last executing test programs: 16m27.167887238s ago: executing program 1 (id=2): r0 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x26, 0x0, 0x9, 0xfff, 0x10000}, 0x28) 16m26.717839446s ago: executing program 1 (id=5): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x2e, 0x2e, 0xe]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28) socket$kcm(0x2, 0x5, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x300, 0x1}, 0x48) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 16m26.53270301s ago: executing program 0 (id=1): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20045, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r2, @ANYRESDEC=r2], 0x27) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) 16m26.321818374s ago: executing program 1 (id=6): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, 0x0, 0xfdef) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca", 0xbd}], 0x1}, 0x0) 16m26.259095404s ago: executing program 2 (id=3): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x6, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x108140, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16m26.040971379s ago: executing program 3 (id=4): r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x5c08abf02e958743, 0x80, 0x8, 0x5, 0x5, 0x4, 0x0, 0xffff, 0x80, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xffffffffffffffff}, 0x0, 0x7fff, 0x80000000, 0x8, 0x81, 0xd4d, 0x3, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x80000001, 0xf46b}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x2, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x7c}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0xde1, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, r2, 0x2) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044944, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="8200000000000000005100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="07000000010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="021500000000000000cedf000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018180000", @ANYRES32=r8, @ANYBLOB="0000000c8396c8005d090600fcffffff85000000000018300000010000000000000000000000181100000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000005d690600ffffffff"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xdb, &(0x7f00000005c0)=""/219, 0x40f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r7, r8, r9], 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xcc, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 16m25.94576455s ago: executing program 1 (id=7): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000710008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 16m25.832096912s ago: executing program 0 (id=8): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x72}], 0x1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000b00fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x1}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d2000000d2000000040000000f0000000500000f02000000020000000800000000000000030000000100000000100000030000000700000000040000030000000700000007000000010000000d00000092815167d9a70f000000000000120300000007000000090000020400000007000000450600000900000003000000080000000800000010000000ff01000006000000090000000c0000009100000007000000020000000d0000000900000002000000ff7f00001000000000000002030000000d0000000000000c04000000010000000000000e0200000002000000000000002e000653bbf8b8a89ae2d2473b46ae5391cb1d5e3cbea8f072a97cf315965c8ef5643a"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r8, 0x0, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x70, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x2, 0x3, 0x2, 0x8, 0x0, 0xc, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x10, 0x73, &(0x7f0000000700)=""/115, 0x41000, 0x38, '\x00', r9, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000cc0)=[{0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x3, 0xb}, {0x4, 0x3, 0x1, 0x7}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x2, 0xb, 0x1}], 0x10, 0x4}, 0x94) sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b17034d38aa13a27cac863f42e06e53f104a10ebdec7647868ba34a5ad360235005ba82b421a0405b5019e431438a16e478e22d25f85f0bd76bcaab900c99f2604630a120b89181e6d018e4ef9da52a9162d0056a2df8845d2cd766cdbc11e7a16db3729bb56457a3408e4589164e550a3dc279a21e1bab716d", 0x7a}, {&(0x7f0000000240)="63538aa39127267a1f56d2735638547b4a4bee558c3668b2f5e60761e730a1daf33a7c39072c8106ccfe53fb35b35914d7963ecdc9010581e985e7ce75426f40b6f9897d9e13ed874d170d6f9264e64ee479a02eb4a800764bcfd4e72c0ab4192cd335b132eb2d1f821a0c24fa0c5747ce8071aa9770ef3e22f8081ca5cd2e8db8400c8b7841047465fa1042e6a13738e4f957d94137d1", 0x97}, {&(0x7f0000000300)="6d6a46562af9e8547ed1b6869e81d0632336c779b075dd181510e3b9f2a03f4ce9fcf6d43bdf2f59190e9fdb953942b240181f4812e0c9bba1e6926b1218787f0c77c299ecc03597d215d99a10a8591609cbb4446ee2320bfcbf7e28333feba161d7001805a1d5f088d0be43cf8cef7b5dcbd4eb4467b78f2dcff883649f3c299819c22420f6725887d2001527d253caaa42dbdf41a75aa86ca1cf517a2d9d2569c9c639d6efd1359dab49", 0xab}], 0x3, &(0x7f0000000740)=[@ip_retopts={{0x118, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x5f, 0x0, 0x9, [0x6, 0x3, 0x3, 0x6, 0xc, 0x0, 0x0]}, @rr={0x7, 0x1b, 0x25, [@local, @multicast1, @broadcast, @local, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x5, [{@local, 0x9}, {@multicast2, 0x3}, {@remote, 0x8}, {@loopback, 0x26339af2}]}, @timestamp_addr={0x44, 0x4c, 0x3e, 0x1, 0x1, [{@multicast1, 0x5}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x2}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@rand_addr=0x64010102, 0x1000}, {@broadcast, 0x4}, {@remote, 0x6}]}, @generic={0x7, 0xb, "c8ecfa52c8967f7c51"}, @timestamp={0x44, 0x10, 0x16, 0x0, 0x5, [0x9, 0x1, 0x3]}, @cipso={0x86, 0x3d, 0x0, [{0x7, 0x2}, {0x5, 0x11, "49c70eee84646d28496b92808ac84c"}, {0x0, 0xe, "a56dd54e1f9a768ea2d8db32"}, {0x6, 0xb, "e8203f87ab12e5fa9f"}, {0x1, 0x4, "2815"}, {0x5, 0x7, "ce0ac3ac22"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @empty}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x1, [@broadcast, @multicast1, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @local]}]}}}], 0x170}, 0x20000800) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6c, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x413e, 0x4, @perf_config_ext={0x80000000, 0x1}, 0x100040, 0x400, 0x1800, 0x7, 0x6, 0x58000000, 0x1000, 0x0, 0xb11, 0x0, 0x7}, 0x0, 0x7, r2, 0xb) 16m25.709929645s ago: executing program 1 (id=9): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x62, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, &(0x7f0000000440), &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x5, &(0x7f0000000240)=""/5, 0x40f00, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x5, 0xfffffffb, 0x5}, 0x10, 0x188e6, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x1, 0x1}, {0x2, 0x3, 0x7, 0xb}, {0x5, 0x4, 0x10, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r1, 0x0, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 16m1.373520796s ago: executing program 32 (id=8): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x72}], 0x1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000b00fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x1}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r8, 0x0, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x70, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x2, 0x3, 0x2, 0x8, 0x0, 0xc, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x10, 0x73, &(0x7f0000000700)=""/115, 0x41000, 0x38, '\x00', r9, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000cc0)=[{0x2, 0x4, 0x0, 0x8}, {0x0, 0x3, 0x3, 0xb}, {0x4, 0x3, 0x1, 0x7}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x2, 0xb, 0x1}], 0x10, 0x4}, 0x94) sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b17034d38aa13a27cac863f42e06e53f104a10ebdec7647868ba34a5ad360235005ba82b421a0405b5019e431438a16e478e22d25f85f0bd76bcaab900c99f2604630a120b89181e6d018e4ef9da52a9162d0056a2df8845d2cd766cdbc11e7a16db3729bb56457a3408e4589164e550a3dc279a21e1bab716d", 0x7a}, {&(0x7f0000000240)="63538aa39127267a1f56d2735638547b4a4bee558c3668b2f5e60761e730a1daf33a7c39072c8106ccfe53fb35b35914d7963ecdc9010581e985e7ce75426f40b6f9897d9e13ed874d170d6f9264e64ee479a02eb4a800764bcfd4e72c0ab4192cd335b132eb2d1f821a0c24fa0c5747ce8071aa9770ef3e22f8081ca5cd2e8db8400c8b7841047465fa1042e6a13738e4f957d94137d1", 0x97}, {&(0x7f0000000300)="6d6a46562af9e8547ed1b6869e81d0632336c779b075dd181510e3b9f2a03f4ce9fcf6d43bdf2f59190e9fdb953942b240181f4812e0c9bba1e6926b1218787f0c77c299ecc03597d215d99a10a8591609cbb4446ee2320bfcbf7e28333feba161d7001805a1d5f088d0be43cf8cef7b5dcbd4eb4467b78f2dcff883649f3c299819c22420f6725887d2001527d253caaa42dbdf41a75aa86ca1cf517a2d9d2569c9c639d6efd1359dab49", 0xab}], 0x3, &(0x7f0000000740)=[@ip_retopts={{0x118, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x5f, 0x0, 0x9, [0x6, 0x3, 0x3, 0x6, 0xc, 0x0, 0x0]}, @rr={0x7, 0x1b, 0x25, [@local, @multicast1, @broadcast, @local, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x5, [{@local, 0x9}, {@multicast2, 0x3}, {@remote, 0x8}, {@loopback, 0x26339af2}]}, @timestamp_addr={0x44, 0x4c, 0x3e, 0x1, 0x1, [{@multicast1, 0x5}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x2}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@rand_addr=0x64010102, 0x1000}, {@broadcast, 0x4}, {@remote, 0x6}]}, @generic={0x7, 0xb, "c8ecfa52c8967f7c51"}, @timestamp={0x44, 0x10, 0x16, 0x0, 0x5, [0x9, 0x1, 0x3]}, @cipso={0x86, 0x3d, 0x0, [{0x7, 0x2}, {0x5, 0x11, "49c70eee84646d28496b92808ac84c"}, {0x0, 0xe, "a56dd54e1f9a768ea2d8db32"}, {0x6, 0xb, "e8203f87ab12e5fa9f"}, {0x1, 0x4, "2815"}, {0x5, 0x7, "ce0ac3ac22"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @empty}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x1, [@broadcast, @multicast1, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @local]}]}}}], 0x170}, 0x20000800) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6c, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x413e, 0x4, @perf_config_ext={0x80000000, 0x1}, 0x100040, 0x400, 0x1800, 0x7, 0x6, 0x58000000, 0x1000, 0x0, 0xb11, 0x0, 0x7}, 0x0, 0x7, r2, 0xb) 16m1.220285999s ago: executing program 33 (id=9): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x62, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, &(0x7f0000000440), &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x5, &(0x7f0000000240)=""/5, 0x40f00, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x5, 0xfffffffb, 0x5}, 0x10, 0x188e6, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x1, 0x1}, {0x2, 0x3, 0x7, 0xb}, {0x5, 0x4, 0x10, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r1, 0x0, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 16m1.007455742s ago: executing program 34 (id=3): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x6, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x108140, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16m0.845827996s ago: executing program 35 (id=4): r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2102) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x5c08abf02e958743, 0x80, 0x8, 0x5, 0x5, 0x4, 0x0, 0xffff, 0x80, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xffffffffffffffff}, 0x0, 0x7fff, 0x80000000, 0x8, 0x81, 0xd4d, 0x3, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x80000001, 0xf46b}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x2, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x7c}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0xde1, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, r2, 0x2) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044944, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="8200000000000000005100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="07000000010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="021500000000000000cedf000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018180000", @ANYRES32=r8, @ANYBLOB="0000000c8396c8005d090600fcffffff85000000000018300000010000000000000000000000181100000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000005d690600ffffffff"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xdb, &(0x7f00000005c0)=""/219, 0x40f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r7, r8, r9], 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xcc, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 5.537748716s ago: executing program 4 (id=3650): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0050003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f018951e5277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4b85ddfa1ba963d8469f5f6741f2cedef3d93452a", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x31) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x77, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x77, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0xfffffff8, 0x31b, 0x400, r3, 0x6, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x9}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='1-'], 0x31) (async) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='1-'], 0x31) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r7], 0x12) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x2, 0xd5, 0x0, 0xf8}, {0xc, 0x6, 0xd3, 0x2}, {0x4, 0x5, 0xc, 0x67}, {0x2, 0xc, 0x1, 0x100}]}) 5.36543037s ago: executing program 7 (id=3653): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 23) 4.982272029s ago: executing program 4 (id=3655): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x55}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa8}, 0x90) r0 = socket$kcm(0xa, 0x6, 0x0) close(r0) 4.486490231s ago: executing program 7 (id=3659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48ac42, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) r1 = gettid() perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x1, 0x2f, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x27}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000180), 0x4) 4.309711365s ago: executing program 5 (id=3660): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b28}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x3, 0x13, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000f4ac9b26475a6e2972ad884691f7000000100073012300000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.201893208s ago: executing program 6 (id=3661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000015008500000082000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.177374339s ago: executing program 4 (id=3662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000002000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.009774053s ago: executing program 7 (id=3663): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) 3.865890556s ago: executing program 6 (id=3664): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x10000000008001, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x17b397b4dcd54698}, 0x0, 0x33, 0x43a1bd76, 0x2, 0x7, 0x4000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffa62, 0x7fffffffffffffff}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x0, r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$tipc(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)="e0690295b6337118425c6033eb94338620b0e000b9644ca99faa7739191f19309bf95ccd197cc37b32256ba26d56c63805a9cb94138d369185b14c7d24252c86eadd95940e6b46261ba8b59db66ad2201378691a6f556f383aed2c68d5efe36763d2280346930482800dd166519a8a763d0ef59a7a6759d18830d178f2b31c39e4ff7cdd5d818ea5a68d99448e8a1cac5607979c7cbe6102f947d434b4c78f46d667209b5685727fc3d40b18204f1f67a1e64da2d43f3da2ce6a395babd96a6a9997e1060f71d60cdafcb9", 0xcb}, {&(0x7f00000008c0)="32eaeb7b0ca2a421ea05793e2e0bbc1f255d63cfbc54f92bc536cde751b91d9bace3ef57bfbf94827ac71e3ef8356b7906dcffee3d3e099a0fd84b73fb9bbeed21dd433bebf2f1b9a5759e05919243cc40e52ae54714ae0ad3a2c592c78dff6449346680650fc1dda5b830168f7fdced6a63fab6a43a403092238aacb5871d7f19b4c30459db6013f36d0b21b8c5c9fc0bc638e37dcee2e5a553af6ee4fc42183ca593ba7fd9b5a25a", 0xa9}, {&(0x7f0000000980)="2980c5a7a6323bc3714024a7bb96347eb416d47ee53e84ab91efa6e8dbb5c3774c1a8bff3311e04f9ec5e5e2bed0e92b13b3e188f012e352505801771130d36f1787214b2e89989170fa0173bed344b0846d2d9449de3a407536fd60eddb5e1a2b71720f593fe2a00e986e3bdb47beb7e7931ed1116d579833c8e2ac5c283bbcf7b8daac90ca2226d1773ec170c1d01f2f4464641b77ff7b9f983c4f18bd4cc3a1e8", 0xa2}, {&(0x7f0000000a40)="77410e1be2af3133e653db67bc396e6746df2928b5c140252dd4608bb25bb35184af38a3b41427da19c4389cc48743ec357538a1e6644c77cfb4a4ffa5fd764bf91dc69a0f0ed12b36c96b55a35afc822b7619e337322f8f44fd26a8fd1b5c49d89ff0879955781d8caaf74597d78be0acdc075885cd5b39414880fbd93b0005cf1c1a40a05bed0ff75d791503855e1f468a49690d1b551bf9be1594e9a3c4f054e50b5696ec06fa923da5d56921abc26b978e2beb615a454604162976214ace2ddeb61ed3b88c059469f85fb9fb8ebcaf47793c8b57cf3dd5", 0xd9}], 0x4, &(0x7f0000000b80)="5aad18e7d57834894d542b20fc47d51708f91331b06fc9a5b67c633e2b097ada1ececfb50fe181ae09125bf3b906836d91ec56c4f34eb1bf049a37ad2582e623dc5eccca169c7d22e18676f3152519a94d079641dc6ff838378feef958bd6d073d8e20ec23b377aa807424c343b040bd931f548e3508b98bc8b447ca3b5bfe98709be2ac11bd2d914106d154d7c4b4a8616590af5804004877fa314e", 0x9c, 0x4800}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@var={0x5, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x8}, @volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @volatile={0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x2d64a337fdeff65d}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x4}}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x5f, 0x2e, 0x30]}}, &(0x7f0000001100)=""/113, 0xa1, 0x71, 0x1, 0x401, 0x10000, @value=r1}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9, 0x12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRESHEX=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3.736861109s ago: executing program 4 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000084000000040000000f"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x2}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @enum={0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0x7, 0x1}, {0x10, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x61, 0x61]}}, 0x0, 0x6b, 0x0, 0x1, 0x20001}, 0x28) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x440, @local, 0x406}}, 0x80, 0x0}, 0x40000) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfffffffffffff24b) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e12091f100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r6, r1}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20) close(0x3) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) 3.735712319s ago: executing program 5 (id=3666): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000600000000007000000441c0503e020000100230000ac"], 0x30}, 0x24040880) 3.494696315s ago: executing program 6 (id=3667): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7fffffff, 0xa2e}, 0xc501, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00'], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x120000, &(0x7f0000000180)="1400d264530f613c25592325bbddc24d773767715bc88fec7b856b041ea457c590b37b64d3ed9823dab01c84", 0x2c, &(0x7f00000001c0), &(0x7f0000000840), &(0x7f00000009c0)="3750632ad65180abba94a97edfc8474f3b10bafd8d7d314347042ebdd37dfe70708b2eb027d7187afbea07557b443a7428376f57cac6639582656f099ca0a14181cbb7177736c89bfe27e7081aec2b870869de331dfb012621021919fc9e907b5612626af55e7d5af27dbc262104be74d34b523d8a") ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0xfffffffffffffe89}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100) 3.494090815s ago: executing program 7 (id=3668): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7fffffff, 0xa2e}, 0xc501, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x120000, &(0x7f0000000180)="1400d264530f613c25592325bbddc24d773767715bc88fec7b856b041ea457c590b37b64d3ed9823dab01c84", 0x2c, &(0x7f00000001c0), &(0x7f0000000840), &(0x7f00000009c0)="3750632ad65180abba94a97edfc8474f3b10bafd8d7d314347042ebdd37dfe70708b2eb027d7187afbea07557b443a7428376f57cac6639582656f099ca0a14181cbb7177736c89bfe27e7081aec2b870869de331dfb012621021919fc9e907b5612626af55e7d5af27dbc262104be74d34b523d8a") ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0xfffffffffffffe89}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100) 3.246610721s ago: executing program 5 (id=3669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5ad, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 2.519604829s ago: executing program 5 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/226, 0xe2}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000005c0)=""/309, 0x135}, {&(0x7f0000000bc0)=""/4155, 0x103b}], 0x4}, 0x2001) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, &(0x7f0000000480)={'wlan1\x00', @random='\\\x00\x00 \x00'}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'team_slave_1\x00', 0xdebd12157dab606f}) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001980)="dadb5f19179387120e85068230eb97ab849ce2f0dd77d3709228a8433ea64e76561db9552b59db1805e1b19277516958069538c6538e25e97a99090bc6f4fdc4d7d4080d901838a4463e950816caccf1a7668b929a098322d92330e49548b21d064005f382982ee93baa314a4d7473708b7a2f76150ca3c7a358c1c1502dce239afb2b7583bb7bbf54585487c1cb6f9e3542a694d6868c2f9ae022df759804fa41ccdd0e22a9c2a0c10e7ab990783eb1dff344e3c7b71045a083e6cbaba95818c664240a1edbfcfc61c9296133ac083958d0301f7298da71791458de43ae059588c4568457856329746ece4188f962e1218a2f44b9d5ef56b5733457dd18bc49f710b05009be0e96b23598ce03e4e73c5305687f3fa0f543655202b127e381f815f2f8293e44ca6a44e4b23dad32bbef8f19e6bcd810c6361e5689a72c187c7feaf1fd441fab7fd64f97565a21c68c508ee66a9aa85cbadc3e41fadde42a55e8d92d1d8e6b231f73f97c172579058b976192d508a76a5107b30b9bff445592ccc8f0a0e3fae752c64af74e4ab540dd8c7e44cf4a240ae3e4502106263cdcefa92d64858f70eaf9fa8c715ba1299518ae671885eb203e62baa3041ae65a0ce49bc82d036baf6fa70f3c992986739681c632e63dfb6bd2bc8085893e55d9b0e6b68b6144d6f70d17ced9db5e4a8b5eb502624875ba8a144190a50f7cd0484139d26690815b5db9caee3a27b1c723aa5ff5d2aae86186af957726dbaa08fa14f0b1e37897d1d5eaf805512ec600a822d7fe1a0e7137bb1147f924462833262867d0a71aa727724014117de248f6510ce81ad7a7d334d30116422e700467f0b090672ceeff812e2f6ec96145c32bc97cd6da85bb1efa053f93b19ca2bf55cbc77ce1b51ae70061838256e9659e1350aeae996200b7f3711fd1cd5f5302143fb304b46087515f635caf2a23e5291cf008cd970fb9f71f98f30cd31ebd56f0eadcb21fee6d0b07834e279e64d54f685bce7d7016f8a4187853374a68fd5a79b442b91bc15d5cc0b7e79210d8da110021494e1bf931f61a5c833db1affcbbd4e29059f7ce3f5798634cb4039e20c80d4987f318c5ab7449126eff6a7120f35d717bc32659f7b4073c82abf7404f3dddb4024e488113980a69b05c7119a90d09afaeb75fc37092c9bd1f3abb67f288b12c8909895bd75f61fc6296c984b23a250e0e56df2a88f7ddf2e297c877c63e084cd7ede36c946d3f222372d31b63f6ea0f4a74eccc7de55c3ecfa9d8954fdf6c8787b70bfa9cd6bf1027b9a0ac730cca2ccd2d988a5f45d79ef1f52165b6ad23dbcb04929acb21f9bc1d38ed6b1ec30e4746f1a6c52c476242b867064f35e2d0f6757414b1c475b372d456dbaa00d493bded9a4560b6dc9e00cb198142b64710ba91ce386091a880cb9acce232df004ddd10f27c807fc06604567eca230a9ee469fb3ec00f542b77d6c6075808b907231a2d22bc45c91623b9ba7d3b039ba666f3f342f50d96f320d9f90231817fa5168e9bb9d9aac6e98f17807e354d78f4986865b119a8392b1cddffafe0cae4c3d0f2665b7019dc32bc1bc650d0f1367a5ed06e03298913e97d8c8859bda422ce381d3c89d05c0366432a1a29c302e2649f0de6498ffa3db5a16e85c8ce1ebe820595ef575f26a2c3490025383783f46a5ed714e705405d9318d8b5332491691e9ed36c3230819a4d50292ae69a332f4a8c8b1e207662e4264da2d66904a80e8aae9872562a2e99c5d636f42b3f40481325426c86fd4618aa4dbed29879d444cb87c3be462fbfb2f10bdc7ac4efc85bfbf156aaa80135779e595a11299c877afa88c11c1b2d2e1b5caec6fe646b2e572162f1979d39b5eae28f76f005e5395e155aa8ad0e03536957aa076b0adb0c9380c660ddb7b30ba1e0461355322d31084dd728c15c7f5900d18e6992024e0093f20c57e67e211b8e26452a1a31c1f1e493ebda94955d203e1a2600387f9a0de100833b6b850be4f50dd0f3868c436d0feb144ec4460c008c0773c0a94130c1a66faf8e9e78b3368504c0ab96efbde9be1a796c2df3128d373a86fb6f7dabebcf716a76c14f9fc5eed96f749bfe02fd291a59d6ff0aecf44741651c4caeff54877b1135507e50c60559d6fef095d7b34c1340f26f04115c8bef493eb4f3fd308267a652c851e1fae1abad291567300e8b6a433748516d2e7ddae112c21779d16a4bf1fd3630ccf2a3cece831cda0e6c03eadf508cdcfef09188e35a9071479c816fcfec77e56f95fbe92245d44e3cba0ce15dd7525a3732cc07e59c921f5638cfedb6d267826bd48478a85570eb0a0707b60c3a7aa3c4ea32b2dfffa855355c974a86df1c89a2f3135ef31f036a011ab3f88e1ff54530d1cd85255172bcdabb61a85479ffdeee452ba9e47270890c1585776215ea0f929069411f87fb67e0f3631cebe870567d2576b5c60e552d22cdb9088fa7ff92aca32c32038a9d5e00e461c9273f1f8e052aa9e8afebe51acdbdd68c10018dafa4f3894e59fb372719cc1eabea54d975456ef0a3c8fe72d884674e203b1284f8d27b4731d5d810af9a605817f56258beb45255ca7cb87bc7bf875b18e36353605f65b77a05c3ae5c1a5780282c4bd68a22169adf47b5f309468b6708338d32a6a4218607c69c0ac31698b6fe3708805490afd02662f6c62ea6d13257afd3ee95b08631333ea7b9dc19612969a8a4d8b358aecdc128d0048e8f9471f2f333ed1fdd0b4abe655f29de76949a79586cd6a850d1b114987b84a0ede30838d115d67e38ee16ba127775be8a9f0791cf48940b2b20b6ae6c39b9bc58c4864ff67f7dcd77bb3f9cb5ff8eef3a03cd3d44fa2c0a76a1b0fc268916e0cb10d07517ec862c8e92311da9582c16db742d861baf7940e629f74af9efeaf411d7e797181848ec027ca8769f377b1dc354d9b996fd6223bec155b7a570d612adc47ab1eef56c44b3fc93bae7c9667b1b46036d4e33e1a42664be8d79f558860f676bc01a9c50e7e7ad05e31efba9f03ac8f30d5afbdf13a186cd3331dc043bd2a202fa367f5aed830d8ab238240e3f00111c2454e503ba875455ffb75a81c8481c4c08b93581d6a4ea37b01cb9424c2a100340df6a195db5d8f46c033aae65998375f851abc60eda1dd897b02a9adad8bdd1bf0b39974153bc66bf0f836380c6915614cc49ec58f65dd296ae158fee19f00f0d2e13091fc18a1933bbb8698f0aedfb5c5c3a405cdb4327d64e9946f19c2db824ef16ca7471ba3b168f19e2382b60eb8f9c05be0bd04f6b17d1f557cae875f3d27f886fc51278326f85f4649dea7d5d6860958f0ec6eaf3584143ced6f60e8da2f10e83726f5de542a6cde33439f2d3136edbe38697b0b31788b01d71532e125514f3119556d751cee190d32e5888e82f1fdef4b28fe9b8a20b418b9f9b2abaf75c8e3e0e40d8d8066ab4ebcdc75c2a0087a84662203fce5bc266b69b1fc844795390bfa4ec3ec97e660fc388d7911837ce1210be7e3be0bb090efec5fd4f81ad00d10056bdab433a8d775941ac0b158093f9ce47c884f0a566c95f7de1f0fbfeb9a4fd4406c41ffb66b3a31e838ae302411c33e62b0c487f93e597df24a46754c833e2912d8d57bf51d23934d4a5658939c595026388744e8e05d86cd833f2bad73011e92b86fed8518ab1b08f6fc5ea51fd56e6815115e86f13e39fa1b8bba2638da005b077e61ae258239ae6c784a58e773a1204a17a8e9bd2e4bfa86678efc3e81bcab08ffaad0773a52f493ac52a6e5de01312ff4ef0055dad968331427f2c8202b273e4a05e12e253386315dca9ecc9d3f10bd393c0cfd12f0614caca7834694c6dc7dfcc48511bedc6028a895f15a478a652f222e7790ffffd50cb9f7232ae26b2444c6f11970d49d0670049b82d5abf8364475e7b5f9bb75952c82f6a6696b4569b1e84a8ffe791a89a2ef8b5343a7aa12f3e743bb4a8ffce2e87cbc26d5a7ae8be20794cb9414b30629a9db8ff8f41bdae062408eaecac12f1a66571c2d107e8bfca4783d1f1859ffe2e48bf04c3890847fd1dacede079cba19e7cf3fe5b1c18719b85d1a1d8a3ed8d9d1418dca3ea7b49d74e34b32849c0c79feb73bb58ecaccc3fb80aa87d0b0f2093f515f582f3ec191ba7cca25f3e8da43d0d45b3dd23f28c446ed4e56afb9714e09aa215bb91c99c673de1a1e1b84a47f1b7cdb7703b434ff016398eb30569f9e7de395318efe41e7af655f86e8d40f415e09e532739cf7ea3c004774c3d588639fabf512660b59bfcee7b5223ace4fa22f8a5466c69ff5b3d4ec82f4b697eb57cc9b713adf9d4956a79470eb583b171dea74c46f3de67e0f8bcda4a7831d75f47be99d47e18f8239fdb825ab7064980e4479d8a00e6fe69f141b280442d591d0726f86a9118d06db06fae4c316e678ffa2d0163010890cc67f8836091fffc5584a1bd1031414824ba1b19b638b8c792f4f1dd4bbf341809a197a007ed5c1e652d292439505b4f35408d460f80eae343124ecd46066c1e7317f4f8565410cdfc69285f420ac4a444a12cdde7c80a9c50cf83fd30b5c1424083821f39c57c9f11cc964545f2833fe4c97fb20b7272adcf72d7a2216fe29f741827fec99e9ed67bba3f4ffb333b4bcecd94c66125e3c189c8b8274154d9d39a3b5b015da65c10f9d7cbe56e1a5e74d3eefd1e9a5f527d4980f4fd205f1ac0b362b3ca63fc7b853bfa3ebdf1bf9a305a02e035ea4a7582a2ffb9f147fa305d4492b0728fa3886e49c99c75f849834b46c76da04e379d80214c728d8e1ee8b4eef1586e96ded9089588af613bdea337ce40a3ad2c5f5f2e8321470f188a19ff689d06d55a01691a612fadf16d8c7de21e2da9828cb4ff4ec4ca9eecf540391a197dc45f379420e8128bd25291cf0fb31c90c4e1d9cf1fb16c795d26ba5f223540ca72cdb68ab6973964e860a01a300a198fb835488385443ffc3f529e319e4f7f9cd4272f17829241c587cc24145cfbbb1be4ca5e072b421489fff32d1e26c7903ca179315dbdf8a1236bcde2d31d753bd71dfce215f0a302b1a48256aa5dad65e9288cd29fc84b6528b948151044383baab8ab39f03d709b1c9891e42a8e19d41b06588228a3fcbb9dbf0b17a8b0cb59330e02963c878290416fe3e16149df8894909cecb7b553fcea03853a88f37e1f68396723198f4ae73dd4f6551a4583308a1bee255d36bf7541bb1c8d30833c9e431f618d614be9ffa9cd38f1538be7d360df29c6ba0d1d56ebc2097d0e10a7ca892b1190a6fbafe23f8d3554995fdb1b15142473d8cc75360e376e57fba746ef5be329066e51498b2b41331fd4323aabb12fbf23a5a1ea71682179a3f981d3900de3e3a81afbc5a58f92ced39033cf13af133b1e6ed528ac3ce942fdf1c26a69bc1a88423bf90dc725219b83a4155ef9bdf756c15fb5027098f7ea74d9ea4277e49b34fe444d98bd3ccadab8f7b0b85162a98149d7c7b92ada6b93c41f765ce669e1687d65e92dc474c4015ff07b4a07b4346ba9f24c815a5c27defd40d51cce86b32afc3e34ffd3f1e824e55548a7e0d2339c639f9fcb4525fac5b5f04aa08611c006399bdfd8be2f320316bd8dc8cf4fb6af0415cf94b39b1fc582759ed1ae41012d60633a2f6ac878512866c3ff9923f7c2ef6aae913892a0c913f8d12e1cbec24183d2074f967d1d4ff870fb0fe4f6303d2b6f89b379391cafc09db751675433bc7322f465b5105417b9dc139b51556c1b78c8020d5177e2239de2434f60", 0x1000}], 0x1, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000000000000150100000000008035dc000000000000c0000000000000000e01000001ffffff2eeeb1f33fd946a3f4ffb0ea951c132969df4b0ccb4b80d78f5d4509eeee14f36cd4362c0788751adb4229ce98b2eae7079988e212c53a5e8b502f42a7d47d66b72124b117819a964e33fede7d895bed3b06f61285cac4fe35298e8351987e6c8da10f3ae7ddb6dff043091fbb8c69422edc979b767e3b4aabc789e7fbdd514deb8c9860d6227f0026cb5527663fddede516b7361a6e4eb3d91be4e268d28a1bdb7eb496ce0d88f6e30000680000000000000011010000030000009aab807cad9a530457bd9f7659885c47710e024b848bb1477efa7681404a507819d226ca83de247c66fcc17378e54cdfad37bdfdbd5e6575fc05c5d7b35551d977b99f4967165e1805903f65435e5eb3e300000000000000f8000000000000000a010000000000007b31145d21298d8f9de7ba76c22eb5e546467d1fef13dc7e22e4071be7724b755e9ec6182b6ccc8a75555050203670a778a79ed52e221c8d2ce4dec3b311254ebf4725b072cac54be9dc5f74187b7276369c06e72be95356739d6520a12a11ca185d46d7f167f2f6e5e1dfe6fa1ac844555a391553717bfe67a0f0889cf5e7a818095c0f3a7f9b3b2711909c3049fb3f380ef2bcfd017c41fce823ad1a69da2b1a158b280292330922c2c5b59b6feebb7b4af9bbc8d33ee62ef90600783ee5847e9350acc354b0680e447de90ab35cd36f0b0c247b0cf383a11d33ccb375df5db0b0aa13c9c94138e9ca1d021b3f56667005b07700000000e80000000000000014010000d4000000cc264ad36f29702a9a440440005630ffc818bd977b62a3424e3a56ae14dae539d8e0e624b138e36aa338380fe2dda67de85498f50213b0bec27144dfadd47d8994a141cf7acf0eecb1778a2d4d84241f20f2b9d53633d2c005677fdc7cb02c6c7692a2a8ba8be0df5607e951b5161301a33e5e319d63e4ec2366e66e39786bafba2206a35a8b52e15318a1de32b44e47ca95d68742f19b7a8ad72f38ee1ac0a0349eb4b43c186200c85c97a660af145e3307fc90cab632d772a7c382ef4db58f7cba6dc11b1909cee70eff00d8000000000000001000000000feffff8472aaa05bf615e7ca18617ca35d1dcc32ef8c371ad51b06d3bd00e38b1aab90e412c910543a6949b79b6d1aaaecd835ad4f654cf5a758507504098965efc7d9ec9d2d0e50667923315e3d845eadee815cb576df9f1af6cda177a239d0ae7b21d7b9dbb299543ceaf21b47346e5853c8d6a332dec38a627f516db9dbca696853f8e8837e3dcfea2e88bde0c7aa9fbc5e78ecf06d9d885e7701dc2449c8d0b07698bc3732ec8a90fd796a2c00"/1002], 0x3f8}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5ad, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x1, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$inet(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="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", 0xfd}, {&(0x7f0000003f00)="d9a505949961650e5d1d603ccf23039562c09a44a73eecb485673f1ac5402a4ba9872bc7afe6d6a864f8e49958ce2bd290708650d071ae405b38bc67939333c20b6266703edb2231e63b6c99e6bc67806b7649ddf95c2c2b6e01b487c0a8f3c6417e03483d363d0901d6d46ec206d51b456d61b196a7a958ff9a9bf1f453feb76b1a2ddf8dee4ec1584b0626", 0x8c}, {&(0x7f0000003fc0)="021e74151dccc8c48e625571fc9811ad9a3e0371714502b1441802e40128b8451b4c5525b752e493fa552ff326e3eebe14e9de525c8053c233f1db67a7333501d87e59bc0aff167d68779d05e72b74fb8c551be80f46b63e1c30d707569e9bb97692d365c430d526", 0x68}], 0x4, &(0x7f0000004080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}, 0x0) 2.433765601s ago: executing program 4 (id=3671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000ffaffbfff000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000015008500000082000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.399323302s ago: executing program 6 (id=3672): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000ff970000000000000007000000441c05"], 0x30}, 0x40880) 2.093536859s ago: executing program 4 (id=3673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x2, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff001}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x9, 0x9, 0x4, 0x10, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @jmp={0x5, 0x1, 0x4, 0x1, 0x3, 0xfffffffffffffff8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0x4, 0x80000000, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000023c0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x1, 0x4, 0xd}, {0x0, 0x2, 0x6, 0x1}, {0x0, 0x5, 0xb, 0x2}, {0x2, 0x1, 0x4, 0x8}, {0x1, 0x2, 0xd, 0xa}, {0x0, 0x5, 0x2, 0x6}, {0x2, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x9, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002880)={r0, 0x0, 0xe7, 0x36, &(0x7f0000002540)="2e14fadd5086a3f40b558f93ea5c39acf2266d78e203fc45750391f49e45e70f1193b744217c115efdf586c64782d8a1f46c38d65d2e6861fe1d6c6d577c6986b2b11071b1af6349d8a9ac48ad02fd726a669e8d0be952fc321301c0421723c75837e33ecf21e91e635a3dd3bd94800c5a1ef59f3da7987b9b081608e943cf5a9952f93fe0151e154d941520fda769e0a12647a6811079d9e26efc372f92ea3a1f8ae6884a4aafd6815ebc897fa53cb3281dae84179f01c85f33f461324094532315255e8614b84788e131c92718ef26d5c215558cae3c1d22a45a8e42bcee6cd0ac83381f6a90", &(0x7f0000002640)=""/54, 0x0, 0x0, 0xf4, 0xd5, &(0x7f0000002680)="0438e0e23a34793152829a12e9fbbfced53c8ce5667386133a86ad3ccca7507a5a4f8e2823ddf077445fe83641c27acbeb0e6c6c9abd38c04186364242df54ebc73ff1b1a2620187f11742633172ee7779ddd286786111ef6218e2c7295aed74dba55dc47aa83dbac888ff5e8136e0cacc416c2d93a6caf16e70e28cf4be7b61451393f48ee1787d19ee9e34119588ce4a6da171c616bf71dea94c8a0ca1f7a93e39eaa480568400eb20eb82b9897075f86b4532b52f656c15082b480bb754de634ef0d8af60b603fac067cd594859ecfdd83b46ee5a08be08869141acd72b4d01b4b7cdf31fee84e2defb576e5060f065205295", &(0x7f0000002780)="ab49428d8d9e26b7fbe4a2a3f5153bf8be59132fc48c9cc749163141aa55c68f07514e8b40a14c1bbb73462a939baddb3952c9cc2e18a371eefb0413ca627698da224b0ece67117e01ccccdb6cd8436cf59445aac1cdc91a45d1a582bded022ba7a9696365b4755bd84ac282b03444e051078c6bb9b01088026fb8f6e3686eb392495b735c972e28063845236f2ad91bce83630e277404cf0f1989350f06ecdf6e04df36200cb389f40721cad0da2715ddde4c00c9f39254a9b9afea9908ca2f2dad34cded7f2bf4d71385762e85b261796dd54b43", 0x4, 0x0, 0x556}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x40000004) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x106) 2.014886801s ago: executing program 7 (id=3674): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848438848005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.764029787s ago: executing program 6 (id=3675): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x10000000008001, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x17b397b4dcd54698}, 0x0, 0x33, 0x43a1bd76, 0x2, 0x7, 0x4000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffa62, 0x7fffffffffffffff}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x0, r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$tipc(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)="e0690295b6337118425c6033eb94338620b0e000b9644ca99faa7739191f19309bf95ccd197cc37b32256ba26d56c63805a9cb94138d369185b14c7d24252c86eadd95940e6b46261ba8b59db66ad2201378691a6f556f383aed2c68d5efe36763d2280346930482800dd166519a8a763d0ef59a7a6759d18830d178f2b31c39e4ff7cdd5d818ea5a68d99448e8a1cac5607979c7cbe6102f947d434b4c78f46d667209b5685727fc3d40b18204f1f67a1e64da2d43f3da2ce6a395babd96a6a9997e1060f71d60cdafcb9", 0xcb}, {&(0x7f00000008c0)="32eaeb7b0ca2a421ea05793e2e0bbc1f255d63cfbc54f92bc536cde751b91d9bace3ef57bfbf94827ac71e3ef8356b7906dcffee3d3e099a0fd84b73fb9bbeed21dd433bebf2f1b9a5759e05919243cc40e52ae54714ae0ad3a2c592c78dff6449346680650fc1dda5b830168f7fdced6a63fab6a43a403092238aacb5871d7f19b4c30459db6013f36d0b21b8c5c9fc0bc638e37dcee2e5a553af6ee4fc42183ca593ba7fd9b5a25a", 0xa9}, {&(0x7f0000000980)="2980c5a7a6323bc3714024a7bb96347eb416d47ee53e84ab91efa6e8dbb5c3774c1a8bff3311e04f9ec5e5e2bed0e92b13b3e188f012e352505801771130d36f1787214b2e89989170fa0173bed344b0846d2d9449de3a407536fd60eddb5e1a2b71720f593fe2a00e986e3bdb47beb7e7931ed1116d579833c8e2ac5c283bbcf7b8daac90ca2226d1773ec170c1d01f2f4464641b77ff7b9f983c4f18bd4cc3a1e8", 0xa2}, {&(0x7f0000000a40)="77410e1be2af3133e653db67bc396e6746df2928b5c140252dd4608bb25bb35184af38a3b41427da19c4389cc48743ec357538a1e6644c77cfb4a4ffa5fd764bf91dc69a0f0ed12b36c96b55a35afc822b7619e337322f8f44fd26a8fd1b5c49d89ff0879955781d8caaf74597d78be0acdc075885cd5b39414880fbd93b0005cf1c1a40a05bed0ff75d791503855e1f468a49690d1b551bf9be1594e9a3c4f054e50b5696ec06fa923da5d56921abc26b978e2beb615a454604162976214ace2ddeb61ed3b88c059469f85fb9fb8ebcaf47793c8b57cf3dd5", 0xd9}], 0x4, &(0x7f0000000b80)="5aad18e7d57834894d542b20fc47d51708f91331b06fc9a5b67c633e2b097ada1ececfb50fe181ae09125bf3b906836d91ec56c4f34eb1bf049a37ad2582e623dc5eccca169c7d22e18676f3152519a94d079641dc6ff838378feef958bd6d073d8e20ec23b377aa807424c343b040bd931f548e3508b98bc8b447ca3b5bfe98709be2ac11bd2d914106d154d7c4b4a8616590af5804004877fa314e", 0x9c, 0x4800}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@var={0x5, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x8}, @volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @volatile={0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x2d64a337fdeff65d}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x4}}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x5f, 0x2e, 0x30]}}, &(0x7f0000001100)=""/113, 0xa1, 0x71, 0x1, 0x401, 0x10000, @value=r1}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9, 0x12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRESHEX=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.763567247s ago: executing program 5 (id=3676): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000250000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@private=0xa010100, 0x810001}]}]}}}], 0x50}, 0x200040c4) 1.044718564s ago: executing program 5 (id=3677): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r0, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002580)={&(0x7f0000002200)=@generic={0x2d, "b282a646c9bce3d87730d0a0aabba406dd241c34017e7462f4d785ad1bd2dac35fc284671a16c3b6f7e62e422244915684d699b96802bc37ef35e4cd0aefaf90d99527ca4be846496bf711a4cb3e5ad5a535130552aba8e0d82de4489fbc4dc15037cf305f540151e6c53813fc2e6620def95a31c3ee2eea18d73ddb50f0"}, 0x80, 0x0}, 0x8042) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x34, 0xb, 0x1, 0x4}, {0xb1, 0xc, 0x28, 0x1ff}, {0x7, 0x2, 0x0, 0xffffffff}]}) 896.466398ms ago: executing program 7 (id=3678): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_config_ext={0xfd, 0x5}, 0x118c0e, 0x8000000000000008, 0x7fff, 0x1f6ec56ee1cce156, 0x40000000004, 0x7fff, 0xfffd, 0x0, 0x9, 0x0, 0x2000000000004}, 0xffffffffffffffff, 0x880000000000, r1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x208}, [@alu={0x7, 0x1, 0xb, 0x7, 0x6, 0x2, 0x8}, @ldst={0x0, 0x0, 0x0, 0x4, 0x3, 0x100, 0x10}, @exit, @generic={0xf, 0x1, 0x2, 0x7, 0xd}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @map_fd={0x18, 0x5, 0x1, 0x0, r11}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000780)={0x8, 0x8}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x3, 0x8, 0x5}, 0x10, 0x2b2f0, r11, 0x7, &(0x7f0000000800)=[r11, r8], &(0x7f0000000840)=[{0x3, 0x4, 0xa, 0x7}, {0x5, 0x3, 0xf, 0x2}, {0x0, 0x4, 0x3, 0xb}, {0x5, 0x4, 0x6, 0x2}, {0x4, 0x3, 0x6, 0x7}, {0x2, 0x1, 0x6, 0x4}, {0x2, 0x3, 0xc, 0x9}], 0x10, 0x50d5}, 0x94) 0s ago: executing program 6 (id=3679): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c", 0x14}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x5605744c5c979ca6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x10, 0x80, 0x2, 0x8, 0x0, 0x10, 0x20882, 0x3fa06acc2341708d, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x255, 0x1}, 0x1008, 0x4a, 0x9, 0x2, 0x8e2, 0x400, 0x7, 0x0, 0x0, 0x0, 0xb}, r4, 0x6, r3, 0xf) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESOCT], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xfd, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@private=0xa010100, 0x810001}]}]}}}], 0x50}, 0x200040c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada", 0x23}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r8, 0x4) kernel console output (not intermixed with test programs): ep_softirqs_on+0x5b0/0x5b0 [ 661.562824][T13763] ? lock_chain_count+0x20/0x20 [ 661.567695][T13763] ? __local_bh_disable_ip+0x108/0x1a0 [ 661.573173][T13763] ? __cant_sleep+0x220/0x220 [ 661.577864][T13763] ? __local_bh_enable_ip+0x13a/0x1c0 [ 661.583373][T13763] ? _local_bh_enable+0xa0/0xa0 [ 661.588257][T13763] ? bpf_test_timer_continue+0x135/0x380 [ 661.593908][T13763] ? bpf_test_run+0x174/0x870 [ 661.598627][T13763] bpf_test_run+0x2df/0x870 [ 661.603164][T13763] ? bpf_test_run+0x174/0x870 [ 661.608123][T13763] ? dst_hold+0x70/0x70 [ 661.612322][T13763] ? eth_get_headlen+0x210/0x210 [ 661.617290][T13763] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 661.622694][T13763] ? cpu_online+0x60/0x60 [ 661.627039][T13763] bpf_prog_test_run+0x31f/0x390 [ 661.631996][T13763] __sys_bpf+0x49d/0x890 [ 661.636259][T13763] ? bpf_link_show_fdinfo+0x390/0x390 [ 661.641657][T13763] ? lock_chain_count+0x20/0x20 [ 661.646530][T13763] __x64_sys_bpf+0x7c/0x90 [ 661.650960][T13763] do_syscall_64+0x55/0xb0 [ 661.655391][T13763] ? clear_bhb_loop+0x40/0x90 [ 661.660083][T13763] ? clear_bhb_loop+0x40/0x90 [ 661.664777][T13763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.670684][T13763] RIP: 0033:0x7f976419e0d9 [ 661.675115][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.694849][T13763] RSP: 002b:00007f9765016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.703303][T13763] RAX: ffffffffffffffda RBX: 00007f9764425fa0 RCX: 00007f976419e0d9 [ 661.711304][T13763] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 661.719314][T13763] RBP: 00007f9765016090 R08: 0000000000000000 R09: 0000000000000000 [ 661.727309][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.735291][T13763] R13: 00007f9764426038 R14: 00007f9764425fa0 R15: 00007fff99a98178 [ 661.743290][T13763] [ 662.051518][T13775] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2193'. [ 662.092417][T13775] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 663.539944][T13813] netlink: 'syz.6.2207': attribute type 39 has an invalid length. [ 663.577710][ T5778] Bluetooth: hci6: ISO packet for unknown connection handle 11 [ 664.137010][T13824] netlink: 'syz.7.2211': attribute type 10 has an invalid length. [ 664.158933][T13824] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2211'. [ 665.741187][T13870] netlink: 'syz.6.2222': attribute type 29 has an invalid length. [ 665.825291][T13870] netlink: 'syz.6.2222': attribute type 29 has an invalid length. [ 665.925242][T13870] netlink: 'syz.6.2222': attribute type 29 has an invalid length. [ 667.276915][T13897] netlink: 'syz.4.2228': attribute type 29 has an invalid length. [ 667.305049][T13897] netlink: 'syz.4.2228': attribute type 29 has an invalid length. [ 667.420783][T13896] netlink: 'syz.4.2228': attribute type 29 has an invalid length. [ 667.641211][T13896] netlink: 'syz.4.2228': attribute type 29 has an invalid length. [ 668.920530][T13910] FAULT_INJECTION: forcing a failure. [ 668.920530][T13910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.994938][T13910] CPU: 0 PID: 13910 Comm: syz.7.2232 Not tainted syzkaller #0 [ 669.002659][T13910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.013258][T13910] Call Trace: [ 669.016686][T13910] [ 669.019651][T13910] dump_stack_lvl+0x18c/0x250 [ 669.024385][T13910] ? show_regs_print_info+0x20/0x20 [ 669.029626][T13910] ? load_image+0x420/0x420 [ 669.034275][T13910] ? __might_fault+0xaa/0x120 [ 669.039504][T13910] ? __lock_acquire+0x7d80/0x7d80 [ 669.044574][T13910] should_fail_ex+0x394/0x4c0 [ 669.049299][T13910] _copy_to_iter+0x1ce/0x1110 [ 669.054021][T13910] ? __lock_acquire+0x7d80/0x7d80 [ 669.059101][T13910] ? _raw_spin_unlock+0x40/0x40 [ 669.064089][T13910] ? remove_wait_queue+0x33/0x120 [ 669.069518][T13910] ? iov_iter_init+0x1e0/0x1e0 [ 669.074331][T13910] ? __virt_addr_valid+0x10c/0x380 [ 669.079487][T13910] ? __virt_addr_valid+0x10c/0x380 [ 669.084652][T13910] ? __check_object_size+0x4fc/0xa40 [ 669.089993][T13910] __skb_datagram_iter+0xdb/0x780 [ 669.095081][T13910] ? wait_woken+0x180/0x180 [ 669.099767][T13910] ? skb_copy_datagram_iter+0x200/0x200 [ 669.105378][T13910] skb_copy_datagram_iter+0xb1/0x200 [ 669.110725][T13910] tipc_recvstream+0x6f6/0xe70 [ 669.115572][T13910] ? tipc_sendstream+0x70/0x70 [ 669.120404][T13910] ____sys_recvmsg+0x2bd/0x5d0 [ 669.125242][T13910] ? __sys_recvmsg_sock+0x50/0x50 [ 669.130423][T13910] ? import_iovec+0x73/0xa0 [ 669.135072][T13910] ___sys_recvmsg+0x214/0x590 [ 669.139892][T13910] ? __sys_recvmsg+0x2a0/0x2a0 [ 669.144718][T13910] ? ksys_write+0x1d2/0x260 [ 669.149286][T13910] ? __fget_files+0x3fc/0x460 [ 669.154029][T13910] __x64_sys_recvmsg+0x21e/0x2f0 [ 669.159017][T13910] ? ___sys_recvmsg+0x590/0x590 [ 669.163905][T13910] ? lockdep_hardirqs_on+0x98/0x150 [ 669.169127][T13910] do_syscall_64+0x55/0xb0 [ 669.173644][T13910] ? clear_bhb_loop+0x40/0x90 [ 669.178343][T13910] ? clear_bhb_loop+0x40/0x90 [ 669.183044][T13910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.189041][T13910] RIP: 0033:0x7f976419e0d9 [ 669.193475][T13910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.213709][T13910] RSP: 002b:00007f9765016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 669.222236][T13910] RAX: ffffffffffffffda RBX: 00007f9764425fa0 RCX: 00007f976419e0d9 [ 669.230224][T13910] RDX: 0000000000000100 RSI: 0000200000000400 RDI: 0000000000000004 [ 669.238209][T13910] RBP: 00007f9765016090 R08: 0000000000000000 R09: 0000000000000000 [ 669.246193][T13910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.254217][T13910] R13: 00007f9764426038 R14: 00007f9764425fa0 R15: 00007fff99a98178 [ 669.262478][T13910] [ 670.962520][T13930] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.2241'. [ 671.044604][T13930] syzkaller0: entered promiscuous mode [ 671.050613][T13930] syzkaller0: entered allmulticast mode [ 675.824054][T13957] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.2250'. [ 676.224710][T13969] netlink: 'syz.6.2250': attribute type 29 has an invalid length. [ 676.286967][T13969] netlink: 'syz.6.2250': attribute type 29 has an invalid length. [ 676.356612][T13967] netlink: 'syz.5.2255': attribute type 29 has an invalid length. [ 676.398976][T13967] netlink: 'syz.5.2255': attribute type 29 has an invalid length. [ 676.673410][T13968] netlink: 'syz.5.2255': attribute type 29 has an invalid length. [ 676.683177][T13975] netlink: 'syz.5.2255': attribute type 29 has an invalid length. [ 677.608536][T13957] netlink: 'syz.6.2250': attribute type 29 has an invalid length. [ 678.090233][T13995] netlink: 'syz.6.2260': attribute type 10 has an invalid length. [ 678.272615][T13995] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.669659][T13995] bridge_slave_1: left allmulticast mode [ 678.752922][T13995] bridge_slave_1: left promiscuous mode [ 678.999717][T13995] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.206974][T13995] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 679.821103][T14016] netlink: 'syz.7.2268': attribute type 29 has an invalid length. [ 679.916731][T14016] netlink: 'syz.7.2268': attribute type 29 has an invalid length. [ 680.084318][T14018] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.2269'. [ 681.462904][T14030] validate_nla: 6 callbacks suppressed [ 681.462944][T14030] netlink: 'syz.7.2272': attribute type 1 has an invalid length. [ 682.361585][T14046] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.2279'. [ 682.812634][T14046] netlink: 'syz.5.2279': attribute type 29 has an invalid length. [ 682.911582][T14046] netlink: 'syz.5.2279': attribute type 29 has an invalid length. [ 683.072226][T14051] netlink: 'syz.5.2279': attribute type 29 has an invalid length. [ 686.364207][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.370783][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.793858][T14086] netlink: 'syz.5.2292': attribute type 29 has an invalid length. [ 686.872609][T14093] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2294'. [ 686.989824][T14086] netlink: 'syz.5.2292': attribute type 29 has an invalid length. [ 687.223063][T14092] netlink: 'syz.5.2292': attribute type 29 has an invalid length. [ 687.340808][T14095] netlink: 'syz.5.2292': attribute type 29 has an invalid length. [ 687.556771][T14093] netlink: 'syz.4.2294': attribute type 29 has an invalid length. [ 687.570535][T14093] netlink: 'syz.4.2294': attribute type 29 has an invalid length. [ 687.583986][T14093] netlink: 'syz.4.2294': attribute type 29 has an invalid length. [ 689.323299][T14114] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2303'. [ 689.850442][T14126] netlink: 'syz.6.2309': attribute type 4 has an invalid length. [ 690.110363][T14129] netlink: 16222 bytes leftover after parsing attributes in process `syz.7.2310'. [ 690.351070][T14134] netlink: 'syz.7.2310': attribute type 29 has an invalid length. [ 690.413511][T14134] netlink: 'syz.7.2310': attribute type 29 has an invalid length. [ 691.551756][T14148] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2315'. [ 692.355602][T14163] netlink: 52711 bytes leftover after parsing attributes in process `syz.6.2322'. [ 692.403517][T14163] netlink: 52711 bytes leftover after parsing attributes in process `syz.6.2322'. [ 693.242220][T14174] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2323'. [ 693.538472][T14175] validate_nla: 2 callbacks suppressed [ 693.538512][T14175] netlink: 'syz.4.2323': attribute type 29 has an invalid length. [ 694.417545][T14175] netlink: 'syz.4.2323': attribute type 29 has an invalid length. [ 694.932836][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2329'. [ 694.983151][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2329'. [ 695.137386][T14188] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2329'. [ 695.253192][T14189] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2329'. [ 697.133132][T14223] netlink: 16222 bytes leftover after parsing attributes in process `syz.7.2339'. [ 699.873986][T14237] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2342'. [ 700.472283][T14249] netlink: 'syz.5.2347': attribute type 19 has an invalid length. [ 700.532458][T14249] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2347'. [ 700.756325][T14252] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.2348'. [ 701.953884][T14259] IPv6: Can't replace route, no match found [ 702.972211][T14254] netlink: 'syz.6.2348': attribute type 29 has an invalid length. [ 703.019506][T14254] netlink: 'syz.6.2348': attribute type 29 has an invalid length. [ 703.437449][T14252] netlink: 'syz.6.2348': attribute type 29 has an invalid length. [ 703.473294][T14273] netlink: 'syz.7.2355': attribute type 1 has an invalid length. [ 703.504375][T14273] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2355'. [ 703.566352][T14273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.582103][T14273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.668625][T14273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.686961][T14273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.718009][T14282] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.2358'. [ 703.723865][T14273] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 703.767977][T14273] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 703.871761][T14273] bridge0: port 3(batadv0) entered disabled state [ 704.270722][T14273] batadv0 (unregistering): left allmulticast mode [ 704.304897][T14273] batadv0 (unregistering): left promiscuous mode [ 704.321077][T14273] bridge0: port 3(batadv0) entered disabled state [ 704.518418][T14284] netlink: 'syz.5.2358': attribute type 29 has an invalid length. [ 704.854630][T14287] netlink: 'syz.6.2359': attribute type 21 has an invalid length. [ 704.895330][T14284] netlink: 'syz.5.2358': attribute type 29 has an invalid length. [ 704.939735][T14289] netlink: 'syz.5.2358': attribute type 29 has an invalid length. [ 706.444851][T14308] netlink: 'syz.5.2365': attribute type 29 has an invalid length. [ 706.465626][T14308] netlink: 'syz.5.2365': attribute type 29 has an invalid length. [ 706.490130][T14308] netlink: 'syz.5.2365': attribute type 29 has an invalid length. [ 706.509273][T14308] netlink: 'syz.5.2365': attribute type 29 has an invalid length. [ 707.241923][T14317] netlink: 119 bytes leftover after parsing attributes in process `syz.6.2369'. [ 707.450749][T14319] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.2370'. [ 707.584211][T14320] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 707.655155][T14320] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 708.090172][T14320] netlink: 'syz.5.2370': attribute type 29 has an invalid length. [ 708.216008][T14329] netlink: 'syz.6.2373': attribute type 10 has an invalid length. [ 708.736572][T14337] FAULT_INJECTION: forcing a failure. [ 708.736572][T14337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.774641][T14337] CPU: 0 PID: 14337 Comm: syz.7.2377 Not tainted syzkaller #0 [ 708.782348][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.792713][T14337] Call Trace: [ 708.796212][T14337] [ 708.799185][T14337] dump_stack_lvl+0x18c/0x250 [ 708.803960][T14337] ? show_regs_print_info+0x20/0x20 [ 708.809381][T14337] ? load_image+0x420/0x420 [ 708.814110][T14337] ? __might_fault+0xaa/0x120 [ 708.818839][T14337] ? __lock_acquire+0x7d80/0x7d80 [ 708.823928][T14337] should_fail_ex+0x394/0x4c0 [ 708.828680][T14337] _copy_from_iter+0x1cd/0x1290 [ 708.833689][T14337] ? rep_movs_alternative+0x4a/0x90 [ 708.838934][T14337] ? copyout_mc+0x70/0x70 [ 708.843295][T14337] ? copyout_mc+0x70/0x70 [ 708.847824][T14337] ? __virt_addr_valid+0x10c/0x380 [ 708.852997][T14337] ? page_copy_sane+0x16a/0x270 [ 708.857877][T14337] copy_page_from_iter+0x7b/0x100 [ 708.862958][T14337] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 708.869004][T14337] tun_get_user+0xc84/0x3d70 [ 708.873821][T14337] ? trace_event_raw_event_lock+0x1d0/0x240 [ 708.879820][T14337] ? aa_file_perm+0x3e3/0xee0 [ 708.884533][T14337] ? rcu_read_unlock+0xa0/0xa0 [ 708.889360][T14337] ? tun_get+0x1c/0x2e0 [ 708.893546][T14337] ? __lock_acquire+0x7d80/0x7d80 [ 708.898693][T14337] ? tun_get+0x1c/0x2e0 [ 708.902881][T14337] tun_chr_write_iter+0x119/0x200 [ 708.907933][T14337] vfs_write+0x474/0x9a0 [ 708.912208][T14337] ? file_end_write+0x250/0x250 [ 708.917088][T14337] ? __fget_files+0x3fc/0x460 [ 708.921895][T14337] ? __fdget_pos+0x1d8/0x330 [ 708.926507][T14337] ? ksys_write+0x74/0x260 [ 708.931037][T14337] ksys_write+0x151/0x260 [ 708.935410][T14337] ? __ia32_sys_read+0x90/0x90 [ 708.940291][T14337] ? lockdep_hardirqs_on+0x98/0x150 [ 708.945522][T14337] do_syscall_64+0x55/0xb0 [ 708.949957][T14337] ? clear_bhb_loop+0x40/0x90 [ 708.955443][T14337] ? clear_bhb_loop+0x40/0x90 [ 708.960875][T14337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.966902][T14337] RIP: 0033:0x7f976419e0d9 [ 708.971344][T14337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.991406][T14337] RSP: 002b:00007f9765016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.999957][T14337] RAX: ffffffffffffffda RBX: 00007f9764425fa0 RCX: 00007f976419e0d9 [ 709.008349][T14337] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 709.016346][T14337] RBP: 00007f9765016090 R08: 0000000000000000 R09: 0000000000000000 [ 709.024517][T14337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.033115][T14337] R13: 00007f9764426038 R14: 00007f9764425fa0 R15: 00007fff99a98178 [ 709.041225][T14337] [ 709.346381][T14341] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2378'. [ 710.356945][T14354] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2383'. [ 710.461000][T14361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.471335][T14361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.482306][T14361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 710.496139][T14361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 710.504096][T14361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 710.521873][T14361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.218408][T14358] netlink: 'syz.4.2383': attribute type 29 has an invalid length. [ 711.321670][T14269] bond0: (slave syz_tun): Releasing backup interface [ 711.474704][T14358] netlink: 'syz.4.2383': attribute type 29 has an invalid length. [ 711.591880][T14354] netlink: 'syz.4.2383': attribute type 29 has an invalid length. [ 712.159332][ T8747] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.611090][ T5778] Bluetooth: hci1: command tx timeout [ 712.624964][T14360] chnl_net:caif_netlink_parms(): no params data found [ 713.098710][ T8747] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.300108][ T8747] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.685247][ T5778] Bluetooth: hci1: command tx timeout [ 714.807378][ T8747] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.923223][T14360] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.942063][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.967241][T14360] bridge_slave_0: entered allmulticast mode [ 714.998292][T14360] bridge_slave_0: entered promiscuous mode [ 715.020184][T14360] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.052286][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.076004][T14360] bridge_slave_1: entered allmulticast mode [ 715.102241][T14360] bridge_slave_1: entered promiscuous mode [ 715.206017][T14409] netlink: 'syz.5.2396': attribute type 39 has an invalid length. [ 715.271068][T14412] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2397'. [ 715.316230][T14408] ref_ctr_offset mismatch. inode: 0xb2 offset: 0x0 ref_ctr_offset(old): 0xfe ref_ctr_offset(new): 0x0 [ 715.516133][T14415] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 715.869433][T14360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.931216][T14407] delete_channel: no stack [ 715.939831][T14415] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 715.972653][T14412] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 716.032604][T14360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.213552][T14360] team0: Port device team_slave_0 added [ 716.252058][T14360] team0: Port device team_slave_1 added [ 716.502329][T14360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.526474][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.654565][T14360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.754044][T14360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.771630][ T5778] Bluetooth: hci1: command tx timeout [ 716.794047][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.822295][T14360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.040832][T14360] hsr_slave_0: entered promiscuous mode [ 717.185472][T14360] hsr_slave_1: entered promiscuous mode [ 718.861819][ T5778] Bluetooth: hci1: command tx timeout [ 720.548585][T14470] netlink: 16198 bytes leftover after parsing attributes in process `syz.4.2409'. [ 721.888047][T14492] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2414'. [ 722.158820][T14492] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 722.182678][T14492] CPU: 0 PID: 14492 Comm: syz.5.2414 Not tainted syzkaller #0 [ 722.190239][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.200358][T14492] Call Trace: [ 722.203671][T14492] [ 722.206649][T14492] dump_stack_lvl+0x18c/0x250 [ 722.211402][T14492] ? show_regs_print_info+0x20/0x20 [ 722.216754][T14492] ? load_image+0x420/0x420 [ 722.221321][T14492] sysfs_warn_dup+0x8e/0xa0 [ 722.225872][T14492] sysfs_do_create_link_sd+0xc0/0x110 [ 722.231397][T14492] device_add_class_symlinks+0x1cf/0x240 [ 722.237122][T14492] device_add+0x4f9/0xc40 [ 722.241512][T14492] wiphy_register+0x1d99/0x2ac0 [ 722.246450][T14492] ? cfg80211_event_work+0x40/0x40 [ 722.251793][T14492] ? minstrel_ht_alloc+0x88a/0x990 [ 722.256964][T14492] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 722.263098][T14492] ieee80211_register_hw+0x2dd8/0x3b30 [ 722.268630][T14492] ? ieee80211_register_hw+0xf41/0x3b30 [ 722.274519][T14492] ? ieee80211_tasklet_handler+0x20/0x20 [ 722.280211][T14492] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 722.286174][T14492] ? __debug_object_init+0xec/0x450 [ 722.291472][T14492] ? __asan_memset+0x22/0x40 [ 722.296214][T14492] ? __hrtimer_init+0x189/0x270 [ 722.301165][T14492] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 722.306978][T14492] ? mac80211_hwsim_free+0x220/0x220 [ 722.312313][T14492] ? rcu_is_watching+0x15/0xb0 [ 722.317132][T14492] ? kstrndup+0xbd/0x140 [ 722.321468][T14492] hwsim_new_radio_nl+0xdad/0x1a70 [ 722.326647][T14492] ? __nla_validate+0x50/0x50 [ 722.331391][T14492] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 722.337795][T14492] ? __nla_parse+0x40/0x50 [ 722.342363][T14492] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 722.348753][T14492] genl_family_rcv_msg_doit+0x21a/0x310 [ 722.354362][T14492] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 722.360333][T14492] ? bpf_lsm_capable+0x9/0x10 [ 722.365085][T14492] ? security_capable+0x89/0xb0 [ 722.370096][T14492] genl_rcv_msg+0x611/0x7a0 [ 722.374663][T14492] ? genl_bind+0x360/0x360 [ 722.379167][T14492] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 722.383838][T14470] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 722.385524][T14492] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 722.385605][T14492] ? ref_tracker_free+0x686/0x830 [ 722.385644][T14492] netlink_rcv_skb+0x235/0x4c0 [ 722.385670][T14492] ? genl_bind+0x360/0x360 [ 722.385699][T14492] ? netlink_ack+0x1160/0x1160 [ 722.385742][T14492] ? __lock_acquire+0x7d80/0x7d80 [ 722.385780][T14492] ? down_read+0x1ac/0x2e0 [ 722.385836][T14492] genl_rcv+0x28/0x40 [ 722.385862][T14492] netlink_unicast+0x7b1/0x930 [ 722.385901][T14492] netlink_sendmsg+0x8d0/0xbf0 [ 722.385939][T14492] ? netlink_getsockopt+0x590/0x590 [ 722.385967][T14492] ? apparmor_socket_sendmsg+0x8e/0x330 [ 722.385996][T14492] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 722.386024][T14492] ? security_socket_sendmsg+0x80/0xa0 [ 722.386044][T14492] ? netlink_getsockopt+0x590/0x590 [ 722.386072][T14492] ____sys_sendmsg+0x61b/0x980 [ 722.386109][T14492] ? __asan_memset+0x22/0x40 [ 722.386137][T14492] ? __sys_sendmsg_sock+0x30/0x30 [ 722.386159][T14492] ? __import_iovec+0x5f2/0x850 [ 722.386203][T14492] ? import_iovec+0x73/0xa0 [ 722.386239][T14492] ___sys_sendmsg+0x2a6/0x360 [ 722.386273][T14492] ? __sys_sendmsg+0x2b0/0x2b0 [ 722.386376][T14492] __se_sys_sendmsg+0x1d0/0x2c0 [ 722.386399][T14492] ? perf_trace_preemptirq_template+0x269/0x330 [ 722.386434][T14492] ? __x64_sys_sendmsg+0x80/0x80 [ 722.386485][T14492] ? lockdep_hardirqs_on+0x98/0x150 [ 722.386522][T14492] do_syscall_64+0x55/0xb0 [ 722.386545][T14492] ? clear_bhb_loop+0x40/0x90 [ 722.386569][T14492] ? clear_bhb_loop+0x40/0x90 [ 722.386597][T14492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.386622][T14492] RIP: 0033:0x7f83bb39e0d9 [ 722.386645][T14492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.386662][T14492] RSP: 002b:00007f83bc18d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.386689][T14492] RAX: ffffffffffffffda RBX: 00007f83bb625fa0 RCX: 00007f83bb39e0d9 [ 722.386704][T14492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 722.386720][T14492] RBP: 00007f83bb435024 R08: 0000000000000000 R09: 0000000000000000 [ 722.386734][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.386749][T14492] R13: 00007f83bb626038 R14: 00007f83bb625fa0 R15: 00007ffe9baa5258 [ 722.386790][T14492] [ 722.693046][T14498] netlink: 'syz.7.2415': attribute type 13 has an invalid length. [ 722.789852][T14498] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2415'. [ 722.870806][T14470] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 722.976350][T14471] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 723.779331][T14360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 723.842210][T14360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.877411][T14360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 723.986796][T14360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 725.371095][T14360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.411827][T14537] netlink: 'syz.5.2426': attribute type 23 has an invalid length. [ 725.437156][T14537] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2426'. [ 725.572695][T14360] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.614094][T14547] netlink: 16198 bytes leftover after parsing attributes in process `syz.7.2427'. [ 725.643448][T11433] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.650666][T11433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.024509][T11433] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.031828][T11433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.142722][T14554] FAULT_INJECTION: forcing a failure. [ 726.142722][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 726.156472][T14554] CPU: 0 PID: 14554 Comm: syz.5.2430 Not tainted syzkaller #0 [ 726.164000][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.174220][T14554] Call Trace: [ 726.177793][T14554] [ 726.180740][T14554] dump_stack_lvl+0x18c/0x250 [ 726.185454][T14554] ? show_regs_print_info+0x20/0x20 [ 726.190680][T14554] ? load_image+0x420/0x420 [ 726.195209][T14554] should_fail_ex+0x394/0x4c0 [ 726.199911][T14554] should_failslab+0x9/0x20 [ 726.204435][T14554] slab_pre_alloc_hook+0x59/0x300 [ 726.209487][T14554] ? perf_trace_lock_acquire+0x105/0x400 [ 726.215160][T14554] kmem_cache_alloc+0x5a/0x2c0 [ 726.219951][T14554] ? skb_clone+0x1eb/0x370 [ 726.224392][T14554] skb_clone+0x1eb/0x370 [ 726.228744][T14554] bpf_clone_redirect+0x16d/0x4a0 [ 726.233810][T14554] bpf_prog_208b094576c80b22+0x5e/0x63 [ 726.239296][T14554] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 726.245297][T14554] ? __lock_acquire+0x7d80/0x7d80 [ 726.250423][T14554] ? lock_chain_count+0x20/0x20 [ 726.255291][T14554] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 726.261559][T14554] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 726.266859][T14554] ? ktime_get+0x7f/0x280 [ 726.271203][T14554] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 726.277457][T14554] ? ktime_get_real_ts64+0x440/0x440 [ 726.282755][T14554] ? lockdep_hardirqs_on+0x98/0x150 [ 726.287984][T14554] ? __local_bh_disable_ip+0x108/0x1a0 [ 726.293458][T14554] ? __cant_sleep+0x220/0x220 [ 726.298151][T14554] ? read_tsc+0x9/0x20 [ 726.302230][T14554] ? ktime_get+0x24b/0x280 [ 726.306664][T14554] ? bpf_test_run+0x174/0x870 [ 726.311620][T14554] bpf_test_run+0x2df/0x870 [ 726.316150][T14554] ? lock_chain_count+0x20/0x20 [ 726.321024][T14554] ? bpf_test_run+0x174/0x870 [ 726.325719][T14554] ? dst_hold+0x70/0x70 [ 726.329999][T14554] ? convert___skb_to_skb+0x3d/0x590 [ 726.335391][T14554] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 726.340806][T14554] ? cpu_online+0x60/0x60 [ 726.345153][T14554] bpf_prog_test_run+0x31f/0x390 [ 726.350286][T14554] __sys_bpf+0x49d/0x890 [ 726.354634][T14554] ? bpf_link_show_fdinfo+0x390/0x390 [ 726.360120][T14554] ? lock_chain_count+0x20/0x20 [ 726.365072][T14554] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 726.371077][T14554] __x64_sys_bpf+0x7c/0x90 [ 726.375510][T14554] do_syscall_64+0x55/0xb0 [ 726.379946][T14554] ? clear_bhb_loop+0x40/0x90 [ 726.384735][T14554] ? clear_bhb_loop+0x40/0x90 [ 726.389442][T14554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.395357][T14554] RIP: 0033:0x7f83bb39e0d9 [ 726.399793][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.419500][T14554] RSP: 002b:00007f83bc18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.427936][T14554] RAX: ffffffffffffffda RBX: 00007f83bb625fa0 RCX: 00007f83bb39e0d9 [ 726.435920][T14554] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 726.443992][T14554] RBP: 00007f83bc18d090 R08: 0000000000000000 R09: 0000000000000000 [ 726.451977][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.459961][T14554] R13: 00007f83bb626038 R14: 00007f83bb625fa0 R15: 00007ffe9baa5258 [ 726.468009][T14554] [ 726.500467][T14360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.513172][T14360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.674422][T14549] netlink: 'syz.7.2427': attribute type 29 has an invalid length. [ 727.140012][ T8747] hsr_slave_0: left promiscuous mode [ 727.312114][ T8747] hsr_slave_1: left promiscuous mode [ 727.433053][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.455773][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.485676][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.501237][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.610356][ T8747] veth1_macvtap: left promiscuous mode [ 727.624113][ T8747] veth0_macvtap: left promiscuous mode [ 727.640414][ T8747] veth1_vlan: left promiscuous mode [ 727.663816][ T8747] veth0_vlan: left promiscuous mode [ 730.082131][ T8747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.163918][ T8747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.251367][ T8747] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 730.528844][ T8747] bond0 (unregistering): Released all slaves [ 730.630824][T14549] netlink: 'syz.7.2427': attribute type 29 has an invalid length. [ 730.672862][T14592] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 730.977430][T14360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.376292][T14612] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 731.404881][T14612] pim6reg0: persist enabled [ 731.480182][T14612] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2439'. [ 732.093138][T14360] veth0_vlan: entered promiscuous mode [ 732.213178][T14360] veth1_vlan: entered promiscuous mode [ 732.227676][T14630] netlink: 16198 bytes leftover after parsing attributes in process `syz.5.2443'. [ 732.440550][T14360] veth0_macvtap: entered promiscuous mode [ 732.531591][T14360] veth1_macvtap: entered promiscuous mode [ 732.533608][T14630] netlink: 'syz.5.2443': attribute type 29 has an invalid length. [ 732.610589][T14360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.665151][T14360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.681949][T14360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.696624][T14360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.716822][T14360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.727891][T14630] netlink: 'syz.5.2443': attribute type 29 has an invalid length. [ 732.752236][T14360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.793368][T14360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.824194][T14360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.854541][T14360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.882203][T14360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.921012][T14360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.948143][T14360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.979378][T14360] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.000457][T14360] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.027502][T14641] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2445'. [ 733.085230][T14632] netlink: 'syz.5.2443': attribute type 29 has an invalid length. [ 733.386980][ T8747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.428530][ T8747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.555989][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.563896][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.925505][T14691] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2457'. [ 736.297260][T14693] netlink: 'syz.6.2457': attribute type 29 has an invalid length. [ 736.433679][T11433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.478713][T14361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.489232][T14697] netlink: 'syz.5.2458': attribute type 10 has an invalid length. [ 736.499335][T14361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.500467][T14693] netlink: 'syz.6.2457': attribute type 29 has an invalid length. [ 736.518075][T14361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.532286][T14361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.543432][T14361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 736.552470][T14361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.657290][T11433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.720086][T14691] netlink: 'syz.6.2457': attribute type 29 has an invalid length. [ 737.145561][T11433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.163929][T14706] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.2461'. [ 738.360192][T11433] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 738.396506][T11433] bridge0: port 4(netdevsim0) entered disabled state [ 738.440697][T11433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.604671][ T5778] Bluetooth: hci2: command tx timeout [ 739.316335][T14701] chnl_net:caif_netlink_parms(): no params data found [ 739.681518][T14701] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.718576][T14746] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2470'. [ 739.774700][T14701] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.782006][T14701] bridge_slave_0: entered allmulticast mode [ 739.856419][T14701] bridge_slave_0: entered promiscuous mode [ 739.881274][T14701] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.889466][T14701] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.904779][T14701] bridge_slave_1: entered allmulticast mode [ 739.912668][T14701] bridge_slave_1: entered promiscuous mode [ 740.575516][T14744] netlink: 'syz.6.2470': attribute type 29 has an invalid length. [ 740.694848][ T5778] Bluetooth: hci2: command tx timeout [ 740.803216][T14744] netlink: 'syz.6.2470': attribute type 29 has an invalid length. [ 740.987443][T14701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.048778][T14701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.281344][T14701] team0: Port device team_slave_0 added [ 742.765288][ T5778] Bluetooth: hci2: command tx timeout [ 742.875253][T14777] delete_channel: no stack [ 743.528859][T14701] team0: Port device team_slave_1 added [ 744.008187][T14701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.019514][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.094648][T14701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.142111][T14701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.154834][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.236886][T14796] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2482'. [ 744.254893][T14701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.556291][T14796] netlink: 'syz.7.2482': attribute type 29 has an invalid length. [ 744.846165][ T5778] Bluetooth: hci2: command tx timeout [ 745.000740][T14701] hsr_slave_0: entered promiscuous mode [ 745.136793][T14701] hsr_slave_1: entered promiscuous mode [ 745.155220][T14701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.189300][T14701] Cannot create hsr debugfs directory [ 745.203244][T14796] netlink: 'syz.7.2482': attribute type 29 has an invalid length. [ 746.167879][T14820] netlink: 'syz.6.2486': attribute type 41 has an invalid length. [ 746.756735][T14841] FAULT_INJECTION: forcing a failure. [ 746.756735][T14841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.024574][T14841] CPU: 0 PID: 14841 Comm: syz.7.2489 Not tainted syzkaller #0 [ 747.032127][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.042225][T14841] Call Trace: [ 747.045538][T14841] [ 747.048499][T14841] dump_stack_lvl+0x18c/0x250 [ 747.053228][T14841] ? show_regs_print_info+0x20/0x20 [ 747.058473][T14841] ? load_image+0x420/0x420 [ 747.063014][T14841] ? __might_fault+0xaa/0x120 [ 747.067740][T14841] ? __lock_acquire+0x7d80/0x7d80 [ 747.072810][T14841] should_fail_ex+0x394/0x4c0 [ 747.077533][T14841] _copy_from_user+0x2f/0xe0 [ 747.082171][T14841] ___sys_recvmsg+0x174/0x590 [ 747.086900][T14841] ? __sys_recvmsg+0x2a0/0x2a0 [ 747.091744][T14841] ? ksys_write+0x1d2/0x260 [ 747.096310][T14841] ? __fget_files+0x3fc/0x460 [ 747.101050][T14841] __x64_sys_recvmsg+0x21e/0x2f0 [ 747.106047][T14841] ? ___sys_recvmsg+0x590/0x590 [ 747.110965][T14841] ? lockdep_hardirqs_on+0x98/0x150 [ 747.116226][T14841] do_syscall_64+0x55/0xb0 [ 747.120682][T14841] ? clear_bhb_loop+0x40/0x90 [ 747.125401][T14841] ? clear_bhb_loop+0x40/0x90 [ 747.130123][T14841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.136091][T14841] RIP: 0033:0x7f976419e0d9 [ 747.140562][T14841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.160314][T14841] RSP: 002b:00007f9764ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 747.168879][T14841] RAX: ffffffffffffffda RBX: 00007f9764426090 RCX: 00007f976419e0d9 [ 747.176898][T14841] RDX: 0000000000012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 747.185003][T14841] RBP: 00007f9764ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 747.193019][T14841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.201387][T14841] R13: 00007f9764426128 R14: 00007f9764426090 R15: 00007fff99a98178 [ 747.209670][T14841] [ 747.396074][T14840] netlink: 'syz.5.2492': attribute type 10 has an invalid length. [ 747.592504][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.604577][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.768840][T14848] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2494'. [ 747.804665][T14848] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 748.321628][T14849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2494'. [ 748.836647][T14860] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2496'. [ 748.954151][T14860] netlink: 'syz.5.2496': attribute type 29 has an invalid length. [ 749.126731][T14857] netlink: 'syz.6.2495': attribute type 8 has an invalid length. [ 749.199500][T14857] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2495'. [ 752.203767][T14860] netlink: 'syz.5.2496': attribute type 29 has an invalid length. [ 752.403836][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2495'. [ 753.466872][T11433] hsr_slave_0: left promiscuous mode [ 753.532169][T11433] hsr_slave_1: left promiscuous mode [ 753.552331][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.571215][T11433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.593928][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.613456][T11433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.667627][T11433] batadv0: left allmulticast mode [ 753.672750][T11433] batadv0: left promiscuous mode [ 753.700275][T11433] bridge0: port 3(batadv0) entered disabled state [ 753.722319][T11433] bridge_slave_1: left allmulticast mode [ 753.735058][T11433] bridge_slave_1: left promiscuous mode [ 753.740898][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.779745][T11433] bridge_slave_0: left allmulticast mode [ 753.794557][T11433] bridge_slave_0: left promiscuous mode [ 753.804982][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.887357][T11433] veth1_macvtap: left promiscuous mode [ 753.897377][T11433] veth0_macvtap: left promiscuous mode [ 753.909357][T11433] veth1_vlan: left promiscuous mode [ 753.921157][T11433] veth0_vlan: left promiscuous mode [ 753.939154][T14883] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2502'. [ 753.949386][T14883] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 754.811802][T11433] team0 (unregistering): Port device virt_wifi0 removed [ 754.997896][T14892] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2506'. [ 755.309996][T14893] netlink: 'syz.7.2506': attribute type 29 has an invalid length. [ 755.327259][T11433] team0 (unregistering): Port device team_slave_1 removed [ 755.427143][T11433] team0 (unregistering): Port device team_slave_0 removed [ 755.558501][T11433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.676589][T11433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.205123][T11433] bond0 (unregistering): (slave team0): Releasing backup interface [ 756.277256][T11433] bond0 (unregistering): Released all slaves [ 756.488297][T14881] netlink: 'syz.5.2501': attribute type 10 has an invalid length. [ 756.554587][T14893] netlink: 'syz.7.2506': attribute type 29 has an invalid length. [ 756.712287][T14701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.797928][T14701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.872362][T14701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.946703][T14701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 757.541796][T14911] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.2509'. [ 757.582850][T14911] bridge_slave_1: default FDB implementation only supports local addresses [ 757.790785][T14701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.938313][T14701] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.006154][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.013440][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.121610][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.128904][T11426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.404185][T14944] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2516'. [ 759.687671][T14951] netlink: 'syz.6.2516': attribute type 29 has an invalid length. [ 759.956551][T14951] netlink: 'syz.6.2516': attribute type 29 has an invalid length. [ 761.082437][T14701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.119869][T14965] netlink: 'syz.5.2519': attribute type 21 has an invalid length. [ 761.417264][T14951] netlink: 'syz.6.2516': attribute type 29 has an invalid length. [ 762.025931][T14987] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 762.240905][T14701] veth0_vlan: entered promiscuous mode [ 762.293030][T14701] veth1_vlan: entered promiscuous mode [ 762.469980][T14701] veth0_macvtap: entered promiscuous mode [ 762.552818][T14701] veth1_macvtap: entered promiscuous mode [ 762.654199][T14701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.707439][T14701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.718349][T14701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.739361][T14701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.768152][T14701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.878924][T14701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.905751][T14701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.954777][T14701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.008543][T14701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.049298][T14701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.133953][T14701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.180690][T14701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.215700][T14701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.248061][T14701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.274367][T15008] netlink: 'syz.6.2527': attribute type 5 has an invalid length. [ 763.862172][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.890866][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.036597][ T8747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.060039][ T8747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.550282][T15045] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2538'. [ 766.508399][T14361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 766.518615][T14361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 766.527728][T14361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 766.546374][T14361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 766.560419][T14361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 766.568074][T14361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 767.515559][T15058] chnl_net:caif_netlink_parms(): no params data found [ 767.803861][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.833817][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.841301][T15058] bridge_slave_0: entered allmulticast mode [ 767.849104][T15058] bridge_slave_0: entered promiscuous mode [ 767.858614][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.866208][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.873480][T15058] bridge_slave_1: entered allmulticast mode [ 767.895293][T15058] bridge_slave_1: entered promiscuous mode [ 767.972399][T15058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.985558][T15086] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2550'. [ 768.017484][T15058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.074108][T15088] netlink: 'syz.7.2551': attribute type 2 has an invalid length. [ 768.094681][T15088] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2551'. [ 768.129860][T15058] team0: Port device team_slave_0 added [ 768.156219][T15058] team0: Port device team_slave_1 added [ 768.248456][T15058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.265490][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.333946][T15058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.424204][T15058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.474249][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.553408][T15058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.604958][ T5778] Bluetooth: hci3: command tx timeout [ 768.757615][T15058] hsr_slave_0: entered promiscuous mode [ 768.776777][T15058] hsr_slave_1: entered promiscuous mode [ 768.804645][T15058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.813748][T15058] Cannot create hsr debugfs directory [ 769.307235][T15114] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 769.331047][T15058] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.883097][T15058] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.181739][T15058] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.685346][ T5778] Bluetooth: hci3: command tx timeout [ 772.764810][ T5778] Bluetooth: hci3: command tx timeout [ 773.057221][T15058] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.534062][T15058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 773.596420][T15058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 773.655828][T15058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 773.698192][T15058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.961084][T15151] netlink: 'syz.6.2573': attribute type 2 has an invalid length. [ 773.972601][T15151] netlink: 'syz.6.2573': attribute type 8 has an invalid length. [ 773.987083][T15151] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2573'. [ 774.138824][T15058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.190789][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.223685][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.228479][T15158] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2575'. [ 774.230926][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.265260][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.272658][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.616298][T15158] netlink: 'syz.7.2575': attribute type 29 has an invalid length. [ 774.658819][T15158] netlink: 'syz.7.2575': attribute type 29 has an invalid length. [ 774.736301][T15162] netlink: 'syz.7.2575': attribute type 29 has an invalid length. [ 774.845487][ T5778] Bluetooth: hci3: command tx timeout [ 775.157566][T15058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.116393][T15182] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2581'. [ 776.207890][T15058] veth0_vlan: entered promiscuous mode [ 776.242279][T15058] veth1_vlan: entered promiscuous mode [ 776.347939][T15058] veth0_macvtap: entered promiscuous mode [ 776.398002][T15058] veth1_macvtap: entered promiscuous mode [ 776.425744][T15187] netlink: 611 bytes leftover after parsing attributes in process `syz.4.2583'. [ 776.546911][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.611540][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.650234][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.702556][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.745409][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.783912][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.803526][T15058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.900294][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.077979][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.261280][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.314525][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.344582][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.361942][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.385056][T15058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.427260][T15058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.454892][T15058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.463694][T15058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.532846][T15058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.904665][ T8899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.912575][ T8899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.046189][T15207] netlink: 'syz.4.2587': attribute type 29 has an invalid length. [ 778.089550][ T8747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.124109][T15207] netlink: 'syz.4.2587': attribute type 29 has an invalid length. [ 778.134015][ T8747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.138562][T15204] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2587'. [ 778.540797][T15205] netlink: 'syz.4.2587': attribute type 29 has an invalid length. [ 781.933059][T14361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.945056][T14361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.967433][T14361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 782.014268][T14361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 782.064784][T14361] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 782.094671][T14361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 782.406659][T15247] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2599'. [ 782.624707][T15250] netlink: 'syz.5.2600': attribute type 21 has an invalid length. [ 782.656375][T15250] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2600'. [ 782.792268][T15247] netlink: 'syz.6.2599': attribute type 29 has an invalid length. [ 782.931281][T15246] syz.4.2598[15246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.931671][T15246] syz.4.2598[15246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.933175][T15163] bond0: (slave syz_tun): Releasing backup interface [ 783.404935][T15257] netlink: 'syz.5.2602': attribute type 29 has an invalid length. [ 783.424289][T15247] netlink: 'syz.6.2599': attribute type 29 has an invalid length. [ 783.710436][T15257] netlink: 'syz.5.2602': attribute type 29 has an invalid length. [ 783.731823][T15258] netlink: 'syz.5.2602': attribute type 29 has an invalid length. [ 783.870911][T15259] netlink: 'syz.5.2602': attribute type 29 has an invalid length. [ 784.183397][T11433] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.208646][T14361] Bluetooth: hci4: command tx timeout [ 784.526606][T11433] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.128709][T11433] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.297418][T15281] FAULT_INJECTION: forcing a failure. [ 785.297418][T15281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.372984][T15281] CPU: 1 PID: 15281 Comm: syz.5.2609 Not tainted syzkaller #0 [ 785.380519][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.390606][T15281] Call Trace: [ 785.393917][T15281] [ 785.396884][T15281] dump_stack_lvl+0x18c/0x250 [ 785.401609][T15281] ? show_regs_print_info+0x20/0x20 [ 785.406863][T15281] ? load_image+0x420/0x420 [ 785.411512][T15281] ? __might_fault+0xaa/0x120 [ 785.416239][T15281] ? __lock_acquire+0x7d80/0x7d80 [ 785.421585][T15281] should_fail_ex+0x394/0x4c0 [ 785.426330][T15281] _copy_from_user+0x2f/0xe0 [ 785.430981][T15281] __sys_bpf+0x23e/0x890 [ 785.435363][T15281] ? bpf_link_show_fdinfo+0x390/0x390 [ 785.440891][T15281] ? lock_chain_count+0x20/0x20 [ 785.445793][T15281] __x64_sys_bpf+0x7c/0x90 [ 785.450247][T15281] do_syscall_64+0x55/0xb0 [ 785.454798][T15281] ? clear_bhb_loop+0x40/0x90 [ 785.459506][T15281] ? clear_bhb_loop+0x40/0x90 [ 785.464224][T15281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.470159][T15281] RIP: 0033:0x7f96aed9e0d9 [ 785.474611][T15281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.494518][T15281] RSP: 002b:00007f96afbb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 785.502969][T15281] RAX: ffffffffffffffda RBX: 00007f96af026090 RCX: 00007f96aed9e0d9 [ 785.510959][T15281] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 785.518950][T15281] RBP: 00007f96afbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 785.526962][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.534977][T15281] R13: 00007f96af026128 R14: 00007f96af026090 R15: 00007ffd8b9fc8d8 [ 785.543019][T15281] [ 786.287280][T14361] Bluetooth: hci4: command tx timeout [ 786.417559][T11433] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.554539][T15239] chnl_net:caif_netlink_parms(): no params data found [ 787.319014][T15303] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2611'. [ 787.594780][T15239] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.602017][T15239] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.663677][T15306] netlink: 'syz.5.2611': attribute type 29 has an invalid length. [ 787.675302][T15239] bridge_slave_0: entered allmulticast mode [ 787.696412][T15239] bridge_slave_0: entered promiscuous mode [ 787.718657][T15239] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.765208][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.773437][T15239] bridge_slave_1: entered allmulticast mode [ 787.794075][T15239] bridge_slave_1: entered promiscuous mode [ 788.364757][T14361] Bluetooth: hci4: command tx timeout [ 788.727111][T15306] netlink: 'syz.5.2611': attribute type 29 has an invalid length. [ 788.950547][T15239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.009366][T15239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.168998][T15239] team0: Port device team_slave_0 added [ 789.191676][T15239] team0: Port device team_slave_1 added [ 789.271398][T11433] tipc: Left network mode [ 789.400550][T15239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.445838][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.524523][T15239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.587502][T15239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.642020][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.746882][T15239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.459523][T14361] Bluetooth: hci4: command tx timeout [ 791.340379][T15239] hsr_slave_0: entered promiscuous mode [ 791.385165][T15239] hsr_slave_1: entered promiscuous mode [ 791.443749][T15239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.464667][T15239] Cannot create hsr debugfs directory [ 791.586731][T15322] sit0: entered allmulticast mode [ 792.168964][T15326] sit0: entered promiscuous mode [ 793.263762][T15356] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2621'. [ 794.057787][T15356] netlink: 'syz.5.2621': attribute type 29 has an invalid length. [ 794.288631][T15356] netlink: 'syz.5.2621': attribute type 29 has an invalid length. [ 794.779363][T15369] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2630'. [ 795.425546][T15378] netlink: 'syz.4.2630': attribute type 29 has an invalid length. [ 796.094588][T15378] netlink: 'syz.4.2630': attribute type 29 has an invalid length. [ 798.013471][T15239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 798.107051][T15239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 798.194749][T15239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 798.272712][T15239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 800.354266][T15413] sit0: entered allmulticast mode [ 800.472383][T15405] sit0: entered promiscuous mode [ 801.374919][T15419] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2634'. [ 801.474936][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.607562][T15427] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.2635'. [ 801.676838][T15419] bridge_slave_0 (unregistering): left allmulticast mode [ 801.684136][T15419] bridge_slave_0 (unregistering): left promiscuous mode [ 801.715416][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.886684][T15427] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 802.054776][T15429] netlink: 'syz.4.2637': attribute type 10 has an invalid length. [ 802.122313][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.130340][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.269324][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.276667][T15429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.284330][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.291653][T15429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.331819][T15429] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 802.381267][T11433] hsr_slave_0: left promiscuous mode [ 802.392233][T11433] hsr_slave_1: left promiscuous mode [ 802.404280][T11433] hsr0: left allmulticast mode [ 802.432673][T11433] bridge0: port 2(hsr0) entered disabled state [ 802.463898][T11433] bridge_slave_0: left allmulticast mode [ 802.469780][T11433] bridge_slave_0: left promiscuous mode [ 802.479551][T15438] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2641'. [ 802.491098][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.646363][T15439] netlink: 'syz.5.2641': attribute type 29 has an invalid length. [ 803.911482][T11433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.452534][T11433] bond0 (unregistering): Released all slaves [ 804.594765][T15430] netlink: 'syz.4.2637': attribute type 40 has an invalid length. [ 804.671805][T15439] netlink: 'syz.5.2641': attribute type 29 has an invalid length. [ 804.927446][T15443] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2642'. [ 804.936804][T15239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.089961][T15239] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.208103][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.215378][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.278170][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.285450][ T8898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.487884][T15239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.700220][T15443] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 805.776498][T15443] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 806.068694][T15454] netlink: 'syz.5.2644': attribute type 3 has an invalid length. [ 806.072168][T15443] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 806.196921][T15454] netlink: 16795 bytes leftover after parsing attributes in process `syz.5.2644'. [ 806.514201][T15239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.765520][T15471] sit0: entered allmulticast mode [ 807.061788][T15475] sit0: entered promiscuous mode [ 808.468350][T15487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2649'. [ 808.579836][T15487] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.877639][T15501] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2651'. [ 808.964101][T15487] bridge_slave_0 (unregistering): left allmulticast mode [ 809.012709][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.020136][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.029870][T15487] bridge_slave_0 (unregistering): left promiscuous mode [ 809.085370][T15487] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.098082][T15501] netlink: 'syz.6.2651': attribute type 29 has an invalid length. [ 809.257476][T15501] netlink: 'syz.6.2651': attribute type 29 has an invalid length. [ 809.326170][T15502] netlink: 'syz.6.2651': attribute type 29 has an invalid length. [ 809.668069][T15239] veth0_vlan: entered promiscuous mode [ 809.724120][T15239] veth1_vlan: entered promiscuous mode [ 809.873182][T15239] veth0_macvtap: entered promiscuous mode [ 809.893710][T15239] veth1_macvtap: entered promiscuous mode [ 809.996352][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.044713][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.094612][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.134496][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.144390][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.174738][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.195259][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.207267][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.231644][T15239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.286473][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.344642][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.392158][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.454850][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.491008][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.522341][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.542086][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.612656][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.636432][T15239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.678108][T15239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.707260][T15239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.733538][T15239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.774627][T15239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.170216][ T8924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.201456][ T8924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.245143][T15532] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2656'. [ 811.295382][ T8899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.303275][ T8899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.681289][T15546] netlink: 'syz.7.2591': attribute type 29 has an invalid length. [ 811.704850][T15538] netlink: 'syz.5.2656': attribute type 29 has an invalid length. [ 811.713348][T15538] netlink: 'syz.5.2656': attribute type 29 has an invalid length. [ 811.948202][T15532] netlink: 'syz.5.2656': attribute type 29 has an invalid length. [ 812.084241][T15553] netlink: 'syz.4.2659': attribute type 4 has an invalid length. [ 812.244927][T15553] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2659'. [ 812.427983][T15553] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 812.670255][T15562] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2662'. [ 812.982958][T15562] netlink: 'syz.7.2662': attribute type 29 has an invalid length. [ 813.069994][T15562] netlink: 'syz.7.2662': attribute type 29 has an invalid length. [ 813.230540][T15578] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2665'. [ 816.358624][T15613] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2676'. [ 816.440076][T15623] FAULT_INJECTION: forcing a failure. [ 816.440076][T15623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.500675][T15623] CPU: 0 PID: 15623 Comm: syz.4.2679 Not tainted syzkaller #0 [ 816.508232][T15623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.518342][T15623] Call Trace: [ 816.521662][T15623] [ 816.524631][T15623] dump_stack_lvl+0x18c/0x250 [ 816.529372][T15623] ? show_regs_print_info+0x20/0x20 [ 816.534709][T15623] ? load_image+0x420/0x420 [ 816.539256][T15623] ? __lock_acquire+0x7d80/0x7d80 [ 816.544337][T15623] should_fail_ex+0x394/0x4c0 [ 816.549160][T15623] _copy_from_user+0x2f/0xe0 [ 816.553984][T15623] bpf_prog_test_run_skb+0x267/0x18f0 [ 816.559409][T15623] ? __fget_files+0x28/0x460 [ 816.564048][T15623] ? __fget_files+0x3fc/0x460 [ 816.568790][T15623] ? cpu_online+0x60/0x60 [ 816.573170][T15623] bpf_prog_test_run+0x31f/0x390 [ 816.578257][T15623] __sys_bpf+0x49d/0x890 [ 816.582643][T15623] ? bpf_link_show_fdinfo+0x390/0x390 [ 816.588082][T15623] ? lock_chain_count+0x20/0x20 [ 816.593173][T15623] __x64_sys_bpf+0x7c/0x90 [ 816.597729][T15623] do_syscall_64+0x55/0xb0 [ 816.602190][T15623] ? clear_bhb_loop+0x40/0x90 [ 816.607074][T15623] ? clear_bhb_loop+0x40/0x90 [ 816.611879][T15623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.617921][T15623] RIP: 0033:0x7fdd75b9e0d9 [ 816.622472][T15623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.642163][T15623] RSP: 002b:00007fdd73df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.650634][T15623] RAX: ffffffffffffffda RBX: 00007fdd75e25fa0 RCX: 00007fdd75b9e0d9 [ 816.658647][T15623] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 816.666688][T15623] RBP: 00007fdd73df6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.674960][T15623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.682985][T15623] R13: 00007fdd75e26038 R14: 00007fdd75e25fa0 R15: 00007ffeb0360b78 [ 816.691029][T15623] [ 816.801376][T15613] validate_nla: 2 callbacks suppressed [ 816.801417][T15613] netlink: 'syz.6.2676': attribute type 29 has an invalid length. [ 816.993160][T15626] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2680'. [ 817.444381][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.454065][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.463296][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.472521][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.481746][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.491074][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.500298][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.509502][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.518901][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 817.528265][T15632] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 818.835164][T15626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.971455][T15626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.270208][T15626] bond0 (unregistering): Released all slaves [ 819.442944][T15613] netlink: 'syz.6.2676': attribute type 29 has an invalid length. [ 826.379046][T15675] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2694'. [ 826.755270][T15676] netlink: 'syz.4.2694': attribute type 29 has an invalid length. [ 827.499385][T15681] netlink: 'syz.5.2695': attribute type 1 has an invalid length. [ 827.608107][T15681] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2695'. [ 827.705269][T15676] netlink: 'syz.4.2694': attribute type 29 has an invalid length. [ 830.012338][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2704'. [ 830.053984][T15717] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2707'. [ 830.333007][T15717] netlink: 'syz.7.2707': attribute type 29 has an invalid length. [ 830.922185][T15720] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2708'. [ 831.104396][T15717] netlink: 'syz.7.2707': attribute type 29 has an invalid length. [ 831.166906][T15718] netlink: 'syz.7.2707': attribute type 29 has an invalid length. [ 832.138201][T15740] FAULT_INJECTION: forcing a failure. [ 832.138201][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 832.162649][T15740] CPU: 1 PID: 15740 Comm: syz.6.2715 Not tainted syzkaller #0 [ 832.170368][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.180654][T15740] Call Trace: [ 832.183979][T15740] [ 832.186963][T15740] dump_stack_lvl+0x18c/0x250 [ 832.191846][T15740] ? sctp_sendmsg+0x1519/0x27b0 [ 832.196755][T15740] ? ___sys_sendmsg+0x2a6/0x360 [ 832.201660][T15740] ? show_regs_print_info+0x20/0x20 [ 832.206920][T15740] ? load_image+0x420/0x420 [ 832.211676][T15740] should_fail_ex+0x394/0x4c0 [ 832.216415][T15740] should_failslab+0x9/0x20 [ 832.220971][T15740] slab_pre_alloc_hook+0x59/0x300 [ 832.226140][T15740] ? sctp_add_bind_addr+0x8c/0x360 [ 832.231316][T15740] __kmem_cache_alloc_node+0x53/0x250 [ 832.236753][T15740] ? sctp_add_bind_addr+0x8c/0x360 [ 832.242091][T15740] kmalloc_trace+0x2a/0xe0 [ 832.246562][T15740] sctp_add_bind_addr+0x8c/0x360 [ 832.251643][T15740] sctp_copy_local_addr_list+0x31b/0x4e0 [ 832.257500][T15740] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 832.263251][T15740] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 832.269342][T15740] ? sctp_v6_is_any+0x64/0x70 [ 832.274047][T15740] ? sctp_copy_one_addr+0x8c/0x350 [ 832.279194][T15740] sctp_bind_addr_copy+0xb3/0x3c0 [ 832.284264][T15740] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 832.290621][T15740] sctp_connect_new_asoc+0x2f9/0x6a0 [ 832.295925][T15740] ? __sctp_connect+0xd80/0xd80 [ 832.300821][T15740] ? __local_bh_enable_ip+0x13a/0x1c0 [ 832.306216][T15740] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 832.311782][T15740] ? security_sctp_bind_connect+0x89/0xb0 [ 832.317541][T15740] sctp_sendmsg+0x1519/0x27b0 [ 832.322252][T15740] ? sctp_getsockopt+0xb60/0xb60 [ 832.327219][T15740] ? aa_af_perm+0x330/0x330 [ 832.331753][T15740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 832.338327][T15740] ? sock_rps_record_flow+0x19/0x3f0 [ 832.343634][T15740] ? inet_sendmsg+0xce/0x2a0 [ 832.348267][T15740] ? inet_send_prepare+0x250/0x250 [ 832.353403][T15740] ____sys_sendmsg+0x61b/0x980 [ 832.358220][T15740] ? __sys_sendmsg_sock+0x30/0x30 [ 832.363304][T15740] ? __import_iovec+0x5f2/0x850 [ 832.368192][T15740] ? import_iovec+0x73/0xa0 [ 832.372721][T15740] ___sys_sendmsg+0x2a6/0x360 [ 832.377499][T15740] ? get_pid_task+0x20/0x1e0 [ 832.382113][T15740] ? __sys_sendmsg+0x2b0/0x2b0 [ 832.386917][T15740] ? __lock_acquire+0x7d80/0x7d80 [ 832.392007][T15740] __se_sys_sendmsg+0x1d0/0x2c0 [ 832.396908][T15740] ? __x64_sys_sendmsg+0x80/0x80 [ 832.401897][T15740] ? lockdep_hardirqs_on+0x98/0x150 [ 832.407127][T15740] do_syscall_64+0x55/0xb0 [ 832.411566][T15740] ? clear_bhb_loop+0x40/0x90 [ 832.416267][T15740] ? clear_bhb_loop+0x40/0x90 [ 832.420969][T15740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.426884][T15740] RIP: 0033:0x7fae1679e0d9 [ 832.431319][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.451205][T15740] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.459746][T15740] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 832.467739][T15740] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 832.475733][T15740] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 832.483719][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.491708][T15740] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 832.500062][T15740] [ 832.674012][T15746] netlink: 'syz.6.2719': attribute type 10 has an invalid length. [ 832.719817][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.831669][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.839084][T15746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.029544][T15746] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 833.188772][T15753] netlink: 'syz.6.2719': attribute type 40 has an invalid length. [ 834.135049][T15757] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 834.245661][T15762] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2721'. [ 835.256780][T15768] netlink: 'syz.5.2721': attribute type 29 has an invalid length. [ 835.340966][T15768] netlink: 'syz.5.2721': attribute type 29 has an invalid length. [ 835.578602][T15762] netlink: 'syz.5.2721': attribute type 29 has an invalid length. [ 836.689457][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 837.245347][ T8898] wlan1: Trigger new scan to find an IBSS to join [ 838.066748][T15816] netlink: 'syz.7.2741': attribute type 10 has an invalid length. [ 838.416670][T15825] syz.7.2743[15825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 838.416864][T15825] syz.7.2743[15825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 840.225547][ T8898] wlan1: Trigger new scan to find an IBSS to join [ 841.261019][T15863] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2756'. [ 841.344623][T15863] net_ratelimit: 3319 callbacks suppressed [ 841.344644][T15863] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 842.093633][T15883] netlink: 'syz.7.2761': attribute type 10 has an invalid length. [ 842.133987][T15883] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2761'. [ 842.214815][ T3445] wlan1: Creating new IBSS network, BSSID 1e:48:3c:6e:21:1c [ 842.298124][T15882] ref_ctr_offset mismatch. inode: 0x9e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 845.324949][T15951] netlink: 'syz.7.2778': attribute type 4 has an invalid length. [ 849.313950][T15975] netlink: 'syz.6.2788': attribute type 10 has an invalid length. [ 849.348822][T15972] ref_ctr_offset mismatch. inode: 0x202 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 849.362043][T15975] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2788'. [ 851.937406][T16026] netlink: 'syz.4.2802': attribute type 10 has an invalid length. [ 851.968570][T16026] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2802'. [ 852.818972][T16025] ref_ctr_offset mismatch. inode: 0x1b2 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 853.291435][T16045] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2806'. [ 853.753724][T16056] netlink: 21159 bytes leftover after parsing attributes in process `syz.4.2811'. [ 855.827346][T16095] FAULT_INJECTION: forcing a failure. [ 855.827346][T16095] name failslab, interval 1, probability 0, space 0, times 0 [ 855.874372][T16095] CPU: 0 PID: 16095 Comm: syz.5.2824 Not tainted syzkaller #0 [ 855.881963][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.892106][T16095] Call Trace: [ 855.895461][T16095] [ 855.898459][T16095] dump_stack_lvl+0x18c/0x250 [ 855.903256][T16095] ? show_regs_print_info+0x20/0x20 [ 855.908557][T16095] ? load_image+0x420/0x420 [ 855.913160][T16095] ? __might_sleep+0xe0/0xe0 [ 855.917846][T16095] ? __lock_acquire+0x7d80/0x7d80 [ 855.922974][T16095] should_fail_ex+0x394/0x4c0 [ 855.927750][T16095] should_failslab+0x9/0x20 [ 855.932327][T16095] slab_pre_alloc_hook+0x59/0x300 [ 855.937437][T16095] ? __lock_acquire+0x7d80/0x7d80 [ 855.942553][T16095] kmem_cache_alloc_node+0x5e/0x310 [ 855.947864][T16095] ? __alloc_skb+0x103/0x2c0 [ 855.952550][T16095] __alloc_skb+0x103/0x2c0 [ 855.957052][T16095] netlink_sendmsg+0x66a/0xbf0 [ 855.961935][T16095] ? netlink_getsockopt+0x590/0x590 [ 855.967256][T16095] ? apparmor_socket_sendmsg+0x8e/0x330 [ 855.972904][T16095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 855.978534][T16095] ? security_socket_sendmsg+0x80/0xa0 [ 855.984083][T16095] ? netlink_getsockopt+0x590/0x590 [ 855.989363][T16095] ____sys_sendmsg+0x61b/0x980 [ 855.994224][T16095] ? __asan_memset+0x22/0x40 [ 855.998894][T16095] ? __sys_sendmsg_sock+0x30/0x30 [ 856.004068][T16095] ? __import_iovec+0x5f2/0x850 [ 856.009024][T16095] ? import_iovec+0x73/0xa0 [ 856.013770][T16095] ___sys_sendmsg+0x2a6/0x360 [ 856.018554][T16095] ? __sys_sendmsg+0x2b0/0x2b0 [ 856.023472][T16095] ? trace_call_bpf+0xc3/0x6c0 [ 856.028393][T16095] __se_sys_sendmsg+0x1d0/0x2c0 [ 856.033311][T16095] ? perf_trace_preemptirq_template+0x269/0x330 [ 856.039635][T16095] ? __x64_sys_sendmsg+0x80/0x80 [ 856.044734][T16095] ? lockdep_hardirqs_on+0x98/0x150 [ 856.050022][T16095] do_syscall_64+0x55/0xb0 [ 856.054497][T16095] ? clear_bhb_loop+0x40/0x90 [ 856.059232][T16095] ? clear_bhb_loop+0x40/0x90 [ 856.063978][T16095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.069934][T16095] RIP: 0033:0x7f96aed9e0d9 [ 856.074414][T16095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.094079][T16095] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.102561][T16095] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 856.110593][T16095] RDX: 0000000004044000 RSI: 0000200000000040 RDI: 0000000000000005 [ 856.118623][T16095] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 856.126646][T16095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.134670][T16095] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 856.142756][T16095] [ 861.013079][T16140] netlink: 'syz.7.2835': attribute type 2 has an invalid length. [ 861.022756][T16140] netlink: 'syz.7.2835': attribute type 8 has an invalid length. [ 861.055032][T16140] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2835'. [ 861.986107][T16174] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 861.991834][T16174] pim6reg0: ignored: set checksum disabled [ 862.286592][T14361] Bluetooth: hci2: command 0x0406 tx timeout [ 862.459588][T16184] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2851'. [ 862.748138][T16184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.825630][T16184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.876114][T16184] bond0 (unregistering): Released all slaves [ 862.963589][T16185] netlink: 'syz.4.2850': attribute type 10 has an invalid length. [ 862.975527][T16185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2850'. [ 862.987905][T16185] bond0: entered promiscuous mode [ 862.993354][T16185] bond_slave_0: entered promiscuous mode [ 863.000278][T16185] bond_slave_1: entered promiscuous mode [ 863.023834][T16185] bridge0: entered promiscuous mode [ 863.045727][T16185] bridge0: port 3(bond0) entered blocking state [ 863.053890][T16185] bridge0: port 3(bond0) entered disabled state [ 863.067056][T16185] bond0: entered allmulticast mode [ 863.073230][T16185] bond_slave_0: entered allmulticast mode [ 863.081990][T16185] bond_slave_1: entered allmulticast mode [ 863.089147][T16185] bridge0: entered allmulticast mode [ 863.104324][T16185] bond0: left allmulticast mode [ 863.110270][T16185] bond_slave_0: left allmulticast mode [ 863.117479][T16185] bond_slave_1: left allmulticast mode [ 863.123299][T16185] bridge0: left allmulticast mode [ 863.132546][T16185] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 863.186626][ T8924] hsr_slave_0: left promiscuous mode [ 863.206311][ T8924] hsr_slave_1: left promiscuous mode [ 863.216779][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.225974][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.240313][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.251778][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.264214][ T8924] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 863.274171][ T8924] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 863.296935][ T8924] batadv0: left allmulticast mode [ 863.302315][ T8924] batadv0: left promiscuous mode [ 863.308417][ T8924] bridge0: port 3(batadv0) entered disabled state [ 863.323694][ T8924] bridge_slave_1: left allmulticast mode [ 863.332275][ T8924] bridge_slave_1: left promiscuous mode [ 863.339003][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.356724][ T8924] bridge_slave_0: left promiscuous mode [ 863.362912][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.449109][ T8924] veth1_macvtap: left promiscuous mode [ 863.459689][ T8924] veth0_macvtap: left promiscuous mode [ 863.467588][ T8924] veth1_vlan: left promiscuous mode [ 863.473158][ T8924] veth0_vlan: left promiscuous mode [ 864.919331][ T8924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.017219][ T8924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.719452][ T8924] bond0 (unregistering): Released all slaves [ 866.133047][T16201] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2856'. [ 867.158728][T16224] sit0: entered allmulticast mode [ 867.352361][T16219] sit0: entered promiscuous mode [ 867.366792][T16226] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2859'. [ 867.640964][T16226] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2859'. [ 867.745830][T16211] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2859'. [ 867.847865][T16234] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.881263][T16237] FAULT_INJECTION: forcing a failure. [ 867.881263][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 867.914690][T16237] CPU: 1 PID: 16237 Comm: syz.7.2866 Not tainted syzkaller #0 [ 867.922226][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.932663][T16237] Call Trace: [ 867.935983][T16237] [ 867.938955][T16237] dump_stack_lvl+0x18c/0x250 [ 867.943686][T16237] ? show_regs_print_info+0x20/0x20 [ 867.948932][T16237] ? load_image+0x420/0x420 [ 867.953482][T16237] ? __lock_acquire+0x7d80/0x7d80 [ 867.958552][T16237] ? verify_lock_unused+0x140/0x140 [ 867.963809][T16237] should_fail_ex+0x394/0x4c0 [ 867.968637][T16237] should_failslab+0x9/0x20 [ 867.973198][T16237] slab_pre_alloc_hook+0x59/0x300 [ 867.976820][T16241] FAULT_INJECTION: forcing a failure. [ 867.976820][T16241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.978435][T16237] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 867.997021][T16237] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 868.002681][T16237] __kmem_cache_alloc_node+0x53/0x250 [ 868.008087][T16237] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 868.013664][T16237] __kmalloc+0xa7/0x240 [ 868.017864][T16237] bpf_prog_test_run_skb+0x242/0x18f0 [ 868.023306][T16237] ? __fget_files+0x28/0x460 [ 868.027935][T16237] ? __fget_files+0x3fc/0x460 [ 868.032881][T16237] ? cpu_online+0x60/0x60 [ 868.037328][T16237] bpf_prog_test_run+0x31f/0x390 [ 868.042299][T16237] __sys_bpf+0x49d/0x890 [ 868.046574][T16237] ? bpf_link_show_fdinfo+0x390/0x390 [ 868.052000][T16237] ? lock_chain_count+0x20/0x20 [ 868.057079][T16237] __x64_sys_bpf+0x7c/0x90 [ 868.061532][T16237] do_syscall_64+0x55/0xb0 [ 868.065976][T16237] ? clear_bhb_loop+0x40/0x90 [ 868.070769][T16237] ? clear_bhb_loop+0x40/0x90 [ 868.075475][T16237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.081473][T16237] RIP: 0033:0x7f958c19e0d9 [ 868.085906][T16237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.105628][T16237] RSP: 002b:00007f958d035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 868.114153][T16237] RAX: ffffffffffffffda RBX: 00007f958c425fa0 RCX: 00007f958c19e0d9 [ 868.122156][T16237] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 868.130675][T16237] RBP: 00007f958d035090 R08: 0000000000000000 R09: 0000000000000000 [ 868.138713][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.146711][T16237] R13: 00007f958c426038 R14: 00007f958c425fa0 R15: 00007ffd7b556c28 [ 868.154975][T16237] [ 868.181521][T16241] CPU: 1 PID: 16241 Comm: syz.4.2868 Not tainted syzkaller #0 [ 868.189047][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.199296][T16241] Call Trace: [ 868.202597][T16241] [ 868.205728][T16241] dump_stack_lvl+0x18c/0x250 [ 868.210429][T16241] ? show_regs_print_info+0x20/0x20 [ 868.215732][T16241] ? load_image+0x420/0x420 [ 868.220271][T16241] ? __might_fault+0xaa/0x120 [ 868.224960][T16241] ? __lock_acquire+0x7d80/0x7d80 [ 868.230643][T16241] should_fail_ex+0x394/0x4c0 [ 868.235346][T16241] _copy_from_iter+0x1cd/0x1290 [ 868.240300][T16241] ? rep_movs_alternative+0x4a/0x90 [ 868.245522][T16241] ? copyout_mc+0x70/0x70 [ 868.249872][T16241] ? copyout_mc+0x70/0x70 [ 868.254223][T16241] ? __virt_addr_valid+0x10c/0x380 [ 868.259444][T16241] ? page_copy_sane+0x16a/0x270 [ 868.264403][T16241] copy_page_from_iter+0x7b/0x100 [ 868.269459][T16241] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 868.275295][T16241] tun_get_user+0xc84/0x3d70 [ 868.279911][T16241] ? aa_file_perm+0x3e3/0xee0 [ 868.284602][T16241] ? rcu_read_unlock+0xa0/0xa0 [ 868.289561][T16241] ? tun_get+0x1c/0x2e0 [ 868.293735][T16241] ? __lock_acquire+0x7d80/0x7d80 [ 868.298790][T16241] ? tun_get+0x1c/0x2e0 [ 868.302966][T16241] tun_chr_write_iter+0x119/0x200 [ 868.308015][T16241] vfs_write+0x474/0x9a0 [ 868.312284][T16241] ? file_end_write+0x250/0x250 [ 868.317158][T16241] ? __fget_files+0x3fc/0x460 [ 868.321861][T16241] ? __fdget_pos+0x1d8/0x330 [ 868.327157][T16241] ? ksys_write+0x74/0x260 [ 868.331644][T16241] ksys_write+0x151/0x260 [ 868.336025][T16241] ? __ia32_sys_read+0x90/0x90 [ 868.340917][T16241] ? lockdep_hardirqs_on+0x98/0x150 [ 868.346236][T16241] do_syscall_64+0x55/0xb0 [ 868.350774][T16241] ? clear_bhb_loop+0x40/0x90 [ 868.355556][T16241] ? clear_bhb_loop+0x40/0x90 [ 868.360253][T16241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.366167][T16241] RIP: 0033:0x7fdd75b9e0d9 [ 868.370621][T16241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.390334][T16241] RSP: 002b:00007fdd73df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.398801][T16241] RAX: ffffffffffffffda RBX: 00007fdd75e25fa0 RCX: 00007fdd75b9e0d9 [ 868.406789][T16241] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 868.414883][T16241] RBP: 00007fdd73df6090 R08: 0000000000000000 R09: 0000000000000000 [ 868.422953][T16241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.431123][T16241] R13: 00007fdd75e26038 R14: 00007fdd75e25fa0 R15: 00007ffeb0360b78 [ 868.439151][T16241] [ 868.642568][T16243] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2870'. [ 868.900592][T16246] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 868.944643][T16246] pim6reg0: ignored: set checksum disabled [ 869.259150][T16253] FAULT_INJECTION: forcing a failure. [ 869.259150][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 869.272625][T16253] CPU: 0 PID: 16253 Comm: syz.4.2874 Not tainted syzkaller #0 [ 869.280139][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.290315][T16253] Call Trace: [ 869.293593][T16253] [ 869.296537][T16253] dump_stack_lvl+0x18c/0x250 [ 869.301270][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.307486][T16253] ? show_regs_print_info+0x20/0x20 [ 869.312834][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.319052][T16253] should_fail_ex+0x394/0x4c0 [ 869.323794][T16253] should_failslab+0x9/0x20 [ 869.328354][T16253] slab_pre_alloc_hook+0x59/0x300 [ 869.333433][T16253] ? lockdep_hardirqs_on+0x98/0x150 [ 869.338778][T16253] kmem_cache_alloc+0x5a/0x2c0 [ 869.343594][T16253] ? dst_alloc+0x105/0x170 [ 869.348075][T16253] dst_alloc+0x105/0x170 [ 869.352370][T16253] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 869.358587][T16253] ? ip_route_output_key_hash+0x13d/0x330 [ 869.364360][T16253] ip_route_output_key_hash+0x1f3/0x330 [ 869.369973][T16253] ? ip_route_input_rcu+0x3120/0x3120 [ 869.375830][T16253] ? __asan_memset+0x22/0x40 [ 869.380489][T16253] ip_route_output_flow+0x2a/0x150 [ 869.385662][T16253] ip_tunnel_xmit+0x9c2/0x25b0 [ 869.390477][T16253] ? ip_tunnel_xmit+0xa0/0x25b0 [ 869.395485][T16253] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 869.400571][T16253] ? lock_chain_count+0x20/0x20 [ 869.405483][T16253] ? validate_xmit_xfrm+0xbb/0x1340 [ 869.410741][T16253] ? skb_push+0x8e/0xe0 [ 869.414962][T16253] ipgre_xmit+0x7eb/0xb70 [ 869.419449][T16253] dev_hard_start_xmit+0x269/0x790 [ 869.424648][T16253] ? __dev_queue_xmit+0x275/0x3640 [ 869.429821][T16253] __dev_queue_xmit+0x198c/0x3640 [ 869.435100][T16253] ? __dev_queue_xmit+0x275/0x3640 [ 869.440295][T16253] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 869.446339][T16253] ? netdev_core_pick_tx+0x370/0x370 [ 869.451861][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.458061][T16253] ? lockdep_hardirqs_on+0x98/0x150 [ 869.463403][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.469632][T16253] __bpf_tx_skb+0x181/0x260 [ 869.474197][T16253] bpf_clone_redirect+0x315/0x4a0 [ 869.479383][T16253] bpf_prog_208b094576c80b22+0x5e/0x63 [ 869.484978][T16253] ? __static_call_text_end+0x60730/0x60730 [ 869.491097][T16253] ? lockdep_hardirqs_on+0x98/0x150 [ 869.496434][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.502646][T16253] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 869.509115][T16253] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 869.514455][T16253] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 869.520762][T16253] ? ktime_get_real_ts64+0x440/0x440 [ 869.526104][T16253] ? __x64_sys_bpf+0x7c/0x90 [ 869.530750][T16253] ? __local_bh_disable_ip+0x108/0x1a0 [ 869.536345][T16253] ? __cant_sleep+0x220/0x220 [ 869.541069][T16253] ? read_tsc+0x9/0x20 [ 869.545177][T16253] ? ktime_get+0x24b/0x280 [ 869.549651][T16253] ? bpf_test_run+0x174/0x870 [ 869.554372][T16253] bpf_test_run+0x2df/0x870 [ 869.558932][T16253] ? lock_chain_count+0x20/0x20 [ 869.563831][T16253] ? bpf_test_run+0x174/0x870 [ 869.568543][T16253] ? dst_hold+0x70/0x70 [ 869.572727][T16253] ? convert___skb_to_skb+0x3d/0x590 [ 869.578036][T16253] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 869.583458][T16253] ? cpu_online+0x60/0x60 [ 869.587811][T16253] bpf_prog_test_run+0x31f/0x390 [ 869.592771][T16253] __sys_bpf+0x49d/0x890 [ 869.597033][T16253] ? bpf_link_show_fdinfo+0x390/0x390 [ 869.602430][T16253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.608619][T16253] __x64_sys_bpf+0x7c/0x90 [ 869.613060][T16253] do_syscall_64+0x55/0xb0 [ 869.617494][T16253] ? clear_bhb_loop+0x40/0x90 [ 869.622186][T16253] ? clear_bhb_loop+0x40/0x90 [ 869.626881][T16253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.632790][T16253] RIP: 0033:0x7fdd75b9e0d9 [ 869.637227][T16253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.657295][T16253] RSP: 002b:00007fdd73df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 869.665728][T16253] RAX: ffffffffffffffda RBX: 00007fdd75e25fa0 RCX: 00007fdd75b9e0d9 [ 869.673721][T16253] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 869.681709][T16253] RBP: 00007fdd73df6090 R08: 0000000000000000 R09: 0000000000000000 [ 869.689833][T16253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.697845][T16253] R13: 00007fdd75e26038 R14: 00007fdd75e25fa0 R15: 00007ffeb0360b78 [ 869.705875][T16253] [ 870.272816][T16272] IPv6: Can't replace route, no match found [ 870.457474][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.464240][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.746587][T16276] FAULT_INJECTION: forcing a failure. [ 870.746587][T16276] name failslab, interval 1, probability 0, space 0, times 0 [ 870.770964][T16276] CPU: 1 PID: 16276 Comm: syz.5.2883 Not tainted syzkaller #0 [ 870.778504][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.788611][T16276] Call Trace: [ 870.791933][T16276] [ 870.794906][T16276] dump_stack_lvl+0x18c/0x250 [ 870.799647][T16276] ? show_regs_print_info+0x20/0x20 [ 870.804981][T16276] ? load_image+0x420/0x420 [ 870.809529][T16276] ? __kasan_slab_alloc+0x6c/0x80 [ 870.814623][T16276] ? slab_post_alloc_hook+0x86/0x4d0 [ 870.820023][T16276] should_fail_ex+0x394/0x4c0 [ 870.824732][T16276] should_failslab+0x9/0x20 [ 870.829261][T16276] slab_pre_alloc_hook+0x59/0x300 [ 870.834351][T16276] kmem_cache_alloc+0x5a/0x2c0 [ 870.839165][T16276] ? _sctp_make_chunk+0x14b/0x430 [ 870.844341][T16276] _sctp_make_chunk+0x14b/0x430 [ 870.849233][T16276] sctp_make_cookie_echo+0x80/0x330 [ 870.854469][T16276] sctp_do_sm+0x5fc/0x5af0 [ 870.858933][T16276] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 870.864880][T16276] ? skb_pull+0xb9/0x1c0 [ 870.869262][T16276] ? sctp_inq_pop+0xc32/0x1030 [ 870.874092][T16276] ? read_tsc+0x9/0x20 [ 870.878212][T16276] sctp_assoc_bh_rcv+0x3f2/0x630 [ 870.883181][T16276] sctp_backlog_rcv+0x15c/0x360 [ 870.888051][T16276] __release_sock+0x1ea/0x460 [ 870.892755][T16276] release_sock+0x5f/0x1c0 [ 870.897190][T16276] sctp_sendmsg+0x1b46/0x27b0 [ 870.901895][T16276] ? sctp_getsockopt+0xb60/0xb60 [ 870.906857][T16276] ? aa_af_perm+0x330/0x330 [ 870.911405][T16276] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 870.917845][T16276] ? sock_rps_record_flow+0x19/0x3f0 [ 870.923156][T16276] ? inet_sendmsg+0x7e/0x2a0 [ 870.927764][T16276] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 870.933070][T16276] ? inet_send_prepare+0x250/0x250 [ 870.938205][T16276] ____sys_sendmsg+0x61b/0x980 [ 870.942998][T16276] ? __asan_memset+0x22/0x40 [ 870.947612][T16276] ? __sys_sendmsg_sock+0x30/0x30 [ 870.952653][T16276] ? __import_iovec+0x5f2/0x850 [ 870.957533][T16276] ? import_iovec+0x73/0xa0 [ 870.962059][T16276] ___sys_sendmsg+0x2a6/0x360 [ 870.966762][T16276] ? __sys_sendmsg+0x2b0/0x2b0 [ 870.971565][T16276] ? __lock_acquire+0x7d80/0x7d80 [ 870.976637][T16276] __se_sys_sendmsg+0x1d0/0x2c0 [ 870.981543][T16276] ? __x64_sys_sendmsg+0x80/0x80 [ 870.986623][T16276] ? lockdep_hardirqs_on+0x98/0x150 [ 870.991954][T16276] do_syscall_64+0x55/0xb0 [ 870.996400][T16276] ? clear_bhb_loop+0x40/0x90 [ 871.001095][T16276] ? clear_bhb_loop+0x40/0x90 [ 871.005793][T16276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.011797][T16276] RIP: 0033:0x7f96aed9e0d9 [ 871.016235][T16276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.035968][T16276] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.044497][T16276] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 871.052575][T16276] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 871.060582][T16276] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 871.068566][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.076557][T16276] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 871.084645][T16276] [ 871.514596][T16291] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.2887'. [ 871.723115][T16295] netlink: 'syz.5.2887': attribute type 10 has an invalid length. [ 871.739090][T16295] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2887'. [ 872.277523][T16317] netlink: 'syz.7.2898': attribute type 21 has an invalid length. [ 872.300654][T16317] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2898'. [ 872.350080][T16315] netlink: 'syz.4.2897': attribute type 10 has an invalid length. [ 872.352007][T16317] netlink: 'syz.7.2898': attribute type 3 has an invalid length. [ 872.437833][T16317] netlink: 'syz.7.2898': attribute type 6 has an invalid length. [ 872.465071][T16317] netlink: 144448 bytes leftover after parsing attributes in process `syz.7.2898'. [ 873.061241][T16315] team0 (unregistering): Port device team_slave_0 removed [ 873.139282][T16315] team0 (unregistering): Port device team_slave_1 removed [ 875.401841][T16361] delete_channel: no stack [ 875.428035][T16361] delete_channel: no stack [ 875.780268][T16351] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2909'. [ 875.905355][T16351] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2909'. [ 875.928870][T16352] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2909'. [ 876.961446][T16390] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 877.409859][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.417622][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.423659][T16393] netlink: 'syz.4.2925': attribute type 40 has an invalid length. [ 878.451764][T16398] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2928'. [ 878.464847][T16399] syzkaller0: entered promiscuous mode [ 878.470394][T16399] syzkaller0: entered allmulticast mode [ 878.713252][T16404] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.2929'. [ 878.724339][T16404] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.2929'. [ 878.771676][T16404] tipc: Started in network mode [ 878.800315][T16404] tipc: Node identity b, cluster identity 57 [ 878.842609][T16404] tipc: Node number set to 11 [ 878.977689][T16408] netlink: 'syz.7.2930': attribute type 10 has an invalid length. [ 879.191714][T16414] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.2932'. [ 879.350411][T16408] team0 (unregistering): Port device team_slave_0 removed [ 879.447782][T16408] team0 (unregistering): Port device team_slave_1 removed [ 880.086067][T16425] netlink: 'syz.6.2932': attribute type 29 has an invalid length. [ 880.115222][T16425] netlink: 'syz.6.2932': attribute type 29 has an invalid length. [ 880.425311][T16425] netlink: 'syz.6.2932': attribute type 29 has an invalid length. [ 880.517543][T16431] netlink: 'syz.5.2939': attribute type 10 has an invalid length. [ 880.542590][T16431] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.629630][T16431] netlink: 'syz.5.2939': attribute type 40 has an invalid length. [ 880.938877][T16443] netlink: 'syz.5.2946': attribute type 13 has an invalid length. [ 880.974272][T16443] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2946'. [ 881.749196][T16458] netlink: 'syz.5.2950': attribute type 3 has an invalid length. [ 881.791863][T16458] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2950'. [ 882.212003][T16463] netlink: 'syz.5.2950': attribute type 39 has an invalid length. [ 882.629406][T16467] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2952'. [ 882.899073][T16467] netlink: 'syz.4.2952': attribute type 29 has an invalid length. [ 882.966675][T16467] netlink: 'syz.4.2952': attribute type 29 has an invalid length. [ 883.042667][T16470] netlink: 'syz.4.2952': attribute type 29 has an invalid length. [ 883.298566][T16480] FAULT_INJECTION: forcing a failure. [ 883.298566][T16480] name failslab, interval 1, probability 0, space 0, times 0 [ 883.330835][T16480] CPU: 1 PID: 16480 Comm: syz.7.2957 Not tainted syzkaller #0 [ 883.338388][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.348490][T16480] Call Trace: [ 883.351817][T16480] [ 883.354786][T16480] dump_stack_lvl+0x18c/0x250 [ 883.359528][T16480] ? show_regs_print_info+0x20/0x20 [ 883.364793][T16480] ? load_image+0x420/0x420 [ 883.369367][T16480] should_fail_ex+0x394/0x4c0 [ 883.374105][T16480] should_failslab+0x9/0x20 [ 883.378661][T16480] slab_pre_alloc_hook+0x59/0x300 [ 883.383752][T16480] kmem_cache_alloc+0x5a/0x2c0 [ 883.388582][T16480] ? __nf_conntrack_alloc+0x93/0x370 [ 883.394038][T16480] __nf_conntrack_alloc+0x93/0x370 [ 883.399218][T16480] init_conntrack+0x166/0xe20 [ 883.403960][T16480] ? early_drop+0x7f0/0x7f0 [ 883.408536][T16480] ? nf_conntrack_find_get+0x670/0x670 [ 883.414061][T16480] ? __local_bh_enable_ip+0x13a/0x1c0 [ 883.419611][T16480] ? __siphash_unaligned+0x25c/0x3d0 [ 883.425052][T16480] nf_conntrack_in+0xc29/0x15b0 [ 883.429994][T16480] ? nf_ct_pernet+0x270/0x270 [ 883.434736][T16480] ? ipt_do_table+0x2c5/0x15c0 [ 883.439573][T16480] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 883.445091][T16480] ? kasan_quarantine_put+0xd8/0x220 [ 883.450458][T16480] ? ipv4_conntrack_local+0x123/0x200 [ 883.455894][T16480] ? ipv4_conntrack_in+0x20/0x20 [ 883.460890][T16480] nf_hook_slow+0xbd/0x200 [ 883.465376][T16480] ? nf_hook+0x390/0x390 [ 883.469679][T16480] nf_hook+0x228/0x390 [ 883.473802][T16480] ? nf_hook+0xa2/0x390 [ 883.478003][T16480] ? __ip_local_out+0x5f0/0x5f0 [ 883.482909][T16480] ? nf_hook+0x390/0x390 [ 883.487211][T16480] ? ip_fast_csum+0x1ee/0x2b0 [ 883.491960][T16480] __ip_local_out+0x4db/0x5f0 [ 883.496696][T16480] ? nf_hook+0x390/0x390 [ 883.501012][T16480] ip_send_skb+0x4c/0x1d0 [ 883.505410][T16480] raw_sendmsg+0x15de/0x1ba0 [ 883.510088][T16480] ? compat_raw_ioctl+0x70/0x70 [ 883.515007][T16480] ? aa_sk_perm+0x83c/0x970 [ 883.519591][T16480] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 883.526066][T16480] ? aa_sock_msg_perm+0x94/0x150 [ 883.531150][T16480] ? sock_rps_record_flow+0x19/0x3f0 [ 883.536502][T16480] ? inet_sendmsg+0x7e/0x2a0 [ 883.541151][T16480] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 883.546576][T16480] ? inet_send_prepare+0x250/0x250 [ 883.551741][T16480] ____sys_sendmsg+0x61b/0x980 [ 883.556562][T16480] ? __sys_sendmsg_sock+0x30/0x30 [ 883.561633][T16480] ? __import_iovec+0x3fa/0x850 [ 883.566556][T16480] ? import_iovec+0x73/0xa0 [ 883.571207][T16480] ___sys_sendmsg+0x2a6/0x360 [ 883.575931][T16480] ? get_pid_task+0x20/0x1e0 [ 883.580583][T16480] ? __sys_sendmsg+0x2b0/0x2b0 [ 883.585426][T16480] ? __lock_acquire+0x7d80/0x7d80 [ 883.590628][T16480] __se_sys_sendmsg+0x1d0/0x2c0 [ 883.595534][T16480] ? __x64_sys_sendmsg+0x80/0x80 [ 883.600636][T16480] ? lockdep_hardirqs_on+0x98/0x150 [ 883.605896][T16480] do_syscall_64+0x55/0xb0 [ 883.610448][T16480] ? clear_bhb_loop+0x40/0x90 [ 883.615185][T16480] ? clear_bhb_loop+0x40/0x90 [ 883.619915][T16480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.625949][T16480] RIP: 0033:0x7f958c19e0d9 [ 883.630511][T16480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.650179][T16480] RSP: 002b:00007f958d035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.658662][T16480] RAX: ffffffffffffffda RBX: 00007f958c425fa0 RCX: 00007f958c19e0d9 [ 883.666688][T16480] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 883.674714][T16480] RBP: 00007f958d035090 R08: 0000000000000000 R09: 0000000000000000 [ 883.682736][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 883.690756][T16480] R13: 00007f958c426038 R14: 00007f958c425fa0 R15: 00007ffd7b556c28 [ 883.698799][T16480] [ 885.384123][T16512] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.2966'. [ 886.209848][T16522] netlink: 'syz.7.2966': attribute type 29 has an invalid length. [ 886.476913][T16522] netlink: 'syz.7.2966': attribute type 29 has an invalid length. [ 886.563709][T16512] netlink: 'syz.7.2966': attribute type 29 has an invalid length. [ 887.257308][T16537] netlink: 'syz.7.2972': attribute type 10 has an invalid length. [ 887.483842][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.491932][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.892971][T16545] netlink: 'syz.7.2972': attribute type 40 has an invalid length. [ 888.234107][T16542] netlink: 'syz.6.2971': attribute type 10 has an invalid length. [ 888.742445][T16542] team0 (unregistering): Port device team_slave_0 removed [ 888.824382][T16542] team0 (unregistering): Port device team_slave_1 removed [ 888.978772][T16557] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 889.067165][T16557] bridge_slave_1: left allmulticast mode [ 889.084891][T16557] bridge_slave_1: left promiscuous mode [ 889.107622][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.179663][T16557] bridge_slave_1: entered promiscuous mode [ 889.208499][T16560] netlink: 'syz.6.2980': attribute type 3 has an invalid length. [ 889.230843][T16557] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 889.235057][T16560] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2980'. [ 889.359225][T16563] veth0_vlan: left promiscuous mode [ 889.670272][T16560] netlink: 'syz.6.2980': attribute type 39 has an invalid length. [ 892.109130][T16609] netlink: 'syz.6.2995': attribute type 10 has an invalid length. [ 892.161198][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.948715][T16610] netlink: 'syz.6.2995': attribute type 40 has an invalid length. [ 893.004940][T14361] Bluetooth: hci3: command 0x0406 tx timeout [ 894.005877][T16620] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.2998'. [ 894.105385][T16620] netlink: 'syz.6.2998': attribute type 29 has an invalid length. [ 894.163560][T16620] netlink: 'syz.6.2998': attribute type 29 has an invalid length. [ 894.359767][T16620] netlink: 'syz.6.2998': attribute type 29 has an invalid length. [ 896.461908][T16647] netlink: 'syz.6.3005': attribute type 21 has an invalid length. [ 896.513080][T16647] netlink: 'syz.6.3005': attribute type 1 has an invalid length. [ 896.827486][T16662] FAULT_INJECTION: forcing a failure. [ 896.827486][T16662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.070962][T16662] CPU: 0 PID: 16662 Comm: syz.4.3009 Not tainted syzkaller #0 [ 897.078515][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.088623][T16662] Call Trace: [ 897.091937][T16662] [ 897.094906][T16662] dump_stack_lvl+0x18c/0x250 [ 897.099643][T16662] ? show_regs_print_info+0x20/0x20 [ 897.104895][T16662] ? load_image+0x420/0x420 [ 897.109461][T16662] ? __might_fault+0xaa/0x120 [ 897.114187][T16662] ? __lock_acquire+0x7d80/0x7d80 [ 897.119269][T16662] ? __virt_addr_valid+0x10c/0x380 [ 897.124437][T16662] should_fail_ex+0x394/0x4c0 [ 897.129354][T16662] _copy_from_user+0x2f/0xe0 [ 897.134404][T16662] ____sys_sendmsg+0x329/0x980 [ 897.139370][T16662] ? __sys_sendmsg_sock+0x30/0x30 [ 897.144454][T16662] ? __import_iovec+0x3fa/0x850 [ 897.149378][T16662] ? import_iovec+0x73/0xa0 [ 897.153949][T16662] ___sys_sendmsg+0x2a6/0x360 [ 897.155727][T16668] netlink: 'syz.7.3010': attribute type 64 has an invalid length. [ 897.158760][T16662] ? __sys_sendmsg+0x2b0/0x2b0 [ 897.158819][T16662] ? trace_call_bpf+0xc3/0x6c0 [ 897.176488][T16662] __se_sys_sendmsg+0x1d0/0x2c0 [ 897.181395][T16662] ? perf_trace_preemptirq_template+0x269/0x330 [ 897.187878][T16662] ? __x64_sys_sendmsg+0x80/0x80 [ 897.192899][T16662] ? lockdep_hardirqs_on+0x98/0x150 [ 897.198207][T16662] do_syscall_64+0x55/0xb0 [ 897.202679][T16662] ? clear_bhb_loop+0x40/0x90 [ 897.207495][T16662] ? clear_bhb_loop+0x40/0x90 [ 897.212227][T16662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.218164][T16662] RIP: 0033:0x7fdd75b9e0d9 [ 897.222625][T16662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.242256][T16662] RSP: 002b:00007fdd73dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.250782][T16662] RAX: ffffffffffffffda RBX: 00007fdd75e26090 RCX: 00007fdd75b9e0d9 [ 897.258770][T16662] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 000000000000000d [ 897.266758][T16662] RBP: 00007fdd73dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 897.274745][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.282727][T16662] R13: 00007fdd75e26128 R14: 00007fdd75e26090 R15: 00007ffeb0360b78 [ 897.290752][T16662] [ 897.510535][T16671] netlink: 'syz.5.3012': attribute type 21 has an invalid length. [ 897.544182][T16671] netlink: 'syz.5.3012': attribute type 1 has an invalid length. [ 897.794108][T16673] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.3014'. [ 898.105383][T16679] netlink: 'syz.7.3014': attribute type 29 has an invalid length. [ 898.253509][T16679] netlink: 'syz.7.3014': attribute type 29 has an invalid length. [ 898.341520][T16686] netlink: 'syz.7.3014': attribute type 29 has an invalid length. [ 899.633053][T16702] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3024'. [ 899.707637][ T5778] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 901.121870][T16719] netlink: 'syz.6.3028': attribute type 10 has an invalid length. [ 901.853272][T16727] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.3031'. [ 902.054378][T16728] netlink: 'syz.7.3031': attribute type 29 has an invalid length. [ 902.139266][T16728] netlink: 'syz.7.3031': attribute type 29 has an invalid length. [ 903.466821][T16727] netlink: 'syz.7.3031': attribute type 29 has an invalid length. [ 904.142425][T16753] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 905.975850][T16770] : renamed from bond_slave_0 (while UP) [ 907.579290][T16780] FAULT_INJECTION: forcing a failure. [ 907.579290][T16780] name failslab, interval 1, probability 0, space 0, times 0 [ 907.624643][T16780] CPU: 1 PID: 16780 Comm: syz.5.3048 Not tainted syzkaller #0 [ 907.632275][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.642394][T16780] Call Trace: [ 907.645721][T16780] [ 907.648692][T16780] dump_stack_lvl+0x18c/0x250 [ 907.653436][T16780] ? sctp_sendmsg+0x1519/0x27b0 [ 907.658439][T16780] ? ___sys_sendmsg+0x2a6/0x360 [ 907.663347][T16780] ? show_regs_print_info+0x20/0x20 [ 907.668596][T16780] ? load_image+0x420/0x420 [ 907.673172][T16780] should_fail_ex+0x394/0x4c0 [ 907.677914][T16780] should_failslab+0x9/0x20 [ 907.682482][T16780] slab_pre_alloc_hook+0x59/0x300 [ 907.687602][T16780] ? sctp_add_bind_addr+0x8c/0x360 [ 907.692768][T16780] __kmem_cache_alloc_node+0x53/0x250 [ 907.698201][T16780] ? sctp_add_bind_addr+0x8c/0x360 [ 907.703363][T16780] kmalloc_trace+0x2a/0xe0 [ 907.707868][T16780] sctp_add_bind_addr+0x8c/0x360 [ 907.712967][T16780] sctp_copy_local_addr_list+0x31b/0x4e0 [ 907.718652][T16780] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 907.724683][T16780] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 907.729711][T16782] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.3050'. [ 907.730779][T16780] ? sctp_v6_is_any+0x64/0x70 [ 907.730863][T16780] ? sctp_copy_one_addr+0x8c/0x350 [ 907.730894][T16780] sctp_bind_addr_copy+0xb3/0x3c0 [ 907.754970][T16780] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 907.761325][T16780] sctp_connect_new_asoc+0x2f9/0x6a0 [ 907.766642][T16780] ? __sctp_connect+0xd80/0xd80 [ 907.771529][T16780] ? __local_bh_enable_ip+0x13a/0x1c0 [ 907.776947][T16780] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 907.782525][T16780] ? security_sctp_bind_connect+0x89/0xb0 [ 907.788297][T16780] sctp_sendmsg+0x1519/0x27b0 [ 907.793041][T16780] ? sctp_getsockopt+0xb60/0xb60 [ 907.798015][T16780] ? aa_af_perm+0x330/0x330 [ 907.802571][T16780] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 907.809022][T16780] ? sock_rps_record_flow+0x19/0x3f0 [ 907.814344][T16780] ? inet_sendmsg+0xce/0x2a0 [ 907.818959][T16780] ? inet_send_prepare+0x250/0x250 [ 907.824361][T16780] ____sys_sendmsg+0x61b/0x980 [ 907.829276][T16780] ? __sys_sendmsg_sock+0x30/0x30 [ 907.834318][T16780] ? __import_iovec+0x5f2/0x850 [ 907.839210][T16780] ? import_iovec+0x73/0xa0 [ 907.843744][T16780] ___sys_sendmsg+0x2a6/0x360 [ 907.848434][T16780] ? get_pid_task+0x20/0x1e0 [ 907.853048][T16780] ? __sys_sendmsg+0x2b0/0x2b0 [ 907.857851][T16780] ? __lock_acquire+0x7d80/0x7d80 [ 907.862918][T16780] __se_sys_sendmsg+0x1d0/0x2c0 [ 907.867787][T16780] ? __x64_sys_sendmsg+0x80/0x80 [ 907.872759][T16780] ? lockdep_hardirqs_on+0x98/0x150 [ 907.878068][T16780] do_syscall_64+0x55/0xb0 [ 907.882502][T16780] ? clear_bhb_loop+0x40/0x90 [ 907.887200][T16780] ? clear_bhb_loop+0x40/0x90 [ 907.891907][T16780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.897849][T16780] RIP: 0033:0x7f96aed9e0d9 [ 907.902298][T16780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.921931][T16780] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.930369][T16780] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 907.938372][T16780] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 907.946540][T16780] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 907.954533][T16780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.962600][T16780] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 907.970608][T16780] [ 908.364648][T14361] Bluetooth: hci4: command 0x0406 tx timeout [ 908.865119][T16785] netlink: 'syz.6.3050': attribute type 29 has an invalid length. [ 908.873414][T16785] netlink: 'syz.6.3050': attribute type 29 has an invalid length. [ 909.016407][T16790] FAULT_INJECTION: forcing a failure. [ 909.016407][T16790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.065664][T16785] netlink: 'syz.6.3050': attribute type 29 has an invalid length. [ 909.073658][T16790] CPU: 1 PID: 16790 Comm: syz.5.3051 Not tainted syzkaller #0 [ 909.081173][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.091276][T16790] Call Trace: [ 909.094612][T16790] [ 909.097586][T16790] dump_stack_lvl+0x18c/0x250 [ 909.102319][T16790] ? show_regs_print_info+0x20/0x20 [ 909.107571][T16790] ? load_image+0x420/0x420 [ 909.112126][T16790] ? __might_fault+0xaa/0x120 [ 909.116852][T16790] ? __lock_acquire+0x7d80/0x7d80 [ 909.121935][T16790] should_fail_ex+0x394/0x4c0 [ 909.126670][T16790] _copy_to_iter+0x1ce/0x1110 [ 909.131459][T16790] ? __lock_acquire+0x7d80/0x7d80 [ 909.136532][T16790] ? _raw_spin_unlock+0x40/0x40 [ 909.141401][T16790] ? remove_wait_queue+0x33/0x120 [ 909.146453][T16790] ? iov_iter_init+0x1e0/0x1e0 [ 909.151258][T16790] ? __virt_addr_valid+0x10c/0x380 [ 909.156412][T16790] ? __virt_addr_valid+0x10c/0x380 [ 909.161548][T16790] ? __check_object_size+0x4fc/0xa40 [ 909.166858][T16790] __skb_datagram_iter+0xdb/0x780 [ 909.171919][T16790] ? wait_woken+0x180/0x180 [ 909.176454][T16790] ? skb_copy_datagram_iter+0x200/0x200 [ 909.182031][T16790] skb_copy_datagram_iter+0xb1/0x200 [ 909.187345][T16790] tipc_recvstream+0x6f6/0xe70 [ 909.192245][T16790] ? tipc_sendstream+0x70/0x70 [ 909.197040][T16790] ____sys_recvmsg+0x2bd/0x5d0 [ 909.201924][T16790] ? __sys_recvmsg_sock+0x50/0x50 [ 909.207090][T16790] ? import_iovec+0x73/0xa0 [ 909.211621][T16790] ___sys_recvmsg+0x214/0x590 [ 909.216498][T16790] ? __sys_recvmsg+0x2a0/0x2a0 [ 909.221375][T16790] ? ksys_write+0x1d2/0x260 [ 909.225919][T16790] ? __fget_files+0x3fc/0x460 [ 909.230633][T16790] __x64_sys_recvmsg+0x21e/0x2f0 [ 909.235593][T16790] ? ___sys_recvmsg+0x590/0x590 [ 909.240486][T16790] ? lockdep_hardirqs_on+0x98/0x150 [ 909.245715][T16790] do_syscall_64+0x55/0xb0 [ 909.250150][T16790] ? clear_bhb_loop+0x40/0x90 [ 909.254843][T16790] ? clear_bhb_loop+0x40/0x90 [ 909.259566][T16790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.265477][T16790] RIP: 0033:0x7f96aed9e0d9 [ 909.269909][T16790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.289644][T16790] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 909.298078][T16790] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 909.306247][T16790] RDX: 0000000000000100 RSI: 0000200000000400 RDI: 0000000000000004 [ 909.314412][T16790] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 909.322497][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.330483][T16790] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 909.338487][T16790] [ 909.402140][T16796] netlink: 'syz.4.3052': attribute type 10 has an invalid length. [ 910.908434][T16816] netlink: 'syz.5.3058': attribute type 10 has an invalid length. [ 911.018178][T16818] netlink: 'syz.6.3059': attribute type 29 has an invalid length. [ 911.055036][T16818] netlink: 'syz.6.3059': attribute type 29 has an invalid length. [ 911.724570][T16827] netlink: 209588 bytes leftover after parsing attributes in process `syz.6.3063'. [ 913.466018][T16854] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3071'. [ 913.492514][T16854] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 914.231608][T16857] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3072'. [ 914.808456][T16869] netlink: 'syz.5.3083': attribute type 21 has an invalid length. [ 916.067372][T16887] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.3082'. [ 916.431416][T16887] netlink: 'syz.5.3082': attribute type 29 has an invalid length. [ 916.505003][T16887] netlink: 'syz.5.3082': attribute type 29 has an invalid length. [ 916.535839][T16892] netlink: 'syz.5.3082': attribute type 29 has an invalid length. [ 918.314721][T16913] netlink: 'syz.7.3088': attribute type 10 has an invalid length. [ 919.813315][T16931] netlink: 16386 bytes leftover after parsing attributes in process `syz.7.3094'. [ 921.173358][T16931] netlink: 'syz.7.3094': attribute type 29 has an invalid length. [ 921.316856][T16931] netlink: 'syz.7.3094': attribute type 29 has an invalid length. [ 921.376569][T16949] netlink: 'syz.7.3094': attribute type 29 has an invalid length. [ 921.434014][T16959] netlink: 'syz.6.3103': attribute type 4 has an invalid length. [ 921.577407][T16958] netlink: 'syz.5.3102': attribute type 10 has an invalid length. [ 922.548330][T16979] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3108'. [ 923.053166][T16958] team0: Port device geneve1 added [ 923.064803][T16975] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3108'. [ 924.148163][T17005] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3120'. [ 924.169591][T17005] : renamed from caif0 [ 924.212358][T17005] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 924.607150][T17011] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.3114'. [ 924.918648][T17011] netlink: 'syz.5.3114': attribute type 29 has an invalid length. [ 925.116022][T17011] netlink: 'syz.5.3114': attribute type 29 has an invalid length. [ 925.347845][T17023] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3117'. [ 925.474542][T17013] netlink: 'syz.5.3114': attribute type 29 has an invalid length. [ 926.598431][T17041] netlink: 'syz.7.3124': attribute type 10 has an invalid length. [ 926.606913][T17039] FAULT_INJECTION: forcing a failure. [ 926.606913][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 926.624430][T17039] CPU: 1 PID: 17039 Comm: syz.6.3125 Not tainted syzkaller #0 [ 926.632104][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.642211][T17039] Call Trace: [ 926.645615][T17039] [ 926.648608][T17039] dump_stack_lvl+0x18c/0x250 [ 926.653360][T17039] ? show_regs_print_info+0x20/0x20 [ 926.658617][T17039] ? load_image+0x420/0x420 [ 926.663189][T17039] should_fail_ex+0x394/0x4c0 [ 926.667952][T17039] should_failslab+0x9/0x20 [ 926.672644][T17039] slab_pre_alloc_hook+0x59/0x300 [ 926.677766][T17039] kmem_cache_alloc+0x5a/0x2c0 [ 926.682709][T17039] ? radix_tree_node_alloc+0x7e/0x3a0 [ 926.688152][T17039] radix_tree_node_alloc+0x7e/0x3a0 [ 926.693417][T17039] idr_get_free+0x28f/0xa10 [ 926.698002][T17039] idr_alloc_cyclic+0x28a/0x610 [ 926.703276][T17039] ? idr_alloc+0x2e0/0x2e0 [ 926.707746][T17039] ? do_raw_spin_lock+0x11f/0x2b0 [ 926.712863][T17039] ? bpf_map_alloc_id+0x21/0xd0 [ 926.717771][T17039] bpf_map_alloc_id+0x40/0xd0 [ 926.722520][T17039] map_create+0xe24/0x12f0 [ 926.726998][T17039] __sys_bpf+0x651/0x890 [ 926.731311][T17039] ? bpf_link_show_fdinfo+0x390/0x390 [ 926.736722][T17039] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.742949][T17039] __x64_sys_bpf+0x7c/0x90 [ 926.747383][T17039] do_syscall_64+0x55/0xb0 [ 926.751837][T17039] ? clear_bhb_loop+0x40/0x90 [ 926.756532][T17039] ? clear_bhb_loop+0x40/0x90 [ 926.761490][T17039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.767403][T17039] RIP: 0033:0x7fae1679e0d9 [ 926.771842][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.791663][T17039] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.800188][T17039] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 926.808180][T17039] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 926.816171][T17039] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 926.824157][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.832230][T17039] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 926.840238][T17039] [ 928.487368][T17055] netlink: 16386 bytes leftover after parsing attributes in process `syz.6.3130'. [ 928.809572][T17055] netlink: 'syz.6.3130': attribute type 29 has an invalid length. [ 928.860605][T17055] netlink: 'syz.6.3130': attribute type 29 has an invalid length. [ 928.941236][T17059] netlink: 'syz.6.3130': attribute type 29 has an invalid length. [ 929.912467][T17068] netlink: 'syz.6.3132': attribute type 10 has an invalid length. [ 930.007422][T17068] netlink: 'syz.6.3132': attribute type 40 has an invalid length. [ 931.185413][T17086] netlink: 16386 bytes leftover after parsing attributes in process `syz.7.3141'. [ 931.328246][T17086] netlink: 'syz.7.3141': attribute type 29 has an invalid length. [ 931.505912][T17086] netlink: 'syz.7.3141': attribute type 29 has an invalid length. [ 931.845512][T17089] netlink: 'syz.7.3141': attribute type 29 has an invalid length. [ 931.958144][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.967752][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.930639][T17113] netlink: 'syz.6.3148': attribute type 10 has an invalid length. [ 933.014678][T17114] ref_ctr_offset mismatch. inode: 0xce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 933.026160][T17108] netlink: 'syz.6.3148': attribute type 40 has an invalid length. [ 933.101468][T17116] netlink: 'syz.5.3149': attribute type 29 has an invalid length. [ 933.125736][T17116] netlink: 'syz.5.3149': attribute type 29 has an invalid length. [ 933.156744][T17116] netlink: 'syz.5.3149': attribute type 29 has an invalid length. [ 933.185714][T17116] netlink: 'syz.5.3149': attribute type 29 has an invalid length. [ 933.704338][T17106] delete_channel: no stack [ 933.992199][T17123] netlink: 'syz.5.3152': attribute type 2 has an invalid length. [ 934.010294][T17123] netlink: 119 bytes leftover after parsing attributes in process `syz.5.3152'. [ 934.480123][T17127] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.3154'. [ 934.914747][T17133] netlink: 'syz.5.3156': attribute type 49 has an invalid length. [ 935.229127][T17139] netlink: 'syz.4.3154': attribute type 29 has an invalid length. [ 937.648909][T17157] FAULT_INJECTION: forcing a failure. [ 937.648909][T17157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.194452][T17157] CPU: 0 PID: 17157 Comm: syz.7.3160 Not tainted syzkaller #0 [ 939.202966][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.213083][T17157] Call Trace: [ 939.216374][T17157] [ 939.219307][T17157] dump_stack_lvl+0x18c/0x250 [ 939.224016][T17157] ? show_regs_print_info+0x20/0x20 [ 939.229222][T17157] ? load_image+0x420/0x420 [ 939.233900][T17157] ? __might_fault+0xaa/0x120 [ 939.238579][T17157] ? __lock_acquire+0x7d80/0x7d80 [ 939.243785][T17157] should_fail_ex+0x394/0x4c0 [ 939.248488][T17157] _copy_from_user+0x2f/0xe0 [ 939.253079][T17157] kstrtouint_from_user+0xde/0x170 [ 939.258304][T17157] ? kstrtol_from_user+0x190/0x190 [ 939.263570][T17157] proc_fail_nth_write+0x8f/0x250 [ 939.268683][T17157] ? proc_fail_nth_read+0x260/0x260 [ 939.274142][T17157] ? proc_fail_nth_read+0x260/0x260 [ 939.279473][T17157] vfs_write+0x299/0x9a0 [ 939.283764][T17157] ? file_end_write+0x250/0x250 [ 939.288658][T17157] ? __fget_files+0x28/0x460 [ 939.293299][T17157] ? __fget_files+0x3fc/0x460 [ 939.298039][T17157] ? __fdget_pos+0x2a3/0x330 [ 939.302673][T17157] ? ksys_write+0x74/0x260 [ 939.307149][T17157] ksys_write+0x151/0x260 [ 939.311528][T17157] ? __ia32_sys_read+0x90/0x90 [ 939.316344][T17157] ? lockdep_hardirqs_on+0x98/0x150 [ 939.321597][T17157] do_syscall_64+0x55/0xb0 [ 939.326057][T17157] ? clear_bhb_loop+0x40/0x90 [ 939.330787][T17157] ? clear_bhb_loop+0x40/0x90 [ 939.335518][T17157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.341459][T17157] RIP: 0033:0x7f958c15e90e [ 939.345916][T17157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 939.365586][T17157] RSP: 002b:00007f958d013fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 939.374049][T17157] RAX: ffffffffffffffda RBX: 00007f958d0146c0 RCX: 00007f958c15e90e [ 939.382037][T17157] RDX: 0000000000000001 RSI: 00007f958d0140a0 RDI: 0000000000000005 [ 939.390057][T17157] RBP: 00007f958d014090 R08: 0000000000000000 R09: 0000000000000000 [ 939.398056][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.406140][T17157] R13: 00007f958c426128 R14: 00007f958c426090 R15: 00007ffd7b556c28 [ 939.414195][T17157] [ 940.312643][T17161] validate_nla: 2 callbacks suppressed [ 940.312665][T17161] netlink: 'syz.4.3162': attribute type 3 has an invalid length. [ 940.374886][T17165] IPv6: Can't replace route, no match found [ 940.505872][T17161] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3162'. [ 940.900360][T17169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3165'. [ 941.456571][T17171] sit0: left promiscuous mode [ 941.751480][T17179] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.3169'. [ 941.890825][T17176] sit0: entered promiscuous mode [ 942.135258][T17184] netlink: 'syz.4.3169': attribute type 29 has an invalid length. [ 942.144169][T17184] netlink: 'syz.4.3169': attribute type 29 has an invalid length. [ 942.274740][T17187] netlink: 'syz.5.3171': attribute type 22 has an invalid length. [ 942.282637][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 942.328197][T17183] netlink: 'syz.4.3169': attribute type 29 has an invalid length. [ 944.283142][T17204] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3178'. [ 944.423242][T17204] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.3178'. [ 944.861202][T17204] tipc: Started in network mode [ 945.074714][T17204] tipc: Node identity b, cluster identity 57 [ 945.126207][T17204] tipc: Node number set to 11 [ 945.255230][T17213] sit0: left promiscuous mode [ 945.819381][T17216] sit0: entered promiscuous mode [ 946.483329][T17233] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3185'. [ 946.597599][T17241] netlink: 'syz.6.3189': attribute type 10 has an invalid length. [ 946.699362][T17233] netlink: 'syz.5.3185': attribute type 29 has an invalid length. [ 946.792658][T17233] netlink: 'syz.5.3185': attribute type 29 has an invalid length. [ 946.849715][T17239] netlink: 'syz.5.3185': attribute type 29 has an invalid length. [ 950.104154][T17274] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3199'. [ 950.214699][T17277] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3200'. [ 950.539646][T17279] FAULT_INJECTION: forcing a failure. [ 950.539646][T17279] name failslab, interval 1, probability 0, space 0, times 0 [ 950.686765][T17279] CPU: 1 PID: 17279 Comm: syz.5.3201 Not tainted syzkaller #0 [ 950.694313][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.704483][T17279] Call Trace: [ 950.707800][T17279] [ 950.710748][T17279] dump_stack_lvl+0x18c/0x250 [ 950.715453][T17279] ? show_regs_print_info+0x20/0x20 [ 950.720673][T17279] ? load_image+0x420/0x420 [ 950.725292][T17279] should_fail_ex+0x394/0x4c0 [ 950.729996][T17279] should_failslab+0x9/0x20 [ 950.734520][T17279] slab_pre_alloc_hook+0x59/0x300 [ 950.739576][T17279] kmem_cache_alloc+0x5a/0x2c0 [ 950.744355][T17279] ? dst_alloc+0x105/0x170 [ 950.748808][T17279] dst_alloc+0x105/0x170 [ 950.753071][T17279] rt_dst_clone+0x58/0x680 [ 950.757612][T17279] ip_mc_finish_output+0xea/0x260 [ 950.762663][T17279] ? skb_clone+0x21f/0x370 [ 950.767097][T17279] ip_mc_output+0x254/0x570 [ 950.771618][T17279] ip_send_skb+0x12f/0x1d0 [ 950.776054][T17279] raw_sendmsg+0x15de/0x1ba0 [ 950.780681][T17279] ? compat_raw_ioctl+0x70/0x70 [ 950.785555][T17279] ? aa_sk_perm+0x83c/0x970 [ 950.790117][T17279] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 950.796558][T17279] ? aa_sock_msg_perm+0x94/0x150 [ 950.801510][T17279] ? sock_rps_record_flow+0x19/0x3f0 [ 950.806827][T17279] ? inet_sendmsg+0x7e/0x2a0 [ 950.811439][T17279] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.816763][T17279] ? inet_send_prepare+0x250/0x250 [ 950.821953][T17279] ____sys_sendmsg+0x61b/0x980 [ 950.826770][T17279] ? __sys_sendmsg_sock+0x30/0x30 [ 950.831830][T17279] ? __import_iovec+0x3fa/0x850 [ 950.836743][T17279] ? import_iovec+0x73/0xa0 [ 950.841269][T17279] ___sys_sendmsg+0x2a6/0x360 [ 950.845962][T17279] ? get_pid_task+0x20/0x1e0 [ 950.850578][T17279] ? __sys_sendmsg+0x2b0/0x2b0 [ 950.855378][T17279] ? __lock_acquire+0x7d80/0x7d80 [ 950.860447][T17279] __se_sys_sendmsg+0x1d0/0x2c0 [ 950.865317][T17279] ? __x64_sys_sendmsg+0x80/0x80 [ 950.870289][T17279] ? lockdep_hardirqs_on+0x98/0x150 [ 950.875510][T17279] do_syscall_64+0x55/0xb0 [ 950.880003][T17279] ? clear_bhb_loop+0x40/0x90 [ 950.884701][T17279] ? clear_bhb_loop+0x40/0x90 [ 950.889409][T17279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.895327][T17279] RIP: 0033:0x7f96aed9e0d9 [ 950.899770][T17279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.919513][T17279] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.927946][T17279] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 950.936022][T17279] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 950.944012][T17279] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 950.952083][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.960072][T17279] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 950.968084][T17279] [ 951.590517][T17274] netlink: 'syz.7.3199': attribute type 29 has an invalid length. [ 951.652999][T17274] netlink: 'syz.7.3199': attribute type 29 has an invalid length. [ 951.803429][T17274] netlink: 'syz.7.3199': attribute type 29 has an invalid length. [ 952.927352][T17300] netlink: 'syz.6.3210': attribute type 29 has an invalid length. [ 953.004533][T17300] netlink: 'syz.6.3210': attribute type 3 has an invalid length. [ 953.037182][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3210'. [ 953.880542][T17306] FAULT_INJECTION: forcing a failure. [ 953.880542][T17306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.924244][T17306] CPU: 1 PID: 17306 Comm: syz.5.3211 Not tainted syzkaller #0 [ 953.931789][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.941907][T17306] Call Trace: [ 953.945227][T17306] [ 953.948194][T17306] dump_stack_lvl+0x18c/0x250 [ 953.952925][T17306] ? show_regs_print_info+0x20/0x20 [ 953.958173][T17306] ? load_image+0x420/0x420 [ 953.962728][T17306] ? __might_fault+0xaa/0x120 [ 953.967454][T17306] ? __lock_acquire+0x7d80/0x7d80 [ 953.972537][T17306] should_fail_ex+0x394/0x4c0 [ 953.977274][T17306] _copy_from_user+0x2f/0xe0 [ 953.981921][T17306] __sys_bpf+0x23e/0x890 [ 953.986221][T17306] ? bpf_link_show_fdinfo+0x390/0x390 [ 953.991848][T17306] ? lock_chain_count+0x20/0x20 [ 953.996778][T17306] __x64_sys_bpf+0x7c/0x90 [ 954.001253][T17306] do_syscall_64+0x55/0xb0 [ 954.005722][T17306] ? clear_bhb_loop+0x40/0x90 [ 954.010617][T17306] ? clear_bhb_loop+0x40/0x90 [ 954.015343][T17306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.021294][T17306] RIP: 0033:0x7f96aed9e0d9 [ 954.025761][T17306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.045424][T17306] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 954.053899][T17306] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 954.061921][T17306] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 954.069940][T17306] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 954.078048][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.086265][T17306] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 954.094465][T17306] [ 955.428107][T17333] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3218'. [ 955.906162][T17342] netlink: 'syz.5.3221': attribute type 21 has an invalid length. [ 955.949818][T17342] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3221'. [ 956.363508][T17349] netlink: 'syz.6.3227': attribute type 10 has an invalid length. [ 956.508351][T17349] bridge_slave_1: left allmulticast mode [ 956.523113][T17349] bridge_slave_1: left promiscuous mode [ 956.550327][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.619986][T17349] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 956.772523][T17348] netlink: 'syz.7.3226': attribute type 10 has an invalid length. [ 956.809111][T17348] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3226'. [ 956.845115][T17348] hsr0: entered promiscuous mode [ 956.871052][T17348] bridge0: port 3(hsr0) entered blocking state [ 956.929763][T17348] bridge0: port 3(hsr0) entered disabled state [ 956.994887][T17348] hsr0: entered allmulticast mode [ 957.000821][T17348] hsr_slave_0: entered allmulticast mode [ 957.290093][T17348] hsr_slave_1: entered allmulticast mode [ 960.128215][T17370] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 960.156237][T17370] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3234'. [ 960.538804][T17372] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.3234'. [ 961.271873][T17387] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3237'. [ 962.284055][T17412] netlink: 'syz.6.3245': attribute type 10 has an invalid length. [ 962.364896][T17412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.503966][T17412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.592380][T17412] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 963.931034][T17434] FAULT_INJECTION: forcing a failure. [ 963.931034][T17434] name failslab, interval 1, probability 0, space 0, times 0 [ 963.952293][T17434] CPU: 0 PID: 17434 Comm: syz.5.3250 Not tainted syzkaller #0 [ 963.959908][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.970004][T17434] Call Trace: [ 963.973310][T17434] [ 963.976279][T17434] dump_stack_lvl+0x18c/0x250 [ 963.981008][T17434] ? show_regs_print_info+0x20/0x20 [ 963.986249][T17434] ? load_image+0x420/0x420 [ 963.990758][T17434] ? __lock_acquire+0x7d80/0x7d80 [ 963.995894][T17434] should_fail_ex+0x394/0x4c0 [ 964.000637][T17434] should_failslab+0x9/0x20 [ 964.005189][T17434] slab_pre_alloc_hook+0x59/0x300 [ 964.010275][T17434] ? ip_options_get+0x50/0x560 [ 964.015163][T17434] ? ip_options_get+0x50/0x560 [ 964.019965][T17434] __kmem_cache_alloc_node+0x53/0x250 [ 964.025570][T17434] ? ip_options_get+0x50/0x560 [ 964.030726][T17434] __kmalloc+0xa7/0x240 [ 964.034943][T17434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.041157][T17434] ip_options_get+0x50/0x560 [ 964.045810][T17434] ? ip_cmsg_send+0x356/0xa70 [ 964.050525][T17434] ip_cmsg_send+0x591/0xa70 [ 964.055060][T17434] raw_sendmsg+0x55d/0x1ba0 [ 964.059634][T17434] ? irqentry_enter+0x37/0x50 [ 964.064337][T17434] ? compat_raw_ioctl+0x70/0x70 [ 964.069248][T17434] ? lockdep_hardirqs_on+0x98/0x150 [ 964.074579][T17434] ? inet_sendmsg+0x139/0x2a0 [ 964.079277][T17434] ? inet_sendmsg+0x7e/0x2a0 [ 964.083881][T17434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 964.089197][T17434] ? inet_send_prepare+0x250/0x250 [ 964.094437][T17434] ____sys_sendmsg+0x61b/0x980 [ 964.099242][T17434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.105509][T17434] ? __sys_sendmsg_sock+0x30/0x30 [ 964.110548][T17434] ? __import_iovec+0x3fa/0x850 [ 964.115422][T17434] ? import_iovec+0x73/0xa0 [ 964.119947][T17434] ___sys_sendmsg+0x2a6/0x360 [ 964.124651][T17434] ? __sys_sendmsg+0x2b0/0x2b0 [ 964.129468][T17434] __se_sys_sendmsg+0x1d0/0x2c0 [ 964.134419][T17434] ? perf_trace_preemptirq_template+0x269/0x330 [ 964.140690][T17434] ? __x64_sys_sendmsg+0x80/0x80 [ 964.145665][T17434] ? lockdep_hardirqs_on+0x98/0x150 [ 964.150886][T17434] do_syscall_64+0x55/0xb0 [ 964.155322][T17434] ? clear_bhb_loop+0x40/0x90 [ 964.160100][T17434] ? clear_bhb_loop+0x40/0x90 [ 964.164813][T17434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 964.170748][T17434] RIP: 0033:0x7f96aed9e0d9 [ 964.175382][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.195284][T17434] RSP: 002b:00007f96afbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.203894][T17434] RAX: ffffffffffffffda RBX: 00007f96af025fa0 RCX: 00007f96aed9e0d9 [ 964.211890][T17434] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 000000000000000c [ 964.219882][T17434] RBP: 00007f96afbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 964.227865][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.235851][T17434] R13: 00007f96af026038 R14: 00007f96af025fa0 R15: 00007ffd8b9fc8d8 [ 964.243873][T17434] [ 964.284150][T17438] netlink: 'syz.7.3251': attribute type 21 has an invalid length. [ 964.302138][T17438] netlink: 'syz.7.3251': attribute type 1 has an invalid length. [ 964.996410][T17451] netlink: 'syz.7.3254': attribute type 29 has an invalid length. [ 965.302543][T17451] netlink: 'syz.7.3254': attribute type 29 has an invalid length. [ 965.315524][T17456] netlink: 'syz.6.3258': attribute type 29 has an invalid length. [ 965.433928][T17456] netlink: 'syz.6.3258': attribute type 29 has an invalid length. [ 965.544558][T17455] netlink: 'syz.7.3254': attribute type 29 has an invalid length. [ 965.825775][T17446] netlink: 'syz.5.3255': attribute type 29 has an invalid length. [ 965.916716][T17446] netlink: 'syz.5.3255': attribute type 29 has an invalid length. [ 965.971457][T17464] FAULT_INJECTION: forcing a failure. [ 965.971457][T17464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.971604][T17464] CPU: 1 PID: 17464 Comm: syz.7.3261 Not tainted syzkaller #0 [ 965.971627][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.971640][T17464] Call Trace: [ 965.971648][T17464] [ 965.971658][T17464] dump_stack_lvl+0x18c/0x250 [ 965.971689][T17464] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 965.971717][T17464] ? show_regs_print_info+0x20/0x20 [ 965.971757][T17464] ? load_image+0x420/0x420 [ 965.971785][T17464] ? should_fail_ex+0x341/0x4c0 [ 965.971819][T17464] should_fail_ex+0x394/0x4c0 [ 965.971851][T17464] _copy_from_user+0x2f/0xe0 [ 965.971876][T17464] generic_map_update_batch+0x53e/0x800 [ 965.971914][T17464] ? rcu_read_unlock+0xa0/0xa0 [ 965.971945][T17464] ? rcu_read_unlock+0xa0/0xa0 [ 965.971966][T17464] bpf_map_do_batch+0x3f2/0x600 [ 965.971989][T17464] ? bpf_lsm_key_permission+0x10/0x10 [ 965.972022][T17464] __sys_bpf+0x381/0x890 [ 965.972049][T17464] ? bpf_link_show_fdinfo+0x390/0x390 [ 965.972090][T17464] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 965.972130][T17464] __x64_sys_bpf+0x7c/0x90 [ 965.972154][T17464] do_syscall_64+0x55/0xb0 [ 965.972176][T17464] ? clear_bhb_loop+0x40/0x90 [ 965.972198][T17464] ? clear_bhb_loop+0x40/0x90 [ 965.972232][T17464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.972255][T17464] RIP: 0033:0x7f958c19e0d9 [ 965.972276][T17464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.972294][T17464] RSP: 002b:00007f958d035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 965.972320][T17464] RAX: ffffffffffffffda RBX: 00007f958c425fa0 RCX: 00007f958c19e0d9 [ 965.972336][T17464] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 965.972351][T17464] RBP: 00007f958d035090 R08: 0000000000000000 R09: 0000000000000000 [ 965.972366][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.972380][T17464] R13: 00007f958c426038 R14: 00007f958c425fa0 R15: 00007ffd7b556c28 [ 965.972415][T17464] [ 966.236778][T17465] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3260'. [ 968.218545][T17502] FAULT_INJECTION: forcing a failure. [ 968.218545][T17502] name failslab, interval 1, probability 0, space 0, times 0 [ 968.231325][T17502] CPU: 1 PID: 17502 Comm: syz.6.3272 Not tainted syzkaller #0 [ 968.238837][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.248939][T17502] Call Trace: [ 968.252249][T17502] [ 968.255221][T17502] dump_stack_lvl+0x18c/0x250 [ 968.259953][T17502] ? show_regs_print_info+0x20/0x20 [ 968.265209][T17502] ? load_image+0x420/0x420 [ 968.269847][T17502] ? skb_network_protocol+0x533/0x790 [ 968.275372][T17502] should_fail_ex+0x394/0x4c0 [ 968.280112][T17502] should_failslab+0x9/0x20 [ 968.284677][T17502] slab_pre_alloc_hook+0x59/0x300 [ 968.289794][T17502] kmem_cache_alloc+0x5a/0x2c0 [ 968.294625][T17502] ? skb_clone+0x1eb/0x370 [ 968.299099][T17502] skb_clone+0x1eb/0x370 [ 968.303400][T17502] ? dev_queue_xmit_nit+0x204/0xba0 [ 968.308665][T17502] dev_queue_xmit_nit+0x23f/0xba0 [ 968.313740][T17502] ? dev_queue_xmit_nit+0x2d/0xba0 [ 968.318974][T17502] dev_hard_start_xmit+0x150/0x790 [ 968.324121][T17502] ? __dev_queue_xmit+0x275/0x3640 [ 968.329255][T17502] __dev_queue_xmit+0x198c/0x3640 [ 968.334315][T17502] ? __dev_queue_xmit+0x275/0x3640 [ 968.339562][T17502] ? netdev_core_pick_tx+0x370/0x370 [ 968.345051][T17502] ? pskb_expand_head+0x17a/0x1150 [ 968.350181][T17502] ? pskb_expand_head+0x17a/0x1150 [ 968.355531][T17502] ? skb_release_data+0x1de/0x7f0 [ 968.360590][T17502] ? __bpf_redirect+0x4d1/0xdf0 [ 968.365459][T17502] __bpf_tx_skb+0x181/0x260 [ 968.369978][T17502] bpf_clone_redirect+0x315/0x4a0 [ 968.375061][T17502] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 968.380540][T17502] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 968.386459][T17502] ? perf_trace_preemptirq_template+0x269/0x330 [ 968.392854][T17502] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 968.399024][T17502] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 968.404340][T17502] ? lock_chain_count+0x20/0x20 [ 968.409487][T17502] ? __local_bh_disable_ip+0x108/0x1a0 [ 968.414968][T17502] ? __cant_sleep+0x220/0x220 [ 968.419786][T17502] ? __local_bh_enable_ip+0x13a/0x1c0 [ 968.425202][T17502] ? _local_bh_enable+0xa0/0xa0 [ 968.430157][T17502] ? bpf_test_timer_continue+0x135/0x380 [ 968.435816][T17502] ? bpf_test_run+0x174/0x870 [ 968.440515][T17502] bpf_test_run+0x2df/0x870 [ 968.445074][T17502] ? bpf_test_run+0x174/0x870 [ 968.449795][T17502] ? dst_hold+0x70/0x70 [ 968.454160][T17502] ? eth_get_headlen+0x210/0x210 [ 968.459133][T17502] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 968.464586][T17502] ? cpu_online+0x60/0x60 [ 968.468936][T17502] bpf_prog_test_run+0x31f/0x390 [ 968.473896][T17502] __sys_bpf+0x49d/0x890 [ 968.478159][T17502] ? bpf_link_show_fdinfo+0x390/0x390 [ 968.483565][T17502] ? lock_chain_count+0x20/0x20 [ 968.488538][T17502] __x64_sys_bpf+0x7c/0x90 [ 968.493058][T17502] do_syscall_64+0x55/0xb0 [ 968.497513][T17502] ? clear_bhb_loop+0x40/0x90 [ 968.502205][T17502] ? clear_bhb_loop+0x40/0x90 [ 968.506902][T17502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.512859][T17502] RIP: 0033:0x7fae1679e0d9 [ 968.517309][T17502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.537020][T17502] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 968.545465][T17502] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 968.553458][T17502] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 968.561444][T17502] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 968.569433][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.577416][T17502] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 968.585505][T17502] [ 968.887826][T17493] validate_nla: 1 callbacks suppressed [ 968.887870][T17493] netlink: 'syz.5.3269': attribute type 29 has an invalid length. [ 969.084906][T17493] netlink: 'syz.5.3269': attribute type 29 has an invalid length. [ 969.125658][T17510] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3273'. [ 969.191401][T17497] netlink: 'syz.5.3269': attribute type 29 has an invalid length. [ 971.191951][T17533] FAULT_INJECTION: forcing a failure. [ 971.191951][T17533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.325404][T17533] CPU: 0 PID: 17533 Comm: syz.5.3280 Not tainted syzkaller #0 [ 971.332949][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.343051][T17533] Call Trace: [ 971.346412][T17533] [ 971.349398][T17533] dump_stack_lvl+0x18c/0x250 [ 971.354139][T17533] ? show_regs_print_info+0x20/0x20 [ 971.359408][T17533] ? load_image+0x420/0x420 [ 971.363961][T17533] ? __might_fault+0xaa/0x120 [ 971.368949][T17533] ? __lock_acquire+0x7d80/0x7d80 [ 971.374029][T17533] should_fail_ex+0x394/0x4c0 [ 971.378858][T17533] _copy_from_user+0x2f/0xe0 [ 971.383495][T17533] __sys_bpf+0x23e/0x890 [ 971.387815][T17533] ? bpf_link_show_fdinfo+0x390/0x390 [ 971.393279][T17533] ? lock_chain_count+0x20/0x20 [ 971.398203][T17533] __x64_sys_bpf+0x7c/0x90 [ 971.402709][T17533] do_syscall_64+0x55/0xb0 [ 971.407181][T17533] ? clear_bhb_loop+0x40/0x90 [ 971.411959][T17533] ? clear_bhb_loop+0x40/0x90 [ 971.416697][T17533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.422769][T17533] RIP: 0033:0x7f96aed9e0d9 [ 971.427226][T17533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.446979][T17533] RSP: 002b:00007f96afbb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 971.455456][T17533] RAX: ffffffffffffffda RBX: 00007f96af026090 RCX: 00007f96aed9e0d9 [ 971.463497][T17533] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 971.471510][T17533] RBP: 00007f96afbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 971.479535][T17533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.487549][T17533] R13: 00007f96af026128 R14: 00007f96af026090 R15: 00007ffd8b9fc8d8 [ 971.495588][T17533] [ 971.944812][T17539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3282'. [ 972.482473][T17544] netlink: 'syz.6.3283': attribute type 29 has an invalid length. [ 972.868376][T17544] netlink: 'syz.6.3283': attribute type 29 has an invalid length. [ 972.994661][T17541] netlink: 'syz.6.3283': attribute type 29 has an invalid length. [ 976.907893][T17581] netlink: 'syz.4.3294': attribute type 10 has an invalid length. [ 976.934556][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3294'. [ 977.151627][T17589] FAULT_INJECTION: forcing a failure. [ 977.151627][T17589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.195597][T17589] CPU: 0 PID: 17589 Comm: syz.4.3298 Not tainted syzkaller #0 [ 977.203421][T17589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.213615][T17589] Call Trace: [ 977.216937][T17589] [ 977.219910][T17589] dump_stack_lvl+0x18c/0x250 [ 977.224647][T17589] ? show_regs_print_info+0x20/0x20 [ 977.229908][T17589] ? load_image+0x420/0x420 [ 977.234459][T17589] ? __might_fault+0xaa/0x120 [ 977.239260][T17589] ? __lock_acquire+0x7d80/0x7d80 [ 977.244322][T17589] should_fail_ex+0x394/0x4c0 [ 977.249470][T17589] _copy_from_user+0x2f/0xe0 [ 977.254087][T17589] ___sys_sendmsg+0x1c7/0x360 [ 977.258973][T17589] ? get_pid_task+0x20/0x1e0 [ 977.263596][T17589] ? __sys_sendmsg+0x2b0/0x2b0 [ 977.268397][T17589] ? __lock_acquire+0x7d80/0x7d80 [ 977.273476][T17589] __se_sys_sendmsg+0x1d0/0x2c0 [ 977.278347][T17589] ? __x64_sys_sendmsg+0x80/0x80 [ 977.283318][T17589] ? lockdep_hardirqs_on+0x98/0x150 [ 977.288541][T17589] do_syscall_64+0x55/0xb0 [ 977.293001][T17589] ? clear_bhb_loop+0x40/0x90 [ 977.297783][T17589] ? clear_bhb_loop+0x40/0x90 [ 977.302502][T17589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.308413][T17589] RIP: 0033:0x7fdd75b9e0d9 [ 977.312848][T17589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.332469][T17589] RSP: 002b:00007fdd73df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.340898][T17589] RAX: ffffffffffffffda RBX: 00007fdd75e25fa0 RCX: 00007fdd75b9e0d9 [ 977.348879][T17589] RDX: 0000000020000041 RSI: 0000200000000780 RDI: 0000000000000003 [ 977.356861][T17589] RBP: 00007fdd73df6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.364843][T17589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.372825][T17589] R13: 00007fdd75e26038 R14: 00007fdd75e25fa0 R15: 00007ffeb0360b78 [ 977.381008][T17589] [ 978.506821][T17610] FAULT_INJECTION: forcing a failure. [ 978.506821][T17610] name failslab, interval 1, probability 0, space 0, times 0 [ 978.540270][T17610] CPU: 1 PID: 17610 Comm: syz.6.3304 Not tainted syzkaller #0 [ 978.547816][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.557946][T17610] Call Trace: [ 978.561259][T17610] [ 978.564255][T17610] dump_stack_lvl+0x18c/0x250 [ 978.569002][T17610] ? sctp_sendmsg+0x1519/0x27b0 [ 978.573912][T17610] ? ___sys_sendmsg+0x2a6/0x360 [ 978.578859][T17610] ? show_regs_print_info+0x20/0x20 [ 978.584113][T17610] ? load_image+0x420/0x420 [ 978.588694][T17610] should_fail_ex+0x394/0x4c0 [ 978.593433][T17610] should_failslab+0x9/0x20 [ 978.597984][T17610] slab_pre_alloc_hook+0x59/0x300 [ 978.603061][T17610] ? sctp_add_bind_addr+0x8c/0x360 [ 978.608234][T17610] __kmem_cache_alloc_node+0x53/0x250 [ 978.613666][T17610] ? sctp_add_bind_addr+0x8c/0x360 [ 978.618817][T17610] kmalloc_trace+0x2a/0xe0 [ 978.623371][T17610] sctp_add_bind_addr+0x8c/0x360 [ 978.628383][T17610] sctp_copy_local_addr_list+0x31b/0x4e0 [ 978.634056][T17610] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 978.639824][T17610] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 978.645938][T17610] ? sctp_v6_is_any+0x64/0x70 [ 978.650654][T17610] ? sctp_copy_one_addr+0x8c/0x350 [ 978.655809][T17610] sctp_bind_addr_copy+0xb3/0x3c0 [ 978.660873][T17610] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 978.667335][T17610] sctp_connect_new_asoc+0x2f9/0x6a0 [ 978.672705][T17610] ? __sctp_connect+0xd80/0xd80 [ 978.677590][T17610] ? __local_bh_enable_ip+0x13a/0x1c0 [ 978.683015][T17610] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 978.688776][T17610] ? security_sctp_bind_connect+0x89/0xb0 [ 978.694536][T17610] sctp_sendmsg+0x1519/0x27b0 [ 978.699265][T17610] ? sctp_getsockopt+0xb60/0xb60 [ 978.704257][T17610] ? aa_af_perm+0x330/0x330 [ 978.708805][T17610] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 978.715436][T17610] ? sock_rps_record_flow+0x19/0x3f0 [ 978.720772][T17610] ? inet_sendmsg+0xce/0x2a0 [ 978.725400][T17610] ? inet_send_prepare+0x250/0x250 [ 978.730724][T17610] ____sys_sendmsg+0x61b/0x980 [ 978.735546][T17610] ? __sys_sendmsg_sock+0x30/0x30 [ 978.740622][T17610] ? __import_iovec+0x5f2/0x850 [ 978.745523][T17610] ? import_iovec+0x73/0xa0 [ 978.750069][T17610] ___sys_sendmsg+0x2a6/0x360 [ 978.754788][T17610] ? get_pid_task+0x20/0x1e0 [ 978.759423][T17610] ? __sys_sendmsg+0x2b0/0x2b0 [ 978.764246][T17610] ? __lock_acquire+0x7d80/0x7d80 [ 978.769343][T17610] __se_sys_sendmsg+0x1d0/0x2c0 [ 978.774234][T17610] ? __x64_sys_sendmsg+0x80/0x80 [ 978.779235][T17610] ? lockdep_hardirqs_on+0x98/0x150 [ 978.784474][T17610] do_syscall_64+0x55/0xb0 [ 978.788920][T17610] ? clear_bhb_loop+0x40/0x90 [ 978.793630][T17610] ? clear_bhb_loop+0x40/0x90 [ 978.798340][T17610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.804267][T17610] RIP: 0033:0x7fae1679e0d9 [ 978.808733][T17610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.828491][T17610] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.836949][T17610] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 978.844961][T17610] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 978.852979][T17610] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 978.861241][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 978.869239][T17610] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 978.877519][T17610] [ 979.123347][T17605] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3302'. [ 980.175341][T17616] netlink: 135856 bytes leftover after parsing attributes in process `syz.4.3306'. [ 980.233312][T17616] netlink: 8442 bytes leftover after parsing attributes in process `syz.4.3306'. [ 981.793087][T17638] netlink: 'syz.4.3313': attribute type 10 has an invalid length. [ 982.451887][T17652] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3319'. [ 982.504637][T17652] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 984.628335][T17674] netlink: 'syz.5.3330': attribute type 29 has an invalid length. [ 984.746598][T17684] netlink: 'syz.6.3328': attribute type 29 has an invalid length. [ 984.768165][T17684] netlink: 'syz.6.3328': attribute type 29 has an invalid length. [ 984.798824][T17674] netlink: 'syz.5.3330': attribute type 29 has an invalid length. [ 984.919850][T17672] netlink: 'syz.6.3328': attribute type 29 has an invalid length. [ 985.843899][T17698] FAULT_INJECTION: forcing a failure. [ 985.843899][T17698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.934938][T17698] CPU: 1 PID: 17698 Comm: syz.4.3336 Not tainted syzkaller #0 [ 985.942479][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.952665][T17698] Call Trace: [ 985.955977][T17698] [ 985.958936][T17698] dump_stack_lvl+0x18c/0x250 [ 985.963658][T17698] ? show_regs_print_info+0x20/0x20 [ 985.968981][T17698] ? load_image+0x420/0x420 [ 985.973526][T17698] ? __might_fault+0xaa/0x120 [ 985.978247][T17698] ? __lock_acquire+0x7d80/0x7d80 [ 985.983521][T17698] should_fail_ex+0x394/0x4c0 [ 985.988252][T17698] _copy_from_user+0x2f/0xe0 [ 985.992885][T17698] ___sys_sendmsg+0x1c7/0x360 [ 985.997625][T17698] ? __sys_sendmsg+0x2b0/0x2b0 [ 986.002608][T17698] ? trace_call_bpf+0xc3/0x6c0 [ 986.007424][T17698] __se_sys_sendmsg+0x1d0/0x2c0 [ 986.012320][T17698] ? perf_trace_preemptirq_template+0x269/0x330 [ 986.018694][T17698] ? __x64_sys_sendmsg+0x80/0x80 [ 986.023691][T17698] ? lockdep_hardirqs_on+0x98/0x150 [ 986.028984][T17698] do_syscall_64+0x55/0xb0 [ 986.033557][T17698] ? clear_bhb_loop+0x40/0x90 [ 986.038278][T17698] ? clear_bhb_loop+0x40/0x90 [ 986.043078][T17698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.049016][T17698] RIP: 0033:0x7fdd75b9e0d9 [ 986.053473][T17698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.073211][T17698] RSP: 002b:00007fdd73df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.081762][T17698] RAX: ffffffffffffffda RBX: 00007fdd75e25fa0 RCX: 00007fdd75b9e0d9 [ 986.089859][T17698] RDX: 0000000020000041 RSI: 0000200000000780 RDI: 0000000000000003 [ 986.097879][T17698] RBP: 00007fdd73df6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.105901][T17698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.113908][T17698] R13: 00007fdd75e26038 R14: 00007fdd75e25fa0 R15: 00007ffeb0360b78 [ 986.121935][T17698] [ 986.164156][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'. [ 987.713660][T17716] netlink: 'syz.4.3341': attribute type 29 has an invalid length. [ 987.774827][T17716] netlink: 'syz.4.3341': attribute type 29 has an invalid length. [ 988.096544][T17715] netlink: 'syz.4.3341': attribute type 29 has an invalid length. [ 988.852332][T17751] netlink: 'syz.5.3355': attribute type 10 has an invalid length. [ 988.876170][T17751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3355'. [ 988.902657][T17751] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 988.943414][T17751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.155153][T17755] bridge0: port 1(batadv0) entered blocking state [ 989.162490][T17755] bridge0: port 1(batadv0) entered disabled state [ 989.210296][T17755] batadv0: entered allmulticast mode [ 989.273363][T17755] batadv0: entered promiscuous mode [ 989.590462][T16997] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 989.599852][T16997] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 990.365387][T17769] netlink: 'syz.4.3360': attribute type 29 has an invalid length. [ 990.444319][T17769] netlink: 'syz.4.3360': attribute type 29 has an invalid length. [ 990.542968][T17769] netlink: 'syz.4.3360': attribute type 29 has an invalid length. [ 991.842927][T17793] netlink: 'syz.4.3370': attribute type 13 has an invalid length. [ 991.892851][T17793] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3370'. [ 993.055457][T17813] netlink: 'syz.5.3378': attribute type 29 has an invalid length. [ 993.064325][T17812] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3380'. [ 993.106132][T17813] netlink: 'syz.5.3378': attribute type 29 has an invalid length. [ 993.182295][T17809] netlink: 'syz.5.3378': attribute type 29 has an invalid length. [ 993.343243][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.349682][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.662430][T17820] netlink: 'syz.4.3382': attribute type 21 has an invalid length. [ 993.739322][T17822] netlink: 'syz.5.3383': attribute type 10 has an invalid length. [ 993.784494][T17822] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3383'. [ 996.192527][T17847] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3392'. [ 996.274797][T17849] netlink: 'syz.6.3393': attribute type 29 has an invalid length. [ 996.283114][T17849] netlink: 'syz.6.3393': attribute type 29 has an invalid length. [ 996.436027][T17854] netlink: 'syz.6.3393': attribute type 29 has an invalid length. [ 996.521983][T17849] netlink: 'syz.6.3393': attribute type 29 has an invalid length. [ 997.415320][T17850] netlink: 'syz.5.3392': attribute type 29 has an invalid length. [ 997.475094][T17850] netlink: 'syz.5.3392': attribute type 29 has an invalid length. [ 997.595908][T17847] netlink: 'syz.5.3392': attribute type 29 has an invalid length. [ 998.450316][T17874] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3401'. [ 998.641100][T17880] netlink: 'syz.7.3404': attribute type 10 has an invalid length. [ 998.706157][T17877] netlink: 'syz.4.3402': attribute type 2 has an invalid length. [ 998.724218][T17877] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3402'. [ 999.546858][T17895] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3409'. [ 999.550613][T17899] FAULT_INJECTION: forcing a failure. [ 999.550613][T17899] name failslab, interval 1, probability 0, space 0, times 0 [ 999.570088][T17899] CPU: 1 PID: 17899 Comm: syz.7.3410 Not tainted syzkaller #0 [ 999.577586][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.587680][T17899] Call Trace: [ 999.590994][T17899] [ 999.593970][T17899] dump_stack_lvl+0x18c/0x250 [ 999.598788][T17899] ? show_regs_print_info+0x20/0x20 [ 999.604035][T17899] ? load_image+0x420/0x420 [ 999.608587][T17899] ? finish_task_switch+0x267/0x8f0 [ 999.613845][T17899] should_fail_ex+0x394/0x4c0 [ 999.618563][T17899] should_failslab+0x9/0x20 [ 999.623090][T17899] slab_pre_alloc_hook+0x59/0x300 [ 999.628149][T17899] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 999.635545][T17899] kmem_cache_alloc+0x5a/0x2c0 [ 999.640379][T17899] ? skb_clone+0x1eb/0x370 [ 999.644818][T17899] skb_clone+0x1eb/0x370 [ 999.649087][T17899] bpf_clone_redirect+0x16d/0x4a0 [ 999.654146][T17899] bpf_prog_208b094576c80b22+0x5e/0x63 [ 999.659641][T17899] ? down_read_killable_nested+0x200/0x340 [ 999.665471][T17899] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 999.671643][T17899] ? lockdep_hardirqs_on+0x98/0x150 [ 999.676968][T17899] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 999.683173][T17899] ? bpf_test_run+0x174/0x870 [ 999.687971][T17899] ? __local_bh_disable_ip+0x108/0x1a0 [ 999.693454][T17899] ? __cant_sleep+0x220/0x220 [ 999.698148][T17899] ? __local_bh_enable_ip+0x14b/0x1c0 [ 999.703537][T17899] ? _local_bh_enable+0xa0/0xa0 [ 999.708407][T17899] ? bpf_test_timer_continue+0x135/0x380 [ 999.714062][T17899] ? bpf_test_run+0x174/0x870 [ 999.718770][T17899] bpf_test_run+0x2df/0x870 [ 999.723306][T17899] ? bpf_test_run+0x174/0x870 [ 999.728029][T17899] ? dst_hold+0x70/0x70 [ 999.732303][T17899] ? convert___skb_to_skb+0x3d/0x590 [ 999.737632][T17899] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 999.743052][T17899] ? cpu_online+0x60/0x60 [ 999.747409][T17899] bpf_prog_test_run+0x31f/0x390 [ 999.752367][T17899] __sys_bpf+0x49d/0x890 [ 999.756625][T17899] ? read_tsc+0x9/0x20 [ 999.760721][T17899] ? bpf_link_show_fdinfo+0x390/0x390 [ 999.766126][T17899] ? lock_chain_count+0x20/0x20 [ 999.770996][T17899] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 999.777001][T17899] __x64_sys_bpf+0x7c/0x90 [ 999.781435][T17899] do_syscall_64+0x55/0xb0 [ 999.785865][T17899] ? clear_bhb_loop+0x40/0x90 [ 999.790559][T17899] ? clear_bhb_loop+0x40/0x90 [ 999.795350][T17899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.801346][T17899] RIP: 0033:0x7f958c19e0d9 [ 999.805775][T17899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.825516][T17899] RSP: 002b:00007f958d035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 999.834035][T17899] RAX: ffffffffffffffda RBX: 00007f958c425fa0 RCX: 00007f958c19e0d9 [ 999.842037][T17899] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 999.850027][T17899] RBP: 00007f958d035090 R08: 0000000000000000 R09: 0000000000000000 [ 999.858029][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.866105][T17899] R13: 00007f958c426038 R14: 00007f958c425fa0 R15: 00007ffd7b556c28 [ 999.874108][T17899] [ 1000.418611][T17907] netlink: 'syz.7.3412': attribute type 10 has an invalid length. [ 1000.815893][T17910] FAULT_INJECTION: forcing a failure. [ 1000.815893][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.909850][T17910] CPU: 1 PID: 17910 Comm: syz.6.3413 Not tainted syzkaller #0 [ 1000.917386][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.927482][T17910] Call Trace: [ 1000.930801][T17910] [ 1000.933766][T17910] dump_stack_lvl+0x18c/0x250 [ 1000.938548][T17910] ? show_regs_print_info+0x20/0x20 [ 1000.943804][T17910] ? load_image+0x420/0x420 [ 1000.948657][T17910] should_fail_ex+0x394/0x4c0 [ 1000.953486][T17910] should_failslab+0x9/0x20 [ 1000.958050][T17910] slab_pre_alloc_hook+0x59/0x300 [ 1000.963132][T17910] kmem_cache_alloc_node+0x5e/0x310 [ 1000.968378][T17910] ? __alloc_skb+0x103/0x2c0 [ 1000.973013][T17910] __alloc_skb+0x103/0x2c0 [ 1000.977737][T17910] sctp_packet_transmit+0x2ef/0x2950 [ 1000.983164][T17910] ? sctp_outq_flush+0x2b7a/0x32e0 [ 1000.988327][T17910] ? __lock_acquire+0x7d80/0x7d80 [ 1000.993420][T17910] ? sctp_outq_flush+0x2b7a/0x32e0 [ 1000.998577][T17910] ? sctp_outq_flush+0x2b7a/0x32e0 [ 1001.003741][T17910] sctp_outq_flush+0x2e5c/0x32e0 [ 1001.008756][T17910] ? rcu_is_watching+0x15/0xb0 [ 1001.013572][T17910] ? sctp_addto_chunk+0xf8/0x220 [ 1001.018570][T17910] ? sctp_outq_tail+0x8a0/0x8a0 [ 1001.023647][T17910] ? __asan_memcpy+0x40/0x70 [ 1001.028344][T17910] ? sctp_outq_uncork+0x4d/0xa0 [ 1001.033331][T17910] sctp_do_sm+0x53c4/0x5af0 [ 1001.037991][T17910] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 1001.043972][T17910] ? skb_pull+0xb9/0x1c0 [ 1001.048259][T17910] ? sctp_inq_pop+0xc32/0x1030 [ 1001.053075][T17910] ? read_tsc+0x9/0x20 [ 1001.057218][T17910] sctp_assoc_bh_rcv+0x3f2/0x630 [ 1001.062229][T17910] sctp_backlog_rcv+0x15c/0x360 [ 1001.067394][T17910] __release_sock+0x1ea/0x460 [ 1001.072134][T17910] release_sock+0x5f/0x1c0 [ 1001.076606][T17910] sctp_sendmsg+0x1b46/0x27b0 [ 1001.081345][T17910] ? sctp_getsockopt+0xb60/0xb60 [ 1001.086346][T17910] ? aa_af_perm+0x330/0x330 [ 1001.090907][T17910] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1001.097384][T17910] ? sock_rps_record_flow+0x19/0x3f0 [ 1001.102832][T17910] ? inet_sendmsg+0x7e/0x2a0 [ 1001.107539][T17910] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1001.112854][T17910] ? inet_send_prepare+0x250/0x250 [ 1001.118100][T17910] ____sys_sendmsg+0x61b/0x980 [ 1001.123005][T17910] ? __asan_memset+0x22/0x40 [ 1001.127720][T17910] ? __sys_sendmsg_sock+0x30/0x30 [ 1001.132784][T17910] ? __import_iovec+0x5f2/0x850 [ 1001.137757][T17910] ? import_iovec+0x73/0xa0 [ 1001.142296][T17910] ___sys_sendmsg+0x2a6/0x360 [ 1001.146996][T17910] ? get_pid_task+0x20/0x1e0 [ 1001.152135][T17910] ? __sys_sendmsg+0x2b0/0x2b0 [ 1001.157027][T17910] ? __lock_acquire+0x7d80/0x7d80 [ 1001.162101][T17910] __se_sys_sendmsg+0x1d0/0x2c0 [ 1001.166975][T17910] ? __x64_sys_sendmsg+0x80/0x80 [ 1001.171948][T17910] ? lockdep_hardirqs_on+0x98/0x150 [ 1001.177185][T17910] do_syscall_64+0x55/0xb0 [ 1001.181634][T17910] ? clear_bhb_loop+0x40/0x90 [ 1001.186333][T17910] ? clear_bhb_loop+0x40/0x90 [ 1001.191032][T17910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.196965][T17910] RIP: 0033:0x7fae1679e0d9 [ 1001.201577][T17910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.221564][T17910] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.230091][T17910] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 1001.238163][T17910] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1001.246583][T17910] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.254583][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.262655][T17910] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 1001.270763][T17910] [ 1002.420208][T17924] netlink: 144316 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1003.480494][T17905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.278524][T17946] validate_nla: 3 callbacks suppressed [ 1004.278572][T17946] netlink: 'syz.7.3423': attribute type 29 has an invalid length. [ 1004.313285][T17946] netlink: 'syz.7.3423': attribute type 29 has an invalid length. [ 1004.676112][T17946] netlink: 'syz.7.3423': attribute type 29 has an invalid length. [ 1006.593559][T17982] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 1006.637445][T17982] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 1006.667894][T17982] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 1006.685323][T17982] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 1007.387707][T17984] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1007.687085][T17973] netlink: 'syz.7.3431': attribute type 29 has an invalid length. [ 1007.689761][T17966] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3431'. [ 1007.707774][T17989] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1007.910382][T17990] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1008.057908][T17984] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1008.195241][T17995] netlink: 'syz.6.3440': attribute type 29 has an invalid length. [ 1008.224675][T17984] tipc: Started in network mode [ 1008.327242][T17984] tipc: Node identity b, cluster identity 57 [ 1008.343361][T17984] tipc: Node number set to 11 [ 1008.464261][T17973] netlink: 'syz.7.3431': attribute type 29 has an invalid length. [ 1009.399189][T18003] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3443'. [ 1009.461280][T18004] validate_nla: 2 callbacks suppressed [ 1009.461301][T18004] netlink: 'syz.7.3444': attribute type 10 has an invalid length. [ 1009.604557][T17990] netlink: 'syz.6.3440': attribute type 29 has an invalid length. [ 1010.984969][T18027] netlink: 'syz.5.3452': attribute type 10 has an invalid length. [ 1011.069509][T18027] netlink: 'syz.5.3452': attribute type 40 has an invalid length. [ 1011.369381][T18034] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1011.745133][T18032] netlink: 'syz.4.3455': attribute type 29 has an invalid length. [ 1011.753448][T18032] netlink: 'syz.4.3455': attribute type 29 has an invalid length. [ 1011.877617][T18032] netlink: 'syz.4.3455': attribute type 29 has an invalid length. [ 1013.684304][T18065] FAULT_INJECTION: forcing a failure. [ 1013.684304][T18065] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.723553][T18065] CPU: 0 PID: 18065 Comm: syz.6.3464 Not tainted syzkaller #0 [ 1013.731108][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.741211][T18065] Call Trace: [ 1013.744542][T18065] [ 1013.747602][T18065] dump_stack_lvl+0x18c/0x250 [ 1013.752339][T18065] ? show_regs_print_info+0x20/0x20 [ 1013.757622][T18065] ? load_image+0x420/0x420 [ 1013.762176][T18065] ? __lock_acquire+0x7d80/0x7d80 [ 1013.767254][T18065] ? verify_lock_unused+0x140/0x140 [ 1013.772505][T18065] should_fail_ex+0x394/0x4c0 [ 1013.777238][T18065] should_failslab+0x9/0x20 [ 1013.781787][T18065] slab_pre_alloc_hook+0x59/0x300 [ 1013.786867][T18065] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1013.792460][T18065] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1013.798062][T18065] __kmem_cache_alloc_node+0x53/0x250 [ 1013.803593][T18065] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1013.809191][T18065] __kmalloc+0xa7/0x240 [ 1013.813411][T18065] bpf_prog_test_run_skb+0x242/0x18f0 [ 1013.818849][T18065] ? __fget_files+0x28/0x460 [ 1013.823499][T18065] ? __fget_files+0x3fc/0x460 [ 1013.828247][T18065] ? cpu_online+0x60/0x60 [ 1013.832674][T18065] bpf_prog_test_run+0x31f/0x390 [ 1013.837666][T18065] __sys_bpf+0x49d/0x890 [ 1013.841959][T18065] ? bpf_link_show_fdinfo+0x390/0x390 [ 1013.847403][T18065] ? lock_chain_count+0x20/0x20 [ 1013.852313][T18065] __x64_sys_bpf+0x7c/0x90 [ 1013.856780][T18065] do_syscall_64+0x55/0xb0 [ 1013.861240][T18065] ? clear_bhb_loop+0x40/0x90 [ 1013.866061][T18065] ? clear_bhb_loop+0x40/0x90 [ 1013.870791][T18065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1013.876818][T18065] RIP: 0033:0x7fae1679e0d9 [ 1013.881278][T18065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.900942][T18065] RSP: 002b:00007fae1761f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1013.909421][T18065] RAX: ffffffffffffffda RBX: 00007fae16a25fa0 RCX: 00007fae1679e0d9 [ 1013.917445][T18065] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 1013.925469][T18065] RBP: 00007fae1761f090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.933493][T18065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.941518][T18065] R13: 00007fae16a26038 R14: 00007fae16a25fa0 R15: 00007fff7c55ee58 [ 1013.949562][T18065] [ 1014.075097][T18067] netlink: 'syz.4.3465': attribute type 10 has an invalid length. [ 1014.194010][T18067] netlink: 'syz.4.3465': attribute type 40 has an invalid length. [ 1014.731079][T18075] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.3467'. [ 1014.761980][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3468'. [ 1014.905867][T18075] netlink: 'syz.6.3467': attribute type 29 has an invalid length. [ 1015.064439][T18075] netlink: 'syz.6.3467': attribute type 29 has an invalid length. [ 1016.097132][T18075] netlink: 'syz.6.3467': attribute type 29 has an invalid length. [ 1017.036844][T18108] netlink: 'syz.5.3477': attribute type 10 has an invalid length. [ 1017.190136][T18108] netlink: 'syz.5.3477': attribute type 40 has an invalid length. [ 1019.058467][T18123] netlink: 'syz.7.3482': attribute type 3 has an invalid length. [ 1019.078472][T18123] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3482'. [ 1020.557252][T18137] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3486'. [ 1022.584669][T18162] netlink: 'syz.6.3493': attribute type 21 has an invalid length. [ 1022.592622][T18162] netlink: 'syz.6.3493': attribute type 1 has an invalid length. [ 1023.127708][T18173] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1023.223915][T18167] tap0: tun_chr_ioctl cmd 1074025677 [ 1023.238350][T18167] tap0: linktype set to 780 [ 1024.336464][T18190] netlink: 57923 bytes leftover after parsing attributes in process `syz.6.3504'. [ 1024.878423][T18186] netlink: 'syz.6.3504': attribute type 29 has an invalid length. [ 1025.637553][T18185] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 1025.665993][T18185] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1025.712846][T18197] netlink: 'syz.5.3506': attribute type 10 has an invalid length. [ 1025.806218][T18197] geneve0: entered promiscuous mode [ 1025.862525][T18186] netlink: 'syz.6.3504': attribute type 29 has an invalid length. [ 1027.323409][T18221] .76žÿ: renamed from team_slave_1 (while UP) [ 1028.058425][T18233] netlink: 57923 bytes leftover after parsing attributes in process `syz.5.3518'. [ 1028.359916][T18234] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3517'. [ 1028.846890][T18233] netlink: 'syz.5.3518': attribute type 29 has an invalid length. [ 1029.005334][T18226] netlink: 'syz.7.3515': attribute type 10 has an invalid length. [ 1029.936011][T18233] netlink: 'syz.5.3518': attribute type 29 has an invalid length. [ 1030.126538][T18235] netlink: 'syz.5.3518': attribute type 29 has an invalid length. [ 1033.096941][T18265] netlink: 57923 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1037.522454][T18305] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1037.553193][T18305] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1037.581985][T18303] netlink: 'syz.6.3537': attribute type 10 has an invalid length. [ 1038.259436][T18330] netlink: 57923 bytes leftover after parsing attributes in process `syz.7.3544'. [ 1038.283971][T18332] netlink: 'syz.5.3545': attribute type 11 has an invalid length. [ 1038.605174][T18335] netlink: 'syz.7.3544': attribute type 29 has an invalid length. [ 1038.647104][T18335] netlink: 'syz.7.3544': attribute type 29 has an invalid length. [ 1038.923776][T18330] netlink: 'syz.7.3544': attribute type 29 has an invalid length. [ 1039.428560][T18351] netlink: 'syz.5.3551': attribute type 40 has an invalid length. [ 1042.652816][T18361] netlink: 'syz.7.3553': attribute type 22 has an invalid length. [ 1042.719142][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3553'. [ 1042.835755][T18371] netlink: 'syz.5.3554': attribute type 12 has an invalid length. [ 1042.892060][T18371] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.3554'. [ 1043.389817][T18382] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1043.398516][T18382] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 1043.622166][T18386] netlink: 57923 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1043.684256][T18391] netlink: 'syz.7.3561': attribute type 11 has an invalid length. [ 1043.758753][T18393] netlink: 'syz.4.3562': attribute type 40 has an invalid length. [ 1044.578049][T18389] netlink: 'syz.6.3559': attribute type 29 has an invalid length. [ 1044.595199][T18389] netlink: 'syz.6.3559': attribute type 29 has an invalid length. [ 1044.816068][T18386] netlink: 'syz.6.3559': attribute type 29 has an invalid length. [ 1044.862135][T18399] netlink: 'syz.4.3563': attribute type 10 has an invalid length. [ 1045.043776][T18402] syz.5.3564: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1045.079444][T18402] CPU: 1 PID: 18402 Comm: syz.5.3564 Not tainted syzkaller #0 [ 1045.086991][T18402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1045.097095][T18402] Call Trace: [ 1045.100417][T18402] [ 1045.103389][T18402] dump_stack_lvl+0x18c/0x250 [ 1045.108121][T18402] ? show_regs_print_info+0x20/0x20 [ 1045.113369][T18402] ? load_image+0x420/0x420 [ 1045.117918][T18402] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1045.124381][T18402] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1045.130933][T18402] warn_alloc+0x246/0x340 [ 1045.135298][T18402] ? zone_watermark_ok_safe+0x230/0x230 [ 1045.140877][T18402] ? _raw_spin_unlock+0x28/0x40 [ 1045.145760][T18402] __vmalloc_node_range+0x661/0x1320 [ 1045.151099][T18402] ? free_vm_area+0x50/0x50 [ 1045.155623][T18402] ? kvmalloc_node+0x70/0x180 [ 1045.160319][T18402] ? rcu_is_watching+0x15/0xb0 [ 1045.165101][T18402] ? kvmalloc_node+0x70/0x180 [ 1045.169793][T18402] ? trace_kmalloc+0x1f/0xa0 [ 1045.174399][T18402] ? __kmalloc_node+0x154/0x240 [ 1045.179276][T18402] ? bpf_check+0x245/0xec30 [ 1045.183800][T18402] vzalloc+0x79/0x90 [ 1045.187713][T18402] ? bpf_check+0x245/0xec30 [ 1045.192233][T18402] bpf_check+0x245/0xec30 [ 1045.196602][T18402] ? mark_lock+0x94/0x320 [ 1045.201041][T18402] ? __lock_acquire+0x1336/0x7d80 [ 1045.206180][T18402] ? bpf_get_btf_vmlinux+0x20/0x20 [ 1045.211397][T18402] ? __lock_acquire+0x1262/0x7d80 [ 1045.216451][T18402] ? mark_lock+0x94/0x320 [ 1045.220803][T18402] ? __lock_acquire+0x1336/0x7d80 [ 1045.225869][T18402] ? verify_lock_unused+0x140/0x140 [ 1045.231086][T18402] ? perf_trace_lock_acquire+0x105/0x400 [ 1045.236739][T18402] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1045.243342][T18402] ? perf_trace_lock_acquire+0x105/0x400 [ 1045.249012][T18402] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1045.255014][T18402] ? __lock_acquire+0x7d80/0x7d80 [ 1045.260051][T18402] ? lock_chain_count+0x20/0x20 [ 1045.265006][T18402] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1045.271272][T18402] ? lockdep_hardirqs_on+0x98/0x150 [ 1045.276498][T18402] ? ktime_get_with_offset+0x103/0x330 [ 1045.282083][T18402] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1045.288340][T18402] ? ktime_get_real_ts64+0x440/0x440 [ 1045.293642][T18402] ? do_raw_spin_unlock+0x121/0x230 [ 1045.298868][T18402] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1045.303908][T18402] bpf_prog_load+0x10fa/0x1610 [ 1045.308704][T18402] ? map_freeze+0x420/0x420 [ 1045.313278][T18402] ? __might_fault+0xaa/0x120 [ 1045.317977][T18402] ? __might_fault+0xc6/0x120 [ 1045.322692][T18402] ? __might_fault+0xaa/0x120 [ 1045.327386][T18402] ? bpf_lsm_bpf+0x9/0x10 [ 1045.331739][T18402] ? security_bpf+0x7e/0xa0 [ 1045.336270][T18402] __sys_bpf+0x5ba/0x890 [ 1045.340529][T18402] ? bpf_link_show_fdinfo+0x390/0x390 [ 1045.345929][T18402] ? lock_chain_count+0x20/0x20 [ 1045.350823][T18402] __x64_sys_bpf+0x7c/0x90 [ 1045.355264][T18402] do_syscall_64+0x55/0xb0 [ 1045.359700][T18402] ? clear_bhb_loop+0x40/0x90 [ 1045.364398][T18402] ? clear_bhb_loop+0x40/0x90 [ 1045.369143][T18402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.375086][T18402] RIP: 0033:0x7f96aed9e0d9 [ 1045.379625][T18402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.399268][T18402] RSP: 002b:00007f96afbb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1045.407714][T18402] RAX: ffffffffffffffda RBX: 00007f96af026090 RCX: 00007f96aed9e0d9 [ 1045.415718][T18402] RDX: 0000000000000022 RSI: 000020000000e000 RDI: 0000000000000005 [ 1045.423709][T18402] RBP: 00007f96aee35024 R08: 0000000000000000 R09: 0000000000000000 [ 1045.431703][T18402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.439693][T18402] R13: 00007f96af026128 R14: 00007f96af026090 R15: 00007ffd8b9fc8d8 [ 1045.447704][T18402] [ 1045.524939][T18402] Mem-Info: [ 1045.537072][T18402] active_anon:17725 inactive_anon:0 isolated_anon:0 [ 1045.537072][T18402] active_file:19030 inactive_file:40319 isolated_file:0 [ 1045.537072][T18402] unevictable:768 dirty:252 writeback:0 [ 1045.537072][T18402] slab_reclaimable:11146 slab_unreclaimable:96545 [ 1045.537072][T18402] mapped:26103 shmem:10825 pagetables:839 [ 1045.537072][T18402] sec_pagetables:0 bounce:0 [ 1045.537072][T18402] kernel_misc_reclaimable:0 [ 1045.537072][T18402] free:1323621 free_pcp:11256 free_cma:0 [ 1045.727320][T18402] Node 0 active_anon:69500kB inactive_anon:0kB active_file:76120kB inactive_file:161072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105712kB dirty:1008kB writeback:0kB shmem:40364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12684kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no [ 1045.794687][T18402] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1045.827872][T18402] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.856083][T18402] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1045.862016][T18402] Node 0 DMA32 free:1381072kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:68264kB inactive_anon:0kB active_file:76120kB inactive_file:160244kB unevictable:1536kB writepending:1008kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:34816kB local_pcp:13184kB free_cma:0kB [ 1045.894228][T18402] lowmem_reserve[]: 0 0 0 0 0 [ 1045.900733][T18402] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1045.974525][T18402] lowmem_reserve[]: 0 0 0 0 0 [ 1045.979621][T18402] Node 1 Normal free:3898752kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11896kB local_pcp:9656kB free_cma:0kB [ 1046.084962][T18402] lowmem_reserve[]: 0 0 0 0 0 [ 1046.089786][T18402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1046.144503][T18402] Node 0 DMA32: 2624*4kB (UM) 3600*8kB (UME) 2750*16kB (UME) 1798*32kB (UM) 996*64kB (UM) 438*128kB (UM) 124*256kB (UME) 109*512kB (UM) 49*1024kB (UME) 3*2048kB (UME) 242*4096kB (UM) = 1395744kB [ 1046.192855][T18402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1046.221425][T18402] Node 1 Normal: 250*4kB (UME) 55*8kB (UME) 40*16kB (UME) 217*32kB (UME) 87*64kB (UME) 21*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3898752kB [ 1046.282649][T18402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.349342][T18402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1046.450584][T18402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.518684][T18402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1046.555408][T18402] 65099 total pagecache pages [ 1046.595005][T18402] 0 pages in swap cache [ 1046.612902][T18402] Free swap = 124996kB [ 1046.628015][T18402] Total swap = 124996kB [ 1046.644783][T18402] 2097051 pages RAM [Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.