink: 'syz.0.472': attribute type 29 has an invalid length. [ 152.104722][ T7060] netlink: 'syz.0.472': attribute type 29 has an invalid length. [ 152.134055][ T7060] netlink: 'syz.0.472': attribute type 29 has an invalid length. [ 152.161658][ T7064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 153.019007][ T7096] netlink: 'syz.3.485': attribute type 2 has an invalid length. [ 153.037712][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.485'. [ 153.178814][ T7104] FAULT_INJECTION: forcing a failure. [ 153.178814][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 153.213185][ T7104] CPU: 0 PID: 7104 Comm: syz.2.488 Not tainted syzkaller #0 [ 153.220535][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.230629][ T7104] Call Trace: [ 153.233964][ T7104] [ 153.236954][ T7104] dump_stack_lvl+0x18c/0x250 [ 153.241696][ T7104] ? show_regs_print_info+0x20/0x20 [ 153.246944][ T7104] ? load_image+0x420/0x420 [ 153.251494][ T7104] ? perf_trace_lock+0xfc/0x3b0 [ 153.256389][ T7104] ? verify_lock_unused+0x140/0x140 [ 153.261623][ T7104] ? perf_trace_lock+0xfc/0x3b0 [ 153.266520][ T7104] should_fail_ex+0x394/0x4c0 [ 153.271248][ T7104] should_failslab+0x9/0x20 [ 153.275798][ T7104] slab_pre_alloc_hook+0x59/0x300 [ 153.280886][ T7104] kmem_cache_alloc+0x5a/0x2c0 [ 153.285713][ T7104] ? skb_clone+0x1eb/0x370 [ 153.290177][ T7104] skb_clone+0x1eb/0x370 [ 153.294460][ T7104] __netlink_deliver_tap+0x411/0x7f0 [ 153.299785][ T7104] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.305002][ T7104] netlink_deliver_tap+0x19c/0x1b0 [ 153.310146][ T7104] netlink_unicast+0x77b/0x930 [ 153.314950][ T7104] netlink_sendmsg+0x8d0/0xbf0 [ 153.319729][ T7104] ? netlink_getsockopt+0x590/0x590 [ 153.324947][ T7104] ? apparmor_socket_sendmsg+0x8e/0x330 [ 153.330521][ T7104] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.335834][ T7104] ? security_socket_sendmsg+0x80/0xa0 [ 153.341400][ T7104] ? netlink_getsockopt+0x590/0x590 [ 153.346627][ T7104] ____sys_sendmsg+0x61b/0x980 [ 153.351410][ T7104] ? __asan_memset+0x22/0x40 [ 153.356019][ T7104] ? __sys_sendmsg_sock+0x30/0x30 [ 153.361066][ T7104] ? __import_iovec+0x5f2/0x850 [ 153.365951][ T7104] ? import_iovec+0x73/0xa0 [ 153.370483][ T7104] ___sys_sendmsg+0x2a6/0x360 [ 153.375182][ T7104] ? __sys_sendmsg+0x2b0/0x2b0 [ 153.379982][ T7104] ? __lock_acquire+0x7d80/0x7d80 [ 153.385142][ T7104] __se_sys_sendmsg+0x1d0/0x2c0 [ 153.390029][ T7104] ? __x64_sys_sendmsg+0x80/0x80 [ 153.395003][ T7104] ? lockdep_hardirqs_on+0x98/0x150 [ 153.400244][ T7104] do_syscall_64+0x55/0xb0 [ 153.404683][ T7104] ? clear_bhb_loop+0x40/0x90 [ 153.409393][ T7104] ? clear_bhb_loop+0x40/0x90 [ 153.414113][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.420029][ T7104] RIP: 0033:0x7fa0f3f9de99 [ 153.424468][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.444104][ T7104] RSP: 002b:00007fa0f4e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.452570][ T7104] RAX: ffffffffffffffda RBX: 00007fa0f4225fa0 RCX: 00007fa0f3f9de99 [ 153.460571][ T7104] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 153.468559][ T7104] RBP: 00007fa0f4e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.476546][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.484540][ T7104] R13: 00007fa0f4226038 R14: 00007fa0f4225fa0 R15: 00007ffec7d1fbc8 [ 153.492569][ T7104] [ 153.549289][ T7104] netlink: 'syz.2.488': attribute type 22 has an invalid length. [ 153.558917][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 154.015733][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 154.237894][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 154.414414][ T7134] netlink: 6 bytes leftover after parsing attributes in process `syz.1.499'. [ 154.447761][ T7134] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.732787][ T7144] veth1_to_bond: entered allmulticast mode [ 154.960575][ T7151] netlink: 'syz.1.506': attribute type 22 has an invalid length. [ 154.970218][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 155.891667][ T7166] FAULT_INJECTION: forcing a failure. [ 155.891667][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 155.915039][ T7166] CPU: 0 PID: 7166 Comm: syz.1.511 Not tainted syzkaller #0 [ 155.922382][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.932472][ T7166] Call Trace: [ 155.935766][ T7166] [ 155.938714][ T7166] dump_stack_lvl+0x18c/0x250 [ 155.943448][ T7166] ? show_regs_print_info+0x20/0x20 [ 155.948666][ T7166] ? load_image+0x420/0x420 [ 155.953223][ T7166] ? __might_sleep+0xe0/0xe0 [ 155.957842][ T7166] ? __lock_acquire+0x7d80/0x7d80 [ 155.962904][ T7166] should_fail_ex+0x394/0x4c0 [ 155.967608][ T7166] should_failslab+0x9/0x20 [ 155.972132][ T7166] slab_pre_alloc_hook+0x59/0x300 [ 155.977187][ T7166] ? apparmor_sk_alloc_security+0x77/0x100 [ 155.983015][ T7166] __kmem_cache_alloc_node+0x53/0x250 [ 155.988419][ T7166] ? apparmor_sk_alloc_security+0x77/0x100 [ 155.994249][ T7166] kmalloc_trace+0x2a/0xe0 [ 155.998695][ T7166] apparmor_sk_alloc_security+0x77/0x100 [ 156.004364][ T7166] security_sk_alloc+0x6e/0xa0 [ 156.009154][ T7166] sk_prot_alloc+0x101/0x210 [ 156.013768][ T7166] ? sk_alloc+0x24/0x350 [ 156.018041][ T7166] sk_alloc+0x3a/0x350 [ 156.022136][ T7166] ? bpf_ctx_init+0x154/0x190 [ 156.026837][ T7166] bpf_prog_test_run_skb+0x371/0x18f0 [ 156.032258][ T7166] ? __fget_files+0x28/0x460 [ 156.036866][ T7166] ? __fget_files+0x3fc/0x460 [ 156.041564][ T7166] ? cpu_online+0x60/0x60 [ 156.045915][ T7166] bpf_prog_test_run+0x31f/0x390 [ 156.050882][ T7166] __sys_bpf+0x49d/0x890 [ 156.055145][ T7166] ? bpf_link_show_fdinfo+0x390/0x390 [ 156.060545][ T7166] ? lock_chain_count+0x20/0x20 [ 156.065421][ T7166] __x64_sys_bpf+0x7c/0x90 [ 156.069865][ T7166] do_syscall_64+0x55/0xb0 [ 156.074314][ T7166] ? clear_bhb_loop+0x40/0x90 [ 156.079012][ T7166] ? clear_bhb_loop+0x40/0x90 [ 156.083713][ T7166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.089627][ T7166] RIP: 0033:0x7fe2ec99de99 [ 156.094063][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.113698][ T7166] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.122145][ T7166] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 156.130122][ T7166] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 156.138122][ T7166] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 156.146140][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.154130][ T7166] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 156.162131][ T7166] [ 156.470117][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 157.171659][ T7190] netlink: 'syz.0.520': attribute type 21 has an invalid length. [ 157.185189][ T7190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.520'. [ 157.197888][ T7190] netlink: 'syz.0.520': attribute type 5 has an invalid length. [ 157.209650][ T7190] netlink: 3 bytes leftover after parsing attributes in process `syz.0.520'. [ 157.697330][ T7203] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 157.708323][ T7203] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.731507][ T7201] netlink: 'syz.0.525': attribute type 7 has an invalid length. [ 158.236274][ T7210] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 158.301292][ T7210] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.529'. [ 160.349783][ T7223] netlink: 'syz.1.534': attribute type 21 has an invalid length. [ 160.373513][ T7223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.534'. [ 160.557012][ T7223] netlink: 'syz.1.534': attribute type 5 has an invalid length. [ 160.583438][ T7223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.534'. [ 161.318861][ T7232] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.538'. [ 161.585407][ T7242] FAULT_INJECTION: forcing a failure. [ 161.585407][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 161.631113][ T7242] CPU: 1 PID: 7242 Comm: syz.3.541 Not tainted syzkaller #0 [ 161.638487][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.648580][ T7242] Call Trace: [ 161.651901][ T7242] [ 161.654882][ T7242] dump_stack_lvl+0x18c/0x250 [ 161.659610][ T7242] ? show_regs_print_info+0x20/0x20 [ 161.664843][ T7242] ? load_image+0x420/0x420 [ 161.669400][ T7242] ? __might_sleep+0xe0/0xe0 [ 161.674040][ T7242] ? __lock_acquire+0x7d80/0x7d80 [ 161.679125][ T7242] should_fail_ex+0x394/0x4c0 [ 161.683885][ T7242] should_failslab+0x9/0x20 [ 161.688447][ T7242] slab_pre_alloc_hook+0x59/0x300 [ 161.693533][ T7242] ? rtnl_newlink+0x10d/0x2170 [ 161.698362][ T7242] __kmem_cache_alloc_node+0x53/0x250 [ 161.703785][ T7242] ? rtnl_newlink+0x10d/0x2170 [ 161.708631][ T7242] kmalloc_trace+0x2a/0xe0 [ 161.713111][ T7242] rtnl_newlink+0x10d/0x2170 [ 161.717764][ T7242] ? verify_lock_unused+0x140/0x140 [ 161.723009][ T7242] ? __mutex_trylock_common+0x160/0x270 [ 161.728602][ T7242] ? rtnl_setlink+0x4e0/0x4e0 [ 161.733326][ T7242] ? trace_raw_output_contention_end+0xd0/0xd0 [ 161.739525][ T7242] ? rcu_is_watching+0x15/0xb0 [ 161.744367][ T7242] ? trace_contention_end+0x39/0xe0 [ 161.749611][ T7242] ? __mutex_lock+0x30d/0xc80 [ 161.754347][ T7242] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 161.759518][ T7242] ? mutex_lock_nested+0x20/0x20 [ 161.764536][ T7242] ? rtnl_setlink+0x4e0/0x4e0 [ 161.769259][ T7242] rtnetlink_rcv_msg+0x843/0xf90 [ 161.774259][ T7242] ? rtnetlink_rcv_msg+0x220/0xf90 [ 161.779420][ T7242] ? rtnetlink_bind+0x80/0x80 [ 161.784125][ T7242] ? perf_trace_preemptirq_template+0xac/0x330 [ 161.790315][ T7242] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.796331][ T7242] ? lock_chain_count+0x20/0x20 [ 161.801204][ T7242] ? __local_bh_enable_ip+0x13a/0x1c0 [ 161.806604][ T7242] ? lockdep_hardirqs_on+0x98/0x150 [ 161.811832][ T7242] ? __local_bh_enable_ip+0x13a/0x1c0 [ 161.817231][ T7242] ? _local_bh_enable+0xa0/0xa0 [ 161.822125][ T7242] ? __dev_queue_xmit+0x275/0x3630 [ 161.827273][ T7242] ? __dev_queue_xmit+0x1bc2/0x3630 [ 161.832554][ T7242] ? __dev_queue_xmit+0x275/0x3630 [ 161.837723][ T7242] ? ref_tracker_free+0x686/0x830 [ 161.842778][ T7242] netlink_rcv_skb+0x235/0x4c0 [ 161.847610][ T7242] ? rtnetlink_bind+0x80/0x80 [ 161.852317][ T7242] ? netlink_ack+0x1160/0x1160 [ 161.857132][ T7242] ? __lock_acquire+0x7d80/0x7d80 [ 161.862200][ T7242] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.867421][ T7242] netlink_unicast+0x7b1/0x930 [ 161.872245][ T7242] netlink_sendmsg+0x8d0/0xbf0 [ 161.877049][ T7242] ? netlink_getsockopt+0x590/0x590 [ 161.882266][ T7242] ? apparmor_socket_sendmsg+0x8e/0x330 [ 161.887859][ T7242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 161.893177][ T7242] ? security_socket_sendmsg+0x80/0xa0 [ 161.898659][ T7242] ? netlink_getsockopt+0x590/0x590 [ 161.903879][ T7242] ____sys_sendmsg+0x61b/0x980 [ 161.908683][ T7242] ? __asan_memset+0x22/0x40 [ 161.913300][ T7242] ? __sys_sendmsg_sock+0x30/0x30 [ 161.918354][ T7242] ? __import_iovec+0x5f2/0x850 [ 161.923231][ T7242] ? import_iovec+0x73/0xa0 [ 161.927784][ T7242] ___sys_sendmsg+0x2a6/0x360 [ 161.932486][ T7242] ? get_pid_task+0x20/0x1e0 [ 161.937127][ T7242] ? __sys_sendmsg+0x2b0/0x2b0 [ 161.941923][ T7242] ? __lock_acquire+0x7d80/0x7d80 [ 161.946983][ T7242] __se_sys_sendmsg+0x1d0/0x2c0 [ 161.951868][ T7242] ? __x64_sys_sendmsg+0x80/0x80 [ 161.956838][ T7242] ? lockdep_hardirqs_on+0x98/0x150 [ 161.962062][ T7242] do_syscall_64+0x55/0xb0 [ 161.966488][ T7242] ? clear_bhb_loop+0x40/0x90 [ 161.971186][ T7242] ? clear_bhb_loop+0x40/0x90 [ 161.975893][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.981808][ T7242] RIP: 0033:0x7ff66f99de99 [ 161.986248][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.005874][ T7242] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.014322][ T7242] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 162.022315][ T7242] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 162.030307][ T7242] RBP: 00007ff670864090 R08: 0000000000000000 R09: 0000000000000000 [ 162.038297][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.046289][ T7242] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 162.054310][ T7242] [ 162.628928][ T7248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.545'. [ 162.963675][ T7255] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 162.991377][ T7255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'. [ 163.021881][ T7255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.635823][ T7261] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 163.986439][ T7261] team0: Port device wlan1 added [ 164.011132][ T7267] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 164.033121][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'. [ 164.042407][ T7267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.111848][ T7261] syz.0.550 (7261) used greatest stack depth: 17432 bytes left [ 164.297930][ T7272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.305759][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 164.666654][ T7281] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 164.708765][ T7281] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 164.778098][ T7281] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 164.786937][ T7281] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 164.801197][ T7281] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 165.008690][ T7281] netlink: 209584 bytes leftover after parsing attributes in process `syz.0.557'. [ 165.023648][ T7285] netlink: 144 bytes leftover after parsing attributes in process `syz.2.559'. [ 165.034590][ T7281] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 165.059466][ T7285] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 165.083286][ T7281] openvswitch: netlink: Message has 4 unknown bytes. [ 165.261123][ T7284] netlink: 'syz.2.559': attribute type 27 has an invalid length. [ 165.334910][ T7284] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.559'. [ 166.251879][ T7296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.978891][ T7298] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 167.352645][ T7298] team0: Port device wlan1 added [ 167.434035][ T7307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.441651][ T7307] IPv6: NLM_F_CREATE should be set when creating new route [ 167.449210][ T7307] IPv6: NLM_F_CREATE should be set when creating new route [ 167.456787][ T7307] IPv6: NLM_F_CREATE should be set when creating new route [ 168.045296][ T7327] netlink: 'syz.0.571': attribute type 21 has an invalid length. [ 168.119828][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.571'. [ 168.621101][ T7339] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 168.639612][ T7339] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 168.675040][ T7339] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 168.694941][ T7339] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 168.719836][ T7339] netlink: 'syz.2.577': attribute type 29 has an invalid length. [ 169.081270][ T7339] netlink: 209584 bytes leftover after parsing attributes in process `syz.2.577'. [ 169.128040][ T7339] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 169.139811][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.147353][ T7346] IPv6: NLM_F_CREATE should be set when creating new route [ 169.168050][ T7339] openvswitch: netlink: Message has 4 unknown bytes. [ 170.166037][ T7362] netlink: 'syz.2.583': attribute type 3 has an invalid length. [ 170.247791][ T7362] netlink: 'syz.2.583': attribute type 8 has an invalid length. [ 170.268769][ T7362] netlink: 177592 bytes leftover after parsing attributes in process `syz.2.583'. [ 170.836573][ T7373] FAULT_INJECTION: forcing a failure. [ 170.836573][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.865128][ T7373] CPU: 0 PID: 7373 Comm: syz.1.589 Not tainted syzkaller #0 [ 170.872612][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.882815][ T7373] Call Trace: [ 170.886233][ T7373] [ 170.889335][ T7373] dump_stack_lvl+0x18c/0x250 [ 170.894234][ T7373] ? show_regs_print_info+0x20/0x20 [ 170.899628][ T7373] ? load_image+0x420/0x420 [ 170.904364][ T7373] ? __might_fault+0xaa/0x120 [ 170.909217][ T7373] ? __lock_acquire+0x7d80/0x7d80 [ 170.914484][ T7373] should_fail_ex+0x394/0x4c0 [ 170.919428][ T7373] _copy_from_user+0x2f/0xe0 [ 170.924239][ T7373] __sys_bpf+0x23e/0x890 [ 170.928685][ T7373] ? bpf_link_show_fdinfo+0x390/0x390 [ 170.934460][ T7373] ? lock_chain_count+0x20/0x20 [ 170.939635][ T7373] __x64_sys_bpf+0x7c/0x90 [ 170.944257][ T7373] do_syscall_64+0x55/0xb0 [ 170.948837][ T7373] ? clear_bhb_loop+0x40/0x90 [ 170.953710][ T7373] ? clear_bhb_loop+0x40/0x90 [ 170.958584][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.964637][ T7373] RIP: 0033:0x7fe2ec99de99 [ 170.969259][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.989110][ T7373] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.997705][ T7373] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 171.005835][ T7373] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000009 [ 171.013954][ T7373] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 171.022102][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.030221][ T7373] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 171.038570][ T7373] [ 171.170819][ T7381] netlink: 'syz.3.592': attribute type 29 has an invalid length. [ 171.208954][ T7381] netlink: 'syz.3.592': attribute type 29 has an invalid length. [ 171.555589][ T7384] netlink: 209584 bytes leftover after parsing attributes in process `syz.3.592'. [ 171.580196][ T7384] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 171.601761][ T7384] openvswitch: netlink: Message has 4 unknown bytes. [ 172.072990][ T7386] netlink: 140 bytes leftover after parsing attributes in process `syz.3.594'. [ 173.042193][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'. [ 173.093431][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'. [ 173.143558][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'. [ 173.183018][ T7406] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.604'. [ 173.205757][ T7408] validate_nla: 3 callbacks suppressed [ 173.205771][ T7408] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 173.223213][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'. [ 173.262798][ T7408] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 173.286641][ T7408] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 173.307226][ T7408] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 173.327793][ T7408] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 173.414316][ T7415] netlink: 'syz.0.605': attribute type 39 has an invalid length. [ 173.468667][ T7408] netlink: 209584 bytes leftover after parsing attributes in process `syz.1.603'. [ 173.528471][ T7408] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 173.539796][ T7408] openvswitch: netlink: Message has 4 unknown bytes. [ 174.077225][ T7425] netlink: 'syz.1.609': attribute type 21 has an invalid length. [ 174.088835][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.609'. [ 174.165884][ T7425] virt_wifi0: entered promiscuous mode [ 174.173793][ T7425] virt_wifi0: entered allmulticast mode [ 176.989634][ T7433] netlink: 'syz.0.612': attribute type 27 has an invalid length. [ 177.037794][ T7433] netlink: 164 bytes leftover after parsing attributes in process `syz.0.612'. [ 178.797059][ T7485] netlink: 188 bytes leftover after parsing attributes in process `syz.2.628'. [ 179.004636][ T7490] syzkaller0: entered promiscuous mode [ 179.010183][ T7490] syzkaller0: entered allmulticast mode [ 179.048328][ T7498] FAULT_INJECTION: forcing a failure. [ 179.048328][ T7498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.077672][ T7498] CPU: 0 PID: 7498 Comm: syz.2.632 Not tainted syzkaller #0 [ 179.085033][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.095133][ T7498] Call Trace: [ 179.098450][ T7498] [ 179.101425][ T7498] dump_stack_lvl+0x18c/0x250 [ 179.106171][ T7498] ? show_regs_print_info+0x20/0x20 [ 179.111408][ T7498] ? load_image+0x420/0x420 [ 179.115969][ T7498] ? __lock_acquire+0x7d80/0x7d80 [ 179.121029][ T7498] ? mark_lock+0x94/0x320 [ 179.125404][ T7498] should_fail_ex+0x394/0x4c0 [ 179.130146][ T7498] prepare_alloc_pages+0x1e1/0x5b0 [ 179.135299][ T7498] __alloc_pages+0x134/0x460 [ 179.139902][ T7498] ? zone_statistics+0x170/0x170 [ 179.144933][ T7498] ? do_wp_page+0x733/0x34d0 [ 179.149525][ T7498] ? do_wp_page+0xf17/0x34d0 [ 179.154133][ T7498] ? __lock_acquire+0x7d80/0x7d80 [ 179.159219][ T7498] __folio_alloc+0x10/0x20 [ 179.163673][ T7498] vma_alloc_folio+0x474/0x8f0 [ 179.168449][ T7498] do_wp_page+0x118d/0x34d0 [ 179.173001][ T7498] ? folio_put+0xd0/0xd0 [ 179.177267][ T7498] ? do_raw_spin_lock+0x11f/0x2b0 [ 179.182318][ T7498] ? __rwlock_init+0x150/0x150 [ 179.187099][ T7498] handle_mm_fault+0x1306/0x4a50 [ 179.192050][ T7498] ? handle_mm_fault+0xe6/0x4a50 [ 179.197004][ T7498] ? numa_migrate_prep+0x350/0x350 [ 179.202138][ T7498] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 179.207423][ T7498] do_user_addr_fault+0x736/0x12d0 [ 179.212550][ T7498] exc_page_fault+0x64/0x100 [ 179.217153][ T7498] asm_exc_page_fault+0x26/0x30 [ 179.222009][ T7498] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 179.227847][ T7498] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 179.247496][ T7498] RSP: 0018:ffffc9000322fbb0 EFLAGS: 00050202 [ 179.253618][ T7498] RAX: ffffffff8431fa01 RBX: 00000000000200cc RCX: 0000000000009818 [ 179.261636][ T7498] RDX: 0000000000000000 RSI: ffff88805a5168c3 RDI: 0000200000037000 [ 179.269656][ T7498] RBP: ffffc9000322fd20 R08: 0000000000000002 R09: 0000000000000003 [ 179.277632][ T7498] R10: dffffc0000000000 R11: ffffed100b4a401b R12: 0000200000040818 [ 179.285609][ T7498] R13: 1ffff92000645f90 R14: 000020000002074c R15: ffff88805a50000f [ 179.293638][ T7498] ? _copy_to_user+0x31/0xa0 [ 179.298327][ T7498] _copy_to_user+0x85/0xa0 [ 179.302786][ T7498] generic_map_lookup_batch+0x8ba/0xc60 [ 179.308368][ T7498] ? bpf_map_update_value+0x710/0x710 [ 179.313755][ T7498] ? __fdget+0x180/0x210 [ 179.318043][ T7498] ? bpf_map_update_value+0x710/0x710 [ 179.323423][ T7498] bpf_map_do_batch+0x2e3/0x600 [ 179.328344][ T7498] ? bpf_lsm_bpf+0x9/0x10 [ 179.332725][ T7498] ? security_bpf+0x7e/0xa0 [ 179.337248][ T7498] __sys_bpf+0x7d7/0x890 [ 179.341518][ T7498] ? bpf_link_show_fdinfo+0x390/0x390 [ 179.346957][ T7498] ? lock_chain_count+0x20/0x20 [ 179.351829][ T7498] __x64_sys_bpf+0x7c/0x90 [ 179.356278][ T7498] do_syscall_64+0x55/0xb0 [ 179.360718][ T7498] ? clear_bhb_loop+0x40/0x90 [ 179.365455][ T7498] ? clear_bhb_loop+0x40/0x90 [ 179.370149][ T7498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.376066][ T7498] RIP: 0033:0x7fa0f3f9de99 [ 179.380484][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.400096][ T7498] RSP: 002b:00007fa0f4dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.408514][ T7498] RAX: ffffffffffffffda RBX: 00007fa0f4226090 RCX: 00007fa0f3f9de99 [ 179.416491][ T7498] RDX: 0000000000000038 RSI: 0000200000000700 RDI: 0000000000000018 [ 179.424466][ T7498] RBP: 00007fa0f4dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 179.432443][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.440426][ T7498] R13: 00007fa0f4226128 R14: 00007fa0f4226090 R15: 00007ffec7d1fbc8 [ 179.448429][ T7498] [ 180.301924][ T7518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.640'. [ 181.749216][ T7518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.640'. [ 182.229917][ T7537] netlink: 'syz.0.645': attribute type 3 has an invalid length. [ 182.259810][ T7537] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.645'. [ 183.124823][ T7555] netlink: 'syz.1.648': attribute type 3 has an invalid length. [ 183.135426][ T7555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.648'. [ 183.158332][ T7555] netlink: 826 bytes leftover after parsing attributes in process `syz.1.648'. [ 183.529259][ T7560] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.650'. [ 189.211697][ T7628] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.674'. [ 191.336765][ T7678] netlink: 'syz.2.690': attribute type 3 has an invalid length. [ 191.363416][ T7678] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.690'. [ 191.917717][ T7691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.693'. [ 192.198799][ T7690] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 192.212875][ T7690] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 192.932192][ T7714] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.697'. [ 193.103909][ T7722] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 193.137347][ T7722] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 193.150957][ T7722] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 193.165193][ T7722] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 193.186100][ T7722] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 193.325678][ T7727] netlink: 'syz.2.704': attribute type 29 has an invalid length. [ 193.338970][ T7727] netlink: 'syz.2.704': attribute type 29 has an invalid length. [ 193.357646][ T7727] netlink: 'syz.2.704': attribute type 29 has an invalid length. [ 193.368221][ T7727] netlink: 'syz.2.704': attribute type 29 has an invalid length. [ 193.511306][ T7733] team0: Device bond0 is up. Set it down before adding it as a team port [ 193.691251][ T7735] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.707'. [ 194.248558][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257477][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.386024][ T7744] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.711'. [ 194.837095][ T7763] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.718'. [ 195.190673][ T7774] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.018433][ T7848] FAULT_INJECTION: forcing a failure. [ 198.018433][ T7848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.047566][ T7848] CPU: 0 PID: 7848 Comm: syz.2.749 Not tainted syzkaller #0 [ 198.054914][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.065010][ T7848] Call Trace: [ 198.068333][ T7848] [ 198.071308][ T7848] dump_stack_lvl+0x18c/0x250 [ 198.076041][ T7848] ? show_regs_print_info+0x20/0x20 [ 198.081283][ T7848] ? load_image+0x420/0x420 [ 198.085831][ T7848] ? __might_fault+0xaa/0x120 [ 198.090549][ T7848] ? __lock_acquire+0x7d80/0x7d80 [ 198.095629][ T7848] should_fail_ex+0x394/0x4c0 [ 198.100353][ T7848] _copy_from_user+0x2f/0xe0 [ 198.104984][ T7848] __sys_bpf+0x23e/0x890 [ 198.109268][ T7848] ? bpf_link_show_fdinfo+0x390/0x390 [ 198.114772][ T7848] ? lock_chain_count+0x20/0x20 [ 198.119680][ T7848] __x64_sys_bpf+0x7c/0x90 [ 198.124144][ T7848] do_syscall_64+0x55/0xb0 [ 198.128604][ T7848] ? clear_bhb_loop+0x40/0x90 [ 198.133324][ T7848] ? clear_bhb_loop+0x40/0x90 [ 198.138052][ T7848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.143991][ T7848] RIP: 0033:0x7fa0f3f9de99 [ 198.148535][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.168191][ T7848] RSP: 002b:00007fa0f4e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.176661][ T7848] RAX: ffffffffffffffda RBX: 00007fa0f4225fa0 RCX: 00007fa0f3f9de99 [ 198.184676][ T7848] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 198.192702][ T7848] RBP: 00007fa0f4e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 198.200704][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.208713][ T7848] R13: 00007fa0f4226038 R14: 00007fa0f4225fa0 R15: 00007ffec7d1fbc8 [ 198.216743][ T7848] [ 198.233590][ T7852] netlink: 112 bytes leftover after parsing attributes in process `syz.3.751'. [ 198.257879][ T7852] netlink: 112 bytes leftover after parsing attributes in process `syz.3.751'. [ 198.619195][ T7870] lo: entered allmulticast mode [ 198.658816][ T7870] validate_nla: 21 callbacks suppressed [ 198.658834][ T7870] netlink: 'syz.3.758': attribute type 39 has an invalid length. [ 199.398058][ T7885] FAULT_INJECTION: forcing a failure. [ 199.398058][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.411355][ T7885] CPU: 0 PID: 7885 Comm: syz.1.765 Not tainted syzkaller #0 [ 199.418775][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 199.428861][ T7885] Call Trace: [ 199.432176][ T7885] [ 199.435139][ T7885] dump_stack_lvl+0x18c/0x250 [ 199.439857][ T7885] ? show_regs_print_info+0x20/0x20 [ 199.445109][ T7885] ? load_image+0x420/0x420 [ 199.449667][ T7885] ? __might_fault+0xaa/0x120 [ 199.454393][ T7885] ? __lock_acquire+0x7d80/0x7d80 [ 199.459466][ T7885] ? __virt_addr_valid+0x10c/0x380 [ 199.464644][ T7885] should_fail_ex+0x394/0x4c0 [ 199.469395][ T7885] _copy_from_user+0x2f/0xe0 [ 199.474045][ T7885] generic_map_update_batch+0x53e/0x800 [ 199.479653][ T7885] ? rcu_read_unlock+0xa0/0xa0 [ 199.484467][ T7885] ? __fdget+0x180/0x210 [ 199.488752][ T7885] ? rcu_read_unlock+0xa0/0xa0 [ 199.493542][ T7885] bpf_map_do_batch+0x3f2/0x600 [ 199.498451][ T7885] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 199.504076][ T7885] __sys_bpf+0x381/0x890 [ 199.508373][ T7885] ? bpf_link_show_fdinfo+0x390/0x390 [ 199.513900][ T7885] ? lock_chain_count+0x20/0x20 [ 199.518797][ T7885] __x64_sys_bpf+0x7c/0x90 [ 199.523246][ T7885] do_syscall_64+0x55/0xb0 [ 199.527685][ T7885] ? clear_bhb_loop+0x40/0x90 [ 199.532380][ T7885] ? clear_bhb_loop+0x40/0x90 [ 199.537083][ T7885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.543020][ T7885] RIP: 0033:0x7fe2ec99de99 [ 199.547536][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.567155][ T7885] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.575607][ T7885] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 199.583624][ T7885] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 199.591626][ T7885] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 199.599707][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.607696][ T7885] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 199.615699][ T7885] [ 200.114936][ T7899] netlink: 'syz.3.769': attribute type 3 has an invalid length. [ 200.148562][ T7899] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.769'. [ 200.727609][ T7916] netlink: 14 bytes leftover after parsing attributes in process `syz.1.776'. [ 200.737931][ T7916] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.776'. [ 202.438362][ T7936] netlink: 'syz.0.782': attribute type 3 has an invalid length. [ 202.469920][ T7936] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.782'. [ 202.520194][ T7940] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 202.543286][ T7940] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.783'. [ 203.058397][ T7959] FAULT_INJECTION: forcing a failure. [ 203.058397][ T7959] name failslab, interval 1, probability 0, space 0, times 0 [ 203.079752][ T7959] CPU: 1 PID: 7959 Comm: syz.0.790 Not tainted syzkaller #0 [ 203.087118][ T7959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.097225][ T7959] Call Trace: [ 203.100542][ T7959] [ 203.103520][ T7959] dump_stack_lvl+0x18c/0x250 [ 203.108300][ T7959] ? show_regs_print_info+0x20/0x20 [ 203.113560][ T7959] ? load_image+0x420/0x420 [ 203.118178][ T7959] ? __might_sleep+0xe0/0xe0 [ 203.122834][ T7959] ? __lock_acquire+0x7d80/0x7d80 [ 203.127917][ T7959] should_fail_ex+0x394/0x4c0 [ 203.132662][ T7959] should_failslab+0x9/0x20 [ 203.137218][ T7959] slab_pre_alloc_hook+0x59/0x300 [ 203.142304][ T7959] ? __lock_acquire+0x7d80/0x7d80 [ 203.147373][ T7959] kmem_cache_alloc_node+0x5e/0x310 [ 203.152604][ T7959] ? __alloc_skb+0x103/0x2c0 [ 203.157227][ T7959] __alloc_skb+0x103/0x2c0 [ 203.161676][ T7959] netlink_sendmsg+0x66a/0xbf0 [ 203.166475][ T7959] ? netlink_getsockopt+0x590/0x590 [ 203.171702][ T7959] ? apparmor_socket_sendmsg+0x8e/0x330 [ 203.177288][ T7959] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.182608][ T7959] ? security_socket_sendmsg+0x80/0xa0 [ 203.188099][ T7959] ? netlink_getsockopt+0x590/0x590 [ 203.193324][ T7959] ____sys_sendmsg+0x61b/0x980 [ 203.198123][ T7959] ? __asan_memset+0x22/0x40 [ 203.202737][ T7959] ? __sys_sendmsg_sock+0x30/0x30 [ 203.207782][ T7959] ? __import_iovec+0x3fa/0x850 [ 203.212683][ T7959] ? import_iovec+0x73/0xa0 [ 203.217221][ T7959] ___sys_sendmsg+0x2a6/0x360 [ 203.221941][ T7959] ? __sys_sendmsg+0x2b0/0x2b0 [ 203.226765][ T7959] ? __lock_acquire+0x7d80/0x7d80 [ 203.231879][ T7959] __se_sys_sendmsg+0x1d0/0x2c0 [ 203.236768][ T7959] ? __x64_sys_sendmsg+0x80/0x80 [ 203.241767][ T7959] ? lockdep_hardirqs_on+0x98/0x150 [ 203.247011][ T7959] do_syscall_64+0x55/0xb0 [ 203.251457][ T7959] ? clear_bhb_loop+0x40/0x90 [ 203.256165][ T7959] ? clear_bhb_loop+0x40/0x90 [ 203.260879][ T7959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.266803][ T7959] RIP: 0033:0x7f623819de99 [ 203.271257][ T7959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.290921][ T7959] RSP: 002b:00007f6239107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.299380][ T7959] RAX: ffffffffffffffda RBX: 00007f6238425fa0 RCX: 00007f623819de99 [ 203.307386][ T7959] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 203.315390][ T7959] RBP: 00007f6239107090 R08: 0000000000000000 R09: 0000000000000000 [ 203.323411][ T7959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.331421][ T7959] R13: 00007f6238426038 R14: 00007f6238425fa0 R15: 00007ffda83f8f58 [ 203.339456][ T7959] [ 203.613735][ T7974] FAULT_INJECTION: forcing a failure. [ 203.613735][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 203.628923][ T7974] CPU: 1 PID: 7974 Comm: syz.1.795 Not tainted syzkaller #0 [ 203.636281][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.646374][ T7974] Call Trace: [ 203.649710][ T7974] [ 203.652678][ T7974] dump_stack_lvl+0x18c/0x250 [ 203.657400][ T7974] ? show_regs_print_info+0x20/0x20 [ 203.662640][ T7974] ? load_image+0x420/0x420 [ 203.667183][ T7974] ? __might_sleep+0xe0/0xe0 [ 203.671828][ T7974] ? __lock_acquire+0x7d80/0x7d80 [ 203.676896][ T7974] should_fail_ex+0x394/0x4c0 [ 203.681623][ T7974] should_failslab+0x9/0x20 [ 203.686168][ T7974] slab_pre_alloc_hook+0x59/0x300 [ 203.691259][ T7974] ? __lock_acquire+0x7d80/0x7d80 [ 203.696419][ T7974] kmem_cache_alloc_node+0x5e/0x310 [ 203.701677][ T7974] ? __alloc_skb+0x103/0x2c0 [ 203.706303][ T7974] __alloc_skb+0x103/0x2c0 [ 203.710755][ T7974] netlink_sendmsg+0x66a/0xbf0 [ 203.715565][ T7974] ? netlink_getsockopt+0x590/0x590 [ 203.720814][ T7974] ? apparmor_socket_sendmsg+0x8e/0x330 [ 203.726407][ T7974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.731737][ T7974] ? security_socket_sendmsg+0x80/0xa0 [ 203.737248][ T7974] ? netlink_getsockopt+0x590/0x590 [ 203.742495][ T7974] ____sys_sendmsg+0x61b/0x980 [ 203.747310][ T7974] ? __asan_memset+0x22/0x40 [ 203.751940][ T7974] ? __sys_sendmsg_sock+0x30/0x30 [ 203.756992][ T7974] ? __import_iovec+0x5f2/0x850 [ 203.761914][ T7974] ? import_iovec+0x73/0xa0 [ 203.766469][ T7974] ___sys_sendmsg+0x2a6/0x360 [ 203.771184][ T7974] ? __sys_sendmsg+0x2b0/0x2b0 [ 203.776040][ T7974] ? __lock_acquire+0x7d80/0x7d80 [ 203.777488][ T7978] netlink: 'syz.2.797': attribute type 22 has an invalid length. [ 203.781114][ T7974] __se_sys_sendmsg+0x1d0/0x2c0 [ 203.793767][ T7974] ? perf_trace_preemptirq_template+0x269/0x330 [ 203.800057][ T7974] ? __x64_sys_sendmsg+0x80/0x80 [ 203.805078][ T7974] ? lockdep_hardirqs_on+0x98/0x150 [ 203.810324][ T7974] do_syscall_64+0x55/0xb0 [ 203.814778][ T7974] ? clear_bhb_loop+0x40/0x90 [ 203.819520][ T7974] ? clear_bhb_loop+0x40/0x90 [ 203.824249][ T7974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.824826][ T7978] netlink: 'syz.2.797': attribute type 12 has an invalid length. [ 203.830170][ T7974] RIP: 0033:0x7fe2ec99de99 [ 203.830191][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.830207][ T7974] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.870439][ T7974] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 203.878449][ T7974] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 203.880122][ T7978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 203.886464][ T7974] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 203.886479][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.886490][ T7974] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 203.886519][ T7974] [ 204.054875][ T7981] lo: entered allmulticast mode [ 204.081056][ T7981] netlink: 'syz.2.799': attribute type 39 has an invalid length. [ 204.682395][ T8005] netlink: 'syz.3.805': attribute type 22 has an invalid length. [ 204.720771][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 205.202301][ T8014] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 205.212337][ T8014] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.810'. [ 205.843387][ T1132] wlan1: Trigger new scan to find an IBSS to join [ 205.922424][ T8036] netlink: 'syz.3.816': attribute type 3 has an invalid length. [ 205.933234][ T8036] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.816'. [ 206.099024][ T8043] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.822'. [ 206.552005][ T8053] netlink: 'syz.0.827': attribute type 22 has an invalid length. [ 206.566524][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 206.566546][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 206.572746][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 206.578979][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 206.596771][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 206.716725][ T8057] netlink: 'syz.2.828': attribute type 39 has an invalid length. [ 206.800472][ T8061] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 206.850359][ T8061] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 207.831417][ T8083] netlink: 156 bytes leftover after parsing attributes in process `syz.1.837'. [ 207.845043][ T8102] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.847'. [ 208.736642][ T8128] FAULT_INJECTION: forcing a failure. [ 208.736642][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 208.760930][ T8128] CPU: 1 PID: 8128 Comm: syz.1.858 Not tainted syzkaller #0 [ 208.768277][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.778379][ T8128] Call Trace: [ 208.781685][ T8128] [ 208.784651][ T8128] dump_stack_lvl+0x18c/0x250 [ 208.789393][ T8128] ? show_regs_print_info+0x20/0x20 [ 208.794650][ T8128] ? load_image+0x420/0x420 [ 208.799302][ T8128] ? __might_sleep+0xe0/0xe0 [ 208.803939][ T8128] ? __lock_acquire+0x7d80/0x7d80 [ 208.809072][ T8128] should_fail_ex+0x394/0x4c0 [ 208.813808][ T8128] should_failslab+0x9/0x20 [ 208.818360][ T8128] slab_pre_alloc_hook+0x59/0x300 [ 208.823427][ T8128] ? apparmor_sk_alloc_security+0x77/0x100 [ 208.829255][ T8128] __kmem_cache_alloc_node+0x53/0x250 [ 208.834668][ T8128] ? apparmor_sk_alloc_security+0x77/0x100 [ 208.840527][ T8128] kmalloc_trace+0x2a/0xe0 [ 208.844981][ T8128] apparmor_sk_alloc_security+0x77/0x100 [ 208.850644][ T8128] security_sk_alloc+0x6e/0xa0 [ 208.855437][ T8128] sk_prot_alloc+0x101/0x210 [ 208.860073][ T8128] ? sk_alloc+0x24/0x350 [ 208.864348][ T8128] sk_alloc+0x3a/0x350 [ 208.868443][ T8128] ? bpf_ctx_init+0x154/0x190 [ 208.873139][ T8128] bpf_prog_test_run_skb+0x371/0x18f0 [ 208.878535][ T8128] ? __fget_files+0x28/0x460 [ 208.883141][ T8128] ? __fget_files+0x3fc/0x460 [ 208.887848][ T8128] ? cpu_online+0x60/0x60 [ 208.892194][ T8128] bpf_prog_test_run+0x31f/0x390 [ 208.897159][ T8128] __sys_bpf+0x49d/0x890 [ 208.901418][ T8128] ? read_tsc+0x9/0x20 [ 208.905535][ T8128] ? bpf_link_show_fdinfo+0x390/0x390 [ 208.910962][ T8128] ? lock_chain_count+0x20/0x20 [ 208.915856][ T8128] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 208.921855][ T8128] __x64_sys_bpf+0x7c/0x90 [ 208.926288][ T8128] do_syscall_64+0x55/0xb0 [ 208.930786][ T8128] ? clear_bhb_loop+0x40/0x90 [ 208.935488][ T8128] ? clear_bhb_loop+0x40/0x90 [ 208.940178][ T8128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.946108][ T8128] RIP: 0033:0x7fe2ec99de99 [ 208.950540][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.970175][ T8128] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.978617][ T8128] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 208.986606][ T8128] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 208.994597][ T8128] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 209.002599][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.010590][ T8128] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 209.018590][ T8128] [ 209.032633][ T166] wlan1: Trigger new scan to find an IBSS to join [ 210.186489][ T8147] validate_nla: 5 callbacks suppressed [ 210.186509][ T8147] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 210.242225][ T8147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.865'. [ 210.439659][ T8153] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.868'. [ 210.599804][ T8158] FAULT_INJECTION: forcing a failure. [ 210.599804][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 210.619647][ T8158] CPU: 1 PID: 8158 Comm: syz.1.869 Not tainted syzkaller #0 [ 210.627000][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.637186][ T8158] Call Trace: [ 210.640518][ T8158] [ 210.643482][ T8158] dump_stack_lvl+0x18c/0x250 [ 210.648225][ T8158] ? show_regs_print_info+0x20/0x20 [ 210.653465][ T8158] ? load_image+0x420/0x420 [ 210.658055][ T8158] ? __might_sleep+0xe0/0xe0 [ 210.662689][ T8158] ? __lock_acquire+0x7d80/0x7d80 [ 210.667744][ T8158] ? perf_trace_preemptirq_template+0xac/0x330 [ 210.673978][ T8158] should_fail_ex+0x394/0x4c0 [ 210.678717][ T8158] should_failslab+0x9/0x20 [ 210.683301][ T8158] slab_pre_alloc_hook+0x59/0x300 [ 210.688384][ T8158] ? exc_page_fault+0x8c/0x100 [ 210.693200][ T8158] ? sk_prot_alloc+0xe7/0x210 [ 210.697919][ T8158] ? sk_prot_alloc+0xe7/0x210 [ 210.702639][ T8158] __kmem_cache_alloc_node+0x53/0x250 [ 210.708048][ T8158] ? exc_page_fault+0x8c/0x100 [ 210.712862][ T8158] ? sk_prot_alloc+0xe7/0x210 [ 210.717578][ T8158] __kmalloc+0xa7/0x240 [ 210.721774][ T8158] sk_prot_alloc+0xe7/0x210 [ 210.726322][ T8158] ? sk_alloc+0x24/0x350 [ 210.730612][ T8158] sk_alloc+0x3a/0x350 [ 210.734732][ T8158] ? bpf_ctx_init+0x154/0x190 [ 210.739468][ T8158] bpf_prog_test_run_skb+0x371/0x18f0 [ 210.744889][ T8158] ? __fget_files+0x28/0x460 [ 210.749539][ T8158] ? __fget_files+0x3fc/0x460 [ 210.754276][ T8158] ? cpu_online+0x60/0x60 [ 210.758681][ T8158] bpf_prog_test_run+0x31f/0x390 [ 210.763681][ T8158] __sys_bpf+0x49d/0x890 [ 210.767975][ T8158] ? bpf_link_show_fdinfo+0x390/0x390 [ 210.773409][ T8158] ? lock_chain_count+0x20/0x20 [ 210.778315][ T8158] __x64_sys_bpf+0x7c/0x90 [ 210.782772][ T8158] do_syscall_64+0x55/0xb0 [ 210.787242][ T8158] ? clear_bhb_loop+0x40/0x90 [ 210.791965][ T8158] ? clear_bhb_loop+0x40/0x90 [ 210.796702][ T8158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.802636][ T8158] RIP: 0033:0x7fe2ec99de99 [ 210.807098][ T8158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.826764][ T8158] RSP: 002b:00007fe2ed7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.835223][ T8158] RAX: ffffffffffffffda RBX: 00007fe2ecc25fa0 RCX: 00007fe2ec99de99 [ 210.843231][ T8158] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 210.851257][ T8158] RBP: 00007fe2ed7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 210.859280][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.867283][ T8158] R13: 00007fe2ecc26038 R14: 00007fe2ecc25fa0 R15: 00007ffe5aa40b08 [ 210.875306][ T8158] [ 210.955056][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 210.964411][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 210.975056][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 211.405093][ T8172] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 211.464613][ T8172] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.782525][ T8177] lo: entered allmulticast mode [ 211.823856][ T8177] netlink: 'syz.1.878': attribute type 39 has an invalid length. [ 212.104835][ T8187] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.882'. [ 212.124644][ T8187] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.882'. [ 212.897430][ T56] wlan1: Trigger new scan to find an IBSS to join [ 213.828190][ T166] wlan1: Creating new IBSS network, BSSID 7a:14:0f:82:b8:1e [ 213.956156][ T8193] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 213.968580][ T8193] netlink: 55 bytes leftover after parsing attributes in process `syz.1.884'. [ 214.118599][ T8193] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 214.176497][ T8193] batman_adv: batadv0: Removing interface: virt_wifi0 [ 214.212368][ T8209] FAULT_INJECTION: forcing a failure. [ 214.212368][ T8209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.248076][ T8209] CPU: 1 PID: 8209 Comm: syz.2.885 Not tainted syzkaller #0 [ 214.255547][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 214.265760][ T8209] Call Trace: [ 214.269198][ T8209] [ 214.272269][ T8209] dump_stack_lvl+0x18c/0x250 [ 214.277136][ T8209] ? show_regs_print_info+0x20/0x20 [ 214.282503][ T8209] ? load_image+0x420/0x420 [ 214.287201][ T8209] ? __lock_acquire+0x7d80/0x7d80 [ 214.292450][ T8209] ? snprintf+0xe9/0x140 [ 214.296904][ T8209] should_fail_ex+0x394/0x4c0 [ 214.301842][ T8209] _copy_to_user+0x2f/0xa0 [ 214.306446][ T8209] simple_read_from_buffer+0xe7/0x150 [ 214.312060][ T8209] proc_fail_nth_read+0x1e8/0x260 [ 214.317291][ T8209] ? proc_fault_inject_write+0x360/0x360 [ 214.323166][ T8209] ? fsnotify_perm+0x271/0x5e0 [ 214.328124][ T8209] ? proc_fault_inject_write+0x360/0x360 [ 214.333976][ T8209] vfs_read+0x298/0x990 [ 214.338417][ T8209] ? kernel_read+0x1e0/0x1e0 [ 214.343229][ T8209] ? __fget_files+0x28/0x460 [ 214.348051][ T8209] ? __fget_files+0x3fc/0x460 [ 214.353029][ T8209] ? __fdget_pos+0x2a3/0x330 [ 214.357781][ T8209] ? ksys_read+0x74/0x260 [ 214.362321][ T8209] ksys_read+0x151/0x260 [ 214.366782][ T8209] ? vfs_write+0x9a0/0x9a0 [ 214.371442][ T8209] ? lockdep_hardirqs_on+0x98/0x150 [ 214.376875][ T8209] do_syscall_64+0x55/0xb0 [ 214.381434][ T8209] ? clear_bhb_loop+0x40/0x90 [ 214.386293][ T8209] ? clear_bhb_loop+0x40/0x90 [ 214.391172][ T8209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.397219][ T8209] RIP: 0033:0x7fa0f3f5e6ce [ 214.401785][ T8209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.421530][ T8209] RSP: 002b:00007fa0f4e1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.430151][ T8209] RAX: ffffffffffffffda RBX: 00007fa0f4e1c6c0 RCX: 00007fa0f3f5e6ce [ 214.438273][ T8209] RDX: 000000000000000f RSI: 00007fa0f4e1c0a0 RDI: 000000000000001c [ 214.446430][ T8209] RBP: 00007fa0f4e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.454568][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.462703][ T8209] R13: 00007fa0f4226038 R14: 00007fa0f4225fa0 R15: 00007ffec7d1fbc8 [ 214.471032][ T8209] [ 214.494190][ T8194] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 214.541440][ T8215] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 214.550001][ T8215] hsr0: entered promiscuous mode [ 214.558997][ T8215] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.072243][ T8228] netlink: 'syz.0.893': attribute type 2 has an invalid length. [ 215.082636][ T8228] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 215.090900][ T8228] netlink: 9 bytes leftover after parsing attributes in process `syz.0.893'. [ 215.412190][ T8238] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 215.433138][ T8238] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.897'. [ 215.435569][ T8241] netlink: 'syz.0.898': attribute type 3 has an invalid length. [ 215.467555][ T8241] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.898'. [ 215.538920][ T8243] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 215.564218][ T8243] hsr0: entered promiscuous mode [ 215.577237][ T8243] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.621194][ T8246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.900'. [ 215.797331][ T8255] netlink: 'syz.1.904': attribute type 39 has an invalid length. [ 215.951592][ T8258] netlink: 'syz.3.903': attribute type 33 has an invalid length. [ 215.974841][ T8258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.903'. [ 215.995689][ T8260] netlink: 'syz.1.906': attribute type 2 has an invalid length. [ 216.009778][ T8260] netlink: 'syz.1.906': attribute type 1 has an invalid length. [ 216.028781][ T8260] netlink: 9 bytes leftover after parsing attributes in process `syz.1.906'. [ 216.081899][ T8256] delete_channel: no stack [ 216.283234][ T8268] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.909'. [ 216.391422][ T8268] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.909'. [ 216.600307][ T8277] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 216.628261][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.912'. [ 216.784863][ T8281] netlink: 'syz.3.915': attribute type 39 has an invalid length. [ 216.851336][ T8285] lo: entered allmulticast mode [ 216.962092][ T8285] netlink: 'syz.0.914': attribute type 39 has an invalid length. [ 216.980349][ T8287] netlink: 9 bytes leftover after parsing attributes in process `syz.2.916'. [ 217.679970][ T8305] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 219.154987][ T8345] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.935'. [ 220.460212][ T8377] __nla_validate_parse: 1 callbacks suppressed [ 220.460229][ T8377] netlink: 140 bytes leftover after parsing attributes in process `syz.2.947'. [ 220.486378][ T8377] netlink: 10 bytes leftover after parsing attributes in process `syz.2.947'. [ 220.503813][ T8377] bond0: (slave bond_slave_0): Releasing backup interface [ 220.537278][ T8377] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 221.294884][ T8404] validate_nla: 3 callbacks suppressed [ 221.294919][ T8404] netlink: 'syz.0.954': attribute type 10 has an invalid length. [ 221.437535][ T8404] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 221.476275][ T8413] netlink: 176 bytes leftover after parsing attributes in process `syz.2.958'. [ 221.518890][ T8412] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.960'. [ 221.543143][ T8412] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 221.551825][ T8412] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.588782][ T8415] FAULT_INJECTION: forcing a failure. [ 221.588782][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.649842][ T8415] CPU: 1 PID: 8415 Comm: syz.3.961 Not tainted syzkaller #0 [ 221.657199][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.667302][ T8415] Call Trace: [ 221.670626][ T8415] [ 221.673636][ T8415] dump_stack_lvl+0x18c/0x250 [ 221.678396][ T8415] ? show_regs_print_info+0x20/0x20 [ 221.683665][ T8415] ? load_image+0x420/0x420 [ 221.688244][ T8415] ? __lock_acquire+0x7d80/0x7d80 [ 221.693331][ T8415] ? aa_sk_perm+0x970/0x970 [ 221.697903][ T8415] should_fail_ex+0x394/0x4c0 [ 221.702632][ T8415] _copy_from_user+0x2f/0xe0 [ 221.707298][ T8415] copy_from_sockptr+0x69/0x80 [ 221.712119][ T8415] packet_setsockopt+0x759/0x1500 [ 221.717197][ T8415] ? packet_ioctl+0x350/0x350 [ 221.721936][ T8415] ? aa_sk_perm+0x83c/0x970 [ 221.726500][ T8415] ? __fget_files+0x28/0x460 [ 221.731159][ T8415] ? aa_af_perm+0x330/0x330 [ 221.735732][ T8415] ? __fget_files+0x28/0x460 [ 221.740375][ T8415] ? aa_sock_opt_perm+0x74/0x100 [ 221.745378][ T8415] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 221.750978][ T8415] ? security_socket_setsockopt+0x7e/0xa0 [ 221.756758][ T8415] ? packet_ioctl+0x350/0x350 [ 221.761472][ T8415] do_sock_setsockopt+0x175/0x1a0 [ 221.766533][ T8415] ? __fdget+0x180/0x210 [ 221.770832][ T8415] __x64_sys_setsockopt+0x182/0x200 [ 221.776079][ T8415] do_syscall_64+0x55/0xb0 [ 221.780548][ T8415] ? clear_bhb_loop+0x40/0x90 [ 221.785275][ T8415] ? clear_bhb_loop+0x40/0x90 [ 221.790007][ T8415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.795940][ T8415] RIP: 0033:0x7ff66f99de99 [ 221.800401][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.820151][ T8415] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.828604][ T8415] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 221.836611][ T8415] RDX: 000000000000000c RSI: 0000000000000107 RDI: 0000000000000003 [ 221.844625][ T8415] RBP: 00007ff670864090 R08: 0000000000000004 R09: 0000000000000000 [ 221.852644][ T8415] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 221.860656][ T8415] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 221.868687][ T8415] [ 221.983497][ T8423] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 222.777839][ T8453] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 222.812218][ T8453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.973'. [ 222.833264][ T8453] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 222.841041][ T8453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.973'. [ 222.890348][ T8451] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 222.901797][ T8451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.973'. [ 224.075070][ T8471] netlink: 'syz.0.979': attribute type 39 has an invalid length. [ 224.558975][ T8487] netlink: 'syz.0.982': attribute type 39 has an invalid length. [ 224.856432][ T8490] netlink: 'syz.3.985': attribute type 27 has an invalid length. [ 224.883670][ T8490] netlink: 164 bytes leftover after parsing attributes in process `syz.3.985'. [ 225.523745][ T8507] netlink: 'syz.0.990': attribute type 39 has an invalid length. [ 226.607475][ T8520] FAULT_INJECTION: forcing a failure. [ 226.607475][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.631922][ T8520] CPU: 1 PID: 8520 Comm: syz.0.996 Not tainted syzkaller #0 [ 226.639323][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 226.649441][ T8520] Call Trace: [ 226.652756][ T8520] [ 226.655717][ T8520] dump_stack_lvl+0x18c/0x250 [ 226.660441][ T8520] ? show_regs_print_info+0x20/0x20 [ 226.665699][ T8520] ? load_image+0x420/0x420 [ 226.670257][ T8520] ? __might_fault+0xaa/0x120 [ 226.674975][ T8520] ? __lock_acquire+0x7d80/0x7d80 [ 226.680090][ T8520] should_fail_ex+0x394/0x4c0 [ 226.684830][ T8520] _copy_from_user+0x2f/0xe0 [ 226.689466][ T8520] __sys_bpf+0x23e/0x890 [ 226.693759][ T8520] ? bpf_link_show_fdinfo+0x390/0x390 [ 226.699187][ T8520] ? lock_chain_count+0x20/0x20 [ 226.704177][ T8520] __x64_sys_bpf+0x7c/0x90 [ 226.708653][ T8520] do_syscall_64+0x55/0xb0 [ 226.713133][ T8520] ? clear_bhb_loop+0x40/0x90 [ 226.717852][ T8520] ? clear_bhb_loop+0x40/0x90 [ 226.722601][ T8520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.728532][ T8520] RIP: 0033:0x7f623819de99 [ 226.732981][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.752622][ T8520] RSP: 002b:00007f6239107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.761146][ T8520] RAX: ffffffffffffffda RBX: 00007f6238425fa0 RCX: 00007f623819de99 [ 226.769139][ T8520] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 226.777135][ T8520] RBP: 00007f6239107090 R08: 0000000000000000 R09: 0000000000000000 [ 226.785138][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.793145][ T8520] R13: 00007f6238426038 R14: 00007f6238425fa0 R15: 00007ffda83f8f58 [ 226.801190][ T8520] [ 227.477758][ T8539] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1002'. [ 228.176605][ T8548] netlink: 'syz.2.1004': attribute type 39 has an invalid length. [ 243.871391][ T1122] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.933858][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.943960][ T5087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.952756][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.963664][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.973442][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.981259][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.994662][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.013478][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.033240][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.042438][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.053244][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 258.061431][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.101433][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.113459][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.121476][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.132540][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.140386][ T5786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 258.148421][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.650121][ T5789] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.666053][ T5789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.681614][ T5789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.690248][ T5789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.703080][ T5789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 258.710716][ T5789] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.083264][ T5786] Bluetooth: hci4: command tx timeout [ 260.163412][ T5786] Bluetooth: hci5: command tx timeout [ 260.243637][ T5786] Bluetooth: hci6: command tx timeout [ 260.813778][ T5786] Bluetooth: hci7: command tx timeout [ 262.178429][ T5786] Bluetooth: hci4: command tx timeout [ 262.257466][ T5786] Bluetooth: hci5: command tx timeout [ 262.323175][ T5786] Bluetooth: hci6: command tx timeout [ 262.883526][ T5786] Bluetooth: hci7: command tx timeout [ 263.881671][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.892186][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.257436][ T5786] Bluetooth: hci4: command tx timeout [ 264.333224][ T5786] Bluetooth: hci5: command tx timeout [ 264.413639][ T5786] Bluetooth: hci6: command tx timeout [ 264.973336][ T5786] Bluetooth: hci7: command tx timeout [ 266.333307][ T5786] Bluetooth: hci4: command tx timeout [ 266.413231][ T5786] Bluetooth: hci5: command tx timeout [ 266.499394][ T5786] Bluetooth: hci6: command tx timeout [ 267.053269][ T5786] Bluetooth: hci7: command tx timeout [ 318.686461][ T5789] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.698593][ T5789] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.707915][ T5789] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.719426][ T5789] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.728723][ T5789] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 318.736407][ T5789] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.919837][ T5789] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 318.930221][ T5789] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 318.938122][ T5789] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 318.946378][ T5789] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 318.954137][ T5789] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 318.961505][ T5789] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 319.064013][ T5789] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 319.072841][ T5789] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 319.080915][ T5789] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 319.090562][ T5789] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 319.098355][ T5789] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 319.106167][ T5789] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 319.510703][ T5786] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 319.523891][ T5786] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 319.531771][ T5786] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 319.544422][ T5786] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 319.560903][ T5786] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 319.568546][ T5786] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 320.813616][ T5786] Bluetooth: hci8: command tx timeout [ 321.043456][ T5786] Bluetooth: hci9: command tx timeout [ 321.213531][ T5786] Bluetooth: hci10: command tx timeout [ 321.603340][ T5786] Bluetooth: hci11: command tx timeout [ 322.883579][ T5786] Bluetooth: hci8: command tx timeout [ 323.123370][ T5786] Bluetooth: hci9: command tx timeout [ 323.283127][ T5786] Bluetooth: hci10: command tx timeout [ 323.693359][ T5786] Bluetooth: hci11: command tx timeout [ 324.981495][ T5786] Bluetooth: hci8: command tx timeout [ 325.213327][ T5786] Bluetooth: hci9: command tx timeout [ 325.363236][ T5786] Bluetooth: hci10: command tx timeout [ 325.763246][ T5786] Bluetooth: hci11: command tx timeout [ 326.294333][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.300692][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.057856][ T5786] Bluetooth: hci8: command tx timeout [ 327.293273][ T5786] Bluetooth: hci9: command tx timeout [ 327.443290][ T5786] Bluetooth: hci10: command tx timeout [ 327.853394][ T5786] Bluetooth: hci11: command tx timeout [ 333.823011][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 333.829798][ C1] rcu: 1-....: (8018 ticks this GP) idle=ecc4/1/0x4000000000000000 softirq=23145/23151 fqs=4133 [ 333.841330][ C1] rcu: hardirqs softirqs csw/system [ 333.847741][ C1] rcu: number: 1455384 19 0 [ 333.854153][ C1] rcu: cputime: 16380 36109 60 ==> 52490(ms) [ 333.861974][ C1] rcu: (t=10500 jiffies g=25573 q=3433 ncpus=2) [ 333.868312][ C1] CPU: 1 PID: 8564 Comm: syz.3.1012 Not tainted syzkaller #0 [ 333.875689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 333.885770][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 333.891057][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 333.910656][ C1] RSP: 0018:ffffc900001efbe0 EFLAGS: 00000206 [ 333.916737][ C1] RAX: 0000000000000001 RBX: 3b011d04a44dfdf4 RCX: 3ed486bd8a887400 [ 333.924742][ C1] RDX: 0000000000000006 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0660 [ 333.932714][ C1] RBP: ffffc900001efcf8 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 333.940704][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88804a4dc7d0 [ 333.948701][ C1] R13: dffffc0000000000 R14: ffff88804a4dc6d0 R15: 1ffff9200003df88 [ 333.956674][ C1] FS: 00007ff6708646c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 333.965601][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.972177][ C1] CR2: 0000000100000000 CR3: 00000000611a1000 CR4: 00000000003506e0 [ 333.980145][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.988113][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 333.996098][ C1] Call Trace: [ 333.999398][ C1] [ 334.002264][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 334.007465][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 334.012491][ C1] is_bpf_text_address+0x28f/0x2a0 [ 334.017600][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 334.022801][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.028869][ C1] kernel_text_address+0xa0/0xd0 [ 334.033812][ C1] __kernel_text_address+0xd/0x30 [ 334.038846][ C1] unwind_get_return_address+0x5d/0xc0 [ 334.044307][ C1] ? stack_trace_save+0x100/0x100 [ 334.049364][ C1] arch_stack_walk+0x11d/0x190 [ 334.054144][ C1] stack_trace_save+0xaa/0x100 [ 334.058915][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 334.064037][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 334.069761][ C1] kasan_save_stack+0x3e/0x60 [ 334.074441][ C1] ? kasan_save_stack+0x3e/0x60 [ 334.079295][ C1] ? __kasan_record_aux_stack+0xaf/0xc0 [ 334.084840][ C1] ? call_rcu+0x153/0x900 [ 334.089183][ C1] ? skb_release_head_state+0x71/0x240 [ 334.094644][ C1] ? kfree_skb_reason+0xd7/0x170 [ 334.099585][ C1] ? ip6_tnl_start_xmit+0xbab/0x1230 [ 334.104888][ C1] ? dev_hard_start_xmit+0x269/0x790 [ 334.110188][ C1] ? __dev_queue_xmit+0x198c/0x3630 [ 334.115400][ C1] ? ip6_finish_output2+0xe2e/0x1620 [ 334.120687][ C1] ? ndisc_send_skb+0xbb9/0x1480 [ 334.125631][ C1] ? addrconf_rs_timer+0x36b/0x640 [ 334.130756][ C1] ? call_timer_fn+0x189/0x540 [ 334.135516][ C1] ? __run_timers+0x570/0x810 [ 334.140185][ C1] ? run_timer_softirq+0x67/0xf0 [ 334.145124][ C1] ? handle_softirqs+0x27d/0x820 [ 334.150089][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 334.154883][ C1] ? irq_exit_rcu+0x9/0x20 [ 334.159291][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 334.165109][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.171259][ C1] ? lock_is_held_type+0xd/0x190 [ 334.176194][ C1] ? __schedule+0x20d/0x4660 [ 334.180783][ C1] ? preempt_schedule_irq+0xbf/0x150 [ 334.186071][ C1] ? irqentry_exit+0x67/0x70 [ 334.190675][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.196848][ C1] ? perf_iterate_ctx+0x3c0/0x3c0 [ 334.201875][ C1] ? __se_sys_perf_event_open+0x1849/0x1c60 [ 334.207769][ C1] ? do_syscall_64+0x55/0xb0 [ 334.212358][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.218460][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 334.223835][ C1] ? rcuref_put+0x220/0x220 [ 334.228346][ C1] call_rcu+0x153/0x900 [ 334.232513][ C1] ? percpu_counter_set+0x1b0/0x1b0 [ 334.237717][ C1] ? rcuref_put+0x1cc/0x220 [ 334.242241][ C1] ? dst_release+0x1a0/0x1a0 [ 334.246862][ C1] ? make_kuid+0x120/0x680 [ 334.251286][ C1] ? rcu_force_quiescent_state+0x220/0x220 [ 334.257161][ C1] ? dst_release+0x121/0x1a0 [ 334.261799][ C1] skb_release_head_state+0x71/0x240 [ 334.267109][ C1] kfree_skb_reason+0xd7/0x170 [ 334.271888][ C1] ip6_tnl_start_xmit+0xbab/0x1230 [ 334.277021][ C1] ? lock_chain_count+0x20/0x20 [ 334.281885][ C1] ? ip6_tnl_dev_uninit+0x160/0x160 [ 334.287090][ C1] ? validate_xmit_skb+0x58b/0xf30 [ 334.292211][ C1] dev_hard_start_xmit+0x269/0x790 [ 334.297341][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 334.302463][ C1] __dev_queue_xmit+0x198c/0x3630 [ 334.307495][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 334.312710][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 334.317834][ C1] ? read_seqbegin+0x184/0x250 [ 334.322612][ C1] ? read_seqbegin+0x1b6/0x250 [ 334.327382][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 334.332681][ C1] ? ___neigh_create+0x1dab/0x23d0 [ 334.337837][ C1] ? neigh_connected_output+0x3b7/0x460 [ 334.343418][ C1] ip6_finish_output2+0xe2e/0x1620 [ 334.348539][ C1] ? ip6_finish_output2+0x642/0x1620 [ 334.353849][ C1] ? nf_hook+0x390/0x390 [ 334.358102][ C1] ? ip6_mtu+0x321/0x3f0 [ 334.362354][ C1] ? ip6_finish_output+0x567/0x7f0 [ 334.367480][ C1] ndisc_send_skb+0xbb9/0x1480 [ 334.372257][ C1] ? lock_chain_count+0x20/0x20 [ 334.377107][ C1] ? ndisc_send_skb+0x201/0x1480 [ 334.382056][ C1] ? ndisc_mc_map+0x680/0x680 [ 334.386733][ C1] ? skb_dst+0xd0/0xd0 [ 334.390823][ C1] ? __asan_memset+0x22/0x40 [ 334.395422][ C1] addrconf_rs_timer+0x36b/0x640 [ 334.400357][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 334.406433][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 334.412421][ C1] call_timer_fn+0x189/0x540 [ 334.417012][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 334.423076][ C1] ? call_timer_fn+0xd2/0x540 [ 334.427766][ C1] ? __run_timers+0x810/0x810 [ 334.432467][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 334.438542][ C1] __run_timers+0x570/0x810 [ 334.443081][ C1] ? detach_timer+0x2b0/0x2b0 [ 334.447761][ C1] ? lock_chain_count+0x20/0x20 [ 334.452613][ C1] run_timer_softirq+0x67/0xf0 [ 334.457377][ C1] handle_softirqs+0x27d/0x820 [ 334.462145][ C1] ? read_tsc+0x9/0x20 [ 334.466217][ C1] ? ktime_get+0x24b/0x280 [ 334.470632][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 334.475394][ C1] ? do_softirq+0x1a0/0x1a0 [ 334.479898][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 334.485106][ C1] __irq_exit_rcu+0xd3/0x190 [ 334.489711][ C1] ? irq_exit_rcu+0x20/0x20 [ 334.494239][ C1] irq_exit_rcu+0x9/0x20 [ 334.498482][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 334.504130][ C1] [ 334.507066][ C1] [ 334.510004][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.516004][ C1] RIP: 0010:lock_is_held_type+0xd/0x190 [ 334.521562][ C1] Code: 80 ca ca 8a 48 c7 c6 c0 ca ca 8a e8 2d 67 c4 f6 0f 0b eb bf e8 84 fc ff ff 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 bd ff ff [ 334.541167][ C1] RSP: 0018:ffffc90004527970 EFLAGS: 00000202 [ 334.547229][ C1] RAX: 0000000000000001 RBX: ffffffff8ca92a38 RCX: ffff88804a4dbc00 [ 334.555200][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8d131e00 [ 334.563179][ C1] RBP: ffffc90004527bb0 R08: ffffc90004527b3f R09: 0000000000000000 [ 334.571179][ C1] R10: ffffc90004527b30 R11: fffff520008a4f68 R12: 0000000000000001 [ 334.579185][ C1] R13: ffff8880b8f00000 R14: ffff88804a4dbc00 R15: ffff8880b8f3cca0 [ 334.587198][ C1] __schedule+0x20d/0x4660 [ 334.591660][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 334.597414][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 334.604636][ C1] ? lock_chain_count+0x20/0x20 [ 334.609513][ C1] ? asan.module_dtor+0x20/0x20 [ 334.614389][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.620559][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 334.625771][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.631940][ C1] preempt_schedule_irq+0xbf/0x150 [ 334.637058][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 334.642790][ C1] ? lock_chain_count+0x20/0x20 [ 334.647651][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 334.653473][ C1] irqentry_exit+0x67/0x70 [ 334.657905][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.663917][ C1] RIP: 0010:perf_unpin_context+0x0/0x70 [ 334.669478][ C1] Code: 30 31 00 e9 e3 fe ff ff e8 dd b2 d8 ff eb 05 e8 d6 b2 d8 ff 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 80 00 00 00 00 <41> 56 53 48 89 fb e8 b5 b2 d8 ff 48 89 df e8 3d c5 e7 08 48 8d 8b [ 334.689092][ C1] RSP: 0018:ffffc90004527d38 EFLAGS: 00000246 [ 334.695158][ C1] RAX: 3ed486bd8a887400 RBX: ffff888060b85000 RCX: 0000000000080000 [ 334.703134][ C1] RDX: ffffc9000c6b1000 RSI: 00000000000050b4 RDI: ffff888060b85000 [ 334.711104][ C1] RBP: ffffc90004527f10 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 334.719078][ C1] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 0000000000000000 [ 334.727057][ C1] R13: 1ffff920008a4fb8 R14: 1ffff11009c78721 R15: ffff88804a4dbc00 [ 334.735046][ C1] __se_sys_perf_event_open+0x1849/0x1c60 [ 334.740785][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 334.746432][ C1] ? lock_chain_count+0x20/0x20 [ 334.751292][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 334.756499][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 334.762150][ C1] do_syscall_64+0x55/0xb0 [ 334.766565][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.771244][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.775921][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.781813][ C1] RIP: 0033:0x7ff66f99de99 [ 334.786227][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.805825][ C1] RSP: 002b:00007ff670864028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 334.814244][ C1] RAX: ffffffffffffffda RBX: 00007ff66fc25fa0 RCX: 00007ff66f99de99 [ 334.822227][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 334.830200][ C1] RBP: 00007ff66fa33eaf R08: 000000000000000a R09: 0000000000000000 [ 334.838184][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.846162][ C1] R13: 00007ff66fc26038 R14: 00007ff66fc25fa0 R15: 00007ffdb7816508 [ 334.854151][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)