last executing test programs: 21.118521303s ago: executing program 0 (id=4890): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="143e12e0efca305509bdf60de4020000000400000400"/33, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 18.076056256s ago: executing program 0 (id=4891): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 17.394987062s ago: executing program 0 (id=4895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x15, 0x0, 0x8, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, 0x0, 0x2002) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7f, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0046c547b30000000000000000000000000000001e00000000000000"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="0f36ed", 0x3}], 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r8}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000940)={r4, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x8, 0x4, 0x20}, 0x50) 17.034276571s ago: executing program 0 (id=4901): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.884307979s ago: executing program 0 (id=4903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r4, 0x0, 0xe9, 0x2e, &(0x7f0000000280)="3828f76a4550f9fa2ecd2964d3ece2727556220859890401698c5ea7ffa60ab3355817e3d834f46368a019476adfd40bf3c6b303612f304d8cb601ae0d268837b3d7f94dd203938016a42721635cf96ef9771d01c9b4e6fb6aced3dc8d78d9e07f9d6671c058ae83325eb7f4db63af5d385d66e2a4931620ab1b82d383481ed50b5015d6d30f77a3f1d3cc45b0aa8a75e6c624bb8d6f32e18636e469489a402468b58eb18f2f1e7417aa088d03f32695c3ded7ecee6058e5a93c25d59d77810639a3584b8e94e0a4337ea82d6acb2e1ba726e07782052213f512b1857cfe7a43cf1cf690ed20d143ba", &(0x7f0000000500)=""/46, 0x0, 0x0, 0x9e, 0x1000, &(0x7f0000000880)="f254187246af408b580c715aa944566e714cfb09d2d36212381fab0b4aaa480b8a2f10e982b214aacd7ae770b3b9610dae77a2d35bbc59c1fd0e54bedb3da02ba9d72f126a5a6c1b826acbdd3eeb636edba994244a593c1a4e34460e4d1fcb5b00df8115c51016a6abd924b22e4e0f27a88457ed8c991482ecef18edf7c9dc657927399fef02c726f47c9d436af90745611bdfb045d89e0d5ed7998ace70", &(0x7f0000000dc0)="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", 0x4, 0x0, 0xae}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080) 12.502466273s ago: executing program 0 (id=4912): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="dbdf367a688e65fcbad63a9cc91b", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x6, &(0x7f0000000000), 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001bc0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x3, 0x2, {0xa, 0x4e22, 0x2b8, @mcast2, 0x6}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000140)="f2ef0509f2c6c6000a4751cd8350447a1ed9ee609da0bde656a14e627f46291a6e4ec2f0b6a43ca1788347bdc26f5ab5f03a9be41b9ffb6e850376c3d86f44549fe264945867dd529d64302ac86766b6c24d03d5dac4ecac1c6552adfb07116b31ba5288d791c4f89be7514dbc9da4179b235628d08328dd27f4d98af0ba9c1e90e4d51c1488a5f2cea615ea3e1ef755bdf1d23be41db9dc8d91a3492464fde818e94b81f1d9b99474f61286df7265055d1ada461f41717eda7d72ecfc59fa66a538e6e330de9153a655adcb0631f3e2c55d70b1de16228c218eedde9ab3903df373a53dbf", 0xe5}, {&(0x7f00000008c0)="9ec932881d1fc1c9b2bbbe77320fffec8cb760ef19217552b86daf1e4205bc07e6e488289d8eb9615ff3a95da0d98f898f252bdd686df0d83a05d5c1a1c16cbdc1b950482795d950f227e578647d6f57cf2dd21f3eddb5c2289acf5f2f04865a7ee0adb447e7058451a0270946cc89b6675a493adf3d5cd30cad02cf2ae2910ef594abfa66c01748d776051278c1f9fba979f9b342f57b33a062c8cbe0f367fe4792ee0148645c6c65636c121d65e3df5af5304f05836631eeefc43822f17aa0daafa828418940d6e38c875219e7d2fae100e75741e83e5132f423c841385cd987c22fd492afa8c6772a72acdb60f48c6923d7a3b4b3a15f189ffb81a6a893c3d223ed3bbcc5f6c7d6809eb9cf8ddaca4786b8b2703e0adeca718de841922f2b80121b9fd80f7bf3d9c2a062967ba94160f426c9171de20d49f0a05b2ea76b0a75ee3f2d52dcab8bf5ee10b0a727d4ab338b396e4fadf12adbabb071b44989e50ca4ba0cbf07021a7d9814f68754fc4739184acd7016ccf77357aa1ad00dcc94feb827cc8a23b77bacfb0e9f6fe8c9e8af43f72a418fda85979966bbb7b463717ff036bb229cab6b6e3b46e46adb62ed01bd55c7708db8fb4ecaf7c579fab781448b20f9b66c3a287ef1c59ffd0e9e96062c5ca42f52f4719136145fe3dde06de1324ea4f4e600da74881cf44b6a1583cd604d208f2ece38ab4d4687358053c2327e0d15c2ac085f51eadbe09e5f852054766c119fb9ae0eb02102909288214ec05a0d9724d64467f9a5b7ac29b21009a8f3ff18f8d375212bc0a5d04127ce50970dc02dfa0b00a76ab9a17e7151348c9863ccd9e1e31a9fff9a2bcff8f53b73756514578e1177a3e69922e381b335159d6d94d32e3559ba872db756fb435ce22bc141e75c29782ceb1db54af45f965bb92a95903a7bfbf18181bcb060dca58ba2ff8b1ebf1ae0cdac7d12ca39270c339f51107599d75fd3053d9b75e8f035e1cdaf719dae7612099c76d33e9203b01fdb8dc5ff37133f47d680c0f0828f1c932bb127c364469bcbe796498c20dcd989e6dbe59099701aa13c3c54fce7b2685d16bc629684ec9a349c185f63ed195faeb863ce139929ddf64f1523fdd219005fd0fd9ead9bdf8f929b38731c776482034fa8b14f806327765b1c6df9e4868c97ccd7c791c7a09aed4b9e6c803136b338736eb175e09b6a1847663a4727051407af859f889fd7abf0209e53fa5cd2bf83fa2e18849598ef421573816375b0deb628b80c6de2a928327d288f4dd1a585bcd7518a58053e37c11c8b78e4f15f690b4af857e86de607f0df913264d73588d916db6edbccb145bb785deec613c20c19d8595ed07d9bf2dc6c1a3422c9e4386ff9187ce2b37b6d85614691a34b5e97aed7035a5023ee8fec42e4202fd84b77cbd622db68523fcc32654e520141834e587a1d97082c45db88dd8320bed84a9f6a1b6b83d3233ce8e9fe93ddd95ea59aa339d85c847fd3515ce814b4210b70b0068c2ca1ce008f5121c8af9756f957d264359d4ca636813e9cff7810b963fa095af81af757c096d9453b9225a20185f8e6b781847321e9fbbb032347d9a7ac26687d1b973e424de55c12222ee5837e2180dd07c53c5bda00e8e7cd20ab1686b986a927d1044158ca54f222f9d075a0f51cca987f856305e6a17bbd0aea3526eb016f17d138cc8786078b0b612a5a13a8fd3e2a32fcec43552c559b41707949d8aa866c2c8c05d65679092371306526c763313a00d90c2ba758a316918503e1ba51d96c9494cc1ee0106eff94810b7ed619cb62409b82320c79af77198c284eb7eda98b9330df8c18e1c678f909af0e2b6d198d09314935468560d2d26fdd0fc47630ffd89398bf1a28dda80436b02803dbb7b3ef06159b5b38b7113cb833d2e1b93f1b2ee61750227bd95375f86ccc581f165ab07b435aca755d9af612bb6033b14985941d9cffe04ad1272019f3a70cf6651bc9321ed1e08094853ea54a058170288f5746a082505c0555c60531a31d865d71b899a5db4516f25fa32b0629d9698a7b0d5f21ce1e2e08b60531ef4a2d9a870ea070107778a6a5de06befc1996a32b56afc895dc866b9fd7feb7205700006392da0f352e08d3a2997042d5eae29fb5bc93051843edc3e41bfb83e46ced04493055017bd40fc0a2a0646cb69357edf5393d0c4dc8ee85d79e3d2d4f35678f47085b10ccd16984fbfa9bc3eee77d2486966fbcacb6bba7ccf2761dce74be9b798a50fb8227ac5d0cfdd8dd8228f4d9fd931b4245e1cdc0860a127e3c822b5cd7d7235b2bf2d9fffff9124d420b37738b9a2dd3b82c44c9093b7454b755046d8aa60a14f1ee5cc85f85482c89a3ad982307eac9c26ff2a8302cdc38fd1d6ab70e75368dc7df1f50d4160e2aff3bfd15a055c8782f7f2080a81801a5b0ff0f90ea0fef2f491c8922514f8facdd15b3aab61f4de2bef6d38bc9d3c4893c1d9a74aaf1930aa295c56d38bf83153ddaddaa2734971b670082fbf59c69e6e3cb06ad373441f60bffe56881ee0530a9cf6e5d1b1b69218901db9bcc03cbbf7f5f91961727352950a3f44320180eb67627dfedfb749460e6224b72a86c2a01e9b64baf5f86707be8540f5ebe5d787aff88c597080d1f1c1a63371a5da17fe35b5942bf3c3e2e9e75515b7d379f963accf370d5e76a0803e744d39f78f803c15b6e79510094cc7709feb1a59bdbab51637bcc356c623aa2d40b17397063bcf9558d7e654c130dff641da8aaba6de4100bded6aad23c5b4ddde95bf8a3490f7bf7585b147050d10cd3f9f47e1b9e2abc06e4b159167f2c8c2f29675a4972688354ea0b19c680516bb49e77681108790f8fbd8ec2030138348df3f2cac3ffc4b5b85a603b1be0cd3df7ad16755b99c8700fbc359129459462c42a2ded1f871ff57bd66af56bbb8c799902a8807ad2c1c8d81602bdedc7efcb06d60e941b1fcf2f0e77284280d683ca8feff5ee0c18af00ebcc55006bf28c88bed618f37ab9e15de6ed8d0fc85d0f9bf02a24dabac20d3577b34637f8794b7c6763d7321b75cde5703382b7dd427bd4d550c8cf9914bcf1a9d993ffe76f51792ec4a67d9712f979c6221646bfbc5dbdc98069243749413e2249677cf8675552e132de2fb4cceb2092363bad81f6978640b6e95af1b69752872ecbe6ae9e24893818c2feb98ff3e2120a513b0020931e7b8bf1c6e0929ff22601832f20b04914dba647a794ed40762cf9759c383a8eff14ac43c6e1d229c4f0b5700191e359fdbc182dbf8d5d3e79701f4d1fa01875dd7f4e4c7f3caf33fd0a2e802115b89d4b706d8d71543e5bfee6738aadaf81d29261cb4446549e340c09ec214f7618f2eaca12ebeb8a76fe93cbf2798d35ade99887a33f99e180ea8a2c554aa82b317f989cccc5f0dd86818d95094a5e5f2da39b1f5ba7f74a2a2c430d4f217e2b71a361f620c3713cc415a5a7f488f28657eb39cd3d2364db0f8cf9028bb91e54dfd97820019ac6c5b62d9d976508a3ba2706cba43caf16cf4b07b814030c221789fa7ecb14566253f578f3c0007fcb7b7a152d88eabd5eda64e1575edf3fbe9e3ac2682992c4622a9c8cf580a567cf422eafae318451011478fe4c5502a348d993876ce96fa4e710f14d201c4bcae05163f02cf6b196495eb81a445d2178639fcda5a407e6a996f2a53288e7164847a1662451eae7d59e7ace4eeabc74368eafe7b65f85539608461953ed676a283c304455e997e087468552e60e500184a2d2c910adc2b5915e2001756661974bb663b7ab189b454d3fc29f4e5aa398c737254ff9a9722ef0c2161a593abb3591a254af3c3251ec0ecf89ecc40172fdf5f4e512e0a90fe5319d1ebc6c73e68f9b817c637acaa244db5589d3eca450de9d011c05a46d2f7c6eca8b9c3177ec96bae965935dcfcf94e3ef760fe721cd5400673bccf343f22e675571d3dea7797425ff7afcf78ce893b6fcab6bdbae3ee7216037988190e010b406ce0099918390b0243e701ac723d3c9969da844d44fe832787f76ed2944b9af50d9519b2c4faf5d788333eb2130f9ac8a289298588a6a4668f7eb7a00f8318e698cbb447ae331116ec83ee7ca0cc91977da6fde44a2d76bb92089411202c59f15a3c3cb562d9d2025bb48a78ffc0f35cd0d54fe8094e2b8606f01031b8528b7a17e1e9e34cd2e4576b9f8e15a74b77544614b276226dc8508ba479906443cd79945887f90f3ec8a2aa2ceaa674d4f7e121d094699c83138c6b2fcfc17966734b9db0a6081ae9a3cfc2ec0a1c3c9d773b9f5b7e03ec60d14e65b08f454ef930520b38bb58f16564686bf2606c08115934265fdcde133329379de5374178d835a7cb2d8087314478adc873d6326cd8f268351d5b8ae948fb3c7ae39efe5db79351c8c159b05d5cfb4adf294a37513021889b4baa9f90c8e6dfbb3469b15b4f45cd627b58718fef1398897a799ac844a32a3e28b079a7d8779ea0150aad139b1b12a692890fb906db8bd1d11b638c3980ffecdbd082977a601c0f261edaf75a6a527733fdce697dc295ac79453ed025bc73170cc095aa903bcf45e6f5767ad0abfbb5eb5388fcd4f19b54c103131e7cc835cec2c97d091788f5df4b27c6d1ddead9f14936fa73113e89c7e5e15975ce4a6f7592a65031a75d2624b276913f2b99a8ad44ef29b7458b06995973b4640fe628e0c788c278c0b4a2c999fd016a6b2b3b2fed271b470ceb410dc581e165c68d8e34f9e7d5951b148a7e12caa93a23b5ab220834da5444f79185b0b08be79bf68ac2c73376859d536ef7ae6d895a47a57895d9361236e318de8f8aad383a96bf008420264c6ff1f51702018387abd385000a47c1c8b2b2dabb85b1c17cda403484ed2adfce0e3c2e538330a3afbf272e9e84f68ea58d8d51f85f3de821da82230ceba0b986650dd45204542944b1f91c553edb446ed8cbb728432463a6431c682992b3cf9db663808393f8e2233f787e12720b883c56db29d4aa59c41797c52acbaf412130489ea74579d827a9ac014852416f75f33315fec8c5a2d82deca67fefbd6fbb11978f9616bb02f9e80831898a8178b0880141635edfa44071d6525c5d0bc456c39e5a995670cd970b47e9122b4eeaf202cf48ead776783f0736a16f54f6900c114b25936d5214f60f8527edf1c37e1024ebea05cf61580a659ab38bdbc872a74945501aa6c3c6cc2600603e7a3e14b75780d8afcd9ae843e050ae3bca2d65d2ab11adef559f14b01f346da20d4646db2d2af9770d8ccd7804dfd0bfb9ea3f962f6e646d0d3cc8ef4371205f95783412496588a65ddc7deef19955235a7def44fc47406a673d4dd177415e2f0ebc1bc3789481ff5254af5c7e6cc0785afe429e1fb6b6f7290ac934bb61f217a1ffad1f9abe1b2443bebf16f7df68745f6f11f520837ed544bfcb2952fe889235cb00e8a7e6891afad7ce261854d067585d5af5b9af8a3742a9f76b125fc12c4d9642bed9d4dce4514c52170cc9824887bde53b23aa1c7f1f99fd197e22d04a0c99e5c9c356c63c2cb6c5d96a1f6b40deb95c4098f5909ccf596e5964d0b5eebbc8ef8dee563091287c55a831fc9dfe637415ea4c6295531de055818e1406495dc2523026f0194f75065fa097bb2af864c489cd60ba8e686ebbea56d24c854945831041cd028742ec87e9f129da2030d3b59e70724b6a9fb86f5ff58ac52e653da24fb7f7af11fbf0290ecaabb775e31c299be9c1b4c2e58293084f0b958b5f0d518cf81bad08bf465", 0x1000}, {&(0x7f00000018c0)="f4d94ff0342b92384a8827d3897d803c8f0fbbdb32ab380cdfc4a97287913617c6f56b234e98aaeaf1b670caee3c9f15580d2f2e963d5874c94c96ee1ac6e0ef2d77a8ccb9ec782f7788c125e39640bc30e01e499e733d87e49a8e534c2721af614a2b0077c44f75142fcdce73fb0bde1aba8f5d25779d441da68ff6c6399e03fc72d02fa701fa32c48ef9711f60350e01b0eb93d5e6628b9955d7cd9861f5cc82f735b4ffdde738b5c8376918a0c6f2", 0xb0}], 0x3, &(0x7f00000019c0)=[{0xb0, 0x103, 0xc, "72d2d2e06a3540ff18a189a6ee86cf5f15aeb283a90b340462900e8929374fac9a59e779b14d91e0f195973396304c914cb2bd062500b0d2eec4545393ce7ac66800a05ec0f36366c2f9d2a77376502990d4ee049a686c99d2e14463ba27fafc80e56a1c4764a8aa2da8e657e50ad0343311ac9615e40385e26092de13c01e53df39be269aad11970f4ff2c8c78ae523112accfc11d406bdb2"}, {0x60, 0x109, 0x8001, "febc5098eb6d88b1854fcddda5de7b4b565c912b212f1433d4d3373dc01ab9953debc3ff0e37aa93d2ef977f92d30d3640d101a72639667129999c2c6046d06c6af8d7fa8798fe525b791da5188b02"}, {0xf0, 0x6, 0x400, "449e77fa738202b20a7648419e14618afc7ce45aa5c4b860c9f788c0e84d2b96896bdf908802231645c726ebae4d39bead2e5037dfab570d93a01ce47c320657393239a8c4ca6dd49a4259ad8498ea4aeedc2e69dc60050108c6070e015a7e74df3ad074fa9ac118ebb9341e87b5a775eea0a46cac340f64228bdaa9f0a4a7eb806169d5c79ad5bddd975068f7e242d9236a2e2395c95e06705e4027f459c32fac38fd567a911195cc6e9359bf72caa40a6745766a85158246030fbb215b7041844e70cdb8ea6bb59e5a4fc6518b489d84d3ae357f762c193ba8"}], 0x200}, 0x4044880) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x1}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/166, 0xa6}], 0x2, &(0x7f0000000600)=""/70, 0x46}, 0x2022) 9.700572732s ago: executing program 2 (id=4917): bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 9.054247297s ago: executing program 2 (id=4920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000730000007300000007000000100000000000000805000000020000000075cfcbd294635070d2992064cb00001010000000080000000000001010000000100000000000000901000000070000000000000a01000000020000000100000f03000000020000000200000009000000237565040000000000000e01000000000000000a000003000000"], &(0x7f0000000140)=""/192, 0x93, 0xc0, 0x1, 0x4, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = syz_clone(0x40000000, &(0x7f0000000600)="63201f47839fbd998857254e513083ce292ab301fed4f1343b9e76a5fd80a6475426682d84c41ad357490f37dac1f8d3e46d87c8512b547b88469a", 0x3b, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="62e13dafc9447a4d14ca0cd45c1eae6a8a7ec4815575b5df9d28e5b5e3c65fe1658f18b8a1e24ae4426678ce194ee58a122d71f7cb9efd4dc2b6bb8d708d0a3a9d50795750019313b64877d2d219310d3a83804415dacf78") r3 = perf_event_open(&(0x7f0000000740)={0x7, 0x80, 0x4, 0x3, 0xf5, 0x0, 0x0, 0x1, 0x11c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x5}, 0x100, 0x3, 0x3, 0x5, 0x6, 0x4, 0xfffd, 0x0, 0x3, 0x0, 0x19a8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0xc, 0x44, 0x81, 0xfc, 0x0, 0x6, 0x108410, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x2, 0x9}, 0x100, 0x10000, 0x7, 0x7, 0xffffffffffffffff, 0x7, 0x5, 0x0, 0x800, 0x0, 0x7fffffffffffffff}, r2, 0x5, r3, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x401, '\x00', r1, r0, 0x4, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) 8.166615085s ago: executing program 2 (id=4924): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.25831957s ago: executing program 2 (id=4925): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="143e12e0efca305509bdf60de4020000000400000400"/33, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.969091935s ago: executing program 3 (id=4928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cf00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44190}, 0x2004c001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007110af000000000095000000000000003fe897879f711dc8c202509cf7058edea206ed9fbf7a7230abba146fe2adf12301135e26b54a916122d1f804e520ab2b28e4d0ad79ec942cdff14f476faf7274185dce5025932da9b9946a020eed6363f6e5b3c885626532f2ec477b84bdd578177ff065b979248a2705eefc4951318cd7f6596ab4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x19, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) close(r0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x8, 0x0) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180)) 4.490604431s ago: executing program 3 (id=4930): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r4, 0x0, 0xe9, 0x2e, &(0x7f0000000280)="3828f76a4550f9fa2ecd2964d3ece2727556220859890401698c5ea7ffa60ab3355817e3d834f46368a019476adfd40bf3c6b303612f304d8cb601ae0d268837b3d7f94dd203938016a42721635cf96ef9771d01c9b4e6fb6aced3dc8d78d9e07f9d6671c058ae83325eb7f4db63af5d385d66e2a4931620ab1b82d383481ed50b5015d6d30f77a3f1d3cc45b0aa8a75e6c624bb8d6f32e18636e469489a402468b58eb18f2f1e7417aa088d03f32695c3ded7ecee6058e5a93c25d59d77810639a3584b8e94e0a4337ea82d6acb2e1ba726e07782052213f512b1857cfe7a43cf1cf690ed20d143ba", &(0x7f0000000500)=""/46, 0x0, 0x0, 0x9e, 0x1000, &(0x7f0000000880)="f254187246af408b580c715aa944566e714cfb09d2d36212381fab0b4aaa480b8a2f10e982b214aacd7ae770b3b9610dae77a2d35bbc59c1fd0e54bedb3da02ba9d72f126a5a6c1b826acbdd3eeb636edba994244a593c1a4e34460e4d1fcb5b00df8115c51016a6abd924b22e4e0f27a88457ed8c991482ecef18edf7c9dc657927399fef02c726f47c9d436af90745611bdfb045d89e0d5ed7998ace70", &(0x7f0000000dc0)="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", 0x4, 0x0, 0xae}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080) 4.488321121s ago: executing program 2 (id=4937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000162cceec10315ca800000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000940), 0x1800, r0}, 0x38) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000008000020000000000000adbacf6fc8596dc412ed59e06d0200"], &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0x5, &(0x7f00000002c0)=""/5, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x1000, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x2, 0x1, 0xc, 0x7}, {0x4, 0x5, 0x1, 0x4}, {0x4, 0x3, 0x8, 0x6}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0x7, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40, 0x10}, 0x226, 0x1, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x484, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000500)=r7, 0x4) sendmsg$inet(r8, &(0x7f0000000900)={&(0x7f0000000240)={0x2, 0x3, @remote}, 0x10, 0x0}, 0x200440e4) setsockopt$sock_attach_bpf(r8, 0x1, 0x19, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r6}, 0x8) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r10 = syz_clone(0x40100000, &(0x7f0000000bc0)="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", 0x152, &(0x7f0000000800), &(0x7f00000008c0), &(0x7f0000001980)="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") perf_event_open(0x0, r10, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000980)={0x0, 0x59, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x2004c005) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 4.285581031s ago: executing program 1 (id=4931): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c1", 0x20}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400a0004", 0x1b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000080000000f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000000000000000000000000000000000000016"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000240)='GPL\x00', 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000029aed1ba9cb480505"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c00000000000000060000000900000000080400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0300000000000000000000000000f9ff000000000000000000000001e12c5d29c0f5d40f0dcb35b4a752f1d88c49783facd890e976dc68a125f3e2a925fcf71f5b127a22b98e436affc2370f6b011493d1f4493035a50dcc379a"], 0x50) close(r9) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.950009643s ago: executing program 3 (id=4932): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000480)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 2.806551471s ago: executing program 1 (id=4933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_clone(0x11009000, &(0x7f0000000080)="b27392bc5b279ba955ce6ae3a541a57b6970c025bc49d606467c43b0", 0x1c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="7bb7a953f02aa91237273091f8cb597d3c84394d2c7599a58e930b4e4b57d1eea50dc1dd15f7d0a699a5724247420db16548") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0xac5d, 0x0, 0x0, 0xf25}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r4 = socket$kcm(0x2, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r4, 0x0, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 2.311507257s ago: executing program 1 (id=4934): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd, 0x9}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r0) close(r0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r13, &(0x7f00000000c0), 0x2, 0x0) 1.727855749s ago: executing program 3 (id=4935): bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 1.558829238s ago: executing program 1 (id=4936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x4000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r4, 0x0, 0xe9, 0x2e, &(0x7f0000000280)="3828f76a4550f9fa2ecd2964d3ece2727556220859890401698c5ea7ffa60ab3355817e3d834f46368a019476adfd40bf3c6b303612f304d8cb601ae0d268837b3d7f94dd203938016a42721635cf96ef9771d01c9b4e6fb6aced3dc8d78d9e07f9d6671c058ae83325eb7f4db63af5d385d66e2a4931620ab1b82d383481ed50b5015d6d30f77a3f1d3cc45b0aa8a75e6c624bb8d6f32e18636e469489a402468b58eb18f2f1e7417aa088d03f32695c3ded7ecee6058e5a93c25d59d77810639a3584b8e94e0a4337ea82d6acb2e1ba726e07782052213f512b1857cfe7a43cf1cf690ed20d143ba", &(0x7f0000000500)=""/46, 0x0, 0x0, 0x9e, 0x1000, &(0x7f0000000880)="f254187246af408b580c715aa944566e714cfb09d2d36212381fab0b4aaa480b8a2f10e982b214aacd7ae770b3b9610dae77a2d35bbc59c1fd0e54bedb3da02ba9d72f126a5a6c1b826acbdd3eeb636edba994244a593c1a4e34460e4d1fcb5b00df8115c51016a6abd924b22e4e0f27a88457ed8c991482ecef18edf7c9dc657927399fef02c726f47c9d436af90745611bdfb045d89e0d5ed7998ace70", &(0x7f0000000dc0)="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", 0x4, 0x0, 0xae}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080) 1.558478387s ago: executing program 3 (id=4938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 301.296424ms ago: executing program 3 (id=4939): socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000140), 0xb}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00'], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0x50, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000800), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 287.568875ms ago: executing program 1 (id=4940): socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffff7, 0x0, 0x80, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 179.201421ms ago: executing program 2 (id=4941): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x1, 0x2, 0x0, 0xb}, {0x2, 0x5, 0xa}, {0x2, 0x4, 0x10008}], 0x10, 0x800}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 1 (id=4942): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x4, 0x9, 0x7, 0x0, 0x9, 0xc10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0x64e}, 0x2002, 0x2, 0x5, 0x2, 0x240000000, 0x678, 0xfff6, 0x0, 0x7, 0x0, 0x480000000000000}, 0xffffffffffffffff, 0x9, r0, 0x8) r2 = socket$kcm(0x10, 0x5, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000003451f8baf4a07a6c7b4e844c43190e8700"/44], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000009040000000000000000000001050000120800000000000000000000030000000004000000"], 0x0, 0x5a}, 0x28) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x101d0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x8}}, 0x80, 0x0}, 0x20048841) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (fail_nth: 5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000340)={0x0, 0x80, 0x41, 0x6, 0x80, 0x96, 0x0, 0x2, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x110886, 0x48, 0x2, 0x9, 0x9, 0x6, 0xc194, 0x0, 0x401, 0x0, 0x10}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][T19307] RAX: ffffffffffffffda RBX: 00007f31b7215fa0 RCX: 00007f31b6f9c819 [ 1322.054618][T19311] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1322.058480][T19307] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1322.058497][T19307] RBP: 00007f31b7f23090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.058511][T19307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.058522][T19307] R13: 00007f31b7216038 R14: 00007f31b7215fa0 R15: 00007ffe78ab1678 [ 1322.058555][T19307] [ 1322.332572][T19313] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4216'. [ 1322.439984][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 1322.498370][T19316] netlink: 'syz.1.4218': attribute type 21 has an invalid length. [ 1322.518638][T19316] netlink: 'syz.1.4218': attribute type 11 has an invalid length. [ 1323.475686][T19342] netlink: 'syz.2.4227': attribute type 21 has an invalid length. [ 1323.489648][T19342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1323.716122][T19350] netlink: 'syz.0.4229': attribute type 10 has an invalid length. [ 1324.080922][T19350] ..ãc¤±: mtu greater than device maximum [ 1324.098565][T19350] .`: (slave ..ãc¤±): Error -22 calling dev_set_mtu [ 1324.324148][T19355] netlink: 'syz.2.4231': attribute type 4 has an invalid length. [ 1324.512427][T19360] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1324.524455][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1324.608074][T19367] netlink: 'syz.3.4234': attribute type 46 has an invalid length. [ 1324.888905][T19376] netlink: 'syz.2.4235': attribute type 46 has an invalid length. [ 1325.553209][T19388] netlink: 'syz.0.4238': attribute type 21 has an invalid length. [ 1325.607910][T19388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1325.708212][T19385] netlink: 'syz.2.4237': attribute type 21 has an invalid length. [ 1325.747463][T19385] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1325.902817][T19393] netlink: 'syz.3.4239': attribute type 4 has an invalid length. [ 1325.992789][T19393] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1326.292713][T19400] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 1326.330073][T19405] netlink: 'syz.0.4242': attribute type 11 has an invalid length. [ 1326.330104][T19405] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4242'. [ 1326.351157][T19397] netlink: 'syz.2.4240': attribute type 153 has an invalid length. [ 1326.361146][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.369964][T19397] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4240'. [ 1326.373885][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.486478][T19400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.494223][T19400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.503067][T19400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.510535][T19400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.544611][T19400] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1326.681655][T19405] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1326.690006][T19405] CPU: 0 PID: 19405 Comm: syz.0.4242 Not tainted syzkaller #0 [ 1326.697634][T19405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1326.707805][T19405] Call Trace: [ 1326.711167][T19405] [ 1326.714117][T19405] dump_stack_lvl+0x18c/0x250 [ 1326.718835][T19405] ? show_regs_print_info+0x20/0x20 [ 1326.724054][T19405] ? load_image+0x420/0x420 [ 1326.728596][T19405] sysfs_warn_dup+0x8e/0xa0 [ 1326.733119][T19405] sysfs_do_create_link_sd+0xc0/0x110 [ 1326.738606][T19405] device_add_class_symlinks+0x1cf/0x240 [ 1326.744367][T19405] device_add+0x507/0xc20 [ 1326.748726][T19405] wiphy_register+0x1dad/0x2ae0 [ 1326.753635][T19405] ? cfg80211_event_work+0x40/0x40 [ 1326.758875][T19405] ? minstrel_ht_alloc+0x88a/0x990 [ 1326.764037][T19405] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1326.770143][T19405] ieee80211_register_hw+0x3464/0x4250 [ 1326.775673][T19405] ? ieee80211_tasklet_handler+0x20/0x20 [ 1326.781427][T19405] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1326.787360][T19405] ? __debug_object_init+0xec/0x450 [ 1326.792596][T19405] ? __asan_memset+0x22/0x40 [ 1326.797216][T19405] ? __hrtimer_init+0x186/0x270 [ 1326.802179][T19405] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1326.808031][T19405] ? mac80211_hwsim_free+0x220/0x220 [ 1326.813415][T19405] ? rcu_is_watching+0x15/0xb0 [ 1326.818286][T19405] ? kstrndup+0xbd/0x140 [ 1326.822673][T19405] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1326.827863][T19405] ? __nla_validate+0x50/0x50 [ 1326.832844][T19405] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1326.839208][T19405] ? __nla_parse+0x40/0x50 [ 1326.843644][T19405] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1326.849999][T19405] genl_family_rcv_msg_doit+0x211/0x310 [ 1326.855648][T19405] ? end_current_label_crit_section+0x170/0x170 [ 1326.862007][T19405] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1326.867928][T19405] ? bpf_lsm_capable+0x9/0x10 [ 1326.872625][T19405] ? security_capable+0x89/0xb0 [ 1326.877527][T19405] genl_rcv_msg+0x619/0x7a0 [ 1326.882069][T19405] ? genl_bind+0x360/0x360 [ 1326.886519][T19405] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1326.892864][T19405] ? ref_tracker_free+0x690/0x840 [ 1326.897916][T19405] netlink_rcv_skb+0x241/0x4d0 [ 1326.902707][T19405] ? genl_bind+0x360/0x360 [ 1326.907153][T19405] ? netlink_ack+0x1180/0x1180 [ 1326.911950][T19405] ? __lock_acquire+0x7d40/0x7d40 [ 1326.917071][T19405] ? down_read+0x1ac/0x2e0 [ 1326.921615][T19405] genl_rcv+0x28/0x40 [ 1326.925615][T19405] netlink_unicast+0x751/0x8d0 [ 1326.930413][T19405] netlink_sendmsg+0x8d0/0xbf0 [ 1326.935292][T19405] ? netlink_getsockopt+0x590/0x590 [ 1326.940528][T19405] ? aa_sock_msg_perm+0x94/0x150 [ 1326.945492][T19405] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1326.950802][T19405] ? security_socket_sendmsg+0x80/0xa0 [ 1326.956283][T19405] ? netlink_getsockopt+0x590/0x590 [ 1326.961511][T19405] ____sys_sendmsg+0x5ba/0x960 [ 1326.966301][T19405] ? __asan_memset+0x22/0x40 [ 1326.970925][T19405] ? __sys_sendmsg_sock+0x30/0x30 [ 1326.975960][T19405] ? __import_iovec+0x5f2/0x850 [ 1326.980839][T19405] ? import_iovec+0x73/0xa0 [ 1326.985366][T19405] ___sys_sendmsg+0x2a6/0x360 [ 1326.990207][T19405] ? __sys_sendmsg+0x2a0/0x2a0 [ 1326.995035][T19405] __se_sys_sendmsg+0x1c2/0x2b0 [ 1327.000069][T19405] ? __x64_sys_sendmsg+0x80/0x80 [ 1327.005065][T19405] ? lockdep_hardirqs_on+0x98/0x150 [ 1327.010811][T19405] do_syscall_64+0x55/0xa0 [ 1327.015399][T19405] ? clear_bhb_loop+0x40/0x90 [ 1327.020099][T19405] ? clear_bhb_loop+0x40/0x90 [ 1327.024824][T19405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.030735][T19405] RIP: 0033:0x7f509819c819 [ 1327.035172][T19405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.054814][T19405] RSP: 002b:00007f5099108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.063258][T19405] RAX: ffffffffffffffda RBX: 00007f5098415fa0 RCX: 00007f509819c819 [ 1327.071249][T19405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1327.079262][T19405] RBP: 00007f5098232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1327.087245][T19405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.095270][T19405] R13: 00007f5098416038 R14: 00007f5098415fa0 R15: 00007ffca9f3acd8 [ 1327.103316][T19405] [ 1327.173270][T19413] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1327.208988][T19413] bond0: entered promiscuous mode [ 1327.226784][T19413] bond_slave_0: entered promiscuous mode [ 1327.239208][T19413] bond_slave_1: entered promiscuous mode [ 1327.271257][T19413] bridge0: entered promiscuous mode [ 1327.278892][T19416] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1327.281946][T19416] netlink: 'syz.2.4244': attribute type 29 has an invalid length. [ 1327.291519][T19413] bond0: entered allmulticast mode [ 1327.334255][T19413] bond_slave_0: entered allmulticast mode [ 1327.345434][T19413] bond_slave_1: entered allmulticast mode [ 1327.354365][T19413] bridge0: entered allmulticast mode [ 1327.759806][T19433] FAULT_INJECTION: forcing a failure. [ 1327.759806][T19433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.774605][T19433] CPU: 1 PID: 19433 Comm: syz.2.4251 Not tainted syzkaller #0 [ 1327.782178][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.792247][T19433] Call Trace: [ 1327.795534][T19433] [ 1327.798468][T19433] dump_stack_lvl+0x18c/0x250 [ 1327.803189][T19433] ? show_regs_print_info+0x20/0x20 [ 1327.808633][T19433] ? load_image+0x420/0x420 [ 1327.813196][T19433] ? __might_fault+0xaa/0x120 [ 1327.817956][T19433] ? __lock_acquire+0x7d40/0x7d40 [ 1327.823017][T19433] should_fail_ex+0x39d/0x4d0 [ 1327.827721][T19433] _copy_to_user+0x2f/0xa0 [ 1327.832165][T19433] bpf_test_finish+0x19f/0x650 [ 1327.836951][T19433] ? convert___skb_to_skb+0x590/0x590 [ 1327.842343][T19433] ? convert_skb_to___skb+0x420/0x420 [ 1327.847738][T19433] ? slab_build_skb+0x25f/0x3f0 [ 1327.852622][T19433] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1327.858165][T19433] ? cpu_online+0x60/0x60 [ 1327.862508][T19433] bpf_prog_test_run+0x321/0x390 [ 1327.867484][T19433] __sys_bpf+0x49d/0x890 [ 1327.871749][T19433] ? bpf_link_show_fdinfo+0x390/0x390 [ 1327.877173][T19433] ? lock_chain_count+0x20/0x20 [ 1327.882053][T19433] __x64_sys_bpf+0x7c/0x90 [ 1327.887058][T19433] do_syscall_64+0x55/0xa0 [ 1327.891573][T19433] ? clear_bhb_loop+0x40/0x90 [ 1327.896356][T19433] ? clear_bhb_loop+0x40/0x90 [ 1327.901054][T19433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.906971][T19433] RIP: 0033:0x7f8d40b9c819 [ 1327.911581][T19433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.931289][T19433] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1327.939723][T19433] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1327.947800][T19433] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1327.955781][T19433] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.963766][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.972277][T19433] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1327.980375][T19433] [ 1328.286777][T19443] delete_channel: no stack [ 1328.669157][T19460] __nla_validate_parse: 4 callbacks suppressed [ 1328.669178][T19460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1328.719123][T19457] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4260'. [ 1328.740123][T19457] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1329.083088][T19465] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1329.094278][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1330.083647][T19478] delete_channel: no stack [ 1332.262723][T19486] FAULT_INJECTION: forcing a failure. [ 1332.262723][T19486] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.306292][T19488] validate_nla: 7 callbacks suppressed [ 1332.312494][T19486] CPU: 0 PID: 19486 Comm: syz.0.4267 Not tainted syzkaller #0 [ 1332.320274][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1332.330382][T19486] Call Trace: [ 1332.333893][T19486] [ 1332.336868][T19486] dump_stack_lvl+0x18c/0x250 [ 1332.341698][T19486] ? show_regs_print_info+0x20/0x20 [ 1332.346949][T19486] ? load_image+0x420/0x420 [ 1332.351510][T19486] ? __might_sleep+0xe0/0xe0 [ 1332.356159][T19486] ? __lock_acquire+0x7d40/0x7d40 [ 1332.361239][T19486] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1332.366929][T19486] should_fail_ex+0x39d/0x4d0 [ 1332.371697][T19486] should_failslab+0x9/0x20 [ 1332.376262][T19486] slab_pre_alloc_hook+0x59/0x310 [ 1332.376639][T19488] netlink: 'syz.1.4269': attribute type 10 has an invalid length. [ 1332.381427][T19486] kmem_cache_alloc_node+0x60/0x320 [ 1332.381472][T19486] ? __alloc_skb+0x103/0x2c0 [ 1332.381498][T19486] __alloc_skb+0x103/0x2c0 [ 1332.381524][T19486] __ip_append_data+0x2b73/0x3d40 [ 1332.381578][T19486] ? raw_send_hdrinc+0x1170/0x1170 [ 1332.381616][T19486] ? ip_setup_cork+0x860/0x860 [ 1332.381641][T19486] ? ip_append_data+0xbd/0x180 [ 1332.381665][T19486] ip_append_data+0x10d/0x180 [ 1332.381689][T19486] ? raw_send_hdrinc+0x1170/0x1170 [ 1332.381716][T19486] raw_sendmsg+0x15c1/0x1c00 [ 1332.381758][T19486] ? compat_raw_ioctl+0x70/0x70 [ 1332.381781][T19486] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1332.381808][T19486] ? lock_chain_count+0x20/0x20 [ 1332.381850][T19486] ? lockdep_hardirqs_on+0x98/0x150 [ 1332.381886][T19486] ? aa_sock_msg_perm+0x94/0x150 [ 1332.381913][T19486] ? sock_rps_record_flow+0x19/0x3f0 [ 1332.381942][T19486] ? inet_sendmsg+0x7c/0x2f0 [ 1332.381966][T19486] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1332.481651][T19486] ? security_socket_sendmsg+0x80/0xa0 [ 1332.487226][T19486] ? inet_send_prepare+0x260/0x260 [ 1332.492791][T19486] ____sys_sendmsg+0x5ba/0x960 [ 1332.497569][T19486] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1332.503751][T19486] ? __asan_memset+0x22/0x40 [ 1332.508368][T19486] ? __sys_sendmsg_sock+0x30/0x30 [ 1332.513491][T19486] ? __import_iovec+0x3fa/0x850 [ 1332.518372][T19486] ? import_iovec+0x73/0xa0 [ 1332.522893][T19486] ___sys_sendmsg+0x2a6/0x360 [ 1332.527594][T19486] ? __sys_sendmsg+0x2a0/0x2a0 [ 1332.532394][T19486] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1332.538846][T19486] __se_sys_sendmsg+0x1c2/0x2b0 [ 1332.543716][T19486] ? __x64_sys_sendmsg+0x80/0x80 [ 1332.548688][T19486] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1332.554616][T19486] do_syscall_64+0x55/0xa0 [ 1332.559072][T19486] ? clear_bhb_loop+0x40/0x90 [ 1332.563906][T19486] ? clear_bhb_loop+0x40/0x90 [ 1332.568637][T19486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.574586][T19486] RIP: 0033:0x7f509819c819 [ 1332.579032][T19486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.598931][T19486] RSP: 002b:00007f5099108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.607484][T19486] RAX: ffffffffffffffda RBX: 00007f5098415fa0 RCX: 00007f509819c819 [ 1332.615558][T19486] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1332.623630][T19486] RBP: 00007f5099108090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.631808][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.639978][T19486] R13: 00007f5098416038 R14: 00007f5098415fa0 R15: 00007ffca9f3acd8 [ 1332.648064][T19486] [ 1332.699234][T19488] veth0_vlan: left promiscuous mode [ 1332.738143][T19488] veth0_vlan: entered promiscuous mode [ 1332.782047][T19488] team0: Device veth0_vlan failed to register rx_handler [ 1332.864410][T19499] netlink: 'syz.0.4272': attribute type 21 has an invalid length. [ 1332.886769][T19499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1332.972610][T19504] netlink: 'syz.1.4273': attribute type 21 has an invalid length. [ 1332.992062][T19504] IPv6: NLM_F_CREATE should be specified when creating new route [ 1333.009041][T19504] IPv6: Can't replace route, no match found [ 1333.026022][T19503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.180684][T19510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.438557][T19518] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1337.920965][T19532] netlink: 'syz.1.4281': attribute type 10 has an invalid length. [ 1338.422824][T19532] bridge0: port 2(.`) entered disabled state [ 1338.429257][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.478917][T19532] bridge0: port 2(.`) entered blocking state [ 1338.485392][T19532] bridge0: port 2(.`) entered forwarding state [ 1338.493201][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.500528][T19532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.521581][T19532] team0: Port device bridge0 added [ 1338.547179][T19540] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.4283'. [ 1338.563790][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 1338.578835][T19544] netlink: 'syz.0.4284': attribute type 21 has an invalid length. [ 1338.596294][T19544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1339.161721][T19554] netlink: 'syz.3.4288': attribute type 10 has an invalid length. [ 1339.193282][T19554] wlan1: mtu greater than device maximum [ 1339.204792][T19554] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1339.344385][T19556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.752391][T19592] netlink: 'syz.1.4297': attribute type 21 has an invalid length. [ 1340.761039][T19592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1340.863267][T19590] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1340.929850][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1341.095834][T19596] FAULT_INJECTION: forcing a failure. [ 1341.095834][T19596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.142142][T19596] CPU: 0 PID: 19596 Comm: syz.1.4298 Not tainted syzkaller #0 [ 1341.149710][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1341.159814][T19596] Call Trace: [ 1341.163234][T19596] [ 1341.166205][T19596] dump_stack_lvl+0x18c/0x250 [ 1341.170936][T19596] ? show_regs_print_info+0x20/0x20 [ 1341.176193][T19596] ? load_image+0x420/0x420 [ 1341.180746][T19596] ? __lock_acquire+0x7d40/0x7d40 [ 1341.185894][T19596] ? snprintf+0xe9/0x140 [ 1341.190356][T19596] should_fail_ex+0x39d/0x4d0 [ 1341.195088][T19596] _copy_to_user+0x2f/0xa0 [ 1341.199696][T19596] simple_read_from_buffer+0xe7/0x150 [ 1341.205149][T19596] proc_fail_nth_read+0x1e8/0x260 [ 1341.210238][T19596] ? proc_fault_inject_write+0x360/0x360 [ 1341.216074][T19596] ? fsnotify_perm+0x271/0x5e0 [ 1341.220900][T19596] ? proc_fault_inject_write+0x360/0x360 [ 1341.226590][T19596] vfs_read+0x28b/0x970 [ 1341.230898][T19596] ? kernel_read+0x1e0/0x1e0 [ 1341.235535][T19596] ? __fget_files+0x28/0x4b0 [ 1341.240210][T19596] ? __fget_files+0x28/0x4b0 [ 1341.244856][T19596] ? __fget_files+0x43d/0x4b0 [ 1341.249603][T19596] ? __fdget_pos+0x2a3/0x330 [ 1341.254247][T19596] ? ksys_read+0x75/0x260 [ 1341.258633][T19596] ksys_read+0x150/0x260 [ 1341.263028][T19596] ? vfs_write+0x990/0x990 [ 1341.267598][T19596] ? lockdep_hardirqs_on+0x98/0x150 [ 1341.272916][T19596] do_syscall_64+0x55/0xa0 [ 1341.277385][T19596] ? clear_bhb_loop+0x40/0x90 [ 1341.282200][T19596] ? clear_bhb_loop+0x40/0x90 [ 1341.286968][T19596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1341.293026][T19596] RIP: 0033:0x7f31b6f5d04e [ 1341.297533][T19596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1341.317457][T19596] RSP: 002b:00007f31b7f22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1341.325934][T19596] RAX: ffffffffffffffda RBX: 00007f31b7f236c0 RCX: 00007f31b6f5d04e [ 1341.333969][T19596] RDX: 000000000000000f RSI: 00007f31b7f230a0 RDI: 0000000000000009 [ 1341.341999][T19596] RBP: 00007f31b7f23090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.350047][T19596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.358166][T19596] R13: 00007f31b7216038 R14: 00007f31b7215fa0 R15: 00007ffe78ab1678 [ 1341.366393][T19596] [ 1342.013562][T19620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.070997][T19622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1342.216265][T19624] -1: renamed from syzkaller0 [ 1342.319296][T19628] netlink: 'syz.0.4308': attribute type 21 has an invalid length. [ 1342.327689][T19628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1345.006161][T19641] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4310'. [ 1345.015741][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 1345.151874][T19647] netlink: 'syz.0.4312': attribute type 11 has an invalid length. [ 1345.677427][T19662] netlink: 'syz.3.4316': attribute type 10 has an invalid length. [ 1345.702687][T19662] veth0_vlan: left promiscuous mode [ 1345.735706][T19662] veth0_vlan: entered promiscuous mode [ 1345.763786][T19662] team0: Device veth0_vlan failed to register rx_handler [ 1346.014936][ T51] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 1346.206008][T19673] netlink: 'syz.3.4321': attribute type 21 has an invalid length. [ 1346.248232][T19673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4321'. [ 1346.290588][T19669] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1346.334479][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1346.560699][T19679] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1346.579687][T19679] netlink: 'syz.0.4322': attribute type 21 has an invalid length. [ 1346.768064][T19685] FAULT_INJECTION: forcing a failure. [ 1346.768064][T19685] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.791055][T19685] CPU: 0 PID: 19685 Comm: syz.1.4325 Not tainted syzkaller #0 [ 1346.798703][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1346.809080][T19685] Call Trace: [ 1346.812409][T19685] [ 1346.815368][T19685] dump_stack_lvl+0x18c/0x250 [ 1346.820085][T19685] ? show_regs_print_info+0x20/0x20 [ 1346.825336][T19685] ? load_image+0x420/0x420 [ 1346.829876][T19685] ? __might_sleep+0xe0/0xe0 [ 1346.834511][T19685] ? __lock_acquire+0x7d40/0x7d40 [ 1346.839561][T19685] should_fail_ex+0x39d/0x4d0 [ 1346.844277][T19685] should_failslab+0x9/0x20 [ 1346.848814][T19685] slab_pre_alloc_hook+0x59/0x310 [ 1346.853953][T19685] ? __get_vm_area_node+0x125/0x370 [ 1346.859211][T19685] __kmem_cache_alloc_node+0x53/0x250 [ 1346.864618][T19685] ? __get_vm_area_node+0x125/0x370 [ 1346.869837][T19685] kmalloc_node_trace+0x26/0xe0 [ 1346.874726][T19685] __get_vm_area_node+0x125/0x370 [ 1346.879776][T19685] __vmalloc_node_range+0x36e/0x1330 [ 1346.885086][T19685] ? netlink_sendmsg+0x602/0xbf0 [ 1346.890132][T19685] ? netlink_insert+0x109f/0x13a0 [ 1346.895199][T19685] ? netlink_data_ready+0x10/0x10 [ 1346.900249][T19685] ? free_vm_area+0x50/0x50 [ 1346.904954][T19685] ? netlink_sendmsg+0x602/0xbf0 [ 1346.910001][T19685] vmalloc+0x79/0x90 [ 1346.913922][T19685] ? netlink_sendmsg+0x602/0xbf0 [ 1346.918916][T19685] netlink_sendmsg+0x602/0xbf0 [ 1346.923706][T19685] ? netlink_getsockopt+0x590/0x590 [ 1346.928935][T19685] ? aa_sock_msg_perm+0x94/0x150 [ 1346.933895][T19685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1346.939200][T19685] ? security_socket_sendmsg+0x80/0xa0 [ 1346.944710][T19685] ? netlink_getsockopt+0x590/0x590 [ 1346.950190][T19685] ____sys_sendmsg+0x5ba/0x960 [ 1346.954974][T19685] ? __asan_memset+0x22/0x40 [ 1346.959585][T19685] ? __sys_sendmsg_sock+0x30/0x30 [ 1346.964620][T19685] ? __import_iovec+0x5f2/0x850 [ 1346.969495][T19685] ? import_iovec+0x73/0xa0 [ 1346.974012][T19685] ___sys_sendmsg+0x2a6/0x360 [ 1346.978794][T19685] ? get_pid_task+0x20/0x1e0 [ 1346.983415][T19685] ? __sys_sendmsg+0x2a0/0x2a0 [ 1346.988211][T19685] ? __lock_acquire+0x7d40/0x7d40 [ 1346.993270][T19685] __se_sys_sendmsg+0x1c2/0x2b0 [ 1346.998141][T19685] ? __x64_sys_sendmsg+0x80/0x80 [ 1347.003111][T19685] ? lockdep_hardirqs_on+0x98/0x150 [ 1347.008521][T19685] do_syscall_64+0x55/0xa0 [ 1347.013032][T19685] ? clear_bhb_loop+0x40/0x90 [ 1347.017724][T19685] ? clear_bhb_loop+0x40/0x90 [ 1347.022438][T19685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.028525][T19685] RIP: 0033:0x7f31b6f9c819 [ 1347.033047][T19685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.052774][T19685] RSP: 002b:00007f31b7f23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.061203][T19685] RAX: ffffffffffffffda RBX: 00007f31b7215fa0 RCX: 00007f31b6f9c819 [ 1347.069450][T19685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1347.077440][T19685] RBP: 00007f31b7f23090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.085423][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.093405][T19685] R13: 00007f31b7216038 R14: 00007f31b7215fa0 R15: 00007ffe78ab1678 [ 1347.101597][T19685] [ 1347.196509][T19685] syz.1.4325: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1347.211199][T19685] CPU: 0 PID: 19685 Comm: syz.1.4325 Not tainted syzkaller #0 [ 1347.218801][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1347.228918][T19685] Call Trace: [ 1347.232322][T19685] [ 1347.235387][T19685] dump_stack_lvl+0x18c/0x250 [ 1347.240171][T19685] ? show_regs_print_info+0x20/0x20 [ 1347.245418][T19685] ? load_image+0x420/0x420 [ 1347.249970][T19685] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1347.256428][T19685] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1347.263064][T19685] warn_alloc+0x246/0x340 [ 1347.267454][T19685] ? __get_vm_area_node+0x125/0x370 [ 1347.272714][T19685] ? zone_watermark_ok_safe+0x230/0x230 [ 1347.278409][T19685] ? rcu_is_watching+0x15/0xb0 [ 1347.283451][T19685] ? __get_vm_area_node+0x356/0x370 [ 1347.286316][T19689] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4326'. [ 1347.288688][T19685] __vmalloc_node_range+0x393/0x1330 [ 1347.288721][T19685] ? netlink_insert+0x109f/0x13a0 [ 1347.288777][T19685] ? netlink_data_ready+0x10/0x10 [ 1347.288807][T19685] ? free_vm_area+0x50/0x50 [ 1347.288841][T19685] ? netlink_sendmsg+0x602/0xbf0 [ 1347.313788][T19689] netlink: zone id is out of range [ 1347.318100][T19685] vmalloc+0x79/0x90 [ 1347.318153][T19685] ? netlink_sendmsg+0x602/0xbf0 [ 1347.318181][T19685] netlink_sendmsg+0x602/0xbf0 [ 1347.318220][T19685] ? netlink_getsockopt+0x590/0x590 [ 1347.318252][T19685] ? aa_sock_msg_perm+0x94/0x150 [ 1347.318280][T19685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1347.318303][T19685] ? security_socket_sendmsg+0x80/0xa0 [ 1347.318323][T19685] ? netlink_getsockopt+0x590/0x590 [ 1347.318352][T19685] ____sys_sendmsg+0x5ba/0x960 [ 1347.318380][T19685] ? __asan_memset+0x22/0x40 [ 1347.318408][T19685] ? __sys_sendmsg_sock+0x30/0x30 [ 1347.318427][T19685] ? __import_iovec+0x5f2/0x850 [ 1347.318458][T19685] ? import_iovec+0x73/0xa0 [ 1347.318483][T19685] ___sys_sendmsg+0x2a6/0x360 [ 1347.323941][T19689] netlink: zone id is out of range [ 1347.328623][T19685] ? get_pid_task+0x20/0x1e0 [ 1347.328658][T19685] ? __sys_sendmsg+0x2a0/0x2a0 [ 1347.328704][T19685] ? __lock_acquire+0x7d40/0x7d40 [ 1347.328753][T19685] __se_sys_sendmsg+0x1c2/0x2b0 [ 1347.328778][T19685] ? __x64_sys_sendmsg+0x80/0x80 [ 1347.328811][T19685] ? lockdep_hardirqs_on+0x98/0x150 [ 1347.328837][T19685] do_syscall_64+0x55/0xa0 [ 1347.328855][T19685] ? clear_bhb_loop+0x40/0x90 [ 1347.328880][T19685] ? clear_bhb_loop+0x40/0x90 [ 1347.328906][T19685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.328931][T19685] RIP: 0033:0x7f31b6f9c819 [ 1347.328953][T19685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.328970][T19685] RSP: 002b:00007f31b7f23028 EFLAGS: 00000246 [ 1347.342252][T19689] netlink: zone id is out of range [ 1347.342607][T19685] ORIG_RAX: 000000000000002e [ 1347.342620][T19685] RAX: ffffffffffffffda RBX: 00007f31b7215fa0 RCX: 00007f31b6f9c819 [ 1347.342637][T19685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1347.342651][T19685] RBP: 00007f31b7f23090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.342665][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.342679][T19685] R13: 00007f31b7216038 R14: 00007f31b7215fa0 R15: 00007ffe78ab1678 [ 1347.342712][T19685] [ 1347.545642][T19685] Mem-Info: [ 1347.549972][T19685] active_anon:9402 inactive_anon:0 isolated_anon:0 [ 1347.549972][T19685] active_file:18089 inactive_file:40409 isolated_file:0 [ 1347.549972][T19685] unevictable:768 dirty:259 writeback:0 [ 1347.549972][T19685] slab_reclaimable:10595 slab_unreclaimable:96704 [ 1347.549972][T19685] mapped:24915 shmem:1361 pagetables:580 [ 1347.549972][T19685] sec_pagetables:0 bounce:0 [ 1347.549972][T19685] kernel_misc_reclaimable:0 [ 1347.549972][T19685] free:1339766 free_pcp:7261 free_cma:0 [ 1347.557125][T19689] netlink: zone id is out of range [ 1347.599536][T19685] Node 0 active_anon:37608kB inactive_anon:0kB active_file:72356kB inactive_file:161432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99660kB dirty:1036kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 1347.599596][T19685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1347.599646][T19685] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.599707][T19685] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1347.599758][T19685] Node 0 DMA32 free:1439388kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37572kB inactive_anon:0kB active_file:72356kB inactive_file:160604kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:22212kB local_pcp:17780kB free_cma:0kB [ 1347.635258][T18158] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 1347.638357][T19685] lowmem_reserve[]: [ 1347.741873][T19689] netlink: zone id is out of range [ 1347.766640][T19689] netlink: zone id is out of range [ 1347.772050][T19689] netlink: zone id is out of range [ 1347.788649][T19685] 0 0 0 0 0 [ 1347.792080][T19685] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.819169][T19685] lowmem_reserve[]: 0 0 0 0 0 [ 1347.823976][T19685] Node 1 Normal free:3904308kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6784kB local_pcp:3168kB free_cma:0kB [ 1347.870430][T19689] netlink: zone id is out of range [ 1347.876007][T19689] netlink: zone id is out of range [ 1347.890976][T19689] netlink: zone id is out of range [ 1347.919199][T19685] lowmem_reserve[]: 0 0 0 0 0 [ 1347.924832][T19685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1347.938429][T19685] Node 0 DMA32: 172*4kB (UM) 208*8kB (UME) 565*16kB (UME) 1175*32kB (UME) 485*64kB (UME) 240*128kB (UME) 53*256kB (UME) 32*512kB (UME) 14*1024kB (UME) 5*2048kB (UM) 311*4096kB (UM) = 1439136kB [ 1347.939933][T19696] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1347.958239][T19685] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1347.958446][T19685] Node 1 Normal: 217*4kB (UME) 60*8kB (UME) 39*16kB (UME) 248*32kB (UME) 92*64kB (UME) 11*128kB (UE) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3904308kB [ 1347.998286][T19696] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1348.033216][T19685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.053866][T19685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1348.098004][T19685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.117791][T19685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1348.130652][T19685] 59859 total pagecache pages [ 1348.135710][T19685] 0 pages in swap cache [ 1348.146544][T19685] Free swap = 124996kB [ 1348.151025][T19685] Total swap = 124996kB [ 1348.155245][T19685] 2097051 pages RAM [ 1348.162443][T19685] 0 pages HighMem/MovableOnly [ 1348.171484][T19685] 416927 pages reserved [ 1348.179452][T19685] 0 pages cma reserved [ 1349.346219][T19704] syzkaller0: entered promiscuous mode [ 1349.355984][T19704] syzkaller0: entered allmulticast mode [ 1352.468236][T19714] netlink: 'syz.1.4333': attribute type 21 has an invalid length. [ 1352.476458][T19714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1352.754731][T19732] netlink: 'syz.1.4338': attribute type 11 has an invalid length. [ 1352.838414][T19724] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1352.866150][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1353.246081][T19742] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 1353.254290][T19742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4342'. [ 1353.272158][T19742] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1353.280187][T19742] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.308041][T19742] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1353.887344][T19755] netlink: 'syz.1.4347': attribute type 21 has an invalid length. [ 1353.895730][T19755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1354.085451][T19760] netlink: 'syz.2.4350': attribute type 11 has an invalid length. [ 1354.212636][T19763] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4351'. [ 1354.225020][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4351'. [ 1356.358620][T19804] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1356.373224][T19802] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4365'. [ 1356.388226][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 1358.647204][T19855] __nla_validate_parse: 2 callbacks suppressed [ 1358.647293][T19855] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1358.708094][T19857] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1358.718469][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1358.808337][T19865] netlink: 'syz.3.4391': attribute type 21 has an invalid length. [ 1358.819154][T19865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4391'. [ 1359.946166][T19884] FAULT_INJECTION: forcing a failure. [ 1359.946166][T19884] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.963327][T19884] CPU: 1 PID: 19884 Comm: syz.3.4399 Not tainted syzkaller #0 [ 1359.971060][T19884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1359.981947][T19884] Call Trace: [ 1359.985276][T19884] [ 1359.988339][T19884] dump_stack_lvl+0x18c/0x250 [ 1359.993085][T19884] ? show_regs_print_info+0x20/0x20 [ 1359.998566][T19884] ? load_image+0x420/0x420 [ 1360.003392][T19884] ? __might_sleep+0xe0/0xe0 [ 1360.008252][T19884] ? __lock_acquire+0x7d40/0x7d40 [ 1360.013618][T19884] should_fail_ex+0x39d/0x4d0 [ 1360.018528][T19884] should_failslab+0x9/0x20 [ 1360.023209][T19884] slab_pre_alloc_hook+0x59/0x310 [ 1360.028792][T19884] ? apparmor_sk_alloc_security+0x77/0x100 [ 1360.034725][T19884] __kmem_cache_alloc_node+0x53/0x250 [ 1360.040492][T19884] ? apparmor_sk_alloc_security+0x77/0x100 [ 1360.046503][T19884] kmalloc_trace+0x2a/0xe0 [ 1360.051113][T19884] apparmor_sk_alloc_security+0x77/0x100 [ 1360.056760][T19884] security_sk_alloc+0x6e/0xa0 [ 1360.061720][T19884] sk_prot_alloc+0x101/0x210 [ 1360.066530][T19884] ? sk_alloc+0x24/0x360 [ 1360.070856][T19884] sk_alloc+0x3a/0x360 [ 1360.075132][T19884] ? bpf_ctx_init+0x163/0x1a0 [ 1360.079927][T19884] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 1360.085667][T19884] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 1360.091138][T19884] ? __fget_files+0x28/0x4b0 [ 1360.095746][T19884] ? __fget_files+0x28/0x4b0 [ 1360.100536][T19884] ? __fget_files+0x43d/0x4b0 [ 1360.105433][T19884] ? cpu_online+0x60/0x60 [ 1360.109852][T19884] bpf_prog_test_run+0x321/0x390 [ 1360.114899][T19884] __sys_bpf+0x49d/0x890 [ 1360.119190][T19884] ? bpf_link_show_fdinfo+0x390/0x390 [ 1360.124775][T19884] ? lock_chain_count+0x20/0x20 [ 1360.129928][T19884] __x64_sys_bpf+0x7c/0x90 [ 1360.134459][T19884] do_syscall_64+0x55/0xa0 [ 1360.139327][T19884] ? clear_bhb_loop+0x40/0x90 [ 1360.144197][T19884] ? clear_bhb_loop+0x40/0x90 [ 1360.148893][T19884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1360.154808][T19884] RIP: 0033:0x7fafdef9c819 [ 1360.159244][T19884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.179130][T19884] RSP: 002b:00007fafdfd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1360.187563][T19884] RAX: ffffffffffffffda RBX: 00007fafdf215fa0 RCX: 00007fafdef9c819 [ 1360.195746][T19884] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1360.203760][T19884] RBP: 00007fafdfd87090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.211927][T19884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.220015][T19884] R13: 00007fafdf216038 R14: 00007fafdf215fa0 R15: 00007ffdcfacb5d8 [ 1360.228014][T19884] [ 1361.856751][T19903] syzkaller0: entered promiscuous mode [ 1361.862646][T19903] syzkaller0: entered allmulticast mode [ 1362.025542][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.033732][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.472444][T19906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.754347][T19943] netlink: 'syz.0.4416': attribute type 21 has an invalid length. [ 1365.764150][T19943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1366.210974][T19948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.022293][T19974] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1367.228296][T19978] netlink: 'syz.1.4426': attribute type 1 has an invalid length. [ 1367.252512][T19978] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1368.073147][T19984] netlink: 'syz.2.4428': attribute type 21 has an invalid length. [ 1368.097606][T19984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1368.111315][T19980] netlink: 12927 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1368.250942][T19983] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1368.268082][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1368.394111][T19991] netlink: 'syz.3.4431': attribute type 21 has an invalid length. [ 1368.402658][T19991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1368.575191][T19994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.725744][T19996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1368.733586][T19996] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.741196][T19996] IPv6: NLM_F_CREATE should be set when creating new route [ 1368.749685][T19996] IPv6: NLM_F_CREATE should be set when creating new route [ 1370.354600][T20013] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1370.401683][T20017] netlink: 'syz.2.4440': attribute type 21 has an invalid length. [ 1370.426650][T20017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4440'. [ 1370.446635][T20019] netlink: 'syz.3.4439': attribute type 21 has an invalid length. [ 1370.698605][T20023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.950753][T20031] __nla_validate_parse: 3 callbacks suppressed [ 1370.950775][T20031] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1370.975165][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1372.186508][T20045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4450'. [ 1372.362378][T20049] netlink: 'syz.1.4453': attribute type 21 has an invalid length. [ 1372.377490][T20049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1372.467457][T20051] netlink: 'syz.2.4452': attribute type 21 has an invalid length. [ 1372.475562][T20051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1372.927992][T20059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.092426][T20066] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4457'. [ 1373.551195][T20077] FAULT_INJECTION: forcing a failure. [ 1373.551195][T20077] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.564947][T20077] CPU: 0 PID: 20077 Comm: syz.1.4461 Not tainted syzkaller #0 [ 1373.572623][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1373.582831][T20077] Call Trace: [ 1373.586162][T20077] [ 1373.589142][T20077] dump_stack_lvl+0x18c/0x250 [ 1373.594044][T20077] ? do_syscall_64+0x55/0xa0 [ 1373.598682][T20077] ? show_regs_print_info+0x20/0x20 [ 1373.604031][T20077] ? load_image+0x420/0x420 [ 1373.608610][T20077] should_fail_ex+0x39d/0x4d0 [ 1373.613663][T20077] should_failslab+0x9/0x20 [ 1373.618229][T20077] slab_pre_alloc_hook+0x59/0x310 [ 1373.623372][T20077] ? tipc_group_create_member+0x60/0x530 [ 1373.629079][T20077] __kmem_cache_alloc_node+0x53/0x250 [ 1373.634642][T20077] ? tipc_group_create_member+0x60/0x530 [ 1373.640348][T20077] kmalloc_trace+0x2a/0xe0 [ 1373.645101][T20077] tipc_group_create_member+0x60/0x530 [ 1373.650771][T20077] tipc_nametbl_build_group+0x2ec/0x4d0 [ 1373.656402][T20077] ? tipc_nametbl_build_group+0x2e/0x4d0 [ 1373.662288][T20077] tipc_sk_join+0x39d/0x6a0 [ 1373.666860][T20077] ? __tipc_sendstream+0x1270/0x1270 [ 1373.672313][T20077] tipc_setsockopt+0x73f/0x990 [ 1373.677139][T20077] ? tipc_shutdown+0x4d0/0x4d0 [ 1373.682061][T20077] ? __fget_files+0x28/0x4b0 [ 1373.686795][T20077] ? __fget_files+0x28/0x4b0 [ 1373.691530][T20077] ? aa_sock_opt_perm+0x74/0x100 [ 1373.696537][T20077] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1373.702319][T20077] ? security_socket_setsockopt+0x7e/0xa0 [ 1373.708203][T20077] ? tipc_shutdown+0x4d0/0x4d0 [ 1373.713715][T20077] do_sock_setsockopt+0x175/0x1a0 [ 1373.718870][T20077] ? __fdget+0x180/0x210 [ 1373.723262][T20077] __x64_sys_setsockopt+0x182/0x200 [ 1373.729037][T20077] do_syscall_64+0x55/0xa0 [ 1373.733523][T20077] ? clear_bhb_loop+0x40/0x90 [ 1373.738256][T20077] ? clear_bhb_loop+0x40/0x90 [ 1373.742986][T20077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1373.748963][T20077] RIP: 0033:0x7f31b6f9c819 [ 1373.753431][T20077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.773415][T20077] RSP: 002b:00007f31b7f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1373.779457][T20073] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1373.781894][T20077] RAX: ffffffffffffffda RBX: 00007f31b7215fa0 RCX: 00007f31b6f9c819 [ 1373.781965][T20077] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 1373.781982][T20077] RBP: 00007f31b7f23090 R08: 00000000000004bd R09: 0000000000000000 [ 1373.781996][T20077] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1373.782011][T20077] R13: 00007f31b7216038 R14: 00007f31b7215fa0 R15: 00007ffe78ab1678 [ 1373.782046][T20077] [ 1373.858935][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1374.068686][T20086] netlink: 'syz.1.4465': attribute type 21 has an invalid length. [ 1374.077098][T20086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1374.394407][T20094] netlink: 'syz.1.4467': attribute type 33 has an invalid length. [ 1374.579974][T20093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.758104][T20116] netlink: 'syz.2.4475': attribute type 21 has an invalid length. [ 1377.786603][T20116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1378.384694][T20129] netlink: 'syz.3.4480': attribute type 4 has an invalid length. [ 1378.475074][T20128] netlink: 'syz.2.4479': attribute type 29 has an invalid length. [ 1378.517504][T20128] netlink: 'syz.2.4479': attribute type 3 has an invalid length. [ 1378.562901][T20128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4479'. [ 1382.217178][T20137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.505414][T20148] netlink: 'syz.2.4487': attribute type 21 has an invalid length. [ 1382.513946][T20148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1382.634636][T20153] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1382.866416][T20152] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1382.876138][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1383.182751][T20162] netlink: 'syz.0.4492': attribute type 13 has an invalid length. [ 1383.192892][T20162] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1384.375437][T20168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.486408][T20178] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1385.893691][T20186] netlink: 'syz.1.4499': attribute type 21 has an invalid length. [ 1385.903999][T20186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1386.411117][T20202] sctp: [Deprecated]: syz.3.4506 (pid 20202) Use of int in max_burst socket option deprecated. [ 1386.411117][T20202] Use struct sctp_assoc_value instead [ 1386.485932][T20197] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4504'. [ 1386.497791][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4504'. [ 1386.568275][T20208] netlink: 'syz.0.4515': attribute type 12 has an invalid length. [ 1386.578862][T20208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4515'. [ 1386.660762][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.399769][T20216] syzkaller0: entered promiscuous mode [ 1387.408087][T20216] syzkaller0: entered allmulticast mode [ 1387.427237][T20218] FAULT_INJECTION: forcing a failure. [ 1387.427237][T20218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1387.446679][T20218] CPU: 0 PID: 20218 Comm: syz.3.4511 Not tainted syzkaller #0 [ 1387.454412][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1387.464781][T20218] Call Trace: [ 1387.468130][T20218] [ 1387.471112][T20218] dump_stack_lvl+0x18c/0x250 [ 1387.475861][T20218] ? show_regs_print_info+0x20/0x20 [ 1387.481201][T20218] ? load_image+0x420/0x420 [ 1387.485752][T20218] ? __might_fault+0xaa/0x120 [ 1387.490505][T20218] ? __lock_acquire+0x7d40/0x7d40 [ 1387.495775][T20218] should_fail_ex+0x39d/0x4d0 [ 1387.500545][T20218] _copy_from_iter+0x1d9/0x12e0 [ 1387.506077][T20218] ? copyout_mc+0x70/0x70 [ 1387.510473][T20218] tun_get_user+0x38f/0x3ca0 [ 1387.515302][T20218] ? aa_file_perm+0x11b/0xee0 [ 1387.520118][T20218] ? rcu_read_unlock+0xa0/0xa0 [ 1387.525222][T20218] ? tun_get+0x1c/0x2e0 [ 1387.529543][T20218] ? __lock_acquire+0x7d40/0x7d40 [ 1387.534845][T20218] ? tun_get+0x1c/0x2e0 [ 1387.539289][T20218] tun_chr_write_iter+0x119/0x200 [ 1387.544643][T20218] vfs_write+0x46c/0x990 [ 1387.550089][T20218] ? file_end_write+0x250/0x250 [ 1387.555271][T20218] ? __fget_files+0x43d/0x4b0 [ 1387.560022][T20218] ? __fdget_pos+0x1d8/0x330 [ 1387.564947][T20218] ? ksys_write+0x75/0x260 [ 1387.569499][T20218] ksys_write+0x150/0x260 [ 1387.574419][T20218] ? __ia32_sys_read+0x90/0x90 [ 1387.579232][T20218] ? lockdep_hardirqs_on+0x98/0x150 [ 1387.584694][T20218] do_syscall_64+0x55/0xa0 [ 1387.589273][T20218] ? clear_bhb_loop+0x40/0x90 [ 1387.594262][T20218] ? clear_bhb_loop+0x40/0x90 [ 1387.599089][T20218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.605140][T20218] RIP: 0033:0x7fafdef9c819 [ 1387.610411][T20218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.630681][T20218] RSP: 002b:00007fafdd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1387.639246][T20218] RAX: ffffffffffffffda RBX: 00007fafdf216090 RCX: 00007fafdef9c819 [ 1387.647298][T20218] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 0000000000000006 [ 1387.655420][T20218] RBP: 00007fafdd1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.663619][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.671654][T20218] R13: 00007fafdf216128 R14: 00007fafdf216090 R15: 00007ffdcfacb5d8 [ 1387.679720][T20218] [ 1388.177466][T20213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.381701][T20223] netlink: 'syz.0.4512': attribute type 21 has an invalid length. [ 1390.389981][T20223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1390.785301][T20244] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1390.816887][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1391.600160][T20257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.889224][T20263] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4523'. [ 1391.900878][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4523'. [ 1394.282603][T20272] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1394.315243][T20270] netlink: 'syz.1.4526': attribute type 21 has an invalid length. [ 1394.331808][T20270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1394.342298][T20279] FAULT_INJECTION: forcing a failure. [ 1394.342298][T20279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.373637][T20279] CPU: 1 PID: 20279 Comm: syz.2.4528 Not tainted syzkaller #0 [ 1394.381677][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1394.391930][T20279] Call Trace: [ 1394.395222][T20279] [ 1394.398350][T20279] dump_stack_lvl+0x18c/0x250 [ 1394.403154][T20279] ? show_regs_print_info+0x20/0x20 [ 1394.408723][T20279] ? load_image+0x420/0x420 [ 1394.413266][T20279] ? __might_fault+0xaa/0x120 [ 1394.418335][T20279] ? __lock_acquire+0x7d40/0x7d40 [ 1394.423605][T20279] should_fail_ex+0x39d/0x4d0 [ 1394.428412][T20279] _copy_to_user+0x2f/0xa0 [ 1394.433754][T20279] generic_map_lookup_batch+0x860/0xc60 [ 1394.439883][T20279] ? bpf_map_update_value+0x720/0x720 [ 1394.445999][T20279] ? __fdget+0x180/0x210 [ 1394.450619][T20279] ? bpf_map_update_value+0x720/0x720 [ 1394.456021][T20279] bpf_map_do_batch+0x2cb/0x610 [ 1394.460993][T20279] ? bpf_lsm_bpf+0x9/0x10 [ 1394.465431][T20279] ? security_bpf+0x7e/0xa0 [ 1394.469957][T20279] __sys_bpf+0x7d7/0x890 [ 1394.474404][T20279] ? bpf_link_show_fdinfo+0x390/0x390 [ 1394.480007][T20279] ? lock_chain_count+0x20/0x20 [ 1394.484980][T20279] __x64_sys_bpf+0x7c/0x90 [ 1394.489596][T20279] do_syscall_64+0x55/0xa0 [ 1394.494025][T20279] ? clear_bhb_loop+0x40/0x90 [ 1394.499073][T20279] ? clear_bhb_loop+0x40/0x90 [ 1394.503861][T20279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.509896][T20279] RIP: 0033:0x7f8d40b9c819 [ 1394.514519][T20279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.535036][T20279] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1394.543783][T20279] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1394.552155][T20279] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 0000000000000018 [ 1394.560237][T20279] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.568227][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.576417][T20279] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1394.584880][T20279] [ 1397.879708][T20282] netlink: 'syz.0.4529': attribute type 10 has an invalid length. [ 1397.891183][T20282] team0: Port device ..ãc¤± added [ 1397.898862][T20294] netlink: 'syz.1.4533': attribute type 21 has an invalid length. [ 1397.907010][T20294] netlink: 'syz.1.4533': attribute type 3 has an invalid length. [ 1397.915267][T20294] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4533'. [ 1397.927179][T20298] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1397.948773][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1398.193451][T20312] netlink: 'syz.2.4539': attribute type 21 has an invalid length. [ 1398.220109][T20312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1399.777311][T20337] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1399.810610][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1399.857482][T20340] netlink: 'syz.2.4554': attribute type 21 has an invalid length. [ 1399.865517][T20340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1403.043397][T20373] FAULT_INJECTION: forcing a failure. [ 1403.043397][T20373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.061820][T20373] CPU: 0 PID: 20373 Comm: syz.0.4556 Not tainted syzkaller #0 [ 1403.069991][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1403.080325][T20373] Call Trace: [ 1403.083633][T20373] [ 1403.086590][T20373] dump_stack_lvl+0x18c/0x250 [ 1403.091321][T20373] ? show_regs_print_info+0x20/0x20 [ 1403.096741][T20373] ? load_image+0x420/0x420 [ 1403.101277][T20373] ? __lock_acquire+0x7d40/0x7d40 [ 1403.106602][T20373] ? snprintf+0xe9/0x140 [ 1403.110957][T20373] should_fail_ex+0x39d/0x4d0 [ 1403.115673][T20373] _copy_to_user+0x2f/0xa0 [ 1403.120209][T20373] simple_read_from_buffer+0xe7/0x150 [ 1403.125610][T20373] proc_fail_nth_read+0x1e8/0x260 [ 1403.130777][T20373] ? proc_fault_inject_write+0x360/0x360 [ 1403.136445][T20373] ? fsnotify_perm+0x271/0x5e0 [ 1403.141234][T20373] ? proc_fault_inject_write+0x360/0x360 [ 1403.146894][T20373] vfs_read+0x28b/0x970 [ 1403.151187][T20373] ? kernel_read+0x1e0/0x1e0 [ 1403.155835][T20373] ? __fget_files+0x28/0x4b0 [ 1403.160557][T20373] ? __fget_files+0x28/0x4b0 [ 1403.165189][T20373] ? __fget_files+0x43d/0x4b0 [ 1403.169989][T20373] ? __fdget_pos+0x2a3/0x330 [ 1403.174633][T20373] ? ksys_read+0x75/0x260 [ 1403.179027][T20373] ksys_read+0x150/0x260 [ 1403.183354][T20373] ? vfs_write+0x990/0x990 [ 1403.187898][T20373] ? lockdep_hardirqs_on+0x98/0x150 [ 1403.193252][T20373] do_syscall_64+0x55/0xa0 [ 1403.197709][T20373] ? clear_bhb_loop+0x40/0x90 [ 1403.202404][T20373] ? clear_bhb_loop+0x40/0x90 [ 1403.207100][T20373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.213008][T20373] RIP: 0033:0x7f509815d04e [ 1403.217506][T20373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1403.237305][T20373] RSP: 002b:00007f5099107fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1403.245836][T20373] RAX: ffffffffffffffda RBX: 00007f50991086c0 RCX: 00007f509815d04e [ 1403.254181][T20373] RDX: 000000000000000f RSI: 00007f50991080a0 RDI: 0000000000000004 [ 1403.262181][T20373] RBP: 00007f5099108090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.270166][T20373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.278477][T20373] R13: 00007f5098416038 R14: 00007f5098415fa0 R15: 00007ffca9f3acd8 [ 1403.286506][T20373] [ 1403.334595][T20375] netlink: 'syz.1.4557': attribute type 21 has an invalid length. [ 1403.366599][T20375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1403.379511][T20376] netlink: 'syz.2.4555': attribute type 5 has an invalid length. [ 1404.068824][T20396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.094993][T20398] FAULT_INJECTION: forcing a failure. [ 1404.094993][T20398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.126655][T20398] CPU: 0 PID: 20398 Comm: syz.2.4565 Not tainted syzkaller #0 [ 1404.134339][T20398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1404.144468][T20398] Call Trace: [ 1404.147808][T20398] [ 1404.150800][T20398] dump_stack_lvl+0x18c/0x250 [ 1404.155666][T20398] ? show_regs_print_info+0x20/0x20 [ 1404.161026][T20398] ? load_image+0x420/0x420 [ 1404.165624][T20398] ? __might_fault+0xaa/0x120 [ 1404.170377][T20398] ? __lock_acquire+0x7d40/0x7d40 [ 1404.175566][T20398] should_fail_ex+0x39d/0x4d0 [ 1404.180377][T20398] _copy_from_user+0x2f/0xe0 [ 1404.185027][T20398] ___sys_sendmsg+0x1c7/0x360 [ 1404.189857][T20398] ? __sys_sendmsg+0x2a0/0x2a0 [ 1404.194726][T20398] ? __lock_acquire+0x7d40/0x7d40 [ 1404.199953][T20398] __se_sys_sendmsg+0x1c2/0x2b0 [ 1404.204852][T20398] ? __x64_sys_sendmsg+0x80/0x80 [ 1404.209872][T20398] ? lockdep_hardirqs_on+0x98/0x150 [ 1404.215208][T20398] do_syscall_64+0x55/0xa0 [ 1404.219659][T20398] ? clear_bhb_loop+0x40/0x90 [ 1404.224373][T20398] ? clear_bhb_loop+0x40/0x90 [ 1404.229108][T20398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.235051][T20398] RIP: 0033:0x7f8d40b9c819 [ 1404.239602][T20398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.259428][T20398] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1404.267884][T20398] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1404.275977][T20398] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1404.284070][T20398] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.292072][T20398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.300180][T20398] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1404.308412][T20398] [ 1406.798784][T20405] veth1_macvtap: left promiscuous mode [ 1406.804553][T20405] macsec0: entered allmulticast mode [ 1407.081737][T20409] netlink: 'syz.1.4568': attribute type 21 has an invalid length. [ 1407.144018][T20409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1407.581195][T20417] syzkaller0: entered promiscuous mode [ 1407.587306][T20417] syzkaller0: entered allmulticast mode [ 1407.936715][T20432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4575'. [ 1407.992072][T20427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.296772][T20435] netlink: 'syz.1.4575': attribute type 12 has an invalid length. [ 1412.304755][T20435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4575'. [ 1412.315338][T20444] net_ratelimit: 79 callbacks suppressed [ 1412.315353][T20444] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1412.487251][T20448] netlink: 'syz.3.4580': attribute type 21 has an invalid length. [ 1412.509212][T20448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4580'. [ 1412.633813][T20459] FAULT_INJECTION: forcing a failure. [ 1412.633813][T20459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.650683][T20459] CPU: 0 PID: 20459 Comm: syz.0.4584 Not tainted syzkaller #0 [ 1412.658342][T20459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1412.668474][T20459] Call Trace: [ 1412.671820][T20459] [ 1412.674823][T20459] dump_stack_lvl+0x18c/0x250 [ 1412.679612][T20459] ? show_regs_print_info+0x20/0x20 [ 1412.685246][T20459] ? load_image+0x420/0x420 [ 1412.690011][T20459] ? __might_fault+0xaa/0x120 [ 1412.694764][T20459] ? __lock_acquire+0x7d40/0x7d40 [ 1412.699946][T20459] should_fail_ex+0x39d/0x4d0 [ 1412.704769][T20459] _copy_from_user+0x2f/0xe0 [ 1412.709444][T20459] bpf_prog_test_run_skb+0x266/0x12b0 [ 1412.715406][T20459] ? __fget_files+0x28/0x4b0 [ 1412.720047][T20459] ? __fget_files+0x28/0x4b0 [ 1412.724786][T20459] ? __fget_files+0x43d/0x4b0 [ 1412.729624][T20459] ? cpu_online+0x60/0x60 [ 1412.733998][T20459] bpf_prog_test_run+0x321/0x390 [ 1412.738999][T20459] __sys_bpf+0x49d/0x890 [ 1412.743453][T20459] ? bpf_link_show_fdinfo+0x390/0x390 [ 1412.749113][T20459] ? lock_chain_count+0x20/0x20 [ 1412.754239][T20459] __x64_sys_bpf+0x7c/0x90 [ 1412.758700][T20459] do_syscall_64+0x55/0xa0 [ 1412.763412][T20459] ? clear_bhb_loop+0x40/0x90 [ 1412.768128][T20459] ? clear_bhb_loop+0x40/0x90 [ 1412.772886][T20459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1412.778835][T20459] RIP: 0033:0x7f509819c819 [ 1412.783300][T20459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.803264][T20459] RSP: 002b:00007f5099108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1412.811986][T20459] RAX: ffffffffffffffda RBX: 00007f5098415fa0 RCX: 00007f509819c819 [ 1412.820197][T20459] RDX: 0000000000000048 RSI: 0000200000002c00 RDI: 000000000000000a [ 1412.828220][T20459] RBP: 00007f5099108090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.836276][T20459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.844405][T20459] R13: 00007f5098416038 R14: 00007f5098415fa0 R15: 00007ffca9f3acd8 [ 1412.852584][T20459] [ 1413.359746][T20467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.270461][T20473] syzkaller0: entered promiscuous mode [ 1416.286622][T20473] syzkaller0: entered allmulticast mode [ 1418.578022][T20484] netlink: 'syz.0.4595': attribute type 21 has an invalid length. [ 1418.587082][T20484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1419.179590][T20504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.717138][T20519] netlink: 'syz.2.4605': attribute type 21 has an invalid length. [ 1421.725315][T20519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4605'. [ 1422.011235][T20522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1422.019936][T20522] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.028841][T20522] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.037765][T20522] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.605033][T20537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.927745][T20543] netlink: 'syz.2.4614': attribute type 1 has an invalid length. [ 1422.940402][T20543] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4614'. [ 1423.460596][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.467303][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.497602][T20554] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1426.004622][T20553] netlink: 'syz.2.4618': attribute type 21 has an invalid length. [ 1426.045639][T20553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4618'. [ 1426.642954][T20575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.731459][T20581] netlink: 'syz.2.4628': attribute type 2 has an invalid length. [ 1426.739715][T20581] netlink: 'syz.2.4628': attribute type 8 has an invalid length. [ 1426.747764][T20581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1426.787694][T20582] netlink: 'syz.1.4630': attribute type 21 has an invalid length. [ 1426.796176][T20582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1427.093830][T20588] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 1427.130557][T20588] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4631'. [ 1427.228836][T20594] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4634'. [ 1427.301213][T20599] FAULT_INJECTION: forcing a failure. [ 1427.301213][T20599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.320978][T20599] CPU: 1 PID: 20599 Comm: syz.2.4635 Not tainted syzkaller #0 [ 1427.328531][T20599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1427.338640][T20599] Call Trace: [ 1427.341970][T20599] [ 1427.344954][T20599] dump_stack_lvl+0x18c/0x250 [ 1427.349794][T20599] ? show_regs_print_info+0x20/0x20 [ 1427.355047][T20599] ? load_image+0x420/0x420 [ 1427.359587][T20599] ? __lock_acquire+0x7d40/0x7d40 [ 1427.364743][T20599] ? snprintf+0xe9/0x140 [ 1427.369033][T20599] should_fail_ex+0x39d/0x4d0 [ 1427.373741][T20599] _copy_to_user+0x2f/0xa0 [ 1427.378183][T20599] simple_read_from_buffer+0xe7/0x150 [ 1427.383586][T20599] proc_fail_nth_read+0x1e8/0x260 [ 1427.388687][T20599] ? proc_fault_inject_write+0x360/0x360 [ 1427.394348][T20599] ? fsnotify_perm+0x271/0x5e0 [ 1427.399149][T20599] ? proc_fault_inject_write+0x360/0x360 [ 1427.404821][T20599] vfs_read+0x28b/0x970 [ 1427.409119][T20599] ? kernel_read+0x1e0/0x1e0 [ 1427.413833][T20599] ? __fget_files+0x28/0x4b0 [ 1427.418446][T20599] ? __fget_files+0x28/0x4b0 [ 1427.423057][T20599] ? __fget_files+0x43d/0x4b0 [ 1427.427787][T20599] ? __fdget_pos+0x2a3/0x330 [ 1427.432511][T20599] ? ksys_read+0x75/0x260 [ 1427.436979][T20599] ksys_read+0x150/0x260 [ 1427.441270][T20599] ? vfs_write+0x990/0x990 [ 1427.445920][T20599] ? lockdep_hardirqs_on+0x98/0x150 [ 1427.451441][T20599] do_syscall_64+0x55/0xa0 [ 1427.455975][T20599] ? clear_bhb_loop+0x40/0x90 [ 1427.460677][T20599] ? clear_bhb_loop+0x40/0x90 [ 1427.465380][T20599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.471484][T20599] RIP: 0033:0x7f8d40b5d04e [ 1427.475917][T20599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1427.495858][T20599] RSP: 002b:00007f8d41a92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1427.504399][T20599] RAX: ffffffffffffffda RBX: 00007f8d41a936c0 RCX: 00007f8d40b5d04e [ 1427.512596][T20599] RDX: 000000000000000f RSI: 00007f8d41a930a0 RDI: 0000000000000005 [ 1427.520869][T20599] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.528945][T20599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.537104][T20599] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1427.545203][T20599] [ 1427.706213][T20608] netlink: 'syz.1.4637': attribute type 3 has an invalid length. [ 1427.714336][T20608] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1428.182341][T20622] netlink: 'syz.0.4643': attribute type 21 has an invalid length. [ 1428.202676][T20622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1428.505184][T20632] netlink: 'syz.3.4645': attribute type 10 has an invalid length. [ 1428.523592][T20632] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.4645'. [ 1428.546803][T20632] openvswitch: netlink: Flow key attr not present in new flow. [ 1431.626057][T20664] netlink: 'syz.0.4655': attribute type 21 has an invalid length. [ 1431.662498][T20664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4655'. [ 1432.611559][T20673] syzkaller0: entered promiscuous mode [ 1432.648856][T20673] syzkaller0: entered allmulticast mode [ 1432.958362][T20678] FAULT_INJECTION: forcing a failure. [ 1432.958362][T20678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.025978][T20678] CPU: 0 PID: 20678 Comm: syz.2.4658 Not tainted syzkaller #0 [ 1433.033553][T20678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1433.043760][T20678] Call Trace: [ 1433.047100][T20678] [ 1433.050086][T20678] dump_stack_lvl+0x18c/0x250 [ 1433.054850][T20678] ? show_regs_print_info+0x20/0x20 [ 1433.060141][T20678] ? load_image+0x420/0x420 [ 1433.064738][T20678] ? __might_fault+0xaa/0x120 [ 1433.069510][T20678] should_fail_ex+0x39d/0x4d0 [ 1433.074290][T20678] copyin+0x1a/0x90 [ 1433.078178][T20678] _copy_from_iter+0x54f/0x12e0 [ 1433.083275][T20678] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1433.088633][T20678] ? __virt_addr_valid+0x18c/0x540 [ 1433.093855][T20678] ? copyout_mc+0x70/0x70 [ 1433.098427][T20678] ? __virt_addr_valid+0x18c/0x540 [ 1433.103601][T20678] ? __virt_addr_valid+0x18c/0x540 [ 1433.108783][T20678] ? __virt_addr_valid+0x469/0x540 [ 1433.113971][T20678] ? __check_object_size+0x506/0xa20 [ 1433.119350][T20678] netlink_sendmsg+0x76b/0xbf0 [ 1433.124273][T20678] ? perf_trace_lock+0x304/0x3b0 [ 1433.129414][T20678] ? netlink_getsockopt+0x590/0x590 [ 1433.134700][T20678] ? aa_sock_msg_perm+0x94/0x150 [ 1433.139804][T20678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1433.145150][T20678] ? security_socket_sendmsg+0x80/0xa0 [ 1433.150708][T20678] ? netlink_getsockopt+0x590/0x590 [ 1433.156106][T20678] ____sys_sendmsg+0x5ba/0x960 [ 1433.160972][T20678] ? __asan_memset+0x22/0x40 [ 1433.165629][T20678] ? __sys_sendmsg_sock+0x30/0x30 [ 1433.170713][T20678] ? __import_iovec+0x3fa/0x850 [ 1433.175664][T20678] ? import_iovec+0x73/0xa0 [ 1433.180368][T20678] ___sys_sendmsg+0x2a6/0x360 [ 1433.185246][T20678] ? __sys_sendmsg+0x2a0/0x2a0 [ 1433.190346][T20678] ? __lock_acquire+0x7d40/0x7d40 [ 1433.195536][T20678] __se_sys_sendmsg+0x1c2/0x2b0 [ 1433.200469][T20678] ? __x64_sys_sendmsg+0x80/0x80 [ 1433.205537][T20678] ? lockdep_hardirqs_on+0x98/0x150 [ 1433.210814][T20678] do_syscall_64+0x55/0xa0 [ 1433.215378][T20678] ? clear_bhb_loop+0x40/0x90 [ 1433.220112][T20678] ? clear_bhb_loop+0x40/0x90 [ 1433.224865][T20678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.230819][T20678] RIP: 0033:0x7f8d40b9c819 [ 1433.235318][T20678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.255418][T20678] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.264268][T20678] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1433.272572][T20678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1433.280781][T20678] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.289343][T20678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.297407][T20678] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1433.305619][T20678] [ 1435.935765][T20679] netlink: 'syz.0.4659': attribute type 21 has an invalid length. [ 1435.944565][T20679] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4659'. [ 1435.954070][T20683] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1435.963505][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1436.589718][T20703] netlink: 'syz.3.4666': attribute type 19 has an invalid length. [ 1436.619619][T20703] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1437.694327][T20712] tap0: tun_chr_ioctl cmd 1074025677 [ 1437.729028][T20712] tap0: linktype set to 778 [ 1438.103155][T20726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1439.506401][T20726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1439.891455][T20732] syzkaller0: entered promiscuous mode [ 1439.899379][T20732] syzkaller0: entered allmulticast mode [ 1440.065221][T20726] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1442.165637][T20737] netlink: 'syz.2.4674': attribute type 4 has an invalid length. [ 1442.173797][T20739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1442.574755][T20751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.191856][T20764] netlink: 'syz.3.4685': attribute type 2 has an invalid length. [ 1443.372457][T20767] FAULT_INJECTION: forcing a failure. [ 1443.372457][T20767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.406409][T20767] CPU: 1 PID: 20767 Comm: syz.2.4686 Not tainted syzkaller #0 [ 1443.414147][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1443.424331][T20767] Call Trace: [ 1443.427644][T20767] [ 1443.430604][T20767] dump_stack_lvl+0x18c/0x250 [ 1443.435332][T20767] ? show_regs_print_info+0x20/0x20 [ 1443.440569][T20767] ? load_image+0x420/0x420 [ 1443.445113][T20767] ? __might_fault+0xaa/0x120 [ 1443.449827][T20767] ? __lock_acquire+0x7d40/0x7d40 [ 1443.454898][T20767] should_fail_ex+0x39d/0x4d0 [ 1443.459627][T20767] _copy_to_user+0x2f/0xa0 [ 1443.464128][T20767] ? generic_map_lookup_batch+0x61a/0xc60 [ 1443.469879][T20767] generic_map_lookup_batch+0x9c4/0xc60 [ 1443.475472][T20767] ? bpf_map_update_value+0x720/0x720 [ 1443.480885][T20767] ? __fdget+0x180/0x210 [ 1443.485169][T20767] ? bpf_map_update_value+0x720/0x720 [ 1443.490574][T20767] bpf_map_do_batch+0x2cb/0x610 [ 1443.495458][T20767] ? bpf_lsm_bpf+0x9/0x10 [ 1443.499819][T20767] ? security_bpf+0x7e/0xa0 [ 1443.504357][T20767] __sys_bpf+0x7d7/0x890 [ 1443.508634][T20767] ? bpf_link_show_fdinfo+0x390/0x390 [ 1443.514056][T20767] ? lock_chain_count+0x20/0x20 [ 1443.518961][T20767] __x64_sys_bpf+0x7c/0x90 [ 1443.523419][T20767] do_syscall_64+0x55/0xa0 [ 1443.527857][T20767] ? clear_bhb_loop+0x40/0x90 [ 1443.532536][T20767] ? clear_bhb_loop+0x40/0x90 [ 1443.537243][T20767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1443.543315][T20767] RIP: 0033:0x7f8d40b9c819 [ 1443.547876][T20767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.567532][T20767] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1443.576016][T20767] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1443.584036][T20767] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 0000000000000018 [ 1443.592107][T20767] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.600232][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.608250][T20767] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1443.616373][T20767] [ 1443.898981][T18158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.910973][T18158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.919293][T18158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.939411][T18158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.949516][T18158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1443.966674][T18158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1444.139478][T20772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.399436][T20773] chnl_net:caif_netlink_parms(): no params data found [ 1444.506143][T20773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.514564][T20773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.523707][T20773] bridge_slave_0: entered allmulticast mode [ 1444.536129][T20773] bridge_slave_0: entered promiscuous mode [ 1444.548287][T20773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.555906][T20773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.566410][T20773] bridge_slave_1: entered allmulticast mode [ 1444.574511][T20773] bridge_slave_1: entered promiscuous mode [ 1444.639620][T20773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.662930][T20773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.753515][ T4743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.812123][T20787] FAULT_INJECTION: forcing a failure. [ 1444.812123][T20787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.839062][T20773] team0: Port device team_slave_0 added [ 1444.850792][T20787] CPU: 0 PID: 20787 Comm: syz.3.4692 Not tainted syzkaller #0 [ 1444.858346][T20787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1444.868437][T20787] Call Trace: [ 1444.871725][T20787] [ 1444.874662][T20787] dump_stack_lvl+0x18c/0x250 [ 1444.879445][T20787] ? show_regs_print_info+0x20/0x20 [ 1444.884655][T20787] ? load_image+0x420/0x420 [ 1444.889176][T20787] ? __lock_acquire+0x7d40/0x7d40 [ 1444.894219][T20787] ? __virt_addr_valid+0x18c/0x540 [ 1444.899338][T20787] should_fail_ex+0x39d/0x4d0 [ 1444.904032][T20787] _copy_from_user+0x2f/0xe0 [ 1444.908737][T20787] bpf_test_init+0xde/0x140 [ 1444.909657][T20773] team0: Port device team_slave_1 added [ 1444.913286][T20787] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1444.924430][T20787] ? dev_put+0x80/0x80 [ 1444.928534][T20787] ? dev_put+0x80/0x80 [ 1444.932628][T20787] bpf_prog_test_run+0x321/0x390 [ 1444.937583][T20787] __sys_bpf+0x49d/0x890 [ 1444.941872][T20787] ? bpf_link_show_fdinfo+0x390/0x390 [ 1444.947274][T20787] ? lock_chain_count+0x20/0x20 [ 1444.952154][T20787] __x64_sys_bpf+0x7c/0x90 [ 1444.956586][T20787] do_syscall_64+0x55/0xa0 [ 1444.961040][T20787] ? clear_bhb_loop+0x40/0x90 [ 1444.965850][T20787] ? clear_bhb_loop+0x40/0x90 [ 1444.970565][T20787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.976486][T20787] RIP: 0033:0x7fafdef9c819 [ 1444.980937][T20787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.000733][T20787] RSP: 002b:00007fafdfd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1445.009250][T20787] RAX: ffffffffffffffda RBX: 00007fafdf215fa0 RCX: 00007fafdef9c819 [ 1445.017257][T20787] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1445.025352][T20787] RBP: 00007fafdfd87090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.033368][T20787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.041351][T20787] R13: 00007fafdf216038 R14: 00007fafdf215fa0 R15: 00007ffdcfacb5d8 [ 1445.049350][T20787] [ 1445.116773][ T4743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.235882][ T4743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.438298][T20797] FAULT_INJECTION: forcing a failure. [ 1445.438298][T20797] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.452537][T20797] CPU: 1 PID: 20797 Comm: syz.2.4696 Not tainted syzkaller #0 [ 1445.460083][T20797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1445.470270][T20797] Call Trace: [ 1445.473591][T20797] [ 1445.476565][T20797] dump_stack_lvl+0x18c/0x250 [ 1445.481464][T20797] ? sctp_sendmsg+0x1575/0x28c0 [ 1445.486356][T20797] ? ___sys_sendmsg+0x2a6/0x360 [ 1445.491241][T20797] ? show_regs_print_info+0x20/0x20 [ 1445.496510][T20797] ? load_image+0x420/0x420 [ 1445.501038][T20797] ? mark_lock+0x94/0x320 [ 1445.505409][T20797] should_fail_ex+0x39d/0x4d0 [ 1445.510137][T20797] should_failslab+0x9/0x20 [ 1445.514841][T20797] slab_pre_alloc_hook+0x59/0x310 [ 1445.519977][T20797] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1445.526212][T20797] ? sctp_add_bind_addr+0x8c/0x360 [ 1445.531342][T20797] __kmem_cache_alloc_node+0x53/0x250 [ 1445.536739][T20797] ? sctp_add_bind_addr+0x8c/0x360 [ 1445.541949][T20797] kmalloc_trace+0x2a/0xe0 [ 1445.546479][T20797] sctp_add_bind_addr+0x8c/0x360 [ 1445.551444][T20797] sctp_copy_local_addr_list+0x315/0x4f0 [ 1445.557828][T20797] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1445.563591][T20797] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1445.569697][T20797] ? sctp_v4_is_any+0x35/0x60 [ 1445.574392][T20797] ? sctp_copy_one_addr+0x8c/0x350 [ 1445.579533][T20797] sctp_bind_addr_copy+0xb3/0x3c0 [ 1445.584611][T20797] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1445.590967][T20797] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1445.596452][T20797] ? __sctp_connect+0xd80/0xd80 [ 1445.601410][T20797] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1445.606800][T20797] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1445.612448][T20797] ? security_sctp_bind_connect+0x89/0xb0 [ 1445.618362][T20797] sctp_sendmsg+0x1575/0x28c0 [ 1445.623077][T20797] ? sctp_getsockopt+0xb60/0xb60 [ 1445.628093][T20797] ? aa_sk_perm+0x83c/0x970 [ 1445.632634][T20797] ? aa_af_perm+0x330/0x330 [ 1445.637187][T20797] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1445.643622][T20797] ? sock_rps_record_flow+0x19/0x3f0 [ 1445.648936][T20797] ? inet_sendmsg+0xe9/0x2f0 [ 1445.653546][T20797] ? inet_send_prepare+0x260/0x260 [ 1445.658684][T20797] ____sys_sendmsg+0x5ba/0x960 [ 1445.663489][T20797] ? __lock_acquire+0x7d40/0x7d40 [ 1445.668535][T20797] ? __asan_memset+0x22/0x40 [ 1445.673153][T20797] ? __sys_sendmsg_sock+0x30/0x30 [ 1445.678287][T20797] ? __import_iovec+0x5f2/0x850 [ 1445.683191][T20797] ? import_iovec+0x73/0xa0 [ 1445.687713][T20797] ___sys_sendmsg+0x2a6/0x360 [ 1445.692490][T20797] ? get_pid_task+0x20/0x1e0 [ 1445.697196][T20797] ? __sys_sendmsg+0x2a0/0x2a0 [ 1445.702001][T20797] ? __lock_acquire+0x7d40/0x7d40 [ 1445.707095][T20797] __se_sys_sendmsg+0x1c2/0x2b0 [ 1445.712039][T20797] ? __x64_sys_sendmsg+0x80/0x80 [ 1445.717015][T20797] do_syscall_64+0x55/0xa0 [ 1445.721448][T20797] ? clear_bhb_loop+0x40/0x90 [ 1445.726231][T20797] ? clear_bhb_loop+0x40/0x90 [ 1445.730995][T20797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.736940][T20797] RIP: 0033:0x7f8d40b9c819 [ 1445.741666][T20797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.761832][T20797] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.770265][T20797] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1445.778358][T20797] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1445.786538][T20797] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.794537][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.802786][T20797] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1445.810802][T20797] [ 1445.900678][T20773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.915621][T20773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.945159][T20773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.957344][T20795] netlink: 'syz.3.4695': attribute type 19 has an invalid length. [ 1445.969412][T20795] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1445.979177][T20794] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1446.016678][ T51] Bluetooth: hci2: command tx timeout [ 1446.044304][T20773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.066369][T20773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.143190][T20773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.204960][ T4743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.359305][T20806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.947219][T20809] netlink: 'syz.0.4701': attribute type 21 has an invalid length. [ 1446.973251][T20809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1447.057823][T20773] hsr_slave_0: entered promiscuous mode [ 1447.072069][T20773] hsr_slave_1: entered promiscuous mode [ 1447.089527][T20773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.097886][T20773] Cannot create hsr debugfs directory [ 1447.380009][T20820] netlink: 'syz.0.4705': attribute type 21 has an invalid length. [ 1447.410546][T20821] netlink: 'syz.3.4704': attribute type 19 has an invalid length. [ 1447.426699][T20821] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1447.685140][T20826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4706'. [ 1447.702198][T20826] .`: (slave bond_slave_0): Releasing backup interface [ 1447.734967][T20826] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1448.050782][T20830] netlink: 'syz.2.4707': attribute type 19 has an invalid length. [ 1448.059498][T20830] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4707'. [ 1448.099844][ T51] Bluetooth: hci2: command tx timeout [ 1448.611519][T20836] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4709'. [ 1448.647765][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 1449.422836][T20853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.871703][T20773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1449.902193][T20773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1449.953519][T20773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1449.968943][T20773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1450.201132][ T51] Bluetooth: hci2: command tx timeout [ 1450.322058][T20773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.382115][T20773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.415286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.422687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.503707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.511198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.937465][T20773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.013653][T20773] veth0_vlan: entered promiscuous mode [ 1451.035625][T20773] veth1_vlan: entered promiscuous mode [ 1451.092004][T20773] veth0_macvtap: entered promiscuous mode [ 1451.113646][T20773] veth1_macvtap: entered promiscuous mode [ 1451.140070][T20773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.153676][T20773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.166165][T20773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.191999][T20773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.205918][T20773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.223335][T20773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.249594][T20773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.261720][T20773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.272275][T20773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.284464][T20773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.674811][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.708118][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.740705][T20873] netlink: 'syz.3.4714': attribute type 21 has an invalid length. [ 1451.776867][T20873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4714'. [ 1451.952051][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.038391][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.143057][T20884] netlink: 'syz.0.4716': attribute type 10 has an invalid length. [ 1452.168429][T20884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4716'. [ 1452.359560][ T51] Bluetooth: hci2: command tx timeout [ 1452.450569][ T4743] hsr_slave_0: left promiscuous mode [ 1452.514045][ T4743] hsr_slave_1: left promiscuous mode [ 1452.522779][ T4743] .`: left allmulticast mode [ 1452.532232][ T4743] bond_slave_1: left allmulticast mode [ 1452.540512][ T4743] bridge_slave_1: left allmulticast mode [ 1452.548434][ T4743] bridge0: port 2(.`) entered disabled state [ 1452.556111][ T4743] bridge_slave_0: left allmulticast mode [ 1452.562901][ T4743] bridge_slave_0: left promiscuous mode [ 1452.570519][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.590284][ T4743] veth0_macvtap: left promiscuous mode [ 1452.746971][ T4743] team0 (unregistering): Port device geneve1 removed [ 1453.409470][ T4743] team0 (unregistering): Port device team_slave_1 removed [ 1453.506063][ T4743] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.515844][ T4743] bond_slave_1 (unregistering): left promiscuous mode [ 1453.611919][ T4743] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1453.622673][ T4743] bridge_slave_1 (unregistering): left promiscuous mode [ 1453.914855][ T4743] team0 (unregistering): Port device bridge0 removed [ 1453.951599][ T4743] .` (unregistering): Released all slaves [ 1454.053809][T20886] netlink: 'syz.2.4715': attribute type 39 has an invalid length. [ 1454.098156][T20896] netlink: 'syz.0.4717': attribute type 19 has an invalid length. [ 1454.106214][T20896] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1454.478062][T20902] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4720'. [ 1454.599298][T20905] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 1454.638142][T20898] tap0: tun_chr_ioctl cmd 1074025677 [ 1454.657683][T20898] tap0: linktype set to 778 [ 1455.136154][T20910] syzkaller0: entered promiscuous mode [ 1455.141858][T20910] syzkaller0: entered allmulticast mode [ 1459.662527][T20916] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1459.672446][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1459.858327][T20944] netlink: 'syz.2.4729': attribute type 21 has an invalid length. [ 1459.869639][T20944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1460.042170][T20946] netlink: 'syz.0.4727': attribute type 39 has an invalid length. [ 1460.111152][T20952] netlink: 'syz.1.4731': attribute type 8 has an invalid length. [ 1460.136543][T20952] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1460.239524][T20958] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4732'. [ 1461.720679][T20968] netlink: 'syz.3.4734': attribute type 15 has an invalid length. [ 1461.736545][T20968] netlink: 'syz.3.4734': attribute type 7 has an invalid length. [ 1461.797394][T20973] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4736'. [ 1461.862774][T20970] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1461.873081][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1461.975492][T20977] syzkaller0: entered promiscuous mode [ 1461.983408][T20977] syzkaller0: entered allmulticast mode [ 1464.493682][T20991] netlink: 'syz.0.4743': attribute type 19 has an invalid length. [ 1464.504412][T20991] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1465.026583][T21005] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4747'. [ 1466.113748][T18158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1466.124128][T18158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1466.133299][T18158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1466.144170][T18158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1466.152625][T18158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1466.163686][T18158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1466.535827][T21020] netlink: 'syz.0.4750': attribute type 9 has an invalid length. [ 1466.663327][T21020] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1466.713079][T21019] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1466.742129][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1466.928918][T21027] syzkaller0: entered promiscuous mode [ 1466.935650][T21027] syzkaller0: entered allmulticast mode [ 1468.165402][T21039] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1468.175227][T21039] openvswitch: netlink: Message has 20476 unknown bytes. [ 1468.260558][T18158] Bluetooth: hci4: command tx timeout [ 1470.132390][T21036] netlink: 'syz.1.4754': attribute type 19 has an invalid length. [ 1470.140663][T21036] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1470.252914][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.290041][T21040] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1470.346998][T18158] Bluetooth: hci4: command tx timeout [ 1470.440766][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.496092][T21011] chnl_net:caif_netlink_parms(): no params data found [ 1470.653406][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.069253][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.229555][T21011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.255036][T21011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.265786][T21011] bridge_slave_0: entered allmulticast mode [ 1471.285691][T21011] bridge_slave_0: entered promiscuous mode [ 1471.342363][T21011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.353711][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.386414][T21011] bridge_slave_1: entered allmulticast mode [ 1471.407002][T21011] bridge_slave_1: entered promiscuous mode [ 1471.503076][T21011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.593668][T21011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.625752][T21068] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1471.665564][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1471.802728][T21011] team0: Port device team_slave_0 added [ 1471.835765][T21011] team0: Port device team_slave_1 added [ 1471.915939][T21011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.953250][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.034126][T21011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.062146][T21078] netlink: 'syz.1.4762': attribute type 9 has an invalid length. [ 1472.083487][T21078] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1472.123065][T21011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.176429][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.209056][T21011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.273265][ T12] ip6gretap0 (unregistering): left allmulticast mode [ 1472.285554][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 1472.294803][ T12] : port 1(ip6gretap0) entered disabled state [ 1472.416493][T18158] Bluetooth: hci4: command tx timeout [ 1472.539108][T21011] hsr_slave_0: entered promiscuous mode [ 1472.573828][T21011] hsr_slave_1: entered promiscuous mode [ 1472.583209][T21011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.591633][T21011] Cannot create hsr debugfs directory [ 1472.597486][T21090] netlink: 'syz.2.4764': attribute type 19 has an invalid length. [ 1472.606411][T21090] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4764'. [ 1472.812175][T21087] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1472.836423][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1473.072427][T21097] syzkaller0: entered promiscuous mode [ 1473.081879][T21097] syzkaller0: entered allmulticast mode [ 1474.502017][T18158] Bluetooth: hci4: command tx timeout [ 1476.264115][T21129] delete_channel: no stack [ 1477.135868][T21139] netlink: 'syz.2.4773': attribute type 9 has an invalid length. [ 1477.146159][T21139] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1477.560132][T21146] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1477.595866][T21152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1478.204113][T21160] syzkaller0: entered promiscuous mode [ 1478.222436][T21160] syzkaller0: entered allmulticast mode [ 1478.349621][T21162] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4779'. [ 1481.719038][T21169] netlink: 'syz.1.4781': attribute type 16 has an invalid length. [ 1481.743461][T21169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1481.796568][T21011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1481.832307][T21011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1482.020052][T21183] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1482.026927][T21183] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1482.041288][T21011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1482.141276][ T12] hsr_slave_0: left promiscuous mode [ 1482.160085][ T12] hsr_slave_1: left promiscuous mode [ 1482.188966][ T12] veth0_macvtap: left promiscuous mode [ 1482.196152][ T12] veth1_vlan: left promiscuous mode [ 1482.547994][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1483.385832][T21213] FAULT_INJECTION: forcing a failure. [ 1483.385832][T21213] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.401566][T21213] CPU: 1 PID: 21213 Comm: syz.2.4787 Not tainted syzkaller #0 [ 1483.409118][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1483.419573][T21213] Call Trace: [ 1483.422865][T21213] [ 1483.425822][T21213] dump_stack_lvl+0x18c/0x250 [ 1483.430525][T21213] ? show_regs_print_info+0x20/0x20 [ 1483.435735][T21213] ? load_image+0x420/0x420 [ 1483.440254][T21213] ? __might_sleep+0xe0/0xe0 [ 1483.444935][T21213] ? __lock_acquire+0x7d40/0x7d40 [ 1483.449971][T21213] should_fail_ex+0x39d/0x4d0 [ 1483.454687][T21213] should_failslab+0x9/0x20 [ 1483.459251][T21213] slab_pre_alloc_hook+0x59/0x310 [ 1483.464479][T21213] ? __lock_acquire+0x7d40/0x7d40 [ 1483.469536][T21213] kmem_cache_alloc_node+0x60/0x320 [ 1483.474770][T21213] ? __alloc_skb+0x103/0x2c0 [ 1483.479381][T21213] __alloc_skb+0x103/0x2c0 [ 1483.483820][T21213] netlink_sendmsg+0x66a/0xbf0 [ 1483.488625][T21213] ? netlink_getsockopt+0x590/0x590 [ 1483.493851][T21213] ? aa_sock_msg_perm+0x94/0x150 [ 1483.498806][T21213] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1483.504113][T21213] ? security_socket_sendmsg+0x80/0xa0 [ 1483.509675][T21213] ? netlink_getsockopt+0x590/0x590 [ 1483.514900][T21213] ____sys_sendmsg+0x5ba/0x960 [ 1483.519687][T21213] ? __asan_memset+0x22/0x40 [ 1483.524388][T21213] ? __sys_sendmsg_sock+0x30/0x30 [ 1483.529514][T21213] ? __import_iovec+0x5f2/0x850 [ 1483.534485][T21213] ? import_iovec+0x73/0xa0 [ 1483.539003][T21213] ___sys_sendmsg+0x2a6/0x360 [ 1483.543874][T21213] ? get_pid_task+0x20/0x1e0 [ 1483.548576][T21213] ? __sys_sendmsg+0x2a0/0x2a0 [ 1483.553458][T21213] ? __lock_acquire+0x7d40/0x7d40 [ 1483.558614][T21213] __se_sys_sendmsg+0x1c2/0x2b0 [ 1483.563487][T21213] ? __x64_sys_sendmsg+0x80/0x80 [ 1483.568470][T21213] ? lockdep_hardirqs_on+0x98/0x150 [ 1483.573780][T21213] do_syscall_64+0x55/0xa0 [ 1483.578208][T21213] ? clear_bhb_loop+0x40/0x90 [ 1483.583161][T21213] ? clear_bhb_loop+0x40/0x90 [ 1483.587857][T21213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1483.593782][T21213] RIP: 0033:0x7f8d40b9c819 [ 1483.598217][T21213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.618012][T21213] RSP: 002b:00007f8d41a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.626622][T21213] RAX: ffffffffffffffda RBX: 00007f8d40e15fa0 RCX: 00007f8d40b9c819 [ 1483.634667][T21213] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1483.642738][T21213] RBP: 00007f8d41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.650730][T21213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.658716][T21213] R13: 00007f8d40e16038 R14: 00007f8d40e15fa0 R15: 00007fffa2cf9c78 [ 1483.666809][T21213] [ 1483.694000][ T12] team_slave_1 (unregistering): left promiscuous mode [ 1483.701731][ T12] team_slave_1 (unregistering): left allmulticast mode [ 1483.715347][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1483.785870][ T12] team_slave_0 (unregistering): left promiscuous mode [ 1483.794420][ T12] team_slave_0 (unregistering): left allmulticast mode [ 1483.805460][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1483.859421][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.002925][ T12] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1484.233297][ T12] dummy0 (unregistering): left promiscuous mode [ 1484.244147][ T12] dummy0 (unregistering): left allmulticast mode [ 1484.251991][ T12] team0 (unregistering): Port device dummy0 removed [ 1484.315683][ T12] .` (unregistering): Released all slaves [ 1484.366514][T21171] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1484.376554][T21171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1484.392728][T21011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1484.424546][T21216] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1484.794183][T21011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.849815][T21221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.915766][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.929215][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.989252][T21011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.023378][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.030997][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.084089][T21232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1485.148748][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.156067][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.322632][T21233] syzkaller0: entered promiscuous mode [ 1485.349192][T21233] syzkaller0: entered allmulticast mode [ 1486.665906][T21261] FAULT_INJECTION: forcing a failure. [ 1486.665906][T21261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.688665][T21261] CPU: 0 PID: 21261 Comm: syz.0.4796 Not tainted syzkaller #0 [ 1486.696465][T21261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1486.706691][T21261] Call Trace: [ 1486.709997][T21261] [ 1486.713127][T21261] dump_stack_lvl+0x18c/0x250 [ 1486.717855][T21261] ? show_regs_print_info+0x20/0x20 [ 1486.723164][T21261] ? load_image+0x420/0x420 [ 1486.727686][T21261] ? __might_fault+0xaa/0x120 [ 1486.732475][T21261] ? __lock_acquire+0x7d40/0x7d40 [ 1486.737520][T21261] should_fail_ex+0x39d/0x4d0 [ 1486.742226][T21261] _copy_to_user+0x2f/0xa0 [ 1486.746927][T21261] bpf_test_finish+0x19f/0x650 [ 1486.751812][T21261] ? convert_skb_to___skb+0x420/0x420 [ 1486.757217][T21261] ? read_tsc+0x9/0x20 [ 1486.761315][T21261] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 1486.767588][T21261] ? xdp_convert_buff_to_md+0x200/0x200 [ 1486.773151][T21261] ? __fget_files+0x28/0x4b0 [ 1486.777761][T21261] ? __fget_files+0x28/0x4b0 [ 1486.782378][T21261] ? xdp_convert_buff_to_md+0x200/0x200 [ 1486.787940][T21261] bpf_prog_test_run+0x321/0x390 [ 1486.792892][T21261] __sys_bpf+0x49d/0x890 [ 1486.797152][T21261] ? bpf_link_show_fdinfo+0x390/0x390 [ 1486.802547][T21261] ? lock_chain_count+0x20/0x20 [ 1486.807506][T21261] __x64_sys_bpf+0x7c/0x90 [ 1486.811942][T21261] do_syscall_64+0x55/0xa0 [ 1486.816379][T21261] ? clear_bhb_loop+0x40/0x90 [ 1486.821336][T21261] ? clear_bhb_loop+0x40/0x90 [ 1486.826059][T21261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.831968][T21261] RIP: 0033:0x7f509819c819 [ 1486.836400][T21261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.856114][T21261] RSP: 002b:00007f5099108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1486.864547][T21261] RAX: ffffffffffffffda RBX: 00007f5098415fa0 RCX: 00007f509819c819 [ 1486.872721][T21261] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1486.880879][T21261] RBP: 00007f5099108090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.888953][T21261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.897025][T21261] R13: 00007f5098416038 R14: 00007f5098415fa0 R15: 00007ffca9f3acd8 [ 1486.905027][T21261] [ 1488.863938][T21266] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4798'. [ 1488.877651][T21263] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1488.900043][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1489.313528][T21286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1489.637024][T21011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.769842][T21011] veth0_vlan: entered promiscuous mode [ 1489.849046][T21011] veth1_vlan: entered promiscuous mode [ 1490.099755][T21011] veth0_macvtap: entered promiscuous mode [ 1490.320026][T21011] veth1_macvtap: entered promiscuous mode [ 1490.451876][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.556601][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.576532][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.600908][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.637872][T21011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.669387][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.689082][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.699620][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.711706][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.729664][T21011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.753770][T21011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.762965][T21011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.772873][T21011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.782497][T21011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.848060][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.860252][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.960977][T21316] netlink: 'syz.2.4807': attribute type 9 has an invalid length. [ 1492.987568][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.001226][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.187089][T21314] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4806'. [ 1493.220661][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4806'. [ 1493.721994][T21327] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1494.234225][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1494.646914][T21341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.719974][T21350] netlink: 'syz.1.4816': attribute type 21 has an invalid length. [ 1497.740090][T21350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1497.880415][T21355] netlink: 'syz.3.4818': attribute type 21 has an invalid length. [ 1497.904907][T21355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1498.283276][T21361] netlink: 'syz.1.4820': attribute type 10 has an invalid length. [ 1498.294104][T21361] veth0_macvtap: left promiscuous mode [ 1498.355944][T21357] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1498.365642][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1498.726554][T21369] netlink: 'syz.1.4823': attribute type 153 has an invalid length. [ 1498.750027][T21369] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 1498.758060][T21369] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1499.432489][T21377] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1499.450793][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1502.089291][T21389] netlink: 'syz.1.4828': attribute type 21 has an invalid length. [ 1502.099394][T21389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1502.291005][T21399] netlink: 'syz.2.4830': attribute type 21 has an invalid length. [ 1502.303363][T21399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4830'. [ 1502.419111][T21396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.147135][T21414] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1506.768130][T21414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.031822][T21414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.064190][T21414] bond0 (unregistering): Released all slaves [ 1507.084210][T21421] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4836'. [ 1507.955373][T21438] netlink: 'syz.3.4840': attribute type 21 has an invalid length. [ 1507.984436][T21438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1508.758198][T21459] netlink: 'syz.0.4844': attribute type 21 has an invalid length. [ 1508.802507][T21459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4844'. [ 1508.874572][T21461] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1508.884846][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1509.015462][T21462] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1509.066371][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1511.566762][T21477] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4849'. [ 1512.867169][T21495] netlink: 'syz.2.4851': attribute type 21 has an invalid length. [ 1512.875245][T21495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1514.123161][T21517] netlink: 'syz.3.4855': attribute type 153 has an invalid length. [ 1514.137690][T21517] netlink: 'syz.3.4855': attribute type 1 has an invalid length. [ 1514.145645][T21517] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.4855'. [ 1514.245340][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4857'. [ 1514.264352][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4857'. [ 1514.396929][T21526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4857'. [ 1514.425410][T21520] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1514.437556][T21520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1515.206841][T21535] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4861'. [ 1517.538141][T21548] netlink: 'syz.1.4865': attribute type 21 has an invalid length. [ 1517.546134][T21548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1517.665002][T21555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1517.876852][T21555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.991917][T21555] bond_slave_0: left promiscuous mode [ 1518.000163][T21555] bond_slave_0: left allmulticast mode [ 1518.020942][T21555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.030536][T21555] bond_slave_1: left promiscuous mode [ 1518.045799][T21555] bond_slave_1: left allmulticast mode [ 1518.071255][T21555] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1518.084722][T21555] bridge0: left promiscuous mode [ 1518.090590][T21555] bridge0: left allmulticast mode [ 1518.105300][T21555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.113159][T21555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.135076][T21555] bond0 (unregistering): Released all slaves [ 1518.362668][T21569] netlink: 'syz.1.4871': attribute type 29 has an invalid length. [ 1518.387550][T21569] netlink: 'syz.1.4871': attribute type 29 has an invalid length. [ 1518.407564][T21569] netlink: 'syz.1.4871': attribute type 29 has an invalid length. [ 1518.937770][T21578] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1519.286513][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1519.386155][T21580] netlink: 'syz.3.4873': attribute type 4 has an invalid length. [ 1519.514941][T21584] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4875'. [ 1522.573217][T21598] netlink: 'syz.3.4879': attribute type 21 has an invalid length. [ 1522.602253][T21598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4879'. [ 1522.813926][T21607] netlink: 'syz.1.4881': attribute type 19 has an invalid length. [ 1522.826429][T21607] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1523.419730][T21626] netlink: 'syz.2.4885': attribute type 2 has an invalid length. [ 1523.466451][T21626] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4885'. [ 1523.743039][T21638] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1523.772669][T21640] netlink: 'syz.0.4890': attribute type 21 has an invalid length. [ 1523.785273][T21640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1526.942195][T21650] netlink: 'syz.0.4891': attribute type 19 has an invalid length. [ 1526.970475][T21650] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4891'. [ 1527.003551][T21651] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4893'. [ 1527.509976][T21655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1527.717559][T21664] netlink: 'syz.1.4898': attribute type 39 has an invalid length. [ 1527.982302][T21666] netlink: 'syz.2.4900': attribute type 21 has an invalid length. [ 1528.303699][T21666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1528.325431][T21672] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1531.043133][T21685] netlink: 'syz.1.4904': attribute type 19 has an invalid length. [ 1531.080325][T21685] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4904'. [ 1532.182720][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'. [ 1532.652371][T21724] netlink: 'syz.1.4914': attribute type 21 has an invalid length. [ 1532.669342][T21724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1535.072146][T21731] FAULT_INJECTION: forcing a failure. [ 1535.072146][T21731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.121805][T21731] CPU: 0 PID: 21731 Comm: syz.3.4915 Not tainted syzkaller #0 [ 1535.129345][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1535.139817][T21731] Call Trace: [ 1535.143125][T21731] [ 1535.146079][T21731] dump_stack_lvl+0x18c/0x250 [ 1535.150791][T21731] ? show_regs_print_info+0x20/0x20 [ 1535.156281][T21731] ? load_image+0x420/0x420 [ 1535.160830][T21731] ? __lock_acquire+0x7d40/0x7d40 [ 1535.165972][T21731] ? snprintf+0xe9/0x140 [ 1535.170241][T21731] should_fail_ex+0x39d/0x4d0 [ 1535.174946][T21731] _copy_to_user+0x2f/0xa0 [ 1535.179384][T21731] simple_read_from_buffer+0xe7/0x150 [ 1535.184793][T21731] proc_fail_nth_read+0x1e8/0x260 [ 1535.189838][T21731] ? proc_fault_inject_write+0x360/0x360 [ 1535.195491][T21731] ? fsnotify_perm+0x271/0x5e0 [ 1535.200275][T21731] ? proc_fault_inject_write+0x360/0x360 [ 1535.205964][T21731] vfs_read+0x28b/0x970 [ 1535.210145][T21731] ? kernel_read+0x1e0/0x1e0 [ 1535.214791][T21731] ? __fget_files+0x28/0x4b0 [ 1535.219488][T21731] ? __fget_files+0x28/0x4b0 [ 1535.224097][T21731] ? __fget_files+0x43d/0x4b0 [ 1535.228859][T21731] ? __fdget_pos+0x2a3/0x330 [ 1535.233573][T21731] ? ksys_read+0x75/0x260 [ 1535.237962][T21731] ksys_read+0x150/0x260 [ 1535.242391][T21731] ? vfs_write+0x990/0x990 [ 1535.246857][T21731] ? lockdep_hardirqs_on+0x98/0x150 [ 1535.252192][T21731] do_syscall_64+0x55/0xa0 [ 1535.256687][T21731] ? clear_bhb_loop+0x40/0x90 [ 1535.261414][T21731] ? clear_bhb_loop+0x40/0x90 [ 1535.266145][T21731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1535.272077][T21731] RIP: 0033:0x7fbad6d5d04e [ 1535.276634][T21731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1535.296364][T21731] RSP: 002b:00007fbad7bedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1535.304933][T21731] RAX: ffffffffffffffda RBX: 00007fbad7bee6c0 RCX: 00007fbad6d5d04e [ 1535.312925][T21731] RDX: 000000000000000f RSI: 00007fbad7bee0a0 RDI: 0000000000000005 [ 1535.320912][T21731] RBP: 00007fbad7bee090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.328898][T21731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.336893][T21731] R13: 00007fbad7016038 R14: 00007fbad7015fa0 R15: 00007ffede8605d8 [ 1535.345071][T21731] [ 1535.943600][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1535.962581][T21749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1535.976821][T21749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1535.988103][T21749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1535.996356][T21749] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1536.007659][T21749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1536.071052][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.422732][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.622529][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.783431][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.096672][T18158] Bluetooth: hci0: command tx timeout [ 1539.404226][T21765] netlink: 'syz.1.4923': attribute type 33 has an invalid length. [ 1539.415512][T21765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1539.554969][T21776] netlink: 'syz.2.4925': attribute type 21 has an invalid length. [ 1539.563763][T21776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1540.162062][T21746] chnl_net:caif_netlink_parms(): no params data found [ 1540.217804][T18158] Bluetooth: hci0: command tx timeout [ 1540.812725][T21746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.841576][T21746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.880935][T21746] bridge_slave_0: entered allmulticast mode [ 1540.912221][T21746] bridge_slave_0: entered promiscuous mode [ 1541.725545][T21746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.735597][T21746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.745713][T21746] bridge_slave_1: entered allmulticast mode [ 1541.755273][T21746] bridge_slave_1: entered promiscuous mode [ 1541.762934][T21818] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1541.807405][T21821] netlink: 'syz.1.4931': attribute type 25 has an invalid length. [ 1542.024718][T21746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.044648][T21827] netlink: 'syz.1.4933': attribute type 10 has an invalid length. [ 1542.063551][T21827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4933'. [ 1542.163592][T21827] batman_adv: batadv0: Adding interface: vlan1 [ 1542.222777][T21827] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.270953][T18158] Bluetooth: hci0: command tx timeout [ 1542.376745][T21827] batman_adv: batadv0: Interface activated: vlan1 [ 1542.472575][T21746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.722080][T21832] netlink: 'syz.1.4934': attribute type 10 has an invalid length. [ 1542.779768][T21832] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1542.824597][T21832] openvswitch: netlink: Flow key attr not present in new flow. [ 1543.008795][T21746] team0: Port device team_slave_0 added [ 1543.192665][T21746] team0: Port device team_slave_1 added [ 1543.300684][T21746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.339759][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.403373][T21746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.503206][T21746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.576392][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.688637][T21746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.996196][T21843] syzkaller0: entered promiscuous mode [ 1544.015548][T21843] syzkaller0: entered allmulticast mode [ 1544.343394][T18158] Bluetooth: hci0: command tx timeout [ 1544.375295][T21746] hsr_slave_0: entered promiscuous mode [ 1544.405949][T21746] hsr_slave_1: entered promiscuous mode [ 1544.419228][T21746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1544.456593][T21746] Cannot create hsr debugfs directory [ 1544.630536][T21861] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1544.741654][ T76] [ 1544.744070][ T76] ====================================================== [ 1544.751120][ T76] WARNING: possible circular locking dependency detected [ 1544.758277][ T76] syzkaller #0 Not tainted [ 1544.762727][ T76] ------------------------------------------------------ [ 1544.769784][ T76] kworker/u4:4/76 is trying to acquire lock: [ 1544.775826][ T76] ffff888064c60d00 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1544.785541][ T76] [ 1544.785541][ T76] but task is already holding lock: [ 1544.792954][ T76] ffff8880788b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1544.803355][ T76] [ 1544.803355][ T76] which lock already depends on the new lock. [ 1544.803355][ T76] [ 1544.813766][ T76] [ 1544.813766][ T76] the existing dependency chain (in reverse order) is: [ 1544.822784][ T76] [ 1544.822784][ T76] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1544.830620][ T76] __mutex_lock+0x136/0xcc0 [ 1544.835655][ T76] ieee80211_open+0x144/0x200 [ 1544.840953][ T76] __dev_open+0x2cb/0x430 [ 1544.845858][ T76] dev_open+0xab/0x190 [ 1544.850460][ T76] team_add_slave+0x75f/0x29a0 [ 1544.856112][ T76] do_setlink+0xdfe/0x4130 [ 1544.861058][ T76] rtnl_newlink+0x17da/0x20a0 [ 1544.866274][ T76] rtnetlink_rcv_msg+0x869/0xfa0 [ 1544.871740][ T76] netlink_rcv_skb+0x241/0x4d0 [ 1544.877044][ T76] netlink_unicast+0x751/0x8d0 [ 1544.882427][ T76] netlink_sendmsg+0x8d0/0xbf0 [ 1544.887722][ T76] ____sys_sendmsg+0x5ba/0x960 [ 1544.893107][ T76] ___sys_sendmsg+0x2a6/0x360 [ 1544.898340][ T76] __se_sys_sendmsg+0x1c2/0x2b0 [ 1544.903721][ T76] do_syscall_64+0x55/0xa0 [ 1544.908753][ T76] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.915273][ T76] [ 1544.915273][ T76] -> #0 (team->team_lock_key#7){+.+.}-{3:3}: [ 1544.923633][ T76] __lock_acquire+0x2df1/0x7d40 [ 1544.929123][ T76] lock_acquire+0x19e/0x420 [ 1544.934184][ T76] __mutex_lock+0x136/0xcc0 [ 1544.939234][ T76] team_del_slave+0x32/0x1c0 [ 1544.944364][ T76] team_device_event+0x28d/0xa20 [ 1544.949837][ T76] notifier_call_chain+0x197/0x380 [ 1544.955567][ T76] unregister_netdevice_many_notify+0x100d/0x1900 [ 1544.962511][ T76] unregister_netdevice_queue+0x32c/0x370 [ 1544.968763][ T76] _cfg80211_unregister_wdev+0x16b/0x580 [ 1544.975049][ T76] ieee80211_remove_interfaces+0x49e/0x690 [ 1544.981413][ T76] ieee80211_unregister_hw+0x5d/0x2a0 [ 1544.987322][ T76] mac80211_hwsim_del_radio+0x289/0x480 [ 1544.993399][ T76] hwsim_exit_net+0x58d/0x650 [ 1544.998614][ T76] cleanup_net+0x70a/0xbb0 [ 1545.003570][ T76] process_scheduled_works+0xa5d/0x15d0 [ 1545.009670][ T76] worker_thread+0xa55/0xfc0 [ 1545.014803][ T76] kthread+0x2fa/0x390 [ 1545.019486][ T76] ret_from_fork+0x48/0x80 [ 1545.024447][ T76] ret_from_fork_asm+0x11/0x20 [ 1545.029742][ T76] [ 1545.029742][ T76] other info that might help us debug this: [ 1545.029742][ T76] [ 1545.040151][ T76] Possible unsafe locking scenario: [ 1545.040151][ T76] [ 1545.047606][ T76] CPU0 CPU1 [ 1545.052975][ T76] ---- ---- [ 1545.058346][ T76] lock(&rdev->wiphy.mtx); [ 1545.062866][ T76] lock(team->team_lock_key#7); [ 1545.070427][ T76] lock(&rdev->wiphy.mtx); [ 1545.077464][ T76] lock(team->team_lock_key#7); [ 1545.082420][ T76] [ 1545.082420][ T76] *** DEADLOCK *** [ 1545.082420][ T76] [ 1545.090652][ T76] 5 locks held by kworker/u4:4/76: [ 1545.095777][ T76] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1545.106685][ T76] #1: ffffc900015a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1545.117668][ T76] #2: ffffffff8e3b5710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1545.127093][ T76] #3: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1545.136951][ T76] #4: ffff8880788b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1545.147875][ T76] [ 1545.147875][ T76] stack backtrace: [ 1545.153767][ T76] CPU: 1 PID: 76 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1545.161159][ T76] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.171247][ T76] Workqueue: netns cleanup_net [ 1545.176054][ T76] Call Trace: [ 1545.179441][ T76] [ 1545.182620][ T76] dump_stack_lvl+0x18c/0x250 [ 1545.187426][ T76] ? load_image+0x420/0x420 [ 1545.191973][ T76] ? show_regs_print_info+0x20/0x20 [ 1545.197205][ T76] ? print_circular_bug+0x12b/0x1a0 [ 1545.202611][ T76] check_noncircular+0x2fc/0x400 [ 1545.207594][ T76] ? print_deadlock_bug+0x5d0/0x5d0 [ 1545.212829][ T76] ? lockdep_lock+0xf5/0x230 [ 1545.217429][ T76] ? __lock_acquire+0x1273/0x7d40 [ 1545.222461][ T76] ? _find_first_zero_bit+0xd3/0x100 [ 1545.227781][ T76] __lock_acquire+0x2df1/0x7d40 [ 1545.232667][ T76] ? verify_lock_unused+0x140/0x140 [ 1545.237881][ T76] ? verify_lock_unused+0x140/0x140 [ 1545.243097][ T76] lock_acquire+0x19e/0x420 [ 1545.247612][ T76] ? team_del_slave+0x32/0x1c0 [ 1545.252408][ T76] ? __might_sleep+0xe0/0xe0 [ 1545.257126][ T76] ? read_lock_is_recursive+0x20/0x20 [ 1545.262515][ T76] __mutex_lock+0x136/0xcc0 [ 1545.267041][ T76] ? team_del_slave+0x32/0x1c0 [ 1545.271818][ T76] ? __lock_acquire+0x7d40/0x7d40 [ 1545.276866][ T76] ? rcu_is_watching+0x15/0xb0 [ 1545.281662][ T76] ? trace_contention_end+0x39/0xe0 [ 1545.287113][ T76] ? __mutex_lock+0x315/0xcc0 [ 1545.291819][ T76] ? team_del_slave+0x32/0x1c0 [ 1545.296620][ T76] ? mutex_lock_nested+0x20/0x20 [ 1545.301572][ T76] ? bond_netdev_event+0xeb/0xf20 [ 1545.306616][ T76] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1545.312277][ T76] team_del_slave+0x32/0x1c0 [ 1545.316928][ T76] team_device_event+0x28d/0xa20 [ 1545.321925][ T76] notifier_call_chain+0x197/0x380 [ 1545.327141][ T76] unregister_netdevice_many_notify+0x100d/0x1900 [ 1545.333578][ T76] ? lock_chain_count+0x20/0x20 [ 1545.338460][ T76] ? unregister_netdevice_many+0x20/0x20 [ 1545.344104][ T76] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1545.349852][ T76] ? __lock_acquire+0x7d40/0x7d40 [ 1545.354979][ T76] unregister_netdevice_queue+0x32c/0x370 [ 1545.360731][ T76] ? list_netdevice+0x730/0x730 [ 1545.365620][ T76] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1545.371397][ T76] _cfg80211_unregister_wdev+0x16b/0x580 [ 1545.377050][ T76] ieee80211_remove_interfaces+0x49e/0x690 [ 1545.382871][ T76] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1545.388185][ T76] ? rcu_is_watching+0x15/0xb0 [ 1545.392966][ T76] ieee80211_unregister_hw+0x5d/0x2a0 [ 1545.398361][ T76] mac80211_hwsim_del_radio+0x289/0x480 [ 1545.403918][ T76] ? rhashtable_remove_fast+0xc00/0xc00 [ 1545.409472][ T76] hwsim_exit_net+0x58d/0x650 [ 1545.414160][ T76] ? hwsim_init_net+0x90/0x90 [ 1545.419204][ T76] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1545.425041][ T76] cleanup_net+0x70a/0xbb0 [ 1545.429577][ T76] ? ops_free_list+0x3b0/0x3b0 [ 1545.434467][ T76] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.439783][ T76] ? process_scheduled_works+0x96f/0x15d0 [ 1545.445548][ T76] ? process_scheduled_works+0x96f/0x15d0 [ 1545.451392][ T76] process_scheduled_works+0xa5d/0x15d0 [ 1545.456978][ T76] ? worker_attach_to_pool+0x380/0x380 [ 1545.462544][ T76] ? assign_work+0x3d2/0x5d0 [ 1545.467148][ T76] worker_thread+0xa55/0xfc0 [ 1545.471778][ T76] kthread+0x2fa/0x390 [ 1545.475866][ T76] ? pr_cont_work+0x560/0x560 [ 1545.480566][ T76] ? kthread_blkcg+0xd0/0xd0 [ 1545.485166][ T76] ret_from_fork+0x48/0x80 [ 1545.489684][ T76] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1545.494283][ T76] ret_from_fork_asm+0x11/0x20 [ 1545.499104][ T76] [ 1545.525636][T21870] netlink: 'syz.2.4941': attribute type 3 has an invalid length. [ 1545.556204][ T76] team0: Port device ..ãc¤± removed [ 1545.570741][T21870] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4941'. [ 1545.578633][T21871] FAULT_INJECTION: forcing a failure. [ 1545.578633][T21871] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.603187][T21871] CPU: 0 PID: 21871 Comm: syz.1.4942 Not tainted syzkaller #0 [ 1545.610728][T21871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.620818][T21871] Call Trace: [ 1545.624147][T21871] [ 1545.627206][T21871] dump_stack_lvl+0x18c/0x250 [ 1545.631930][T21871] ? show_regs_print_info+0x20/0x20 [ 1545.637177][T21871] ? load_image+0x420/0x420 [ 1545.641719][T21871] ? perf_trace_lock+0x304/0x3b0 [ 1545.646866][T21871] should_fail_ex+0x39d/0x4d0 [ 1545.651587][T21871] should_failslab+0x9/0x20 [ 1545.656124][T21871] slab_pre_alloc_hook+0x59/0x310 [ 1545.661199][T21871] kmem_cache_alloc+0x5a/0x2d0 [ 1545.665992][T21871] ? skb_clone+0x1eb/0x370 [ 1545.670457][T21871] skb_clone+0x1eb/0x370 [ 1545.674740][T21871] __netlink_deliver_tap+0x41c/0x830 [ 1545.680110][T21871] ? netlink_deliver_tap+0x2e/0x1b0 [ 1545.685627][T21871] netlink_deliver_tap+0x19c/0x1b0 [ 1545.690810][T21871] netlink_unicast+0x72c/0x8d0 [ 1545.695644][T21871] netlink_sendmsg+0x8d0/0xbf0 [ 1545.700470][T21871] ? perf_trace_lock+0x304/0x3b0 [ 1545.705446][T21871] ? netlink_getsockopt+0x590/0x590 [ 1545.710680][T21871] ? trace_call_bpf+0xc3/0x6c0 [ 1545.715481][T21871] ? aa_sock_msg_perm+0x94/0x150 [ 1545.720453][T21871] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1545.725784][T21871] ? security_socket_sendmsg+0x80/0xa0 [ 1545.731264][T21871] ? netlink_getsockopt+0x590/0x590 [ 1545.736502][T21871] ____sys_sendmsg+0x5ba/0x960 [ 1545.741395][T21871] ? __might_sleep+0xe0/0xe0 [ 1545.746018][T21871] ? __asan_memset+0x22/0x40 [ 1545.750662][T21871] ? __sys_sendmsg_sock+0x30/0x30 [ 1545.755722][T21871] ? __import_iovec+0x5f2/0x850 [ 1545.760621][T21871] ? import_iovec+0x73/0xa0 [ 1545.765160][T21871] ___sys_sendmsg+0x2a6/0x360 [ 1545.769881][T21871] ? __sys_sendmsg+0x2a0/0x2a0 [ 1545.774785][T21871] ? lock_release+0xb5/0x8c0 [ 1545.779544][T21871] ? __lock_acquire+0x7d40/0x7d40 [ 1545.784651][T21871] __se_sys_sendmsg+0x1c2/0x2b0 [ 1545.789542][T21871] ? __x64_sys_sendmsg+0x80/0x80 [ 1545.794549][T21871] do_syscall_64+0x55/0xa0 [ 1545.799015][T21871] ? clear_bhb_loop+0x40/0x90 [ 1545.803895][T21871] ? clear_bhb_loop+0x40/0x90 [ 1545.808604][T21871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.814525][T21871] RIP: 0033:0x7f2c24b9c819 [ 1545.818971][T21871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.838602][T21871] RSP: 002b:00007f2c25b44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.847074][T21871] RAX: ffffffffffffffda RBX: 00007f2c24e15fa0 RCX: 00007f2c24b9c819 [ 1545.855150][T21871] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1545.863243][T21871] RBP: 00007f2c25b44090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.871329][T21871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.879405][T21871] R13: 00007f2c24e16038 R14: 00007f2c24e15fa0 R15: 00007ffd4f39bed8 [ 1545.887427][T21871] [ 1545.976575][T21871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.984298][T21871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.012416][T21871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.020430][T21871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.033423][T21871] batman_adv: batadv0: Interface deactivated: vlan1 [ 1546.040764][T21871] batman_adv: batadv0: Removing interface: vlan1 [ 1546.344923][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.351462][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.906373][ T76] hsr_slave_0: left promiscuous mode [ 1546.950412][ T76] hsr_slave_1: left promiscuous mode [ 1546.980226][ T76] veth0_macvtap: left promiscuous mode [ 1547.368491][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1547.400283][ T76] team0 (unregistering): Port device C removed [ 1547.431360][ T76] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.595156][ T76] .` (unregistering): Released all slaves [ 1548.130383][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.195137][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.272791][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.322786][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.455588][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.502684][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.554936][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.594350][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.730888][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.782996][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.852465][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.913916][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.402106][ T76] hsr_slave_0: left promiscuous mode [ 1550.423382][ T76] hsr_slave_1: left promiscuous mode [ 1550.431268][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.439206][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.447279][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.454717][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.462757][ T76] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1550.470427][ T76] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1550.478389][ T76] bridge_slave_1: left allmulticast mode [ 1550.484069][ T76] bridge_slave_1: left promiscuous mode [ 1550.490331][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.501570][ T76] bridge_slave_0: left allmulticast mode [ 1550.507686][ T76] bridge_slave_0: left promiscuous mode [ 1550.513867][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.524659][ T76] hsr_slave_0: left promiscuous mode [ 1550.531638][ T76] hsr_slave_1: left promiscuous mode [ 1550.538049][ T76] bridge_slave_1: left allmulticast mode [ 1550.544306][ T76] bridge_slave_1: left promiscuous mode [ 1550.550981][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.559952][ T76] bridge_slave_0: left promiscuous mode [ 1550.565678][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.576233][ T76] hsr_slave_0: left promiscuous mode [ 1550.582559][ T76] hsr_slave_1: left promiscuous mode [ 1550.588621][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.597807][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.605401][ T76] bridge_slave_1: left allmulticast mode [ 1550.611815][ T76] bridge_slave_1: left promiscuous mode [ 1550.617734][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.625934][ T76] bridge_slave_0: left allmulticast mode [ 1550.632207][ T76] bridge_slave_0: left promiscuous mode [ 1550.638254][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.651438][ T76] hsr_slave_0: left promiscuous mode [ 1550.657834][ T76] hsr_slave_1: left promiscuous mode [ 1550.663683][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.672360][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.681154][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.689189][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.697412][ T76] bridge_slave_1: left allmulticast mode [ 1550.703262][ T76] bridge_slave_1: left promiscuous mode [ 1550.709029][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.717431][ T76] bridge_slave_0: left allmulticast mode [ 1550.723175][ T76] bridge_slave_0: left promiscuous mode [ 1550.729711][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.742945][ T76] veth1_macvtap: left promiscuous mode [ 1550.748895][ T76] veth0_macvtap: left promiscuous mode [ 1550.754456][ T76] veth1_vlan: left promiscuous mode [ 1550.761605][ T76] veth1_macvtap: left promiscuous mode [ 1550.767234][ T76] veth1_vlan: left promiscuous mode [ 1550.772521][ T76] veth0_vlan: left promiscuous mode [ 1550.779785][ T76] veth1_macvtap: left promiscuous mode [ 1550.785329][ T76] veth0_macvtap: left promiscuous mode [ 1550.791131][ T76] veth1_vlan: left promiscuous mode [ 1550.796625][ T76] veth0_vlan: left promiscuous mode [ 1551.203153][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1551.215197][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1551.570628][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1551.603184][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1551.816819][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1551.849425][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1551.881938][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.894752][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.950651][ T76] bond0 (unregistering): Released all slaves [ 1552.142195][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1552.170412][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1552.202798][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.235153][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.299091][ T76] bond0 (unregistering): Released all slaves