last executing test programs: 3.624627177s ago: executing program 2 (id=1177): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8ff0000000000000100000000000000000000f45e00000000000000"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000050000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x72bc1336f231f0e4, 0x10000, 0x0, 0x5, 0x8, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5411, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) close(0xffffffffffffffff) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x1, 0x1, 0x3, 0x9, 0x0, 0x5, 0x81400, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x1}, 0x100200, 0x9, 0x8, 0x5, 0x2, 0x1, 0xe5, 0x0, 0xffffffff, 0x0, 0x1f28}, 0xffffffffffffffff, 0x3, r4, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x46, 0x0}, 0x20000001) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xf4, 0x28, &(0x7f0000000080)="bfd805801fbcc49028c409921b495232302936f644fc60bf61f14b80ee509488a53697f002b8d26c6e264f174923ba6174d577bb43acd92d9a4879bcd1d84cbf335b8b9c9b1d54721cc2c18493570a0644c5491bfc5531850ae84ad6b981cbacac358033cb7f93ff4920ebf26feae6eca99aaff23ca242d8c73562c250e90971b5bacdb02451c8a45941097fa2b7243f6f6586b76b596bde7747dad7c8af07faf7d1f8d9a5fa4e0cced1ae73810dccea4a0c930d515cc21a35532ccbeb4d576d780157b0c39139430d09e2915963bad38c9a748602f2c31e83ee8f582300d66dd958bd4395560c836906df28457c7d6ba917937e", &(0x7f0000000180)=""/40, 0x2, 0x0, 0x9d, 0x7f, &(0x7f00000001c0)="4b60274c95b265e809a024908980e20cdec7f578377b8a12caae336823f17b5511ad834ad7359f48d8652b0b94e536392327c6d5fe673766471f3b4b637cedfb602587a003d616b8d0eed49991c989a515d67630cf3b0dc22cf8ca5767c9a5e71291e600d58e495636cd376f5d5f85e9de4868649351a0f9817b9186f913bbb48a3d86b9014b13c849828424e68992df4da9d5f35cd86c4c8ece56064a", &(0x7f0000000280)="199c877a5546e3a002de19c71f2e4cdf2f06d6ba2bd0e00c8cb325dcf013fc23fb4bd3035f2b9e2653858eb9984f983c33219208b65623c6d097a0334d78c6feb400960133dbc4cacd4e66718ebc3768d903f714339625ae5562642a5150d3f6f0f8c033bd4a1b95f4b9b546b8f5b0b5b6236cbd933323f49bf0366ca73302", 0x4, 0x0, 0x7}, 0x50) 2.788526479s ago: executing program 1 (id=1183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000ff1f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.692968181s ago: executing program 1 (id=1184): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000060000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000546f004cbfef415f75e4c6385585aa8751649103776602613c93f8df90dab057966bdea2bbc5a21cdc81e5c13f5830ee0976d349ee428306368841d35ef3a50540606358fd8f768a0bad1559ec0ac82f7d65ff59096ca9"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="040000000000003dc062cd57c3f19dbb0bc90f4dea195704f75d1402542611b0312b87ed1379eea6fc4e4541b4feb145d0b0480ab520c08265f6704412893131a2bf8bb851fdca5fd036d45b739d6cd8ba9989ae", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a6000000030000008500000008"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x4, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r3, r1, 0x29, 0x0, r3, @void, @value=r3, @void, @void, r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffffffffffd76, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) r7 = syz_clone(0x8bcd3000, 0x0, 0x5c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080)=r7, 0x12) 2.637949111s ago: executing program 1 (id=1187): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1000, 0x5}, 0x7000, 0x2, 0x0, 0x0, 0x200000000, 0x5}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800)=r3, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x8}, 0x100043, 0x0, 0x80001, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.522376123s ago: executing program 2 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000010000000000000000000001800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, &(0x7f0000000180), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x4008054) 2.521834033s ago: executing program 3 (id=1193): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1004}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e3700", 0x25}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/137, 0x89}], 0x8, &(0x7f0000000840)=""/49, 0x31}, 0x40000000) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000800) 2.364749706s ago: executing program 1 (id=1194): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010618"], 0x0, 0x26}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x2000000, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) 2.213570628s ago: executing program 4 (id=1196): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xffff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.187490528s ago: executing program 3 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000010000000000000000000001800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, &(0x7f0000000180), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x4008054) 1.790233974s ago: executing program 2 (id=1201): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, &(0x7f0000000000)=r2, 0x4) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@multicast, @random="74239dbae5b1"]}) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.789265834s ago: executing program 0 (id=1202): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x18, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000100000005951b8cc675879cc87fc314ae9b8a06"], &(0x7f00000000c0)='syzkaller\x00', 0x829c, 0x0, 0x0, 0x40f00, 0xd, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aea5, 0xffffffffffffffff, 0x0, &(0x7f0000000780)}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x8000, 0x0, &(0x7f0000000540), 0x40f00, 0x20, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000b40)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x19\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2za\x8cDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\x9c\x0f\x00\x00\x00\xfd\xff\xff\xed.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc\r}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfaE\x00\x00\x00\x00\x00\x00\x00+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc6\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc3\xd5\xa0\xc5\x16\x843\x99\xdd\xcb\xf7\xf2\x9f\xb3T\xd4\x87\x80\xac\x18\xf5\xa4\xb9r\xd5\xbc-\x17\x17#\x9cX\x17Q\x8132\"\noi\x18J\xc3\xef7\x00\xa6\x04\xf2\xcbH\x89!T\x11*8\xe1\x04\bG\x9c\xdd\r\xe6\x06\x8f\x92j\xb8oXPW\x03\r\x88~\x00\xb1\x1c)\fh\x97+7\a\r\x8b}I#t81\xd9t\x01\xd6\xee\x8c\xe3_\xec8\xcf0m\x19w4\x00SCf\xa8\xd6\xb0g\a\x85\x00\x1dI\xf4\x035\xbd\x9c\x14\xe3\x91\xdax\x94\xa6\xb4\xa8zu9\xb3\x11\xa6<\xb55j\x1e\xdc\x9c\xea\x16\xd7Q\x14\xe6\xf5\xbc\xfe\xc8\xa6d.\xc9\xa0k\xc7\xc5\x01\r\xaa\xeb\xcb\xd56\xab\x84\x98\x03\xb0\xfb\xe4Q\x8f\xe9\"H{\x82RF>$\x92\xcbm\xaa.\xf9\xb7\b\b\xe8R1v\x97\xb0\xf1\xa2A\xa1:nz7\xf0\bg\xbbS\x13\xa1\xb5\x04\xfe\xca,\x7f\xf8[\x92q8\x86`M\xa4\xceg\xfd7\x13S\x86\xaa\xd2/g\x8e\xa0\rL}\x8a\xfe\xd64[?L\xc5C\xabT\x057\xf3Dv \xc6j\xcaM\x10\xe8\xcb5\xc2\x8f4\x13\"\xb3\xa6\x95\xea\xce.\xdd\xe0p7\a\x80N\xc5\x94v-bn\xa7\x1e\x0f(\xa2\xed\x8f^\xf3\x9d\xafh*\xb0\x1c\xd9\xc6\n\xb5&\xd1\x88\xbcx\xf0\x9dw\x16\xbc\xf7\xda\xba\xd0\xdf\xd9\xf7\x8e?s|\\?l\xed\xa4\x1d.U\xdd0_Y\x03\x99#\xbe\xf4\xd3\xdc\xbe\xf98v\xf1]\fn\f(Ep\xb7\x00x\x05\xb9\xe2\xeb)\xbdr\x8d\x93)\xcc;Q\xecH\xeeF\x80$\xa9\x0e0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1, 0x0, 0x3f8}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.708602085s ago: executing program 4 (id=1204): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000f69a0000000000000000000000000000d21d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.673029236s ago: executing program 1 (id=1205): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @local}) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x200040c4) r3 = socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a", 0x35}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={&(0x7f0000000040)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0xfffffffffffffd7c}, 0x44) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x34}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c, 0x0, 0x0, 0x2}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x18, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000100000d00000000060000000200feff040000000000000800000002002e00002e5f5f2e00"/65], 0x0, 0x41}, 0x28) close(r6) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) 1.617897557s ago: executing program 3 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000010000000000000000000001800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, &(0x7f0000000180), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x4008054) 1.563038227s ago: executing program 0 (id=1207): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1004}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e3700", 0x25}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/137, 0x89}], 0x8, &(0x7f0000000840)=""/49, 0x31}, 0x40000000) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000800) 1.481270168s ago: executing program 2 (id=1208): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x3000c085) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2600c055) 1.103747354s ago: executing program 4 (id=1209): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6c, 0x7, 0x29, 0x10, 0x0, 0xfff, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x80000001, 0x6}, 0x0, 0xb, 0x54c8, 0x0, 0x1, 0x2, 0x9, 0x0, 0x9710}, 0x0, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 724.973579ms ago: executing program 0 (id=1210): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000060000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000546f004cbfef415f75e4c6385585aa8751649103776602613c93f8df90dab057966bdea2bbc5a21cdc81e5c13f5830ee0976d349ee428306368841d35ef3a50540606358fd8f768a0bad1559ec0ac82f7d65ff59096ca9"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="040000000000003dc062cd57c3f19dbb0bc90f4dea195704f75d1402542611b0312b87ed1379eea6fc4e4541b4feb145d0b0480ab520c08265f6704412893131a2bf8bb851fdca5fd036d45b739d6cd8ba9989ae", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a6000000030000008500000008"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x4, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r3, r1, 0x29, 0x0, r3, @void, @value=r3, @void, @void, r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffffffffffd76, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) r7 = syz_clone(0x8bcd3000, 0x0, 0x5c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080)=r7, 0x12) 693.72307ms ago: executing program 4 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000010000000000000000000001800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x5, &(0x7f0000000180), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12161) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x4008054) 689.66767ms ago: executing program 0 (id=1212): socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xcc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xffff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000180)) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 622.612191ms ago: executing program 3 (id=1213): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x0, 0xa, 0xfffffffe, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000055000000"], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x28, 0x80000, 0xff, &(0x7f0000000080)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1b, 0x1, 0x7, 0x0, 0x5, 0x10ed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x930, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x4e200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000003, 0x0, 0x3}, 0x0, 0xffffffff80000001, 0xffffffffffffffff, 0x8) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xfffffffffffffd96) close(r10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r9], &(0x7f0000000280)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) close(r9) 369.517215ms ago: executing program 3 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2, 0xffff8000, 0x18}, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 268.000926ms ago: executing program 2 (id=1215): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5761, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380)=0x20000205, 0x12) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044944, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) close(r3) 244.141286ms ago: executing program 4 (id=1216): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010618"], 0x0, 0x26}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x2000000, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) 181.127298ms ago: executing program 0 (id=1217): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r1], 0x48}, 0x20028814) 180.783098ms ago: executing program 1 (id=1218): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x18, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000100000005951b8cc675879cc87fc314ae9b8a06"], &(0x7f00000000c0)='syzkaller\x00', 0x829c, 0x0, 0x0, 0x40f00, 0xd, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aea5, 0xffffffffffffffff, 0x0, &(0x7f0000000780)}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x8000, 0x0, &(0x7f0000000540), 0x40f00, 0x20, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000b40)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x19\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2za\x8cDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\x9c\x0f\x00\x00\x00\xfd\xff\xff\xed.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc\r}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfaE\x00\x00\x00\x00\x00\x00\x00+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc6\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc3\xd5\xa0\xc5\x16\x843\x99\xdd\xcb\xf7\xf2\x9f\xb3T\xd4\x87\x80\xac\x18\xf5\xa4\xb9r\xd5\xbc-\x17\x17#\x9cX\x17Q\x8132\"\noi\x18J\xc3\xef7\x00\xa6\x04\xf2\xcbH\x89!T\x11*8\xe1\x04\bG\x9c\xdd\r\xe6\x06\x8f\x92j\xb8oXPW\x03\r\x88~\x00\xb1\x1c)\fh\x97+7\a\r\x8b}I#t81\xd9t\x01\xd6\xee\x8c\xe3_\xec8\xcf0m\x19w4\x00SCf\xa8\xd6\xb0g\a\x85\x00\x1dI\xf4\x035\xbd\x9c\x14\xe3\x91\xdax\x94\xa6\xb4\xa8zu9\xb3\x11\xa6<\xb55j\x1e\xdc\x9c\xea\x16\xd7Q\x14\xe6\xf5\xbc\xfe\xc8\xa6d.\xc9\xa0k\xc7\xc5\x01\r\xaa\xeb\xcb\xd56\xab\x84\x98\x03\xb0\xfb\xe4Q\x8f\xe9\"H{\x82RF>$\x92\xcbm\xaa.\xf9\xb7\b\b\xe8R1v\x97\xb0\xf1\xa2A\xa1:nz7\xf0\bg\xbbS\x13\xa1\xb5\x04\xfe\xca,\x7f\xf8[\x92q8\x86`M\xa4\xceg\xfd7\x13S\x86\xaa\xd2/g\x8e\xa0\rL}\x8a\xfe\xd64[?L\xc5C\xabT\x057\xf3Dv \xc6j\xcaM\x10\xe8\xcb5\xc2\x8f4\x13\"\xb3\xa6\x95\xea\xce.\xdd\xe0p7\a\x80N\xc5\x94v-bn\xa7\x1e\x0f(\xa2\xed\x8f^\xf3\x9d\xafh*\xb0\x1c\xd9\xc6\n\xb5&\xd1\x88\xbcx\xf0\x9dw\x16\xbc\xf7\xda\xba\xd0\xdf\xd9\xf7\x8e?s|\\?l\xed\xa4\x1d.U\xdd0_Y\x03\x99#\xbe\xf4\xd3\xdc\xbe\xf98v\xf1]\fn\f(Ep\xb7\x00x\x05\xb9\xe2\xeb)\xbdr\x8d\x93)\xcc;Q\xecH\xeeF\x80$\xa9\x0e0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="03ff8d000100"}) 133.359759ms ago: executing program 2 (id=1220): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1004}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/137, 0x89}], 0x8, &(0x7f0000000840)=""/49, 0x31}, 0x40000000) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000800) 0s ago: executing program 3 (id=1221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r1}, 0x18) kernel console output (not intermixed with test programs): ETDEV_CHANGE): macvlan0: link becomes ready [ 57.515250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.528801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.539494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.555590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.598232][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.613767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.639027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.655858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.679877][ T4187] device veth0_vlan entered promiscuous mode [ 57.699802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.713747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.733856][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.744536][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.770621][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.795015][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.820835][ T4187] device veth1_vlan entered promiscuous mode [ 57.842808][ T4189] device veth0_macvtap entered promiscuous mode [ 57.855763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.868199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.880176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.904086][ T4189] device veth1_macvtap entered promiscuous mode [ 57.916634][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.929835][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.942210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.950882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.959756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.980646][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.996309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.007282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.016086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.024801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.049974][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.059396][ T4187] device veth0_macvtap entered promiscuous mode [ 58.068805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.077415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.088364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.097443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.109422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.118675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.127472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.155575][ T4187] device veth1_macvtap entered promiscuous mode [ 58.166760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.174981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.186885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.195538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.203427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.212992][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.222393][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.231102][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.239987][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.255896][ T4201] device veth0_vlan entered promiscuous mode [ 58.269427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.278488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.314615][ T4201] device veth1_vlan entered promiscuous mode [ 58.323398][ T4190] device veth0_vlan entered promiscuous mode [ 58.334374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.343178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.351341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.360606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.369717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.378133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.386483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.394851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.403382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.419746][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.435636][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.447429][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.462842][ T4188] device veth0_vlan entered promiscuous mode [ 58.473514][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.485491][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.497051][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.513694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.524495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.533365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.542587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.551021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.564589][ T4188] device veth1_vlan entered promiscuous mode [ 58.580946][ T4190] device veth1_vlan entered promiscuous mode [ 58.590236][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600191][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.612803][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.621711][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.663620][ T4201] device veth0_macvtap entered promiscuous mode [ 58.688434][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.698140][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.706257][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.714582][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.724008][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.732884][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.744765][ T4201] device veth1_macvtap entered promiscuous mode [ 58.759041][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.768359][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.800141][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.812956][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.822846][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.833940][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.845043][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.860100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.868662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.877628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.888830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.897757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.923836][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.937703][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.948670][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.959627][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.970818][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.986141][ T4188] device veth0_macvtap entered promiscuous mode [ 58.998991][ T4190] device veth0_macvtap entered promiscuous mode [ 59.023578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.033007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.042625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.051169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.060024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.068613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.081855][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.090688][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.101012][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.109785][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.122903][ T4190] device veth1_macvtap entered promiscuous mode [ 59.135279][ T4188] device veth1_macvtap entered promiscuous mode [ 59.143704][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.160137][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.161290][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.173993][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.191301][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.203332][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.213189][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.223644][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.234753][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.245499][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.256371][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.269857][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.281087][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.290975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.302517][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.313030][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.323758][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.334749][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.346154][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.355166][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.364324][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.374875][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.384938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.394404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.402851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.410535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.418354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.426928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.435988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.444666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.481882][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 59.495087][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 59.509904][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 59.517441][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 59.534731][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.546718][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.562575][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 59.562866][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.579568][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.589471][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.600094][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.609969][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.620439][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.631557][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.639787][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.648990][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.663266][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.671201][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.709802][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.721469][ C1] hrtimer: interrupt took 37783 ns [ 59.734178][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.749228][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.760000][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.775886][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.785801][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.804482][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.816604][ T4268] Zero length message leads to an empty skb [ 59.825671][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.838483][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897540][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.964727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.990046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.117670][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.118432][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.138812][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.145536][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.155912][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.165370][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.209504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.268240][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.310609][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.367370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.415559][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.433990][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.434375][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.450628][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.473814][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.476494][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.518982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.529202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.537483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.546623][ T4277] netlink: 'syz.2.7': attribute type 21 has an invalid length. [ 60.554578][ T4277] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 60.563173][ T4277] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.7'. [ 60.606724][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.625505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.652514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.704346][ T4284] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 60.751435][ T4284] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 60.775817][ T4284] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9'. [ 60.873862][ T4291] device syzkaller0 entered promiscuous mode [ 60.976331][ T4293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.103488][ T4298] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.144840][ T4295] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5'. [ 61.284475][ T4304] netlink: 'syz.1.12': attribute type 21 has an invalid length. [ 61.296614][ T4304] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 61.307704][ T4304] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.12'. [ 61.441422][ T4309] netlink: 'syz.4.14': attribute type 21 has an invalid length. [ 61.449775][ T4309] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.14'. [ 61.486066][ T4311] netlink: 'syz.1.15': attribute type 3 has an invalid length. [ 61.506945][ T4311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'. [ 61.573601][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 61.594961][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 61.609564][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 61.625894][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 61.636074][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 61.828650][ T1106] cfg80211: failed to load regulatory.db [ 61.971878][ T4329] netlink: 'syz.2.20': attribute type 29 has an invalid length. [ 61.999209][ T4335] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.010250][ T4334] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.22'. [ 62.024403][ T4329] netlink: 'syz.2.20': attribute type 29 has an invalid length. [ 62.428455][ T4346] team0: Device nlmon0 is of different type [ 62.692973][ T4357] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 63.043440][ T4368] ksmbd: Unknown IPC event: 0, ignore. [ 65.586720][ T4405] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 66.487133][ T4426] __nla_validate_parse: 7 callbacks suppressed [ 66.487166][ T4426] netlink: 21 bytes leftover after parsing attributes in process `syz.2.50'. [ 66.528386][ T4426] ksmbd: Unknown IPC event: 0, ignore. [ 66.608123][ T4426] validate_nla: 5 callbacks suppressed [ 66.608198][ T4426] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 66.631997][ T4426] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.50'. [ 67.110236][ T4433] netlink: 135856 bytes leftover after parsing attributes in process `syz.4.52'. [ 67.221710][ T4433] netlink: 8442 bytes leftover after parsing attributes in process `syz.4.52'. [ 68.316235][ T4451] netlink: 'syz.4.58': attribute type 3 has an invalid length. [ 68.387220][ T4451] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.58'. [ 70.225874][ T4471] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 70.631159][ T4484] device syzkaller0 entered promiscuous mode [ 71.043626][ T4487] netlink: 21 bytes leftover after parsing attributes in process `syz.1.68'. [ 71.076072][ T4487] ksmbd: Unknown IPC event: 0, ignore. [ 71.108537][ T4487] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 71.127961][ T4487] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.68'. [ 71.237866][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.244419][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.401873][ T4490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.644545][ T4492] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.69'. [ 71.683415][ T4492] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.69'. [ 71.954068][ T4509] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.520379][ T4513] netlink: 'syz.1.79': attribute type 21 has an invalid length. [ 72.578141][ T4513] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 72.616450][ T4513] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.79'. [ 73.173577][ T4537] device syzkaller0 entered promiscuous mode [ 73.263659][ T4534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.692447][ T4547] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 73.768415][ T4547] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.88'. [ 74.650766][ T4561] device syzkaller0 entered promiscuous mode [ 75.616890][ T4579] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 75.916728][ T4579] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 75.935075][ T4579] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.97'. [ 77.056548][ T4599] netlink: 'syz.2.105': attribute type 3 has an invalid length. [ 77.121943][ T4600] device syzkaller0 entered promiscuous mode [ 77.158073][ T4599] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.105'. [ 78.906068][ T4636] netlink: 'syz.2.116': attribute type 21 has an invalid length. [ 78.935121][ T4636] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 78.979336][ T4634] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 78.979865][ T4636] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.116'. [ 79.038887][ T4638] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.117'. [ 79.039297][ T4634] team0: Device nlmon0 is of different type [ 79.201263][ T4643] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.118'. [ 79.797130][ T4656] device syzkaller0 entered promiscuous mode [ 80.555331][ T4681] netlink: 'syz.3.128': attribute type 21 has an invalid length. [ 80.574445][ T4681] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 80.632916][ T4681] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.669299][ T4686] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.738434][ T4685] netlink: 'syz.1.130': attribute type 10 has an invalid length. [ 80.856171][ T4688] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.131'. [ 80.915068][ T4685] team0: Device nlmon0 is of different type [ 80.979006][ T4690] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.132'. [ 81.043779][ T4695] device syzkaller0 entered promiscuous mode [ 81.182637][ T4699] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.135'. [ 81.223716][ T4700] netlink: 'syz.1.136': attribute type 29 has an invalid length. [ 81.270265][ T4700] netlink: 'syz.1.136': attribute type 29 has an invalid length. [ 81.301329][ T4703] netlink: 'syz.1.136': attribute type 29 has an invalid length. [ 81.372454][ T4700] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 81.437909][ T4700] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.136'. [ 82.140273][ T4723] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.143'. [ 82.507133][ T4733] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.145'. [ 83.050643][ T4744] team0: Device nlmon0 is of different type [ 83.141323][ T4730] syz.2.146 (4730) used greatest stack depth: 17760 bytes left [ 83.162921][ T4753] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.151'. [ 83.935470][ T4764] device syzkaller0 entered promiscuous mode [ 84.099459][ T4784] validate_nla: 3 callbacks suppressed [ 84.099491][ T4784] netlink: 'syz.0.161': attribute type 21 has an invalid length. [ 84.122606][ T4784] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 84.130682][ T4784] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.161'. [ 84.424362][ T4792] netlink: 'syz.2.165': attribute type 3 has an invalid length. [ 84.450550][ T4792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'. [ 84.793879][ T4804] netlink: 'syz.0.168': attribute type 21 has an invalid length. [ 84.817405][ T4804] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.168'. [ 85.147131][ T4821] netlink: 'syz.0.174': attribute type 21 has an invalid length. [ 85.186993][ T4821] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 85.202575][ T4830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.232948][ T4821] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.174'. [ 85.427214][ T4831] device syzkaller0 entered promiscuous mode [ 85.516707][ T4840] netlink: 'syz.2.190': attribute type 21 has an invalid length. [ 85.536939][ T4840] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 85.569804][ T4840] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.190'. [ 85.611122][ T4845] netlink: 'syz.4.180': attribute type 3 has an invalid length. [ 85.621296][ T4845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.180'. [ 86.720127][ T4874] netlink: 'syz.1.191': attribute type 21 has an invalid length. [ 86.730944][ T4874] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.191'. [ 86.840043][ T4878] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.195'. [ 86.940757][ T4882] device syzkaller0 entered promiscuous mode [ 87.513873][ T4901] __nla_validate_parse: 1 callbacks suppressed [ 87.513888][ T4901] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.202'. [ 88.177962][ T4909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.204'. [ 88.883050][ T4930] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.213'. [ 88.900249][ T4932] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.212'. [ 89.137019][ T4943] device syzkaller0 entered promiscuous mode [ 89.224737][ T4944] validate_nla: 10 callbacks suppressed [ 89.224753][ T4944] netlink: 'syz.3.217': attribute type 3 has an invalid length. [ 89.244827][ T4944] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.217'. [ 90.394425][ T4973] device syzkaller0 entered promiscuous mode [ 90.419996][ T4975] netlink: 'syz.3.232': attribute type 3 has an invalid length. [ 90.543136][ T4975] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.232'. [ 91.226834][ T4980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.227'. [ 91.329835][ T4984] netlink: 'syz.0.226': attribute type 21 has an invalid length. [ 91.336616][ T4989] netlink: 'syz.1.229': attribute type 21 has an invalid length. [ 91.350229][ T4984] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 91.358832][ T4984] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.226'. [ 91.380694][ T4989] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 91.401814][ T4989] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.229'. [ 91.454916][ T4994] netlink: 180 bytes leftover after parsing attributes in process `syz.2.227'. [ 91.690440][ T5006] netlink: 'syz.4.234': attribute type 21 has an invalid length. [ 91.701637][ T5006] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 91.736297][ T5004] device syzkaller0 entered promiscuous mode [ 91.903974][ T5018] device syzkaller0 entered promiscuous mode [ 92.906756][ T5033] netlink: 'syz.1.245': attribute type 21 has an invalid length. [ 93.014750][ T5033] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 93.037611][ T5033] __nla_validate_parse: 2 callbacks suppressed [ 93.037645][ T5033] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.245'. [ 93.130288][ T5049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.250'. [ 93.282501][ T5048] netlink: 180 bytes leftover after parsing attributes in process `syz.0.249'. [ 93.332367][ T5049] netlink: 180 bytes leftover after parsing attributes in process `syz.4.250'. [ 93.709358][ T5068] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.254'. [ 93.869550][ T5076] device syzkaller0 entered promiscuous mode [ 93.967010][ T5081] device syzkaller0 entered promiscuous mode [ 94.208306][ T5088] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.263'. [ 94.982750][ T5099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.269'. [ 95.107508][ T5099] netlink: 180 bytes leftover after parsing attributes in process `syz.3.269'. [ 95.204338][ T5116] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.282'. [ 95.715126][ T5122] validate_nla: 4 callbacks suppressed [ 95.715178][ T5122] netlink: 'syz.4.276': attribute type 21 has an invalid length. [ 95.753243][ T5126] netlink: 'syz.0.273': attribute type 21 has an invalid length. [ 95.764117][ T5122] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 95.772824][ T5126] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 95.811945][ T5126] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.273'. [ 96.031125][ T5133] device syzkaller0 entered promiscuous mode [ 97.065845][ T5156] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 97.175424][ T5160] FAULT_INJECTION: forcing a failure. [ 97.175424][ T5160] name failslab, interval 1, probability 0, space 0, times 1 [ 97.222746][ T5160] CPU: 0 PID: 5160 Comm: syz.0.287 Not tainted syzkaller #0 [ 97.230105][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.240207][ T5160] Call Trace: [ 97.243517][ T5160] [ 97.246470][ T5160] dump_stack_lvl+0x188/0x250 [ 97.251207][ T5160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.257400][ T5160] ? show_regs_print_info+0x20/0x20 [ 97.262635][ T5160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.268898][ T5160] should_fail+0x383/0x4b0 [ 97.273376][ T5160] should_failslab+0x5/0x20 [ 97.277901][ T5160] slab_pre_alloc_hook+0x51/0xc0 [ 97.282877][ T5160] __kmalloc+0x6b/0x340 [ 97.287060][ T5160] ? tomoyo_encode+0x28a/0x550 [ 97.291884][ T5160] tomoyo_encode+0x28a/0x550 [ 97.296531][ T5160] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 97.302253][ T5160] tomoyo_path_number_perm+0x251/0x6b0 [ 97.307756][ T5160] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 97.313253][ T5160] ? perf_trace_lock+0x301/0x390 [ 97.318296][ T5160] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.324390][ T5160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 97.330638][ T5160] security_file_ioctl+0x6c/0xa0 [ 97.335624][ T5160] __se_sys_ioctl+0x48/0x170 [ 97.340257][ T5160] do_syscall_64+0x4c/0xa0 [ 97.344703][ T5160] ? clear_bhb_loop+0x30/0x80 [ 97.349407][ T5160] ? clear_bhb_loop+0x30/0x80 [ 97.354123][ T5160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.360057][ T5160] RIP: 0033:0x7f95b95b7e59 [ 97.364508][ T5160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.384147][ T5160] RSP: 002b:00007f95b7811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.392607][ T5160] RAX: ffffffffffffffda RBX: 00007f95b9830fa0 RCX: 00007f95b95b7e59 [ 97.397918][ T5164] netlink: 'syz.1.291': attribute type 21 has an invalid length. [ 97.400603][ T5160] RDX: 0000000000000005 RSI: 0000000000002405 RDI: 0000000000000006 [ 97.400631][ T5160] RBP: 00007f95b7811090 R08: 0000000000000000 R09: 0000000000000000 [ 97.400646][ T5160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.400661][ T5160] R13: 00007f95b9831038 R14: 00007f95b9830fa0 R15: 00007ffeead9df08 [ 97.400740][ T5160] [ 97.498523][ T5164] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 97.612529][ T5160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.149811][ T5184] device syzkaller0 entered promiscuous mode [ 98.437261][ T5192] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 98.483320][ T5192] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 98.516937][ T5192] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 99.073290][ T5192] __nla_validate_parse: 3 callbacks suppressed [ 99.073337][ T5192] netlink: 10 bytes leftover after parsing attributes in process `syz.3.300'. [ 99.410866][ T5204] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.304'. [ 100.000926][ T5238] device syzkaller0 entered promiscuous mode [ 100.663651][ T5247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.671544][ T5247] IPv6: NLM_F_CREATE should be set when creating new route [ 100.678844][ T5247] IPv6: NLM_F_CREATE should be set when creating new route [ 100.686120][ T5247] IPv6: NLM_F_CREATE should be set when creating new route [ 100.851826][ T5250] validate_nla: 3 callbacks suppressed [ 100.851856][ T5250] netlink: 'syz.3.320': attribute type 21 has an invalid length. [ 100.878150][ T5250] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 100.898647][ T5250] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.320'. [ 101.897534][ T5288] syz.0.331 uses obsolete (PF_INET,SOCK_PACKET) [ 102.225363][ T5299] netlink: 'syz.4.336': attribute type 21 has an invalid length. [ 102.242410][ T5299] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 102.261234][ T5299] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.336'. [ 102.387274][ T5300] device syzkaller0 entered promiscuous mode [ 102.516535][ T5311] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 102.605476][ T5314] device macsec0 entered promiscuous mode [ 102.635034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.339647][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 103.439925][ T5336] netlink: 'syz.4.349': attribute type 21 has an invalid length. [ 103.490382][ T5336] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 103.548674][ T5341] FAULT_INJECTION: forcing a failure. [ 103.548674][ T5341] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.561644][ T5336] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.349'. [ 103.598631][ T5341] CPU: 0 PID: 5341 Comm: syz.3.351 Not tainted syzkaller #0 [ 103.605962][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.616020][ T5341] Call Trace: [ 103.619297][ T5341] [ 103.622230][ T5341] dump_stack_lvl+0x188/0x250 [ 103.626926][ T5341] ? show_regs_print_info+0x20/0x20 [ 103.632131][ T5341] ? load_image+0x410/0x410 [ 103.636632][ T5341] ? __lock_acquire+0x7b50/0x7b50 [ 103.641655][ T5341] ? aa_label_sk_perm+0x3e6/0x540 [ 103.646679][ T5341] should_fail+0x383/0x4b0 [ 103.651102][ T5341] _copy_from_user+0x2e/0x170 [ 103.655781][ T5341] tcp_setsockopt+0x645/0x1e60 [ 103.660555][ T5341] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 103.665927][ T5341] ? mutex_lock_io_nested+0x60/0x60 [ 103.671127][ T5341] ? __lock_acquire+0x7b50/0x7b50 [ 103.676156][ T5341] ? sock_common_setsockopt+0x32/0xb0 [ 103.681531][ T5341] ? sock_common_recvmsg+0x1c0/0x1c0 [ 103.686823][ T5341] smc_setsockopt+0x1b7/0xa30 [ 103.691510][ T5341] ? smc_shutdown+0x5c0/0x5c0 [ 103.696185][ T5341] ? aa_sock_opt_perm+0x74/0x100 [ 103.701119][ T5341] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 103.706677][ T5341] ? security_socket_setsockopt+0x7a/0xa0 [ 103.712410][ T5341] ? smc_shutdown+0x5c0/0x5c0 [ 103.717106][ T5341] __sys_setsockopt+0x2bf/0x3d0 [ 103.721972][ T5341] __x64_sys_setsockopt+0xb1/0xc0 [ 103.727009][ T5341] do_syscall_64+0x4c/0xa0 [ 103.731425][ T5341] ? clear_bhb_loop+0x30/0x80 [ 103.736101][ T5341] ? clear_bhb_loop+0x30/0x80 [ 103.740779][ T5341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.747382][ T5341] RIP: 0033:0x7fd287755e59 [ 103.751813][ T5341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.771512][ T5341] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.780053][ T5341] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 103.788127][ T5341] RDX: 000000000000000a RSI: 0000000000000006 RDI: 0000000000000003 [ 103.796099][ T5341] RBP: 00007fd2859af090 R08: 0000000000000004 R09: 0000000000000000 [ 103.804070][ T5341] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 103.812056][ T5341] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 103.820208][ T5341] [ 104.887384][ T5367] device syzkaller0 entered promiscuous mode [ 105.122018][ T5371] team0: Port device team_slave_0 removed [ 105.959083][ T5377] netlink: 'syz.4.363': attribute type 21 has an invalid length. [ 106.011842][ T5377] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 106.039017][ T5377] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.363'. [ 107.282348][ T5416] device syzkaller0 entered promiscuous mode [ 107.297852][ T5412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.374'. [ 107.782613][ T5419] delete_channel: no stack [ 107.977157][ T5427] netlink: 'syz.0.379': attribute type 21 has an invalid length. [ 108.084188][ T5427] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 108.123034][ T5427] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.379'. [ 108.423891][ T5440] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.385'. [ 109.982653][ T5471] netlink: 'syz.4.396': attribute type 21 has an invalid length. [ 110.033008][ T5471] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 110.094239][ T5471] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.396'. [ 110.255681][ T5477] device syzkaller0 entered promiscuous mode [ 110.540239][ T5492] bridge0: port 3(syz_tun) entered blocking state [ 110.559229][ T5492] bridge0: port 3(syz_tun) entered disabled state [ 110.626449][ T5492] device syz_tun entered promiscuous mode [ 110.663628][ T5492] bridge0: port 3(syz_tun) entered blocking state [ 110.670666][ T5492] bridge0: port 3(syz_tun) entered forwarding state [ 110.907970][ T5504] netlink: 156 bytes leftover after parsing attributes in process `syz.2.404'. [ 111.915276][ T5525] netlink: 'syz.0.412': attribute type 21 has an invalid length. [ 112.013600][ T5525] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 112.094823][ T5525] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.412'. [ 112.539809][ T5538] device syzkaller0 entered promiscuous mode [ 113.180662][ T5559] FAULT_INJECTION: forcing a failure. [ 113.180662][ T5559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.220253][ T5559] CPU: 1 PID: 5559 Comm: syz.4.423 Not tainted syzkaller #0 [ 113.227582][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.237654][ T5559] Call Trace: [ 113.240940][ T5559] [ 113.243872][ T5559] dump_stack_lvl+0x188/0x250 [ 113.248555][ T5559] ? show_regs_print_info+0x20/0x20 [ 113.253755][ T5559] ? load_image+0x410/0x410 [ 113.258261][ T5559] ? __lock_acquire+0x7b50/0x7b50 [ 113.263285][ T5559] ? bpf_test_run+0x78e/0x800 [ 113.268060][ T5559] should_fail+0x383/0x4b0 [ 113.272489][ T5559] _copy_to_user+0x2e/0x130 [ 113.277014][ T5559] bpf_test_finish+0x1e6/0x2f0 [ 113.281781][ T5559] ? convert_skb_to___skb+0x360/0x360 [ 113.287161][ T5559] ? convert_skb_to___skb+0x1ff/0x360 [ 113.292540][ T5559] bpf_prog_test_run_skb+0xbc0/0x1190 [ 113.297936][ T5559] ? cpu_online+0x60/0x60 [ 113.302282][ T5559] bpf_prog_test_run+0x31c/0x390 [ 113.307241][ T5559] __sys_bpf+0x5a5/0x6f0 [ 113.311579][ T5559] ? bpf_link_show_fdinfo+0x380/0x380 [ 113.316970][ T5559] __x64_sys_bpf+0x78/0x90 [ 113.321419][ T5559] do_syscall_64+0x4c/0xa0 [ 113.325848][ T5559] ? clear_bhb_loop+0x30/0x80 [ 113.330690][ T5559] ? clear_bhb_loop+0x30/0x80 [ 113.335391][ T5559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.335439][ T5563] netlink: 'syz.2.425': attribute type 21 has an invalid length. [ 113.341302][ T5559] RIP: 0033:0x7f5799a8ee59 [ 113.341329][ T5559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.341340][ T5559] RSP: 002b:00007f5797ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.341359][ T5559] RAX: ffffffffffffffda RBX: 00007f5799d07fa0 RCX: 00007f5799a8ee59 [ 113.341371][ T5559] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 113.341382][ T5559] RBP: 00007f5797ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 113.341392][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.341403][ T5559] R13: 00007f5799d08038 R14: 00007f5799d07fa0 R15: 00007ffed5337f88 [ 113.341429][ T5559] [ 113.350534][ T5563] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 113.436189][ T5563] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.425'. [ 114.410294][ T5599] netlink: 'syz.1.438': attribute type 21 has an invalid length. [ 114.572566][ T5599] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 114.593110][ T5604] netlink: 'syz.2.440': attribute type 4 has an invalid length. [ 114.612347][ T5599] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.438'. [ 114.628373][ T5604] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.440'. [ 114.705134][ T5607] device syzkaller0 entered promiscuous mode [ 115.461130][ T5619] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.444'. [ 115.785992][ T5619] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.444'. [ 116.268435][ T5644] FAULT_INJECTION: forcing a failure. [ 116.268435][ T5644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.339653][ T5644] CPU: 0 PID: 5644 Comm: syz.0.452 Not tainted syzkaller #0 [ 116.346967][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.357012][ T5644] Call Trace: [ 116.360276][ T5644] [ 116.363188][ T5644] dump_stack_lvl+0x188/0x250 [ 116.367863][ T5644] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.374003][ T5644] ? show_regs_print_info+0x20/0x20 [ 116.379179][ T5644] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.385322][ T5644] should_fail+0x383/0x4b0 [ 116.389726][ T5644] strncpy_from_user+0x32/0x350 [ 116.394563][ T5644] bpf_prog_load+0x1fd/0x14e0 [ 116.399224][ T5644] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.405192][ T5644] ? map_freeze+0x360/0x360 [ 116.409675][ T5644] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.415809][ T5644] ? lockdep_hardirqs_on+0x94/0x140 [ 116.421002][ T5644] ? bpf_lsm_bpf+0x5/0x10 [ 116.425315][ T5644] ? security_bpf+0x7a/0xa0 [ 116.429805][ T5644] __sys_bpf+0x532/0x6f0 [ 116.434032][ T5644] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.439396][ T5644] __x64_sys_bpf+0x78/0x90 [ 116.443794][ T5644] do_syscall_64+0x4c/0xa0 [ 116.448190][ T5644] ? clear_bhb_loop+0x30/0x80 [ 116.452845][ T5644] ? clear_bhb_loop+0x30/0x80 [ 116.457507][ T5644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.463382][ T5644] RIP: 0033:0x7f95b95b7e59 [ 116.467781][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.487371][ T5644] RSP: 002b:00007f95b7811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.495781][ T5644] RAX: ffffffffffffffda RBX: 00007f95b9830fa0 RCX: 00007f95b95b7e59 [ 116.503735][ T5644] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 116.511686][ T5644] RBP: 00007f95b7811090 R08: 0000000000000000 R09: 0000000000000000 [ 116.519634][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.527583][ T5644] R13: 00007f95b9831038 R14: 00007f95b9830fa0 R15: 00007ffeead9df08 [ 116.535545][ T5644] [ 116.595686][ T5644] netlink: 'syz.0.452': attribute type 3 has an invalid length. [ 116.613188][ T5644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.452'. [ 116.666636][ T5648] netlink: 'syz.3.454': attribute type 21 has an invalid length. [ 116.681666][ T5648] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 116.696502][ T5648] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.454'. [ 116.964059][ T5663] device syzkaller0 entered promiscuous mode [ 120.224274][ T5690] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.468'. [ 120.243254][ T5691] netlink: 'syz.2.469': attribute type 2 has an invalid length. [ 120.300960][ T5693] netlink: 'syz.4.470': attribute type 21 has an invalid length. [ 120.310029][ T5691] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 120.320615][ T5693] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 120.344039][ T5695] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 120.372649][ T5695] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.469'. [ 120.383411][ T5693] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.470'. [ 120.534326][ T5704] sctp: [Deprecated]: syz.1.473 (pid 5704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.534326][ T5704] Use struct sctp_sack_info instead [ 120.594685][ T5704] FAULT_INJECTION: forcing a failure. [ 120.594685][ T5704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.709468][ T5704] CPU: 0 PID: 5704 Comm: syz.1.473 Not tainted syzkaller #0 [ 120.716822][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.726904][ T5704] Call Trace: [ 120.730205][ T5704] [ 120.733151][ T5704] dump_stack_lvl+0x188/0x250 [ 120.737868][ T5704] ? show_regs_print_info+0x20/0x20 [ 120.743094][ T5704] ? load_image+0x410/0x410 [ 120.747649][ T5704] ? __lock_acquire+0x7b50/0x7b50 [ 120.752733][ T5704] should_fail+0x383/0x4b0 [ 120.757199][ T5704] _copy_to_user+0x2e/0x130 [ 120.761737][ T5704] simple_read_from_buffer+0xe3/0x150 [ 120.767150][ T5704] proc_fail_nth_read+0x1a6/0x220 [ 120.772218][ T5704] ? proc_fault_inject_write+0x310/0x310 [ 120.777893][ T5704] ? fsnotify_perm+0x254/0x560 [ 120.782685][ T5704] ? proc_fault_inject_write+0x310/0x310 [ 120.788354][ T5704] vfs_read+0x2ff/0xd50 [ 120.792564][ T5704] ? __lock_acquire+0x7b50/0x7b50 [ 120.797640][ T5704] ? kernel_read+0x1e0/0x1e0 [ 120.802341][ T5704] ? mutex_lock_nested+0x17/0x20 [ 120.807310][ T5704] ? __fdget_pos+0x2bf/0x370 [ 120.811916][ T5704] ? ksys_read+0x70/0x260 [ 120.816284][ T5704] ksys_read+0x153/0x260 [ 120.820566][ T5704] ? vfs_write+0xd70/0xd70 [ 120.825030][ T5704] ? syscall_enter_from_user_mode+0x2a/0x70 [ 120.830963][ T5704] do_syscall_64+0x4c/0xa0 [ 120.835398][ T5704] ? clear_bhb_loop+0x30/0x80 [ 120.840110][ T5704] ? clear_bhb_loop+0x30/0x80 [ 120.844832][ T5704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.850753][ T5704] RIP: 0033:0x7f21edc2668e [ 120.855197][ T5704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.874944][ T5704] RSP: 002b:00007f21ebebefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.883407][ T5704] RAX: ffffffffffffffda RBX: 00007f21ebebf6c0 RCX: 00007f21edc2668e [ 120.891410][ T5704] RDX: 000000000000000f RSI: 00007f21ebebf0a0 RDI: 0000000000000007 [ 120.899407][ T5704] RBP: 00007f21ebebf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.907403][ T5704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.915403][ T5704] R13: 00007f21ededf038 R14: 00007f21ededefa0 R15: 00007fffbcf02aa8 [ 120.923469][ T5704] [ 121.004163][ T5711] sctp: [Deprecated]: syz.2.475 (pid 5711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.004163][ T5711] Use struct sctp_sack_info instead [ 121.369632][ T5719] device syzkaller0 entered promiscuous mode [ 121.520826][ T5728] netlink: 'syz.4.482': attribute type 21 has an invalid length. [ 121.549259][ T5728] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 121.621688][ T5728] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.482'. [ 121.831693][ T5737] sctp: [Deprecated]: syz.4.484 (pid 5737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.831693][ T5737] Use struct sctp_sack_info instead [ 121.924554][ T5739] netlink: 'syz.4.485': attribute type 3 has an invalid length. [ 121.934968][ T5739] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.485'. [ 122.108057][ T5750] FAULT_INJECTION: forcing a failure. [ 122.108057][ T5750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.132215][ T5750] CPU: 1 PID: 5750 Comm: syz.2.489 Not tainted syzkaller #0 [ 122.139551][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.149625][ T5750] Call Trace: [ 122.152925][ T5750] [ 122.155874][ T5750] dump_stack_lvl+0x188/0x250 [ 122.160592][ T5750] ? show_regs_print_info+0x20/0x20 [ 122.165820][ T5750] ? load_image+0x410/0x410 [ 122.170359][ T5750] ? __lock_acquire+0x7b50/0x7b50 [ 122.175402][ T5750] ? __alloc_skb+0x473/0x750 [ 122.180037][ T5750] should_fail+0x383/0x4b0 [ 122.184496][ T5750] _copy_from_iter+0x234/0x1160 [ 122.189383][ T5750] ? __lock_acquire+0x7b50/0x7b50 [ 122.194455][ T5750] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 122.199887][ T5750] ? __virt_addr_valid+0x3c6/0x470 [ 122.205040][ T5750] ? __check_object_size+0x30c/0x410 [ 122.210360][ T5750] skb_copy_datagram_from_iter+0xf1/0x6c0 [ 122.216119][ T5750] ? skb_put+0x10e/0x200 [ 122.220397][ T5750] tun_get_user+0xb28/0x3b40 [ 122.225017][ T5750] ? perf_trace_lock+0x301/0x390 [ 122.230000][ T5750] ? trace_event_raw_event_lock+0x250/0x250 [ 122.236026][ T5750] ? tun_ring_recv+0xc90/0xc90 [ 122.240839][ T5750] ? rcu_lock_release+0x5/0x20 [ 122.245654][ T5750] ? __lock_acquire+0x7b50/0x7b50 [ 122.250708][ T5750] ? trace_event_raw_event_lock+0x250/0x250 [ 122.256665][ T5750] tun_chr_write_iter+0x112/0x1e0 [ 122.261725][ T5750] vfs_write+0x748/0xd70 [ 122.266015][ T5750] ? file_end_write+0x250/0x250 [ 122.270910][ T5750] ? __fget_files+0x402/0x470 [ 122.275627][ T5750] ? __fdget_pos+0x1e2/0x370 [ 122.280229][ T5750] ? ksys_write+0x70/0x260 [ 122.284674][ T5750] ksys_write+0x153/0x260 [ 122.289033][ T5750] ? __ia32_sys_read+0x80/0x80 [ 122.293823][ T5750] ? lockdep_hardirqs_on+0x94/0x140 [ 122.299056][ T5750] do_syscall_64+0x4c/0xa0 [ 122.303575][ T5750] ? clear_bhb_loop+0x30/0x80 [ 122.308265][ T5750] ? clear_bhb_loop+0x30/0x80 [ 122.312960][ T5750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.318872][ T5750] RIP: 0033:0x7fd71e17fe59 [ 122.323313][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.342937][ T5750] RSP: 002b:00007fd71c3d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.351379][ T5750] RAX: ffffffffffffffda RBX: 00007fd71e3f8fa0 RCX: 00007fd71e17fe59 [ 122.359367][ T5750] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 122.367353][ T5750] RBP: 00007fd71c3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 122.375340][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.383322][ T5750] R13: 00007fd71e3f9038 R14: 00007fd71e3f8fa0 R15: 00007ffd91564738 [ 122.391358][ T5750] [ 122.591114][ T5764] netlink: 'syz.0.494': attribute type 21 has an invalid length. [ 122.626092][ T5764] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 122.652447][ T5770] FAULT_INJECTION: forcing a failure. [ 122.652447][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 122.686530][ T5764] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.494'. [ 122.765099][ T5770] CPU: 1 PID: 5770 Comm: syz.2.496 Not tainted syzkaller #0 [ 122.772441][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.782520][ T5770] Call Trace: [ 122.785824][ T5770] [ 122.788783][ T5770] dump_stack_lvl+0x188/0x250 [ 122.793501][ T5770] ? show_regs_print_info+0x20/0x20 [ 122.798730][ T5770] ? load_image+0x410/0x410 [ 122.803284][ T5770] ? __might_sleep+0xf0/0xf0 [ 122.807913][ T5770] ? __lock_acquire+0x7b50/0x7b50 [ 122.812986][ T5770] should_fail+0x383/0x4b0 [ 122.817466][ T5770] should_failslab+0x5/0x20 [ 122.821998][ T5770] slab_pre_alloc_hook+0x51/0xc0 [ 122.826974][ T5770] __kmalloc_node_track_caller+0x68/0x3a0 [ 122.832723][ T5770] ? netlink_sendmsg+0x654/0xbe0 [ 122.837696][ T5770] ? __alloc_skb+0xf4/0x750 [ 122.842250][ T5770] ? netlink_sendmsg+0x654/0xbe0 [ 122.847227][ T5770] __alloc_skb+0x22c/0x750 [ 122.851696][ T5770] netlink_sendmsg+0x654/0xbe0 [ 122.856528][ T5770] ? netlink_getsockopt+0x570/0x570 [ 122.861774][ T5770] ? aa_sock_msg_perm+0x94/0x150 [ 122.866757][ T5770] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 122.872068][ T5770] ? security_socket_sendmsg+0x7c/0xa0 [ 122.877554][ T5770] ? netlink_getsockopt+0x570/0x570 [ 122.882800][ T5770] ____sys_sendmsg+0x5be/0x8f0 [ 122.887642][ T5770] ? __sys_sendmsg_sock+0x30/0x30 [ 122.892738][ T5770] ? import_iovec+0x6f/0xa0 [ 122.897297][ T5770] ___sys_sendmsg+0x236/0x2e0 [ 122.902043][ T5770] ? __sys_sendmsg+0x290/0x290 [ 122.906883][ T5770] ? trace_event_raw_event_lock+0x250/0x250 [ 122.913076][ T5770] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.918064][ T5770] ? __x64_sys_sendmsg+0x80/0x80 [ 122.923035][ T5770] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.929098][ T5770] ? lockdep_hardirqs_on+0x94/0x140 [ 122.934352][ T5770] do_syscall_64+0x4c/0xa0 [ 122.938796][ T5770] ? clear_bhb_loop+0x30/0x80 [ 122.943682][ T5770] ? clear_bhb_loop+0x30/0x80 [ 122.948398][ T5770] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.954322][ T5770] RIP: 0033:0x7fd71e17fe59 [ 122.958768][ T5770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.978409][ T5770] RSP: 002b:00007fd71c3d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.986860][ T5770] RAX: ffffffffffffffda RBX: 00007fd71e3f8fa0 RCX: 00007fd71e17fe59 [ 122.994857][ T5770] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 123.002850][ T5770] RBP: 00007fd71c3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 123.010842][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.018837][ T5770] R13: 00007fd71e3f9038 R14: 00007fd71e3f8fa0 R15: 00007ffd91564738 [ 123.026897][ T5770] [ 123.780458][ T5798] team0: Port device team_slave_0 removed [ 123.805932][ T5800] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.506'. [ 123.809561][ T5804] device syzkaller0 entered promiscuous mode [ 123.970299][ T5810] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.509'. [ 124.137653][ T5821] FAULT_INJECTION: forcing a failure. [ 124.137653][ T5821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.162101][ T5821] CPU: 0 PID: 5821 Comm: syz.3.514 Not tainted syzkaller #0 [ 124.169570][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.179654][ T5821] Call Trace: [ 124.182963][ T5821] [ 124.185915][ T5821] dump_stack_lvl+0x188/0x250 [ 124.190638][ T5821] ? show_regs_print_info+0x20/0x20 [ 124.195861][ T5821] ? load_image+0x410/0x410 [ 124.200406][ T5821] ? __lock_acquire+0x7b50/0x7b50 [ 124.205483][ T5821] should_fail+0x383/0x4b0 [ 124.209955][ T5821] _copy_from_user+0x2e/0x170 [ 124.214675][ T5821] sctp_setsockopt+0x191/0xf80 [ 124.219479][ T5821] ? sock_common_recvmsg+0x1c0/0x1c0 [ 124.224808][ T5821] __sys_setsockopt+0x2bf/0x3d0 [ 124.229707][ T5821] __x64_sys_setsockopt+0xb1/0xc0 [ 124.234769][ T5821] do_syscall_64+0x4c/0xa0 [ 124.239205][ T5821] ? clear_bhb_loop+0x30/0x80 [ 124.243904][ T5821] ? clear_bhb_loop+0x30/0x80 [ 124.248616][ T5821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.254537][ T5821] RIP: 0033:0x7fd287755e59 [ 124.258982][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.278608][ T5821] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.287055][ T5821] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 124.295050][ T5821] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000005 [ 124.303025][ T5821] RBP: 00007fd2859af090 R08: 0000000000000008 R09: 0000000000000000 [ 124.311015][ T5821] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.318990][ T5821] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 124.327012][ T5821] [ 124.983335][ T5839] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.518'. [ 125.255306][ T5853] netlink: 202684 bytes leftover after parsing attributes in process `syz.4.524'. [ 125.291141][ T5849] validate_nla: 3 callbacks suppressed [ 125.291187][ T5849] netlink: 'syz.3.523': attribute type 21 has an invalid length. [ 125.316266][ T5849] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 125.327522][ T5849] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.523'. [ 125.403772][ T5859] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 125.458398][ T5859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.527'. [ 125.486044][ T5859] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 125.525871][ T5859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.681172][ T5873] device syzkaller0 entered promiscuous mode [ 126.126526][ T5894] netlink: 144 bytes leftover after parsing attributes in process `syz.4.538'. [ 126.141115][ T5893] netlink: 'syz.1.539': attribute type 21 has an invalid length. [ 126.179358][ T5893] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 126.203273][ T5893] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.539'. [ 126.215826][ T5899] netlink: 2 bytes leftover after parsing attributes in process `syz.0.540'. [ 127.266870][ T5938] netlink: 399 bytes leftover after parsing attributes in process `syz.4.553'. [ 127.309323][ T5939] netlink: 'syz.1.554': attribute type 21 has an invalid length. [ 127.378287][ T5939] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 127.419857][ T5939] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.554'. [ 127.483015][ T5946] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 127.578840][ T5946] team0: Port device geneve1 added [ 127.690766][ T5951] device syzkaller0 entered promiscuous mode [ 128.101006][ T5966] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 128.746388][ T5987] netlink: 'syz.0.569': attribute type 21 has an invalid length. [ 128.756114][ T5987] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.569'. [ 128.922399][ T5992] FAULT_INJECTION: forcing a failure. [ 128.922399][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 128.981224][ T5992] CPU: 1 PID: 5992 Comm: syz.3.570 Not tainted syzkaller #0 [ 128.988556][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.998746][ T5992] Call Trace: [ 129.002030][ T5992] [ 129.004957][ T5992] dump_stack_lvl+0x188/0x250 [ 129.009629][ T5992] ? show_regs_print_info+0x20/0x20 [ 129.014814][ T5992] ? load_image+0x410/0x410 [ 129.019311][ T5992] ? __might_sleep+0xf0/0xf0 [ 129.023887][ T5992] ? __lock_acquire+0x7b50/0x7b50 [ 129.028909][ T5992] ? netlink_insert+0xe90/0x11f0 [ 129.033835][ T5992] should_fail+0x383/0x4b0 [ 129.038243][ T5992] should_failslab+0x5/0x20 [ 129.042727][ T5992] slab_pre_alloc_hook+0x51/0xc0 [ 129.047648][ T5992] kmem_cache_alloc_node+0x47/0x2c0 [ 129.052825][ T5992] ? __alloc_skb+0xf4/0x750 [ 129.057317][ T5992] __alloc_skb+0xf4/0x750 [ 129.061632][ T5992] netlink_sendmsg+0x654/0xbe0 [ 129.066509][ T5992] ? netlink_getsockopt+0x570/0x570 [ 129.071707][ T5992] ? rcu_nmi_exit+0x6f/0xf0 [ 129.076212][ T5992] ? aa_sock_msg_perm+0x94/0x150 [ 129.081139][ T5992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.086409][ T5992] ? security_socket_sendmsg+0x7c/0xa0 [ 129.091853][ T5992] ? netlink_getsockopt+0x570/0x570 [ 129.097033][ T5992] ____sys_sendmsg+0x5be/0x8f0 [ 129.101788][ T5992] ? __sys_sendmsg_sock+0x30/0x30 [ 129.106799][ T5992] ? import_iovec+0x74/0xa0 [ 129.111290][ T5992] ___sys_sendmsg+0x236/0x2e0 [ 129.115955][ T5992] ? __sys_sendmsg+0x290/0x290 [ 129.120710][ T5992] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 129.126426][ T5992] __se_sys_sendmsg+0x1b7/0x2a0 [ 129.131261][ T5992] ? __x64_sys_sendmsg+0x80/0x80 [ 129.136191][ T5992] ? syscall_enter_from_user_mode+0x2a/0x70 [ 129.142068][ T5992] do_syscall_64+0x4c/0xa0 [ 129.146465][ T5992] ? clear_bhb_loop+0x30/0x80 [ 129.151120][ T5992] ? clear_bhb_loop+0x30/0x80 [ 129.155782][ T5992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.161656][ T5992] RIP: 0033:0x7fd287755e59 [ 129.166055][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.185640][ T5992] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.194034][ T5992] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 129.201987][ T5992] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 129.209941][ T5992] RBP: 00007fd2859af090 R08: 0000000000000000 R09: 0000000000000000 [ 129.217893][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.225846][ T5992] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 129.233810][ T5992] [ 129.260517][ T6005] netlink: 144 bytes leftover after parsing attributes in process `syz.1.576'. [ 129.294373][ T6003] device syzkaller0 entered promiscuous mode [ 129.340238][ T6008] FAULT_INJECTION: forcing a failure. [ 129.340238][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 129.368756][ T6008] CPU: 0 PID: 6008 Comm: syz.1.577 Not tainted syzkaller #0 [ 129.376093][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.386156][ T6008] Call Trace: [ 129.389440][ T6008] [ 129.392381][ T6008] dump_stack_lvl+0x188/0x250 [ 129.397071][ T6008] ? show_regs_print_info+0x20/0x20 [ 129.402291][ T6008] ? load_image+0x410/0x410 [ 129.406806][ T6008] ? __might_sleep+0xf0/0xf0 [ 129.411387][ T6008] ? __lock_acquire+0x7b50/0x7b50 [ 129.416396][ T6008] ? __local_bh_enable_ip+0x136/0x1c0 [ 129.421754][ T6008] should_fail+0x383/0x4b0 [ 129.426166][ T6008] should_failslab+0x5/0x20 [ 129.430653][ T6008] slab_pre_alloc_hook+0x51/0xc0 [ 129.435577][ T6008] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 129.441277][ T6008] ? __get_vm_area_node+0x119/0x2d0 [ 129.446460][ T6008] __get_vm_area_node+0x119/0x2d0 [ 129.451473][ T6008] __vmalloc_node_range+0xef/0x8b0 [ 129.456566][ T6008] ? netlink_sendmsg+0x5ec/0xbe0 [ 129.461485][ T6008] ? netlink_data_ready+0x10/0x10 [ 129.466499][ T6008] ? netlink_sendmsg+0x5ec/0xbe0 [ 129.471415][ T6008] vmalloc+0x75/0x80 [ 129.475295][ T6008] ? netlink_sendmsg+0x5ec/0xbe0 [ 129.480213][ T6008] netlink_sendmsg+0x5ec/0xbe0 [ 129.484965][ T6008] ? netlink_getsockopt+0x570/0x570 [ 129.490148][ T6008] ? aa_sock_msg_perm+0x94/0x150 [ 129.495070][ T6008] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.500339][ T6008] ? security_socket_sendmsg+0x7c/0xa0 [ 129.505810][ T6008] sock_write_iter+0x2a6/0x3a0 [ 129.510560][ T6008] ? sock_read_iter+0x380/0x380 [ 129.515398][ T6008] ? memset+0x1e/0x40 [ 129.519366][ T6008] ? iov_iter_init+0xb4/0x170 [ 129.524028][ T6008] vfs_write+0x748/0xd70 [ 129.528261][ T6008] ? file_end_write+0x250/0x250 [ 129.533097][ T6008] ? __fget_files+0x402/0x470 [ 129.537768][ T6008] ? __fdget_pos+0x1e2/0x370 [ 129.542339][ T6008] ? ksys_write+0x70/0x260 [ 129.546736][ T6008] ksys_write+0x153/0x260 [ 129.551055][ T6008] ? __ia32_sys_read+0x80/0x80 [ 129.555809][ T6008] ? lockdep_hardirqs_on+0x94/0x140 [ 129.560993][ T6008] do_syscall_64+0x4c/0xa0 [ 129.565390][ T6008] ? clear_bhb_loop+0x30/0x80 [ 129.570050][ T6008] ? clear_bhb_loop+0x30/0x80 [ 129.574710][ T6008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.580589][ T6008] RIP: 0033:0x7f21edc65e59 [ 129.584990][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.604577][ T6008] RSP: 002b:00007f21ebebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.612978][ T6008] RAX: ffffffffffffffda RBX: 00007f21ededefa0 RCX: 00007f21edc65e59 [ 129.620956][ T6008] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.628909][ T6008] RBP: 00007f21ebebf090 R08: 0000000000000000 R09: 0000000000000000 [ 129.636863][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.644814][ T6008] R13: 00007f21ededf038 R14: 00007f21ededefa0 R15: 00007fffbcf02aa8 [ 129.652781][ T6008] [ 129.676728][ T6008] syz.1.577: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 129.699385][ T6008] CPU: 0 PID: 6008 Comm: syz.1.577 Not tainted syzkaller #0 [ 129.706708][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.716774][ T6008] Call Trace: [ 129.720059][ T6008] [ 129.722998][ T6008] dump_stack_lvl+0x188/0x250 [ 129.727681][ T6008] ? rcu_lock_release+0x5/0x20 [ 129.732461][ T6008] ? show_regs_print_info+0x20/0x20 [ 129.737666][ T6008] ? load_image+0x410/0x410 [ 129.742191][ T6008] warn_alloc+0x245/0x320 [ 129.746537][ T6008] ? zone_watermark_ok_safe+0x250/0x250 [ 129.752096][ T6008] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 129.758081][ T6008] ? __get_vm_area_node+0x119/0x2d0 [ 129.763301][ T6008] __vmalloc_node_range+0x2b1/0x8b0 [ 129.768507][ T6008] ? netlink_data_ready+0x10/0x10 [ 129.773545][ T6008] ? netlink_sendmsg+0x5ec/0xbe0 [ 129.778490][ T6008] vmalloc+0x75/0x80 [ 129.782388][ T6008] ? netlink_sendmsg+0x5ec/0xbe0 [ 129.787319][ T6008] netlink_sendmsg+0x5ec/0xbe0 [ 129.792080][ T6008] ? netlink_getsockopt+0x570/0x570 [ 129.797270][ T6008] ? aa_sock_msg_perm+0x94/0x150 [ 129.802195][ T6008] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.807464][ T6008] ? security_socket_sendmsg+0x7c/0xa0 [ 129.812904][ T6008] sock_write_iter+0x2a6/0x3a0 [ 129.817651][ T6008] ? sock_read_iter+0x380/0x380 [ 129.822490][ T6008] ? memset+0x1e/0x40 [ 129.826455][ T6008] ? iov_iter_init+0xb4/0x170 [ 129.831113][ T6008] vfs_write+0x748/0xd70 [ 129.835340][ T6008] ? file_end_write+0x250/0x250 [ 129.840179][ T6008] ? __fget_files+0x402/0x470 [ 129.844842][ T6008] ? __fdget_pos+0x1e2/0x370 [ 129.849409][ T6008] ? ksys_write+0x70/0x260 [ 129.853806][ T6008] ksys_write+0x153/0x260 [ 129.858117][ T6008] ? __ia32_sys_read+0x80/0x80 [ 129.862947][ T6008] ? lockdep_hardirqs_on+0x94/0x140 [ 129.868130][ T6008] do_syscall_64+0x4c/0xa0 [ 129.872525][ T6008] ? clear_bhb_loop+0x30/0x80 [ 129.877183][ T6008] ? clear_bhb_loop+0x30/0x80 [ 129.881847][ T6008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.887727][ T6008] RIP: 0033:0x7f21edc65e59 [ 129.892126][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.911736][ T6008] RSP: 002b:00007f21ebebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.920146][ T6008] RAX: ffffffffffffffda RBX: 00007f21ededefa0 RCX: 00007f21edc65e59 [ 129.928101][ T6008] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.936051][ T6008] RBP: 00007f21ebebf090 R08: 0000000000000000 R09: 0000000000000000 [ 129.944003][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.951955][ T6008] R13: 00007f21ededf038 R14: 00007f21ededefa0 R15: 00007fffbcf02aa8 [ 129.959922][ T6008] [ 129.966609][ T6008] Mem-Info: [ 129.972636][ T6008] active_anon:272 inactive_anon:5687 isolated_anon:0 [ 129.972636][ T6008] active_file:12839 inactive_file:40637 isolated_file:0 [ 129.972636][ T6008] unevictable:768 dirty:362 writeback:0 [ 129.972636][ T6008] slab_reclaimable:20206 slab_unreclaimable:96312 [ 129.972636][ T6008] mapped:29837 shmem:1631 pagetables:654 bounce:0 [ 129.972636][ T6008] kernel_misc_reclaimable:0 [ 129.972636][ T6008] free:1370700 free_pcp:11053 free_cma:0 [ 130.016494][ T6008] Node 0 active_anon:1056kB inactive_anon:22336kB active_file:51156kB inactive_file:162548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119348kB dirty:1444kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10516kB pagetables:2716kB all_unreclaimable? no [ 130.048419][ T6008] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 130.104242][ T6008] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.130788][ T6008] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 130.136652][ T6008] Node 0 DMA32 free:1543532kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:22336kB active_file:51156kB inactive_file:162548kB unevictable:1536kB writepending:1444kB present:3129332kB managed:2606572kB mlocked:0kB bounce:0kB free_pcp:42636kB local_pcp:21672kB free_cma:0kB [ 130.868078][ T6008] lowmem_reserve[]: 0 0 0 0 0 [ 130.873624][ T6008] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.004071][ T6008] lowmem_reserve[]: 0 0 0 0 0 [ 131.008838][ T6008] Node 1 Normal free:3923908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1624kB local_pcp:1624kB free_cma:0kB [ 131.013659][ T6037] validate_nla: 3 callbacks suppressed [ 131.013680][ T6037] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 131.139212][ T6037] __nla_validate_parse: 2 callbacks suppressed [ 131.139226][ T6037] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.587'. [ 131.155413][ T6008] lowmem_reserve[]: 0 0 0 0 0 [ 131.167243][ T6008] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.211992][ T6008] Node 0 DMA32: 1098*4kB (UME) 922*8kB (UME) 799*16kB (UME) 498*32kB (UME) 479*64kB (UME) 168*128kB (UME) 53*256kB (UME) 17*512kB (UM) 5*1024kB (ME) 2*2048kB (ME) 347*4096kB (M) = 1545448kB [ 131.260859][ T6008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.304457][ T6008] Node 1 Normal: 205*4kB (UME) 40*8kB (UME) 35*16kB (UME) 185*32kB (UME) 76*64kB (UME) 18*128kB (UE) 10*256kB (UME) 2*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 952*4096kB (M) = 3923908kB [ 131.375792][ T6008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.392293][ T6008] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.410172][ T6059] device syzkaller0 entered promiscuous mode [ 131.438676][ T6008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.456464][ T6008] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.468737][ T6008] 55109 total pagecache pages [ 131.486685][ T6008] 0 pages in swap cache [ 131.490977][ T6008] Swap cache stats: add 0, delete 0, find 0/0 [ 131.514683][ T6008] Free swap = 124996kB [ 131.528170][ T6008] Total swap = 124996kB [ 131.540249][ T6008] 2097051 pages RAM [ 131.550961][ T6008] 0 pages HighMem/MovableOnly [ 131.565207][ T6008] 411485 pages reserved [ 131.579563][ T6008] 0 pages cma reserved [ 131.626200][ T6063] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 131.663609][ T6063] bridge0: port 3(syz_tun) entered disabled state [ 131.670698][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.679097][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.801050][ T6063] bridge0: port 3(syz_tun) entered blocking state [ 131.807701][ T6063] bridge0: port 3(syz_tun) entered forwarding state [ 131.815397][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.822549][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.829958][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.837214][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.872808][ T6063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.902991][ T6074] netlink: 'syz.4.597': attribute type 21 has an invalid length. [ 131.948105][ T6074] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 131.981719][ T6074] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.597'. [ 132.301086][ T6084] FAULT_INJECTION: forcing a failure. [ 132.301086][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 132.351982][ T6084] CPU: 1 PID: 6084 Comm: syz.4.601 Not tainted syzkaller #0 [ 132.359335][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.369415][ T6084] Call Trace: [ 132.372714][ T6084] [ 132.375665][ T6084] dump_stack_lvl+0x188/0x250 [ 132.380384][ T6084] ? show_regs_print_info+0x20/0x20 [ 132.385612][ T6084] ? load_image+0x410/0x410 [ 132.390145][ T6084] ? perf_trace_lock+0xe4/0x390 [ 132.395051][ T6084] ? __kasan_kmalloc+0xc6/0xe0 [ 132.399839][ T6084] ? __kasan_kmalloc+0xaf/0xe0 [ 132.404626][ T6084] ? kvmalloc_node+0x84/0x130 [ 132.409340][ T6084] should_fail+0x383/0x4b0 [ 132.413805][ T6084] should_failslab+0x5/0x20 [ 132.418322][ T6084] slab_pre_alloc_hook+0x51/0xc0 [ 132.423298][ T6084] kmem_cache_alloc_trace+0x47/0x290 [ 132.428616][ T6084] ? __hw_addr_add_ex+0x1ed/0x780 [ 132.433705][ T6084] __hw_addr_add_ex+0x1ed/0x780 [ 132.438621][ T6084] dev_addr_init+0x143/0x220 [ 132.443244][ T6084] ? dev_addr_flush+0x200/0x200 [ 132.448173][ T6084] alloc_netdev_mqs+0x110/0xc40 [ 132.453048][ T6084] ? br_netpoll_disable+0x80/0x80 [ 132.458128][ T6084] br_add_bridge+0x35/0xe0 [ 132.462581][ T6084] br_ioctl_stub+0x4f5/0xbe0 [ 132.467222][ T6084] ? rcu_read_unlock+0x90/0x90 [ 132.472024][ T6084] ? sock_ioctl+0x434/0x700 [ 132.476681][ T6084] ? rcu_read_unlock+0x90/0x90 [ 132.481469][ T6084] sock_ioctl+0x453/0x700 [ 132.485835][ T6084] ? sock_poll+0x420/0x420 [ 132.490319][ T6084] ? bpf_lsm_file_ioctl+0x5/0x10 [ 132.495279][ T6084] ? security_file_ioctl+0x7c/0xa0 [ 132.500417][ T6084] ? sock_poll+0x420/0x420 [ 132.504863][ T6084] __se_sys_ioctl+0xfa/0x170 [ 132.509507][ T6084] do_syscall_64+0x4c/0xa0 [ 132.513943][ T6084] ? clear_bhb_loop+0x30/0x80 [ 132.518650][ T6084] ? clear_bhb_loop+0x30/0x80 [ 132.523364][ T6084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.529285][ T6084] RIP: 0033:0x7f5799a8ee59 [ 132.533729][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.553355][ T6084] RSP: 002b:00007f5797ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.561800][ T6084] RAX: ffffffffffffffda RBX: 00007f5799d07fa0 RCX: 00007f5799a8ee59 [ 132.569793][ T6084] RDX: 0000200000000080 RSI: 00000000000089a0 RDI: 0000000000000005 [ 132.577788][ T6084] RBP: 00007f5797ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 132.585785][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.593781][ T6084] R13: 00007f5799d08038 R14: 00007f5799d07fa0 R15: 00007ffed5337f88 [ 132.601840][ T6084] [ 132.675400][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.681835][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958059][ T6090] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 132.999381][ T6093] netlink: 'syz.4.603': attribute type 11 has an invalid length. [ 133.011564][ T6090] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.603'. [ 133.033564][ T6093] netlink: 140 bytes leftover after parsing attributes in process `syz.4.603'. [ 133.262569][ T6111] netlink: 'syz.1.611': attribute type 21 has an invalid length. [ 133.276207][ T6111] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 133.350426][ T6111] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.611'. [ 133.491144][ T6119] netlink: 'syz.3.610': attribute type 4 has an invalid length. [ 133.519566][ T6119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.610'. [ 133.560902][ T6119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.644988][ T6128] device syzkaller0 entered promiscuous mode [ 134.121419][ T6139] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.619'. [ 134.725181][ T6156] netlink: 'syz.1.627': attribute type 21 has an invalid length. [ 134.755169][ T6156] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.627'. [ 135.463256][ T6183] device syzkaller0 entered promiscuous mode [ 135.853483][ T6196] FAULT_INJECTION: forcing a failure. [ 135.853483][ T6196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.907843][ T6196] CPU: 0 PID: 6196 Comm: syz.2.639 Not tainted syzkaller #0 [ 135.915169][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.925212][ T6196] Call Trace: [ 135.928487][ T6196] [ 135.931400][ T6196] dump_stack_lvl+0x188/0x250 [ 135.936069][ T6196] ? show_regs_print_info+0x20/0x20 [ 135.941249][ T6196] ? load_image+0x410/0x410 [ 135.945740][ T6196] ? lockdep_hardirqs_on+0x94/0x140 [ 135.950922][ T6196] ? __lock_acquire+0x7b50/0x7b50 [ 135.955932][ T6196] should_fail+0x383/0x4b0 [ 135.960337][ T6196] _copy_from_iter+0x234/0x1160 [ 135.965176][ T6196] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 135.970530][ T6196] ? __lock_acquire+0x13dc/0x7b50 [ 135.975548][ T6196] packet_sendmsg+0x3086/0x50b0 [ 135.980393][ T6196] ? __lock_acquire+0x1305/0x7b50 [ 135.985405][ T6196] ? __might_sleep+0xf0/0xf0 [ 135.989987][ T6196] ? aa_sk_perm+0x7dc/0x910 [ 135.994474][ T6196] ? packet_getsockopt+0x9a0/0x9a0 [ 135.999579][ T6196] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 136.005714][ T6196] ? aa_sock_msg_perm+0x94/0x150 [ 136.010636][ T6196] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 136.015902][ T6196] ? security_socket_sendmsg+0x7c/0xa0 [ 136.021339][ T6196] ? packet_getsockopt+0x9a0/0x9a0 [ 136.026437][ T6196] ____sys_sendmsg+0x5be/0x8f0 [ 136.031192][ T6196] ? __sys_sendmsg_sock+0x30/0x30 [ 136.036210][ T6196] ? import_iovec+0x6f/0xa0 [ 136.040716][ T6196] ___sys_sendmsg+0x236/0x2e0 [ 136.045398][ T6196] ? __sys_sendmsg+0x290/0x290 [ 136.050155][ T6196] ? rcu_is_watching+0x11/0xa0 [ 136.054924][ T6196] __se_sys_sendmsg+0x1b7/0x2a0 [ 136.059784][ T6196] ? __x64_sys_sendmsg+0x80/0x80 [ 136.064723][ T6196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.070706][ T6196] ? lockdep_hardirqs_on+0x94/0x140 [ 136.075981][ T6196] do_syscall_64+0x4c/0xa0 [ 136.080383][ T6196] ? clear_bhb_loop+0x30/0x80 [ 136.085041][ T6196] ? clear_bhb_loop+0x30/0x80 [ 136.089705][ T6196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.095582][ T6196] RIP: 0033:0x7fd71e17fe59 [ 136.099982][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.119571][ T6196] RSP: 002b:00007fd71c3d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.127970][ T6196] RAX: ffffffffffffffda RBX: 00007fd71e3f8fa0 RCX: 00007fd71e17fe59 [ 136.135923][ T6196] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 136.143876][ T6196] RBP: 00007fd71c3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 136.151826][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.159777][ T6196] R13: 00007fd71e3f9038 R14: 00007fd71e3f8fa0 R15: 00007ffd91564738 [ 136.167746][ T6196] [ 136.302009][ T6202] validate_nla: 1 callbacks suppressed [ 136.302043][ T6202] netlink: 'syz.2.641': attribute type 21 has an invalid length. [ 136.327561][ T6202] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 136.344106][ T6202] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.641'. [ 136.404581][ T6213] netlink: 'syz.0.642': attribute type 11 has an invalid length. [ 137.038709][ T6233] netlink: 'syz.4.652': attribute type 3 has an invalid length. [ 137.058112][ T6239] netlink: 'syz.3.655': attribute type 21 has an invalid length. [ 137.090740][ T6233] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.652'. [ 137.160887][ T6239] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 137.169979][ T6239] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.655'. [ 137.182011][ T6240] device syzkaller0 entered promiscuous mode [ 137.189700][ T6243] netlink: 'syz.4.652': attribute type 9 has an invalid length. [ 137.204435][ T6243] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.652'. [ 137.251214][ T6246] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.656'. [ 137.261020][ T6246] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.656'. [ 137.322372][ T6246] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.656'. [ 137.498868][ T6255] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.659'. [ 138.557136][ T6284] netlink: 'syz.3.669': attribute type 21 has an invalid length. [ 138.576194][ T6284] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 138.585267][ T6284] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.669'. [ 138.732914][ T6295] FAULT_INJECTION: forcing a failure. [ 138.732914][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 138.746879][ T6295] CPU: 0 PID: 6295 Comm: syz.3.673 Not tainted syzkaller #0 [ 138.754198][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.764252][ T6295] Call Trace: [ 138.767529][ T6295] [ 138.770458][ T6295] dump_stack_lvl+0x188/0x250 [ 138.775132][ T6295] ? __lock_acquire+0x7b50/0x7b50 [ 138.780158][ T6295] ? show_regs_print_info+0x20/0x20 [ 138.785360][ T6295] ? load_image+0x410/0x410 [ 138.789865][ T6295] ? __lock_acquire+0x1305/0x7b50 [ 138.795076][ T6295] ? __ip_dev_find+0x4ca/0x570 [ 138.799853][ T6295] should_fail+0x383/0x4b0 [ 138.804281][ T6295] should_failslab+0x5/0x20 [ 138.808783][ T6295] slab_pre_alloc_hook+0x51/0xc0 [ 138.813722][ T6295] ? dst_alloc+0x101/0x160 [ 138.818135][ T6295] kmem_cache_alloc+0x3d/0x280 [ 138.822906][ T6295] dst_alloc+0x101/0x160 [ 138.827235][ T6295] ip_route_output_key_hash_rcu+0x15b9/0x24f0 [ 138.833314][ T6295] ip_route_output_key_hash+0x1c6/0x300 [ 138.838873][ T6295] ? ip_route_input_rcu+0x30e0/0x30e0 [ 138.844267][ T6295] ? __lock_acquire+0x7b50/0x7b50 [ 138.849309][ T6295] ip_route_output_flow+0x26/0x150 [ 138.854428][ T6295] ? security_sk_classify_flow+0x77/0x90 [ 138.860062][ T6295] raw_sendmsg+0xf08/0x18b0 [ 138.864584][ T6295] ? compat_raw_ioctl+0x60/0x60 [ 138.869463][ T6295] ? aa_sk_perm+0x7dc/0x910 [ 138.873971][ T6295] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 138.880395][ T6295] ? sock_rps_record_flow+0x17/0x3b0 [ 138.885688][ T6295] ? inet_sendmsg+0x7a/0x2a0 [ 138.890277][ T6295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 138.895564][ T6295] ? inet_send_prepare+0x250/0x250 [ 138.900684][ T6295] ____sys_sendmsg+0x5be/0x8f0 [ 138.905460][ T6295] ? __sys_sendmsg_sock+0x30/0x30 [ 138.910494][ T6295] ? import_iovec+0x6f/0xa0 [ 138.915018][ T6295] ___sys_sendmsg+0x236/0x2e0 [ 138.919712][ T6295] ? __sys_sendmsg+0x290/0x290 [ 138.924500][ T6295] ? trace_event_raw_event_lock+0x250/0x250 [ 138.930432][ T6295] __se_sys_sendmsg+0x1b7/0x2a0 [ 138.935295][ T6295] ? __x64_sys_sendmsg+0x80/0x80 [ 138.940243][ T6295] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.946245][ T6295] ? lockdep_hardirqs_on+0x94/0x140 [ 138.951464][ T6295] do_syscall_64+0x4c/0xa0 [ 138.955887][ T6295] ? clear_bhb_loop+0x30/0x80 [ 138.960568][ T6295] ? clear_bhb_loop+0x30/0x80 [ 138.965245][ T6295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.971143][ T6295] RIP: 0033:0x7fd287755e59 [ 138.975567][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.995179][ T6295] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.003603][ T6295] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 139.011579][ T6295] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 139.019554][ T6295] RBP: 00007fd2859af090 R08: 0000000000000000 R09: 0000000000000000 [ 139.027610][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.035580][ T6295] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 139.043575][ T6295] [ 139.224395][ T6308] device syzkaller0 entered promiscuous mode [ 141.082880][ T6348] delete_channel: no stack [ 141.087443][ T6348] delete_channel: no stack [ 141.155349][ T6348] delete_channel: no stack [ 141.159913][ T6348] delete_channel: no stack [ 141.173391][ T6348] delete_channel: no stack [ 141.198690][ T6348] delete_channel: no stack [ 141.215059][ T6348] delete_channel: no stack [ 141.223311][ T6348] delete_channel: no stack [ 141.565006][ T6371] netlink: 'syz.3.699': attribute type 21 has an invalid length. [ 141.639926][ T6371] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 141.703271][ T6371] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.699'. [ 143.302899][ T6470] netlink: 'syz.4.711': attribute type 21 has an invalid length. [ 143.321770][ T6470] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 143.329735][ T6470] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.711'. [ 143.350090][ T6476] netlink: 'syz.1.713': attribute type 2 has an invalid length. [ 143.358110][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.713'. [ 143.516016][ T6485] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.714'. [ 143.637999][ T6490] device syzkaller0 entered promiscuous mode [ 143.864729][ T6497] netlink: 'syz.2.718': attribute type 2 has an invalid length. [ 143.974107][ T6497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.718'. [ 144.705423][ T6520] netlink: 'syz.2.728': attribute type 21 has an invalid length. [ 144.737710][ T6520] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 144.822098][ T6520] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.728'. [ 145.174529][ T6546] device syzkaller0 entered promiscuous mode [ 146.274454][ T6572] netlink: 'syz.2.745': attribute type 21 has an invalid length. [ 146.308306][ T6572] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 146.349078][ T6572] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.745'. [ 146.383961][ T6577] FAULT_INJECTION: forcing a failure. [ 146.383961][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 146.427773][ T6577] CPU: 0 PID: 6577 Comm: syz.3.747 Not tainted syzkaller #0 [ 146.435095][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.445157][ T6577] Call Trace: [ 146.448439][ T6577] [ 146.451369][ T6577] dump_stack_lvl+0x188/0x250 [ 146.456062][ T6577] ? show_regs_print_info+0x20/0x20 [ 146.461269][ T6577] ? load_image+0x410/0x410 [ 146.465786][ T6577] ? kasan_quarantine_put+0xd4/0x210 [ 146.471075][ T6577] should_fail+0x383/0x4b0 [ 146.476807][ T6577] ? bpf_skb_adjust_room+0x63e/0x1c30 [ 146.482189][ T6577] should_failslab+0x5/0x20 [ 146.486694][ T6577] slab_pre_alloc_hook+0x51/0xc0 [ 146.491635][ T6577] ? bpf_skb_adjust_room+0x63e/0x1c30 [ 146.497011][ T6577] __kmalloc_node_track_caller+0x68/0x3a0 [ 146.502735][ T6577] ? bpf_skb_adjust_room+0x63e/0x1c30 [ 146.508110][ T6577] ? bpf_skb_adjust_room+0x63e/0x1c30 [ 146.513483][ T6577] pskb_expand_head+0x128/0x1100 [ 146.518442][ T6577] bpf_skb_adjust_room+0x63e/0x1c30 [ 146.523669][ T6577] bpf_prog_dbda9dbc4a79d6d3+0x56/0xf94 [ 146.529225][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.535216][ T6577] ? lock_chain_count+0x20/0x20 [ 146.540072][ T6577] ? lock_chain_count+0x20/0x20 [ 146.544925][ T6577] ? rcu_is_watching+0x11/0xa0 [ 146.549696][ T6577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.555855][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 146.561058][ T6577] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.567225][ T6577] ? ktime_get+0x182/0x270 [ 146.571648][ T6577] ? __cant_sleep+0x220/0x220 [ 146.576326][ T6577] ? ktime_get+0x182/0x270 [ 146.580751][ T6577] ? bpf_test_timer_continue+0x13d/0x380 [ 146.586395][ T6577] bpf_test_run+0x2a8/0x800 [ 146.590902][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 146.596129][ T6577] ? convert___skb_to_skb+0x4c0/0x4c0 [ 146.601506][ T6577] ? eth_get_headlen+0x200/0x200 [ 146.606448][ T6577] ? bpf_prog_test_run_skb+0x6c9/0x1190 [ 146.611994][ T6577] ? convert___skb_to_skb+0x3d/0x4c0 [ 146.617283][ T6577] bpf_prog_test_run_skb+0x9fb/0x1190 [ 146.622680][ T6577] ? cpu_online+0x60/0x60 [ 146.627021][ T6577] bpf_prog_test_run+0x31c/0x390 [ 146.631971][ T6577] __sys_bpf+0x5a5/0x6f0 [ 146.636225][ T6577] ? bpf_link_show_fdinfo+0x380/0x380 [ 146.641630][ T6577] __x64_sys_bpf+0x78/0x90 [ 146.646055][ T6577] do_syscall_64+0x4c/0xa0 [ 146.650471][ T6577] ? clear_bhb_loop+0x30/0x80 [ 146.655149][ T6577] ? clear_bhb_loop+0x30/0x80 [ 146.659836][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.665733][ T6577] RIP: 0033:0x7fd287755e59 [ 146.670148][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.689753][ T6577] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.698175][ T6577] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 146.706150][ T6577] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 146.714129][ T6577] RBP: 00007fd2859af090 R08: 0000000000000000 R09: 0000000000000000 [ 146.722101][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.730075][ T6577] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 146.738070][ T6577] [ 146.991149][ T6592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.753'. [ 147.340427][ T6600] device syzkaller0 entered promiscuous mode [ 147.846188][ T6603] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.756'. [ 150.116834][ T6615] netlink: 'syz.3.759': attribute type 21 has an invalid length. [ 150.131408][ T6615] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 150.157980][ T6615] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.759'. [ 150.354200][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.401836][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.526521][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.542224][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.440958][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.458425][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.467829][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.476795][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.846058][ T6663] device syzkaller0 entered promiscuous mode [ 152.176131][ T6678] netlink: 'syz.4.778': attribute type 3 has an invalid length. [ 152.185741][ T6680] FAULT_INJECTION: forcing a failure. [ 152.185741][ T6680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.209586][ T6678] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.778'. [ 152.221121][ T6680] CPU: 1 PID: 6680 Comm: syz.3.779 Not tainted syzkaller #0 [ 152.228431][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.238494][ T6680] Call Trace: [ 152.241775][ T6680] [ 152.244711][ T6680] dump_stack_lvl+0x188/0x250 [ 152.249392][ T6680] ? rcu_is_watching+0x11/0xa0 [ 152.254162][ T6680] ? show_regs_print_info+0x20/0x20 [ 152.259360][ T6680] ? load_image+0x410/0x410 [ 152.263853][ T6680] ? lockdep_hardirqs_on+0x94/0x140 [ 152.269077][ T6680] should_fail+0x383/0x4b0 [ 152.273487][ T6680] _copy_from_iter+0x415/0x1160 [ 152.278334][ T6680] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 152.283690][ T6680] ? __virt_addr_valid+0x3c6/0x470 [ 152.288792][ T6680] ? __phys_addr_symbol+0x2b/0x70 [ 152.293794][ T6680] ? __check_object_size+0x30c/0x410 [ 152.299067][ T6680] netlink_sendmsg+0x758/0xbe0 [ 152.303816][ T6680] ? netlink_getsockopt+0x570/0x570 [ 152.309001][ T6680] ? aa_sock_msg_perm+0x94/0x150 [ 152.313923][ T6680] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 152.319216][ T6680] ? security_socket_sendmsg+0x7c/0xa0 [ 152.324655][ T6680] ? netlink_getsockopt+0x570/0x570 [ 152.329830][ T6680] ____sys_sendmsg+0x5be/0x8f0 [ 152.334575][ T6680] ? __import_iovec+0x372/0x490 [ 152.339410][ T6680] ? __sys_sendmsg_sock+0x30/0x30 [ 152.344420][ T6680] ? import_iovec+0x6f/0xa0 [ 152.348906][ T6680] ___sys_sendmsg+0x236/0x2e0 [ 152.353569][ T6680] ? __sys_sendmsg+0x290/0x290 [ 152.358340][ T6680] __se_sys_sendmsg+0x1b7/0x2a0 [ 152.363172][ T6680] ? __x64_sys_sendmsg+0x80/0x80 [ 152.368090][ T6680] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.374059][ T6680] ? lockdep_hardirqs_on+0x94/0x140 [ 152.379246][ T6680] do_syscall_64+0x4c/0xa0 [ 152.383645][ T6680] ? clear_bhb_loop+0x30/0x80 [ 152.388306][ T6680] ? clear_bhb_loop+0x30/0x80 [ 152.392967][ T6680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.398842][ T6680] RIP: 0033:0x7fd287755e59 [ 152.403249][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.422831][ T6680] RSP: 002b:00007fd2859af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.431223][ T6680] RAX: ffffffffffffffda RBX: 00007fd2879cefa0 RCX: 00007fd287755e59 [ 152.439181][ T6680] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 152.447138][ T6680] RBP: 00007fd2859af090 R08: 0000000000000000 R09: 0000000000000000 [ 152.455088][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.463040][ T6680] R13: 00007fd2879cf038 R14: 00007fd2879cefa0 R15: 00007ffca96eccf8 [ 152.471000][ T6680] [ 152.478495][ T6681] netlink: 'syz.4.778': attribute type 3 has an invalid length. [ 152.487557][ T6681] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.778'. [ 152.608583][ T6685] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.780'. [ 152.615679][ T6687] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.782'. [ 152.629508][ T6685] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 152.714076][ T6693] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 152.725601][ T6693] netlink: 163364 bytes leftover after parsing attributes in process `syz.1.780'. [ 152.748022][ T6696] FAULT_INJECTION: forcing a failure. [ 152.748022][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 152.776175][ T6696] CPU: 1 PID: 6696 Comm: syz.2.784 Not tainted syzkaller #0 [ 152.783493][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.793550][ T6696] Call Trace: [ 152.796828][ T6696] [ 152.799766][ T6696] dump_stack_lvl+0x188/0x250 [ 152.804453][ T6696] ? show_regs_print_info+0x20/0x20 [ 152.809665][ T6696] ? load_image+0x410/0x410 [ 152.814189][ T6696] ? __lock_acquire+0x7b50/0x7b50 [ 152.819225][ T6696] should_fail+0x383/0x4b0 [ 152.823651][ T6696] should_failslab+0x5/0x20 [ 152.828159][ T6696] slab_pre_alloc_hook+0x51/0xc0 [ 152.833102][ T6696] kmem_cache_alloc_trace+0x47/0x290 [ 152.838387][ T6696] ? sctp_transport_new+0x7c/0x5b0 [ 152.843507][ T6696] sctp_transport_new+0x7c/0x5b0 [ 152.848455][ T6696] sctp_assoc_add_peer+0x250/0x15d0 [ 152.853659][ T6696] ? sctp_bind_addr_copy+0x37c/0x3c0 [ 152.858955][ T6696] sctp_connect_new_asoc+0x31f/0x6a0 [ 152.864253][ T6696] ? __sctp_connect+0xd80/0xd80 [ 152.869111][ T6696] ? __local_bh_enable_ip+0x136/0x1c0 [ 152.874498][ T6696] ? _local_bh_enable+0xa0/0xa0 [ 152.879363][ T6696] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 152.884919][ T6696] ? security_sctp_bind_connect+0x85/0xb0 [ 152.890652][ T6696] sctp_sendmsg+0x15e1/0x2940 [ 152.895350][ T6696] ? sctp_getsockopt+0x8a0/0x8a0 [ 152.900290][ T6696] ? aa_af_perm+0x340/0x340 [ 152.904790][ T6696] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 152.911212][ T6696] ? sock_rps_record_flow+0x17/0x3b0 [ 152.916506][ T6696] ? inet_sendmsg+0x7a/0x2a0 [ 152.921193][ T6696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 152.926569][ T6696] ? inet_send_prepare+0x250/0x250 [ 152.931697][ T6696] ____sys_sendmsg+0x5be/0x8f0 [ 152.936477][ T6696] ? __sys_sendmsg_sock+0x30/0x30 [ 152.941514][ T6696] ? import_iovec+0x6f/0xa0 [ 152.946032][ T6696] ___sys_sendmsg+0x236/0x2e0 [ 152.950720][ T6696] ? __sys_sendmsg+0x290/0x290 [ 152.955522][ T6696] __se_sys_sendmsg+0x1b7/0x2a0 [ 152.960387][ T6696] ? __x64_sys_sendmsg+0x80/0x80 [ 152.965328][ T6696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.971330][ T6696] ? lockdep_hardirqs_on+0x94/0x140 [ 152.976534][ T6696] do_syscall_64+0x4c/0xa0 [ 152.980953][ T6696] ? clear_bhb_loop+0x30/0x80 [ 152.985630][ T6696] ? clear_bhb_loop+0x30/0x80 [ 152.990309][ T6696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.996206][ T6696] RIP: 0033:0x7fd71e17fe59 [ 153.000623][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.020226][ T6696] RSP: 002b:00007fd71c3b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.028631][ T6696] RAX: ffffffffffffffda RBX: 00007fd71e3f9090 RCX: 00007fd71e17fe59 [ 153.036677][ T6696] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 153.044631][ T6696] RBP: 00007fd71c3b8090 R08: 0000000000000000 R09: 0000000000000000 [ 153.052582][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.060626][ T6696] R13: 00007fd71e3f9128 R14: 00007fd71e3f9090 R15: 00007ffd91564738 [ 153.068604][ T6696] [ 153.126875][ T6700] netlink: 'syz.0.786': attribute type 21 has an invalid length. [ 153.141061][ T6700] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 153.160501][ T6700] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.786'. [ 153.263498][ T6698] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 153.279476][ T6698] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.785'. [ 153.319986][ T6707] netlink: 'syz.3.787': attribute type 21 has an invalid length. [ 153.370335][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.787'. [ 153.383309][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 153.795726][ T6729] device syzkaller0 entered promiscuous mode [ 154.013561][ T6743] netlink: 192 bytes leftover after parsing attributes in process `syz.3.799'. [ 154.099819][ T6748] netlink: 'syz.3.799': attribute type 21 has an invalid length. [ 154.173707][ T6748] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.238141][ T6748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.245459][ T6748] IPv6: NLM_F_CREATE should be set when creating new route [ 154.252769][ T6748] IPv6: NLM_F_CREATE should be set when creating new route [ 154.260000][ T6748] IPv6: NLM_F_CREATE should be set when creating new route [ 154.906320][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.948616][ T6780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.175169][ T6790] validate_nla: 2 callbacks suppressed [ 155.175203][ T6790] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 155.200123][ T6790] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 155.576796][ T6817] device syzkaller0 entered promiscuous mode [ 155.601225][ T6820] device hsr_slave_0 left promiscuous mode [ 155.616807][ T6820] device hsr_slave_1 left promiscuous mode [ 156.008886][ T6841] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 156.036749][ T6841] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 156.176322][ T6851] FAULT_INJECTION: forcing a failure. [ 156.176322][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 156.221971][ T6847] netlink: 'syz.2.833': attribute type 3 has an invalid length. [ 156.231090][ T6851] CPU: 0 PID: 6851 Comm: syz.1.832 Not tainted syzkaller #0 [ 156.238405][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.248465][ T6851] Call Trace: [ 156.251753][ T6851] [ 156.254696][ T6851] dump_stack_lvl+0x188/0x250 [ 156.259386][ T6851] ? show_regs_print_info+0x20/0x20 [ 156.264599][ T6851] ? load_image+0x410/0x410 [ 156.269116][ T6851] ? __might_sleep+0xf0/0xf0 [ 156.273718][ T6851] ? __lock_acquire+0x7b50/0x7b50 [ 156.278767][ T6851] ? __lock_acquire+0x7b50/0x7b50 [ 156.283809][ T6851] should_fail+0x383/0x4b0 [ 156.288243][ T6851] should_failslab+0x5/0x20 [ 156.292762][ T6851] slab_pre_alloc_hook+0x51/0xc0 [ 156.297700][ T6851] ? __sys_setsockopt+0x2bf/0x3d0 [ 156.302729][ T6851] __kmalloc_track_caller+0x69/0x330 [ 156.308029][ T6851] ? __sys_setsockopt+0x2bf/0x3d0 [ 156.313070][ T6851] sctp_setsockopt+0x7d/0xf80 [ 156.317749][ T6851] ? sock_common_recvmsg+0x1c0/0x1c0 [ 156.323051][ T6851] __sys_setsockopt+0x2bf/0x3d0 [ 156.327920][ T6851] __x64_sys_setsockopt+0xb1/0xc0 [ 156.332960][ T6851] do_syscall_64+0x4c/0xa0 [ 156.337381][ T6851] ? clear_bhb_loop+0x30/0x80 [ 156.342063][ T6851] ? clear_bhb_loop+0x30/0x80 [ 156.346760][ T6851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.352660][ T6851] RIP: 0033:0x7f21edc65e59 [ 156.357082][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.376697][ T6851] RSP: 002b:00007f21ebe9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.385149][ T6851] RAX: ffffffffffffffda RBX: 00007f21ededf090 RCX: 00007f21edc65e59 [ 156.393132][ T6851] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000008 [ 156.401119][ T6851] RBP: 00007f21ebe9e090 R08: 0000000000000008 R09: 0000000000000000 [ 156.409101][ T6851] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.417510][ T6851] R13: 00007f21ededf128 R14: 00007f21ededf090 R15: 00007fffbcf02aa8 [ 156.425494][ T6851] [ 156.460639][ T6847] netlink: 'syz.2.833': attribute type 10 has an invalid length. [ 156.481222][ T6847] team0: Port device virt_wifi0 added [ 157.292921][ T6882] netlink: 'syz.2.844': attribute type 21 has an invalid length. [ 157.321616][ T6882] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 157.329410][ T6882] __nla_validate_parse: 5 callbacks suppressed [ 157.329439][ T6882] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.844'. [ 157.526143][ T6891] netlink: 'syz.4.847': attribute type 21 has an invalid length. [ 157.847072][ T6911] device syzkaller0 entered promiscuous mode [ 158.086494][ T6920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.855'. [ 158.236162][ T6922] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 158.261753][ T6922] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.856'. [ 159.203314][ T6957] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.869'. [ 159.725585][ T6975] device syzkaller0 entered promiscuous mode [ 160.278252][ T6994] validate_nla: 5 callbacks suppressed [ 160.278284][ T6994] netlink: 'syz.1.882': attribute type 21 has an invalid length. [ 160.340256][ T6994] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 160.399830][ T6994] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.882'. [ 161.076418][ T7020] netlink: 'syz.0.891': attribute type 9 has an invalid length. [ 161.241691][ T7020] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.891'. [ 161.962783][ T7035] device syzkaller0 entered promiscuous mode [ 162.107187][ T7037] netlink: 'syz.2.898': attribute type 21 has an invalid length. [ 162.130661][ T7037] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 162.168291][ T7037] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.898'. [ 162.250229][ T7045] netlink: 'syz.3.899': attribute type 7 has an invalid length. [ 162.619249][ T7068] netlink: 'syz.1.907': attribute type 9 has an invalid length. [ 162.632412][ T7068] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.907'. [ 163.460891][ T7082] netlink: 'syz.4.913': attribute type 21 has an invalid length. [ 163.528073][ T7082] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 163.564728][ T7082] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.913'. [ 164.070100][ T7109] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 164.114203][ T7109] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.922'. [ 166.274226][ T7134] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 166.290702][ T7134] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 166.314793][ T7134] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.931'. [ 166.936647][ T7149] netlink: 'syz.0.937': attribute type 9 has an invalid length. [ 166.953744][ T7150] netlink: 'syz.0.937': attribute type 9 has an invalid length. [ 167.554872][ T7175] netlink: 'syz.0.945': attribute type 21 has an invalid length. [ 167.569956][ T7175] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 167.578430][ T7175] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.945'. [ 167.915112][ T7186] netlink: 'syz.0.949': attribute type 11 has an invalid length. [ 168.150892][ T7197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.952'. [ 168.263399][ T7197] netlink: 144 bytes leftover after parsing attributes in process `syz.4.952'. [ 168.340309][ T7197] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 168.593099][ T7213] netlink: set zone limit has 8 unknown bytes [ 168.643892][ T7208] netlink: 'syz.4.956': attribute type 27 has an invalid length. [ 168.774598][ T7221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.961'. [ 168.811061][ T7222] netlink: 'syz.2.960': attribute type 21 has an invalid length. [ 168.820110][ T7222] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 168.828160][ T7222] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.960'. [ 168.988159][ T7227] device lo entered promiscuous mode [ 169.289007][ T7238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.968'. [ 169.654495][ T7243] FAULT_INJECTION: forcing a failure. [ 169.654495][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.668615][ T7243] CPU: 1 PID: 7243 Comm: syz.1.970 Not tainted syzkaller #0 [ 169.675946][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.686017][ T7243] Call Trace: [ 169.689303][ T7243] [ 169.692238][ T7243] dump_stack_lvl+0x188/0x250 [ 169.696930][ T7243] ? show_regs_print_info+0x20/0x20 [ 169.702145][ T7243] ? load_image+0x410/0x410 [ 169.706669][ T7243] ? __lock_acquire+0x7b50/0x7b50 [ 169.711717][ T7243] should_fail+0x383/0x4b0 [ 169.716247][ T7243] _copy_from_user+0x2e/0x170 [ 169.720938][ T7243] get_user_ifreq+0x67/0x170 [ 169.725540][ T7243] sock_ioctl+0x61f/0x700 [ 169.729880][ T7243] ? sock_poll+0x420/0x420 [ 169.734321][ T7243] ? bpf_lsm_file_ioctl+0x5/0x10 [ 169.739248][ T7243] ? security_file_ioctl+0x7c/0xa0 [ 169.744376][ T7243] ? sock_poll+0x420/0x420 [ 169.748799][ T7243] __se_sys_ioctl+0xfa/0x170 [ 169.753406][ T7243] do_syscall_64+0x4c/0xa0 [ 169.757834][ T7243] ? clear_bhb_loop+0x30/0x80 [ 169.762847][ T7243] ? clear_bhb_loop+0x30/0x80 [ 169.767514][ T7243] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.773392][ T7243] RIP: 0033:0x7f21edc65e59 [ 169.777795][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.797599][ T7243] RSP: 002b:00007f21ebebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.806002][ T7243] RAX: ffffffffffffffda RBX: 00007f21ededefa0 RCX: 00007f21edc65e59 [ 169.813964][ T7243] RDX: 0000200000000080 RSI: 00000000000089f5 RDI: 0000000000000004 [ 169.821920][ T7243] RBP: 00007f21ebebf090 R08: 0000000000000000 R09: 0000000000000000 [ 169.829886][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.837841][ T7243] R13: 00007f21ededf038 R14: 00007f21ededefa0 R15: 00007fffbcf02aa8 [ 169.845816][ T7243] [ 170.272682][ T7254] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.975'. [ 170.339783][ T7253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.347299][ T7253] IPv6: NLM_F_CREATE should be set when creating new route [ 170.354812][ T7253] IPv6: NLM_F_CREATE should be set when creating new route [ 170.362281][ T7253] IPv6: NLM_F_CREATE should be set when creating new route [ 170.386278][ T7253] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.974'. [ 171.516640][ T7283] validate_nla: 4 callbacks suppressed [ 171.516658][ T7283] netlink: 'syz.3.987': attribute type 29 has an invalid length. [ 171.593440][ T7283] netlink: 'syz.3.987': attribute type 29 has an invalid length. [ 172.086788][ T7297] netlink: 'syz.2.991': attribute type 21 has an invalid length. [ 172.114118][ T7280] delete_channel: no stack [ 172.117064][ T7297] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 172.131372][ T7297] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.991'. [ 172.196486][ T7303] netlink: 'syz.1.993': attribute type 10 has an invalid length. [ 172.339064][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.359717][ T7303] team0: Port device bond0 added [ 172.672637][ T7315] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 172.699123][ T7315] netlink: 'syz.1.998': attribute type 8 has an invalid length. [ 172.722266][ T7315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.998'. [ 173.235636][ T7339] netlink: 'syz.4.1006': attribute type 4 has an invalid length. [ 173.249610][ T7339] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1006'. [ 173.333281][ T7340] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1008'. [ 173.577539][ T7352] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1012'. [ 173.963309][ T7366] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1018'. [ 174.008596][ T7366] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 174.079206][ T7369] netlink: 'syz.4.1019': attribute type 25 has an invalid length. [ 174.096086][ T7369] netlink: 'syz.4.1019': attribute type 9 has an invalid length. [ 175.175160][ T7345] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1007'. [ 175.707490][ T7405] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.721845][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 175.727949][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 175.750570][ T7409] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1033'. [ 175.778024][ T7405] device bond0 entered promiscuous mode [ 175.781039][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 175.791552][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 175.818621][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 175.841113][ T7405] device bond_slave_0 entered promiscuous mode [ 175.887800][ T7405] device bond_slave_1 entered promiscuous mode [ 176.124233][ T7405] team0: Port device bond0 removed [ 176.144566][ T7405] bridge0: port 3(bond0) entered blocking state [ 176.158532][ T7405] bridge0: port 3(bond0) entered disabled state [ 176.617099][ T7429] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1036'. [ 176.786038][ T7429] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 177.825114][ T7445] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1045'. [ 178.183302][ T7450] validate_nla: 2 callbacks suppressed [ 178.183340][ T7450] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 178.266071][ T7450] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1046'. [ 178.306994][ T7450] device bond0 entered promiscuous mode [ 178.351568][ T7450] device bond_slave_0 entered promiscuous mode [ 178.382869][ T7450] device bond_slave_1 entered promiscuous mode [ 178.422029][ T7450] bridge0: port 3(bond0) entered blocking state [ 178.441925][ T7450] bridge0: port 3(bond0) entered disabled state [ 178.479486][ T7450] bridge0: port 3(bond0) entered blocking state [ 178.486311][ T7450] bridge0: port 3(bond0) entered forwarding state [ 178.909669][ T7456] netlink: 'syz.0.1041': attribute type 3 has an invalid length. [ 179.006386][ T7456] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1041'. [ 179.904280][ T7488] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1057'. [ 179.958105][ T7488] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 180.586323][ T7510] netlink: 'syz.4.1062': attribute type 10 has an invalid length. [ 180.621758][ T7510] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1062'. [ 180.641871][ T7510] device bond0 entered promiscuous mode [ 180.671942][ T7510] device bond_slave_0 entered promiscuous mode [ 180.706689][ T7510] device bond_slave_1 entered promiscuous mode [ 180.757148][ T7510] bridge0: port 3(bond0) entered blocking state [ 180.777313][ T7510] bridge0: port 3(bond0) entered disabled state [ 180.830554][ T7510] bridge0: port 3(bond0) entered blocking state [ 180.837330][ T7510] bridge0: port 3(bond0) entered forwarding state [ 181.913396][ T7536] netlink: 'syz.4.1069': attribute type 3 has an invalid length. [ 182.032647][ T7536] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1069'. [ 182.477133][ T7565] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1076'. [ 182.561730][ T7565] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 182.737938][ T7569] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 182.835377][ T7569] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1081'. [ 182.954173][ T7569] device bond0 entered promiscuous mode [ 182.960114][ T7569] device bond_slave_0 entered promiscuous mode [ 183.054124][ T7569] device bond_slave_1 entered promiscuous mode [ 183.106519][ T7569] bridge0: port 3(bond0) entered blocking state [ 183.126120][ T7569] bridge0: port 3(bond0) entered disabled state [ 183.226042][ T7569] bridge0: port 3(bond0) entered blocking state [ 183.232791][ T7569] bridge0: port 3(bond0) entered forwarding state [ 183.284009][ T7574] netlink: 'syz.3.1084': attribute type 7 has an invalid length. [ 183.475473][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1089'. [ 183.894601][ T7602] netlink: 'syz.3.1091': attribute type 3 has an invalid length. [ 183.932983][ T7602] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1091'. [ 185.626562][ T7624] netlink: 'syz.4.1100': attribute type 7 has an invalid length. [ 188.381646][ T7671] netlink: 'syz.2.1115': attribute type 7 has an invalid length. [ 188.557011][ T7677] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 188.601957][ T7677] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 188.643579][ T7682] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 189.944796][ T7706] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1126'. [ 189.997018][ T7706] netlink: del zone limit has 8 unknown bytes [ 190.494126][ T7718] netlink: 'syz.3.1130': attribute type 30 has an invalid length. [ 190.767551][ T7719] netlink: 'syz.0.1128': attribute type 7 has an invalid length. [ 191.607541][ T7731] netlink: 'syz.3.1134': attribute type 21 has an invalid length. [ 191.662067][ T7731] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1134'. [ 192.907094][ T7753] netlink: 'syz.0.1141': attribute type 30 has an invalid length. [ 193.703442][ T7771] netlink: 'syz.4.1148': attribute type 21 has an invalid length. [ 193.723898][ T7771] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1148'. [ 193.734370][ T7774] netlink: 'syz.1.1144': attribute type 7 has an invalid length. [ 193.822585][ T7781] netlink: 'syz.3.1150': attribute type 41 has an invalid length. [ 194.117876][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124804][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.017456][ T7799] netlink: 'syz.4.1157': attribute type 30 has an invalid length. [ 195.821733][ T7818] netlink: 'syz.4.1161': attribute type 3 has an invalid length. [ 195.848247][ T7818] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1161'. [ 195.902989][ T7820] netlink: 'syz.1.1164': attribute type 21 has an invalid length. [ 195.920206][ T7820] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1164'. [ 196.027427][ T7833] FAULT_INJECTION: forcing a failure. [ 196.027427][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 196.074325][ T7833] CPU: 1 PID: 7833 Comm: syz.2.1166 Not tainted syzkaller #0 [ 196.081752][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.091816][ T7833] Call Trace: [ 196.095101][ T7833] [ 196.098031][ T7833] dump_stack_lvl+0x188/0x250 [ 196.102724][ T7833] ? show_regs_print_info+0x20/0x20 [ 196.107929][ T7833] ? load_image+0x410/0x410 [ 196.112438][ T7833] ? __might_sleep+0xf0/0xf0 [ 196.117035][ T7833] ? __lock_acquire+0x7b50/0x7b50 [ 196.122074][ T7833] ? account_kernel_stack+0x1b1/0x390 [ 196.127447][ T7833] ? lockdep_hardirqs_on+0x94/0x140 [ 196.132656][ T7833] should_fail+0x383/0x4b0 [ 196.137085][ T7833] should_failslab+0x5/0x20 [ 196.141587][ T7833] slab_pre_alloc_hook+0x51/0xc0 [ 196.146525][ T7833] ? prepare_creds+0x3c/0x610 [ 196.151205][ T7833] kmem_cache_alloc+0x3d/0x280 [ 196.155976][ T7833] prepare_creds+0x3c/0x610 [ 196.160479][ T7833] copy_creds+0x146/0xce0 [ 196.164820][ T7833] copy_process+0x8d7/0x3ec0 [ 196.169442][ T7833] ? trace_event_raw_event_lock+0x250/0x250 [ 196.175344][ T7833] ? __pidfd_prepare+0x140/0x140 [ 196.180290][ T7833] ? perf_trace_lock_acquire+0x341/0x3f0 [ 196.185938][ T7833] kernel_clone+0x23f/0x990 [ 196.190451][ T7833] ? trace_event_raw_event_lock+0x250/0x250 [ 196.196348][ T7833] ? create_io_thread+0x180/0x180 [ 196.201401][ T7833] __x64_sys_clone+0x19a/0x210 [ 196.206161][ T7833] ? __ia32_sys_vfork+0x130/0x130 [ 196.211203][ T7833] ? lockdep_hardirqs_on+0x94/0x140 [ 196.216412][ T7833] do_syscall_64+0x4c/0xa0 [ 196.220823][ T7833] ? clear_bhb_loop+0x30/0x80 [ 196.225496][ T7833] ? clear_bhb_loop+0x30/0x80 [ 196.230175][ T7833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.236064][ T7833] RIP: 0033:0x7fd71e17fe59 [ 196.240484][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.260089][ T7833] RSP: 002b:00007fd71c3d8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 196.268506][ T7833] RAX: ffffffffffffffda RBX: 00007fd71e3f8fa0 RCX: 00007fd71e17fe59 [ 196.276476][ T7833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000b00b000 [ 196.284449][ T7833] RBP: 00007fd71c3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 196.292419][ T7833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 196.300392][ T7833] R13: 00007fd71e3f9038 R14: 00007fd71e3f8fa0 R15: 00007ffd91564738 [ 196.308384][ T7833] [ 196.834560][ T7849] netlink: 'syz.2.1175': attribute type 30 has an invalid length. [ 196.870742][ T7856] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 197.344916][ T7856] device veth0_vlan left promiscuous mode [ 197.414853][ T7856] device veth0_vlan entered promiscuous mode [ 197.447057][ T7856] team0: Device veth0_vlan failed to register rx_handler [ 197.865000][ T7883] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 197.873478][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 197.904781][ T7881] netlink: 'syz.0.1180': attribute type 21 has an invalid length. [ 197.941304][ T7881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1180'. [ 199.001160][ T7937] netlink: 'syz.1.1205': attribute type 27 has an invalid length. [ 199.021674][ T7937] netlink: 'syz.1.1205': attribute type 4 has an invalid length. [ 199.037492][ T7937] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1205'. [ 199.065377][ T7934] netlink: 'syz.2.1201': attribute type 21 has an invalid length. [ 199.080302][ T7934] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1201'. [ 199.964700][ T7954] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1212'. [ 200.689498][ C1] [ 200.689507][ C1] ================================ [ 200.689511][ C1] WARNING: inconsistent lock state [ 200.689527][ C1] syzkaller #0 Not tainted [ 200.689535][ C1] -------------------------------- [ 200.689539][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 200.689546][ C1] syz.0.1219/7975 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 200.689563][ C1] ffff88805ed6b238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x690 [ 200.689604][ C1] {INITIAL USE} state was registered at: [ 200.689610][ C1] lock_acquire+0x19e/0x400 [ 200.689627][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 200.689642][ C1] trie_update_elem+0xc0/0xd50 [ 200.689656][ C1] bpf_map_update_value+0x57c/0x650 [ 200.689671][ C1] generic_map_update_batch+0x52c/0x7d0 [ 200.689685][ C1] bpf_map_do_batch+0x475/0x5f0 [ 200.689706][ C1] __sys_bpf+0x671/0x6f0 [ 200.689719][ C1] __x64_sys_bpf+0x78/0x90 [ 200.689733][ C1] do_syscall_64+0x4c/0xa0 [ 200.689747][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.689761][ C1] irq event stamp: 1264 [ 200.689766][ C1] hardirqs last enabled at (1263): [] do_syscall_64+0x58/0xa0 [ 200.689786][ C1] hardirqs last disabled at (1264): [] noist_exc_debug+0x49/0x120 [ 200.689805][ C1] softirqs last enabled at (1220): [] bpf_prog_load+0x10ee/0x14e0 [ 200.689824][ C1] softirqs last disabled at (1218): [] bpf_ksym_add+0x28/0x330 [ 200.689841][ C1] [ 200.689841][ C1] other info that might help us debug this: [ 200.689845][ C1] Possible unsafe locking scenario: [ 200.689845][ C1] [ 200.689849][ C1] CPU0 [ 200.689851][ C1] ---- [ 200.689854][ C1] lock(&trie->lock); [ 200.689863][ C1] [ 200.689866][ C1] lock(&trie->lock); [ 200.689875][ C1] [ 200.689875][ C1] *** DEADLOCK *** [ 200.689875][ C1] [ 200.689878][ C1] 2 locks held by syz.0.1219/7975: [ 200.689886][ C1] #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 200.689922][ C1] #1: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 200.689957][ C1] [ 200.689957][ C1] stack backtrace: [ 200.689962][ C1] CPU: 1 PID: 7975 Comm: syz.0.1219 Not tainted syzkaller #0 [ 200.689977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.689985][ C1] Call Trace: [ 200.689990][ C1] <#DB> [ 200.689996][ C1] dump_stack_lvl+0x188/0x250 [ 200.690013][ C1] ? show_regs_print_info+0x20/0x20 [ 200.690032][ C1] ? print_usage_bug+0x42a/0x690 [ 200.690047][ C1] ? verify_lock_unused+0x15/0x140 [ 200.690067][ C1] lock_acquire+0x2c3/0x400 [ 200.690086][ C1] ? trie_delete_elem+0x8f/0x690 [ 200.690103][ C1] ? read_lock_is_recursive+0x10/0x10 [ 200.690124][ C1] ? perf_trace_lock+0xe4/0x390 [ 200.690140][ C1] ? look_up_lock_class+0x71/0x110 [ 200.690174][ C1] ? verify_lock_unused+0x15/0x140 [ 200.690193][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 200.690207][ C1] ? trie_delete_elem+0x8f/0x690 [ 200.690222][ C1] ? _raw_spin_lock+0x40/0x40 [ 200.690238][ C1] ? rcu_lock_acquire+0x9/0x30 [ 200.690258][ C1] trie_delete_elem+0x8f/0x690 [ 200.690279][ C1] bpf_prog_dd9ec7ccafdb8ba4+0x3d/0x5ac [ 200.690295][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 200.690316][ C1] ? perf_event_switch_output+0x730/0x730 [ 200.690332][ C1] ? bpf_overflow_handler+0x312/0x4a0 [ 200.690354][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 200.690373][ C1] __perf_event_overflow+0x35f/0x550 [ 200.690389][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 200.690406][ C1] perf_swevent_event+0x4b8/0x540 [ 200.690425][ C1] perf_bp_event+0x276/0x320 [ 200.690445][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 200.690478][ C1] ? rcu_lock_acquire+0x9/0x30 [ 200.690495][ C1] ? read_lock_is_recursive+0x10/0x10 [ 200.690518][ C1] hw_breakpoint_exceptions_notify+0x2d7/0x470 [ 200.690537][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 200.690556][ C1] notify_die+0x141/0x1a0 [ 200.690574][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 200.690594][ C1] ? exc_debug+0x6e/0x130 [ 200.690614][ C1] ? trace_hardirqs_off_finish+0x24/0x1f0 [ 200.690635][ C1] notify_debug+0x20/0x30 [ 200.690651][ C1] exc_debug+0xcf/0x130 [ 200.690668][ C1] asm_exc_debug+0x1a/0x40 [ 200.690682][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 200.690707][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 200.690720][ C1] RSP: 0000:ffffc9000306f740 EFLAGS: 00040802 [ 200.690733][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff8880215d9dc0 [ 200.690745][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 200.690756][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 200.690765][ C1] R10: dffffc0000000000 R11: fffff5200060df47 R12: ffff8880215db548 [ 200.690776][ C1] R13: 00000000ffffffff R14: 0000200000000300 R15: 000000000000007f [ 200.690797][ C1] [ 200.690801][ C1] [ 200.690805][ C1] perf_callchain_user+0x423/0xf80 [ 200.690828][ C1] ? get_callchain_entry+0x181/0x3b0 [ 200.690845][ C1] get_perf_callchain+0x33d/0x460 [ 200.690862][ C1] ? put_callchain_entry+0xb0/0xb0 [ 200.690881][ C1] ? __perf_event_header__init_id+0x3ea/0x4f0 [ 200.690899][ C1] perf_prepare_sample+0x352/0x1cb0 [ 200.690919][ C1] ? rcu_nmi_exit+0x6f/0xf0 [ 200.690936][ C1] ? perf_callchain+0x190/0x190 [ 200.690951][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.690973][ C1] perf_event_output_forward+0x185/0x2e0 [ 200.690990][ C1] ? perf_get_page_size+0x430/0x430 [ 200.691004][ C1] ? mark_lock+0x94/0x320 [ 200.691020][ C1] ? __lock_acquire+0x1305/0x7b50 [ 200.691042][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 200.691060][ C1] __perf_event_overflow+0x35f/0x550 [ 200.691079][ C1] perf_bp_event+0x276/0x320 [ 200.691095][ C1] ? verify_lock_unused+0x140/0x140 [ 200.691114][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 200.691151][ C1] ? read_lock_is_recursive+0x10/0x10 [ 200.691174][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 200.691193][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 200.691212][ C1] notify_die+0x141/0x1a0 [ 200.691228][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 200.691250][ C1] ? rcu_is_watching+0x11/0xa0 [ 200.691267][ C1] notify_debug+0x20/0x30 [ 200.691282][ C1] noist_exc_debug+0x73/0x120 [ 200.691297][ C1] ? clear_bhb_loop+0x30/0x80 [ 200.691314][ C1] asm_exc_debug+0x2f/0x40 [ 200.691328][ C1] RIP: 0033:0x7f95b9596bfd [ 200.691341][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 200.691353][ C1] RSP: 002b:00007f95b78108a8 EFLAGS: 00000283 [ 200.691366][ C1] RAX: 0000000000000300 RBX: 00007f95b7810de0 RCX: 2f666c65732f636f [ 200.691376][ C1] RDX: 0000200000000300 RSI: 00007f95b9678260 RDI: 0000200000000300 [ 200.691387][ C1] RBP: 0000200000000300 R08: 00007f95b7811010 R09: 00000000ffffffff [ 200.691397][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 200.691406][ C1] R13: 0000000000000073 R14: 00007f95b964d1dd R15: 00007f95b7810ea0 [ 200.691427][ C1]