last executing test programs: 4.418048639s ago: executing program 3 (id=4069): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5000008000000, 0xfffffffe, 0x0, 0x0, 0x3, 0x3, 0x0, 0xdb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000003040)={&(0x7f0000000300), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/98, 0x62}, {&(0x7f0000002e40)=""/109, 0x6d}, {&(0x7f0000002ec0)=""/108, 0x6c}], 0x5, &(0x7f0000002fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x102) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r5}, &(0x7f0000001400), &(0x7f0000001440)=r6}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) 3.18218475s ago: executing program 3 (id=4075): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) sendmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294682a863e792c9932ef30201ce11d93738e74851a3e1fe94c9fdeae7f0d17b0900095a025f0c9e6a7715b8eb54d136d1153ba90ef88d951", 0x65}], 0x1}, 0x0) 2.834756689s ago: executing program 3 (id=4077): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) close(r4) close(r3) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 2.461369398s ago: executing program 1 (id=4081): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e24}, 0x0, 0x4, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xc) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r3, 0x33, 0x0, 0xc, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x2dc, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x14, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x36d}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x170}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x101, 0x56, &(0x7f0000000900)=""/86, 0x41100, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x0, 0x3, 0xffff45f3, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[{0x5, 0x2, 0xf, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback=r2, r3, 0x32, 0x2028, r5, @void, @void, @value=r7, @void, r6}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x1ff) r9 = openat$cgroup(r8, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r10, &(0x7f00000000c0), 0x9) r11 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x18010, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x35, 0x0, 0xa) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x9) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x537, '\x00', 0x0, r3, 0x4, 0x1, 0x1}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file0\x00', r14, 0x4000, r8}, 0x18) 2.178871656s ago: executing program 1 (id=4084): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x9, '\x00', r1, r2, 0x1, 0x2, 0x2}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000001980)=""/4080, 0xff0}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/128, 0x80}], 0x7}, 0x20) 1.941295241s ago: executing program 0 (id=4086): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac7872ecfc77f0e00000bd4e38394015310410db00006f0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000001c0000000400000029008dbd263c3f04bea3fbd571419d82d66b0738900dafa532965a051b7d0435a9bab3ab99ebd3d993a4e21c48458bdeab1b83a624c85a27896a81", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@o_path={&(0x7f0000000400)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x3, 0x0, 0x10000, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x2000000c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000007201000040000002100000001000001", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 1.784298675s ago: executing program 2 (id=4087): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80bd, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x48, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001045582fa8c244cd92ab663e1f902f62371b271c78dff251b161d525db8d0a2383a513e7bc80df08cc693016f74050b8bcbe7541", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000001af8000095ff000000000000ca14d978160d738426b0e77ccccfc0f1e1807d884b9aa81a2dccc3ad73f967a40420ca520fbf2e67d7f767d949cfccc1c69370342881a0ef9a89dc052e07526244b85bff90b39f9e766c9e72bdd88f6b71ad02882b28d24036cba40fbc0b3405374bc6a8c481f72189718d01ab9ca8b4dbb4f33922bc195a9bae10e734986d40ee6ac74da70a37162b265d71c17ad6ac53c7958311abeaf52100"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f6, &(0x7f00000000c0)={'bridge_slave_1\x00', @random="2e4010ff00"}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r8, &(0x7f0000000340), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) close(0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000007111b50000000000701000000200000085000000b2b86060c7a82a0000009500000000009500a505000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r4, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000a00), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=r10], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r12, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r13) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.748855796s ago: executing program 1 (id=4088): socketpair(0x27, 0x4, 0x10, 0x0) (async) socketpair(0x27, 0x4, 0x10, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) (async) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'b', ' *:* ', 'w\x00'}, 0x8) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001b00)={r2}, 0xc) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0xc00, 0x400000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x52) r3 = socket$kcm(0x2, 0x3, 0x2) close(r3) (async) close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 1.658262869s ago: executing program 3 (id=4089): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1b00000019007f089ea66997b7bfa8820200c0d784bf000ca4dc04", 0x1b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40047438, 0x110e22fff6) recvmsg(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000580)}, 0x3) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000100)={r3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xb7, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x9, '\x00', r5, r6, 0x0, 0x1, 0x5}, 0x50) 1.540387612s ago: executing program 0 (id=4090): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2c, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r0, &(0x7f0000000640)="455a4fcc41841ec18ce2b28181ff7e50122b0f30582aafa4ce15d6ea8993555c7915c4cc8f4803eac22a11f2ff27e04bd3", &(0x7f0000000680)=""/81}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="611079000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback, 0x1914276477dceefb, 0x1, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x61]}}, 0x0, 0x2a, 0x0, 0x9}, 0x28) recvmsg(r1, 0x0, 0x20c2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x104510, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000066cd0000050000000010"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x7, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close(0xffffffffffffffff) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638977fbac141416ac14141683189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.509024422s ago: executing program 1 (id=4091): perf_event_open(&(0x7f0000000500)={0x2, 0xffffffffffffffe1, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x643b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0xa002, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x22, 0x2, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000001010000000000000000000040b0000000000000004e68854b2093c803548dd8c0f02b63730f1c0d291e468864105476cd0327421103200a1ff19b498bfb4389120edd4f0557e5305c563d5fa1129a57952e4b41be88c8f890ea790a258bb59222f2c40000e8a37466052f8e3d7cbcd17b0cec6ed6e882990a00d6d8d056"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) 1.406376005s ago: executing program 3 (id=4092): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x0, 0x0, 0x6}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) (async, rerun: 64) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) (rerun: 64) 1.355375676s ago: executing program 2 (id=4093): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0xfffffff7fffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100ffbabe4d3277fb080660017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff02"], 0xfdef) 1.166440291s ago: executing program 1 (id=4094): socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)}, 0x40e4804) (async) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000200000000000005000000000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="030000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000180)='./file0\x00', r5}, 0x18) (async) socket$kcm(0x10, 0x3, 0x10) 1.122340182s ago: executing program 0 (id=4095): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18224974d000000000000000fed840947675b85c2a03632dd2ffff000100"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="14000000180081054e81f783db4cb9040a1d0800", 0x14}], 0x1}, 0x800) 1.121885182s ago: executing program 2 (id=4096): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x1, 0x17, 0x88, 0x0, 0xe1, 0x440c, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x130, 0x1, @perf_config_ext={0x2}, 0x8000, 0xef, 0xf0, 0x3, 0xa, 0x7, 0xfffb, 0x0, 0x3, 0x0, 0xffff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000580)=r2}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) 1.066105553s ago: executing program 0 (id=4097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000940)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25fbe9f60d0027000204007bd63f97bf05000500120138641517623456e9eae3284ca2f73c88a9bbfba07a6b9f8db31bd56e6e0100008020958410836a000e54362b510b7fbef16bc4d3079369b9cc4254a4700d745d477d7d4911387392dda854c4d58b3819dcd93333d784b1e1c3ad4d38dc9206dabae135b4b1fe007d38340f5bfb99aac5814c2532b5b97b87604c72440da6b5029c6e4da3499ec47e6cb090a75ee5fa10074562b7e018fa", 0x41}]}, 0x0) close(r3) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xfffffffffffffdaa) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES8=r3], 0x9a) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r1) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) write$cgroup_subtree(r9, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r8, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) recvmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003400)=""/4072, 0xfe8}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000a40)=""/154, 0x9a}, {&(0x7f0000000280)=""/63, 0x3f}], 0x1000000000000094}, 0x1) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.006688095s ago: executing program 1 (id=4098): perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x3, 0x534, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x420200, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xfffffffffffffff9, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x892, 0x6, 0x0, 0x100000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x8001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x8, 0x9}, {0x3, 0x2, 0x6, 0xa}, {0x3, 0x1, 0xe, 0xc}, {0x5, 0x2, 0x1, 0x8}], 0x10, 0x5}, 0x94) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x147) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 947.868856ms ago: executing program 2 (id=4099): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x7fff, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000900400009"], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x208001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000}, 0x50) (async) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) (rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000300)="53496ee686932ada3247d299bdf972130e30adfd8d884a23fbcdd5e29ea483f92ac76b4c19b999a0dc0f6da7d78b77335e22be2c0afb1f8457699d48db49802e2b32eeb3e0f19b67a54dd46d9eddab771d6bc445cad5fe2910f08097463cfecae36649b7227b2bbd54e2d1d42dd73d44c542adb8e7b79a33e52b07dcf94c84b2e0a3219221de9b379a6867cdb3cc22130e35f69663cd629474f38882bc252ca85fbcb9cb330dfe3f2cbd7463e609d1fb0a8d3eeefbed", &(0x7f00000003c0)=""/64}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 833.447879ms ago: executing program 2 (id=4100): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff85000000a800000085000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000c000400000008000000ab0d000010000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9d4f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x480, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x0, @private2, 0x3}, 0x80, 0x0}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00), 0x18) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 441.234609ms ago: executing program 3 (id=4101): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000)=r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10007, 0x8}], 0x10, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 202.232865ms ago: executing program 2 (id=4102): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000001000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) r9 = openat$cgroup_ro(r2, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 181.285146ms ago: executing program 0 (id=4103): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x80000002, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x69) 0s ago: executing program 0 (id=4104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x16, 0x0, 0x4, 0x3, 0x84, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): ogle Compute Engine, BIOS Google 07/24/2026 [ 376.661981][T13219] Call Trace: [ 376.665282][T13219] [ 376.668236][T13219] dump_stack_lvl+0x18c/0x250 [ 376.672938][T13219] ? kasan_set_track+0x4e/0x70 [ 376.677723][T13219] ? ____kasan_slab_free+0x126/0x1f0 [ 376.683050][T13219] ? show_regs_print_info+0x20/0x20 [ 376.688287][T13219] ? load_image+0x420/0x420 [ 376.692826][T13219] ? perf_trace_lock_acquire+0x105/0x400 [ 376.698483][T13219] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 376.705099][T13219] should_fail_ex+0x394/0x4c0 [ 376.709810][T13219] should_failslab+0x9/0x20 [ 376.714338][T13219] slab_pre_alloc_hook+0x59/0x300 [ 376.719396][T13219] kmem_cache_alloc_node+0x5e/0x310 [ 376.724619][T13219] ? __alloc_skb+0x103/0x2c0 [ 376.729233][T13219] __alloc_skb+0x103/0x2c0 [ 376.733674][T13219] tipc_msg_create+0x4a/0x4c0 [ 376.738381][T13219] ? tipc_own_addr+0x45/0x2a0 [ 376.743131][T13219] tipc_group_proto_xmit+0xce/0x790 [ 376.748374][T13219] tipc_group_delete+0x15f/0x4c0 [ 376.753351][T13219] ? tipc_group_update_member+0x360/0x360 [ 376.759118][T13219] ? tipc_group_self+0x26/0x1c0 [ 376.763998][T13219] tipc_sk_leave+0x154/0x4d0 [ 376.768627][T13219] ? __tipc_shutdown+0x1590/0x1590 [ 376.773767][T13219] ? _local_bh_enable+0xa0/0xa0 [ 376.778649][T13219] tipc_release+0x333/0x20e0 [ 376.783268][T13219] ? ima_get_current_hash_algo+0x10/0x10 [ 376.788933][T13219] ? tipc_sock_destruct+0x180/0x180 [ 376.794154][T13219] ? down_write+0x16e/0x200 [ 376.798686][T13219] ? down_read_killable+0x340/0x340 [ 376.803927][T13219] sock_close+0xa7/0x210 [ 376.808193][T13219] ? sock_mmap+0xa0/0xa0 [ 376.812448][T13219] __fput+0x221/0x940 [ 376.816463][T13219] __se_sys_close+0x15c/0x1e0 [ 376.821163][T13219] do_syscall_64+0x55/0xb0 [ 376.825597][T13219] ? clear_bhb_loop+0x40/0x90 [ 376.830292][T13219] ? clear_bhb_loop+0x40/0x90 [ 376.834990][T13219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.840908][T13219] RIP: 0033:0x7eff7d59e019 [ 376.845338][T13219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.864968][T13219] RSP: 002b:00007eff7e4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 376.873495][T13219] RAX: ffffffffffffffda RBX: 00007eff7d825fa0 RCX: 00007eff7d59e019 [ 376.881490][T13219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 376.889485][T13219] RBP: 00007eff7e4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 376.897472][T13219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.905462][T13219] R13: 00007eff7d826038 R14: 00007eff7d825fa0 R15: 00007ffc47f5b8d8 [ 376.913476][T13219] [ 377.560313][T13239] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2836'. [ 377.930450][T13251] netlink: 'syz.3.2842': attribute type 21 has an invalid length. [ 377.939501][T13251] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2842'. [ 377.962154][T13251] netlink: 'syz.3.2842': attribute type 4 has an invalid length. [ 378.655766][T13295] FAULT_INJECTION: forcing a failure. [ 378.655766][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 378.669437][T13295] CPU: 0 PID: 13295 Comm: syz.1.2854 Not tainted syzkaller #0 [ 378.676930][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.687005][T13295] Call Trace: [ 378.690283][T13295] [ 378.693213][T13295] dump_stack_lvl+0x18c/0x250 [ 378.697899][T13295] ? kasan_set_track+0x4e/0x70 [ 378.702666][T13295] ? ____kasan_slab_free+0x126/0x1f0 [ 378.707954][T13295] ? show_regs_print_info+0x20/0x20 [ 378.713156][T13295] ? load_image+0x420/0x420 [ 378.717694][T13295] ? do_syscall_64+0x55/0xb0 [ 378.722293][T13295] should_fail_ex+0x394/0x4c0 [ 378.726976][T13295] should_failslab+0x9/0x20 [ 378.731484][T13295] slab_pre_alloc_hook+0x59/0x300 [ 378.736514][T13295] kmem_cache_alloc_node+0x5e/0x310 [ 378.741712][T13295] ? __alloc_skb+0x103/0x2c0 [ 378.746301][T13295] __alloc_skb+0x103/0x2c0 [ 378.750724][T13295] tipc_msg_create+0x4a/0x4c0 [ 378.755403][T13295] ? tipc_own_addr+0x45/0x2a0 [ 378.760086][T13295] tipc_group_proto_xmit+0xce/0x790 [ 378.765287][T13295] tipc_group_delete+0x15f/0x4c0 [ 378.770234][T13295] ? tipc_group_update_member+0x360/0x360 [ 378.775960][T13295] ? tipc_group_self+0x26/0x1c0 [ 378.780807][T13295] tipc_sk_leave+0x154/0x4d0 [ 378.785400][T13295] ? __tipc_shutdown+0x1590/0x1590 [ 378.790520][T13295] ? _local_bh_enable+0xa0/0xa0 [ 378.795408][T13295] tipc_release+0x333/0x20e0 [ 378.799994][T13295] ? ima_get_current_hash_algo+0x10/0x10 [ 378.805631][T13295] ? tipc_sock_destruct+0x180/0x180 [ 378.810822][T13295] ? down_write+0x16e/0x200 [ 378.815324][T13295] ? down_read_killable+0x340/0x340 [ 378.820532][T13295] sock_close+0xa7/0x210 [ 378.824817][T13295] ? sock_mmap+0xa0/0xa0 [ 378.829085][T13295] __fput+0x221/0x940 [ 378.833070][T13295] __se_sys_close+0x15c/0x1e0 [ 378.837750][T13295] do_syscall_64+0x55/0xb0 [ 378.842168][T13295] ? clear_bhb_loop+0x40/0x90 [ 378.846868][T13295] ? clear_bhb_loop+0x40/0x90 [ 378.851544][T13295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.857451][T13295] RIP: 0033:0x7f0ed119e019 [ 378.861867][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.881580][T13295] RSP: 002b:00007f0ed1f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 378.889992][T13295] RAX: ffffffffffffffda RBX: 00007f0ed1425fa0 RCX: 00007f0ed119e019 [ 378.898072][T13295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 378.906052][T13295] RBP: 00007f0ed1f84090 R08: 0000000000000000 R09: 0000000000000000 [ 378.914024][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.922007][T13295] R13: 00007f0ed1426038 R14: 00007f0ed1425fa0 R15: 00007fffaefd2a18 [ 378.930005][T13295] [ 378.965033][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.972646][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.119015][T13301] netlink: 'syz.2.2856': attribute type 27 has an invalid length. [ 379.134809][T13301] __nla_validate_parse: 1 callbacks suppressed [ 379.134824][T13301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'. [ 379.418303][T13318] netlink: 'syz.1.2862': attribute type 21 has an invalid length. [ 379.444853][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2862'. [ 379.464310][T13318] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 379.555336][T13317] netlink: 'syz.2.2863': attribute type 33 has an invalid length. [ 379.573767][T13317] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2863'. [ 382.688678][T13336] veth1_macvtap: left promiscuous mode [ 382.710239][T13343] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2869'. [ 382.719650][T13336] macsec0: entered allmulticast mode [ 382.750807][T13336] veth1_macvtap: entered promiscuous mode [ 382.774498][T13336] veth1_macvtap: entered allmulticast mode [ 382.796017][T13336] macsec0: entered promiscuous mode [ 383.190061][T13358] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2874'. [ 383.199690][T13358] openvswitch: netlink: Duplicate key (type 0). [ 383.659413][T13375] FAULT_INJECTION: forcing a failure. [ 383.659413][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 383.672947][T13375] CPU: 1 PID: 13375 Comm: syz.2.2879 Not tainted syzkaller #0 [ 383.680444][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.690520][T13375] Call Trace: [ 383.693821][T13375] [ 383.696765][T13375] dump_stack_lvl+0x18c/0x250 [ 383.701473][T13375] ? kasan_set_track+0x4e/0x70 [ 383.706262][T13375] ? ____kasan_slab_free+0x126/0x1f0 [ 383.711572][T13375] ? show_regs_print_info+0x20/0x20 [ 383.716792][T13375] ? load_image+0x420/0x420 [ 383.721314][T13375] ? do_syscall_64+0x55/0xb0 [ 383.725938][T13375] should_fail_ex+0x394/0x4c0 [ 383.730651][T13375] should_failslab+0x9/0x20 [ 383.735184][T13375] slab_pre_alloc_hook+0x59/0x300 [ 383.740243][T13375] kmem_cache_alloc_node+0x5e/0x310 [ 383.745470][T13375] ? __alloc_skb+0x103/0x2c0 [ 383.750087][T13375] __alloc_skb+0x103/0x2c0 [ 383.754527][T13375] tipc_msg_create+0x4a/0x4c0 [ 383.759228][T13375] ? tipc_own_addr+0x45/0x2a0 [ 383.763929][T13375] tipc_group_proto_xmit+0xce/0x790 [ 383.769153][T13375] tipc_group_delete+0x15f/0x4c0 [ 383.774120][T13375] ? tipc_group_update_member+0x360/0x360 [ 383.779877][T13375] ? tipc_group_self+0x26/0x1c0 [ 383.784761][T13375] tipc_sk_leave+0x154/0x4d0 [ 383.789378][T13375] ? __tipc_shutdown+0x1590/0x1590 [ 383.794501][T13375] ? _local_bh_enable+0xa0/0xa0 [ 383.799357][T13375] tipc_release+0x333/0x20e0 [ 383.803945][T13375] ? ima_get_current_hash_algo+0x10/0x10 [ 383.809578][T13375] ? tipc_sock_destruct+0x180/0x180 [ 383.814770][T13375] ? down_write+0x16e/0x200 [ 383.819268][T13375] ? down_read_killable+0x340/0x340 [ 383.824466][T13375] sock_close+0xa7/0x210 [ 383.828707][T13375] ? sock_mmap+0xa0/0xa0 [ 383.832945][T13375] __fput+0x221/0x940 [ 383.836940][T13375] __se_sys_close+0x15c/0x1e0 [ 383.841628][T13375] do_syscall_64+0x55/0xb0 [ 383.846039][T13375] ? clear_bhb_loop+0x40/0x90 [ 383.850711][T13375] ? clear_bhb_loop+0x40/0x90 [ 383.855402][T13375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.861287][T13375] RIP: 0033:0x7eff7d59e019 [ 383.865697][T13375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.885300][T13375] RSP: 002b:00007eff7e4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 383.893715][T13375] RAX: ffffffffffffffda RBX: 00007eff7d825fa0 RCX: 00007eff7d59e019 [ 383.901680][T13375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 383.909643][T13375] RBP: 00007eff7e4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 383.917603][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.925565][T13375] R13: 00007eff7d826038 R14: 00007eff7d825fa0 R15: 00007ffc47f5b8d8 [ 383.933567][T13375] [ 386.829647][T13402] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2888'. [ 386.853809][T13402] netlink: 'syz.0.2888': attribute type 9 has an invalid length. [ 386.885622][T13402] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2888'. [ 389.004953][T13467] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2911'. [ 389.104407][T13469] qXGO: renamed from veth1_vlan (while UP) [ 389.627638][T13494] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 389.650813][T13494] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2917'. [ 391.050662][T13493] netlink: 'syz.1.2917': attribute type 10 has an invalid length. [ 391.196231][T13497] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2919'. [ 391.553195][T13516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2925'. [ 391.808276][T13524] FAULT_INJECTION: forcing a failure. [ 391.808276][T13524] name failslab, interval 1, probability 0, space 0, times 0 [ 391.821439][T13524] CPU: 0 PID: 13524 Comm: syz.0.2929 Not tainted syzkaller #0 [ 391.828943][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.839028][T13524] Call Trace: [ 391.842340][T13524] [ 391.845296][T13524] dump_stack_lvl+0x18c/0x250 [ 391.850006][T13524] ? verify_lock_unused+0x140/0x140 [ 391.855237][T13524] ? show_regs_print_info+0x20/0x20 [ 391.860468][T13524] ? load_image+0x420/0x420 [ 391.865023][T13524] ? __lock_acquire+0x1262/0x7d80 [ 391.870135][T13524] should_fail_ex+0x394/0x4c0 [ 391.874847][T13524] should_failslab+0x9/0x20 [ 391.879382][T13524] slab_pre_alloc_hook+0x59/0x300 [ 391.884425][T13524] kmem_cache_alloc_node+0x5e/0x310 [ 391.889839][T13524] ? __alloc_skb+0x103/0x2c0 [ 391.894466][T13524] __alloc_skb+0x103/0x2c0 [ 391.898912][T13524] tipc_msg_create+0x4a/0x4c0 [ 391.903630][T13524] ? tipc_own_addr+0x45/0x2a0 [ 391.908346][T13524] tipc_group_create_event+0x1f4/0x660 [ 391.913849][T13524] ? tipc_group_proto_rcv+0x1cd0/0x1cd0 [ 391.919418][T13524] ? tipc_group_proto_rcv+0xe12/0x1cd0 [ 391.924909][T13524] tipc_sk_proto_rcv+0x282/0x17d0 [ 391.929948][T13524] ? mark_lock+0x94/0x320 [ 391.934281][T13524] ? trace_tipc_sk_dump+0x200/0x200 [ 391.939477][T13524] ? __lock_acquire+0x1336/0x7d80 [ 391.944507][T13524] ? verify_lock_unused+0x140/0x140 [ 391.949730][T13524] ? tipc_sk_filtering+0x13c/0x510 [ 391.954846][T13524] tipc_sk_filter_rcv+0x2e65/0x3080 [ 391.960053][T13524] ? verify_lock_unused+0x140/0x140 [ 391.965268][T13524] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 391.971247][T13524] ? tipc_sk_publish+0x430/0x430 [ 391.976184][T13524] ? __local_bh_enable_ip+0x13a/0x1c0 [ 391.981566][T13524] tipc_sk_rcv+0x8c5/0x2ae0 [ 391.986072][T13524] ? deref_stack_reg+0x1ab/0x230 [ 391.991023][T13524] ? is_bpf_text_address+0x26/0x2a0 [ 391.996249][T13524] ? __skb_queue_purge+0x160/0x160 [ 392.001352][T13524] ? __asan_memset+0x22/0x40 [ 392.005939][T13524] ? lockdep_init_map_type+0x9c/0x8e0 [ 392.011314][T13524] ? net_generic+0x1e/0x240 [ 392.015811][T13524] ? __raw_spin_lock_init+0x45/0x100 [ 392.021094][T13524] tipc_node_xmit+0x22f/0x1040 [ 392.025857][T13524] ? kasan_set_track+0x5f/0x70 [ 392.030639][T13524] ? kasan_set_track+0x4e/0x70 [ 392.035401][T13524] ? kasan_save_free_info+0x28/0x40 [ 392.040611][T13524] ? slab_free_freelist_hook+0x130/0x1a0 [ 392.046256][T13524] ? __kmem_cache_free+0xba/0x1f0 [ 392.051291][T13524] ? tipc_sk_leave+0x154/0x4d0 [ 392.056056][T13524] ? tipc_release+0x333/0x20e0 [ 392.060823][T13524] ? tipc_node_get_linkname+0x190/0x190 [ 392.066365][T13524] ? do_syscall_64+0x55/0xb0 [ 392.070950][T13524] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.077024][T13524] ? mark_lock+0x94/0x320 [ 392.081375][T13524] tipc_node_distr_xmit+0x2cb/0x3f0 [ 392.086583][T13524] ? tipc_node_xmit_skb+0x190/0x190 [ 392.091780][T13524] ? tipc_group_delete+0x3b7/0x4c0 [ 392.096890][T13524] ? __kmem_cache_free+0xba/0x1f0 [ 392.101919][T13524] tipc_group_delete+0x3ef/0x4c0 [ 392.106862][T13524] ? tipc_group_update_member+0x360/0x360 [ 392.112588][T13524] ? tipc_group_self+0x26/0x1c0 [ 392.117434][T13524] tipc_sk_leave+0x154/0x4d0 [ 392.122035][T13524] ? __tipc_shutdown+0x1590/0x1590 [ 392.127148][T13524] ? _local_bh_enable+0xa0/0xa0 [ 392.132004][T13524] tipc_release+0x333/0x20e0 [ 392.136596][T13524] ? ima_get_current_hash_algo+0x10/0x10 [ 392.142232][T13524] ? tipc_sock_destruct+0x180/0x180 [ 392.147424][T13524] ? down_write+0x16e/0x200 [ 392.151927][T13524] ? down_read_killable+0x340/0x340 [ 392.157127][T13524] sock_close+0xa7/0x210 [ 392.161366][T13524] ? sock_mmap+0xa0/0xa0 [ 392.165625][T13524] __fput+0x221/0x940 [ 392.169635][T13524] __se_sys_close+0x15c/0x1e0 [ 392.174331][T13524] do_syscall_64+0x55/0xb0 [ 392.178751][T13524] ? clear_bhb_loop+0x40/0x90 [ 392.183429][T13524] ? clear_bhb_loop+0x40/0x90 [ 392.188104][T13524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.193996][T13524] RIP: 0033:0x7fb795d9e019 [ 392.198413][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.218014][T13524] RSP: 002b:00007fb796c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 392.226424][T13524] RAX: ffffffffffffffda RBX: 00007fb796025fa0 RCX: 00007fb795d9e019 [ 392.234408][T13524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 392.242384][T13524] RBP: 00007fb796c58090 R08: 0000000000000000 R09: 0000000000000000 [ 392.250356][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.258322][T13524] R13: 00007fb796026038 R14: 00007fb796025fa0 R15: 00007ffe495ad738 [ 392.266302][T13524] [ 392.380997][T13527] syzkaller0: entered promiscuous mode [ 392.386730][T13527] syzkaller0: entered allmulticast mode [ 392.399556][T13529] netlink: 'syz.0.2931': attribute type 21 has an invalid length. [ 392.415519][T13529] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2931'. [ 393.420310][T13550] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2937'. [ 393.441229][T13550] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 393.449694][T13550] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 394.884239][T13555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2939'. [ 394.906337][T13555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2939'. [ 394.935298][T13555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2939'. [ 394.955464][T13555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2939'. [ 395.005765][T13560] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2942'. [ 395.014222][T13563] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2943'. [ 395.049794][T13564] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2943'. [ 396.250979][T13585] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2950'. [ 396.282284][T13585] netlink: zone id is out of range [ 396.607090][T13597] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 396.674046][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.703619][T13597] bridge_slave_1: left allmulticast mode [ 396.717470][T13597] bridge_slave_1: left promiscuous mode [ 396.734137][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.774927][ T5770] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 396.836881][T13597] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 398.534448][T13634] delete_channel: no stack [ 398.562372][T13652] __nla_validate_parse: 5 callbacks suppressed [ 398.562388][T13652] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2971'. [ 398.796944][T13661] FAULT_INJECTION: forcing a failure. [ 398.796944][T13661] name failslab, interval 1, probability 0, space 0, times 0 [ 398.809624][T13661] CPU: 0 PID: 13661 Comm: syz.1.2975 Not tainted syzkaller #0 [ 398.817107][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.827179][T13661] Call Trace: [ 398.830477][T13661] [ 398.833404][T13661] dump_stack_lvl+0x18c/0x250 [ 398.838086][T13661] ? verify_lock_unused+0x140/0x140 [ 398.843286][T13661] ? show_regs_print_info+0x20/0x20 [ 398.848481][T13661] ? load_image+0x420/0x420 [ 398.852986][T13661] ? kernel_text_address+0xa0/0xd0 [ 398.858095][T13661] ? __kernel_text_address+0xd/0x30 [ 398.863290][T13661] ? unwind_get_return_address+0x91/0xc0 [ 398.868923][T13661] should_fail_ex+0x394/0x4c0 [ 398.873601][T13661] should_failslab+0x9/0x20 [ 398.878102][T13661] slab_pre_alloc_hook+0x59/0x300 [ 398.883230][T13661] kmem_cache_alloc_node+0x5e/0x310 [ 398.888449][T13661] ? __alloc_skb+0x103/0x2c0 [ 398.893046][T13661] __alloc_skb+0x103/0x2c0 [ 398.897475][T13661] tipc_msg_create+0x4a/0x4c0 [ 398.902173][T13661] ? tipc_own_addr+0x45/0x2a0 [ 398.906862][T13661] tipc_group_create_event+0x1f4/0x660 [ 398.912331][T13661] ? tipc_group_proto_rcv+0x1cd0/0x1cd0 [ 398.917883][T13661] ? tipc_group_proto_rcv+0xe12/0x1cd0 [ 398.923349][T13661] tipc_sk_proto_rcv+0x282/0x17d0 [ 398.928380][T13661] ? mark_lock+0x94/0x320 [ 398.932711][T13661] ? trace_tipc_sk_dump+0x200/0x200 [ 398.937914][T13661] ? __lock_acquire+0x1336/0x7d80 [ 398.942935][T13661] ? verify_lock_unused+0x140/0x140 [ 398.948128][T13661] ? tipc_sk_filtering+0x13c/0x510 [ 398.953242][T13661] tipc_sk_filter_rcv+0x2e65/0x3080 [ 398.958447][T13661] ? verify_lock_unused+0x140/0x140 [ 398.963659][T13661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 398.969651][T13661] ? tipc_sk_publish+0x430/0x430 [ 398.974587][T13661] ? __local_bh_enable_ip+0x13a/0x1c0 [ 398.979979][T13661] tipc_sk_rcv+0x8c5/0x2ae0 [ 398.984482][T13661] ? deref_stack_reg+0x1ab/0x230 [ 398.989414][T13661] ? is_bpf_text_address+0x26/0x2a0 [ 398.994631][T13661] ? __skb_queue_purge+0x160/0x160 [ 398.999745][T13661] ? __asan_memset+0x22/0x40 [ 399.004340][T13661] ? lockdep_init_map_type+0x9c/0x8e0 [ 399.009717][T13661] ? net_generic+0x1e/0x240 [ 399.014217][T13661] ? __raw_spin_lock_init+0x45/0x100 [ 399.019502][T13661] tipc_node_xmit+0x22f/0x1040 [ 399.024260][T13661] ? kasan_set_track+0x5f/0x70 [ 399.029020][T13661] ? kasan_set_track+0x4e/0x70 [ 399.033780][T13661] ? kasan_save_free_info+0x28/0x40 [ 399.038972][T13661] ? slab_free_freelist_hook+0x130/0x1a0 [ 399.044594][T13661] ? __kmem_cache_free+0xba/0x1f0 [ 399.049619][T13661] ? tipc_sk_leave+0x154/0x4d0 [ 399.054379][T13661] ? tipc_release+0x333/0x20e0 [ 399.059139][T13661] ? tipc_node_get_linkname+0x190/0x190 [ 399.064681][T13661] ? do_syscall_64+0x55/0xb0 [ 399.069263][T13661] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.075337][T13661] ? mark_lock+0x94/0x320 [ 399.079670][T13661] tipc_node_distr_xmit+0x2cb/0x3f0 [ 399.084874][T13661] ? tipc_node_xmit_skb+0x190/0x190 [ 399.090070][T13661] ? tipc_group_delete+0x3b7/0x4c0 [ 399.095180][T13661] ? __kmem_cache_free+0xba/0x1f0 [ 399.100205][T13661] tipc_group_delete+0x3ef/0x4c0 [ 399.105147][T13661] ? tipc_group_update_member+0x360/0x360 [ 399.110877][T13661] ? tipc_group_self+0x26/0x1c0 [ 399.115727][T13661] tipc_sk_leave+0x154/0x4d0 [ 399.120319][T13661] ? __tipc_shutdown+0x1590/0x1590 [ 399.125428][T13661] ? _local_bh_enable+0xa0/0xa0 [ 399.130279][T13661] tipc_release+0x333/0x20e0 [ 399.134870][T13661] ? ima_get_current_hash_algo+0x10/0x10 [ 399.140505][T13661] ? tipc_sock_destruct+0x180/0x180 [ 399.145695][T13661] ? down_write+0x16e/0x200 [ 399.150194][T13661] ? down_read_killable+0x340/0x340 [ 399.155480][T13661] sock_close+0xa7/0x210 [ 399.159719][T13661] ? sock_mmap+0xa0/0xa0 [ 399.163960][T13661] __fput+0x221/0x940 [ 399.167944][T13661] __se_sys_close+0x15c/0x1e0 [ 399.172618][T13661] do_syscall_64+0x55/0xb0 [ 399.177036][T13661] ? clear_bhb_loop+0x40/0x90 [ 399.181720][T13661] ? clear_bhb_loop+0x40/0x90 [ 399.186401][T13661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.192287][T13661] RIP: 0033:0x7f0ed119e019 [ 399.196696][T13661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.216309][T13661] RSP: 002b:00007f0ed1f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 399.224721][T13661] RAX: ffffffffffffffda RBX: 00007f0ed1425fa0 RCX: 00007f0ed119e019 [ 399.232689][T13661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 399.240653][T13661] RBP: 00007f0ed1f84090 R08: 0000000000000000 R09: 0000000000000000 [ 399.248615][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.256577][T13661] R13: 00007f0ed1426038 R14: 00007f0ed1425fa0 R15: 00007fffaefd2a18 [ 399.264556][T13661] [ 399.703130][T13677] lo: entered allmulticast mode [ 399.727418][T13677] bY4`Ҙ: renamed from lo [ 399.862410][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.878088][T13681] netlink: 'syz.3.2982': attribute type 2 has an invalid length. [ 399.886828][T13681] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2982'. [ 399.901403][T13689] FAULT_INJECTION: forcing a failure. [ 399.901403][T13689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.920461][T13689] CPU: 1 PID: 13689 Comm: syz.1.2985 Not tainted syzkaller #0 [ 399.927960][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.938021][T13689] Call Trace: [ 399.941294][T13689] [ 399.944219][T13689] dump_stack_lvl+0x18c/0x250 [ 399.948897][T13689] ? show_regs_print_info+0x20/0x20 [ 399.954097][T13689] ? load_image+0x420/0x420 [ 399.958602][T13689] ? __lock_acquire+0x7d80/0x7d80 [ 399.963646][T13689] ? snprintf+0xe9/0x140 [ 399.967919][T13689] should_fail_ex+0x394/0x4c0 [ 399.972606][T13689] _copy_to_user+0x2f/0xa0 [ 399.977029][T13689] simple_read_from_buffer+0xe7/0x150 [ 399.982417][T13689] proc_fail_nth_read+0x1e8/0x260 [ 399.987478][T13689] ? proc_fault_inject_write+0x360/0x360 [ 399.993121][T13689] ? fsnotify_perm+0x271/0x5e0 [ 399.997899][T13689] ? proc_fault_inject_write+0x360/0x360 [ 400.003535][T13689] vfs_read+0x298/0x990 [ 400.007694][T13689] ? kernel_read+0x1e0/0x1e0 [ 400.012287][T13689] ? __fget_files+0x28/0x460 [ 400.016877][T13689] ? __fget_files+0x3fc/0x460 [ 400.021558][T13689] ? __fdget_pos+0x2a3/0x330 [ 400.026143][T13689] ? ksys_read+0x74/0x260 [ 400.030470][T13689] ksys_read+0x151/0x260 [ 400.034714][T13689] ? vfs_write+0x9a0/0x9a0 [ 400.039147][T13689] ? lockdep_hardirqs_on+0x98/0x150 [ 400.044386][T13689] do_syscall_64+0x55/0xb0 [ 400.048801][T13689] ? clear_bhb_loop+0x40/0x90 [ 400.053477][T13689] ? clear_bhb_loop+0x40/0x90 [ 400.058153][T13689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.064045][T13689] RIP: 0033:0x7f0ed115e84e [ 400.068458][T13689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.088059][T13689] RSP: 002b:00007f0ed1f83fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.096480][T13689] RAX: ffffffffffffffda RBX: 00007f0ed1f846c0 RCX: 00007f0ed115e84e [ 400.104465][T13689] RDX: 000000000000000f RSI: 00007f0ed1f840a0 RDI: 0000000000000009 [ 400.112432][T13689] RBP: 00007f0ed1f84090 R08: 0000000000000000 R09: 0000000000000000 [ 400.120421][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.128387][T13689] R13: 00007f0ed1426038 R14: 00007f0ed1425fa0 R15: 00007fffaefd2a18 [ 400.136365][T13689] [ 400.202727][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.210002][T13687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.313135][T13697] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2986'. [ 400.376623][T13697] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2986'. [ 400.448419][T13701] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.2989'. [ 400.464062][T13701] netlink: 'syz.0.2989': attribute type 7 has an invalid length. [ 400.473657][T13701] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.2989'. [ 401.087227][T13722] FAULT_INJECTION: forcing a failure. [ 401.087227][T13722] name failslab, interval 1, probability 0, space 0, times 0 [ 401.099927][T13722] CPU: 1 PID: 13722 Comm: syz.0.2997 Not tainted syzkaller #0 [ 401.107409][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.117480][T13722] Call Trace: [ 401.120770][T13722] [ 401.123712][T13722] dump_stack_lvl+0x18c/0x250 [ 401.128408][T13722] ? verify_lock_unused+0x140/0x140 [ 401.133630][T13722] ? show_regs_print_info+0x20/0x20 [ 401.138851][T13722] ? load_image+0x420/0x420 [ 401.143397][T13722] ? kernel_text_address+0xa0/0xd0 [ 401.148538][T13722] ? __kernel_text_address+0xd/0x30 [ 401.153764][T13722] ? unwind_get_return_address+0x91/0xc0 [ 401.159424][T13722] should_fail_ex+0x394/0x4c0 [ 401.164138][T13722] should_failslab+0x9/0x20 [ 401.168664][T13722] slab_pre_alloc_hook+0x59/0x300 [ 401.173721][T13722] kmem_cache_alloc_node+0x5e/0x310 [ 401.178947][T13722] ? __alloc_skb+0x103/0x2c0 [ 401.183566][T13722] __alloc_skb+0x103/0x2c0 [ 401.188010][T13722] tipc_msg_create+0x4a/0x4c0 [ 401.192723][T13722] ? tipc_own_addr+0x45/0x2a0 [ 401.197446][T13722] tipc_group_create_event+0x1f4/0x660 [ 401.202943][T13722] ? tipc_group_proto_rcv+0x1cd0/0x1cd0 [ 401.208520][T13722] ? tipc_group_proto_rcv+0xe12/0x1cd0 [ 401.214012][T13722] tipc_sk_proto_rcv+0x282/0x17d0 [ 401.219075][T13722] ? mark_lock+0x94/0x320 [ 401.223438][T13722] ? trace_tipc_sk_dump+0x200/0x200 [ 401.228655][T13722] ? __lock_acquire+0x1336/0x7d80 [ 401.233698][T13722] ? verify_lock_unused+0x140/0x140 [ 401.238930][T13722] ? tipc_sk_filtering+0x13c/0x510 [ 401.244068][T13722] tipc_sk_filter_rcv+0x2e65/0x3080 [ 401.249310][T13722] ? verify_lock_unused+0x140/0x140 [ 401.254558][T13722] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.260561][T13722] ? tipc_sk_publish+0x430/0x430 [ 401.265523][T13722] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.270928][T13722] tipc_sk_rcv+0x8c5/0x2ae0 [ 401.275497][T13722] ? deref_stack_reg+0x1ab/0x230 [ 401.280454][T13722] ? is_bpf_text_address+0x26/0x2a0 [ 401.285700][T13722] ? __skb_queue_purge+0x160/0x160 [ 401.290836][T13722] ? __asan_memset+0x22/0x40 [ 401.295458][T13722] ? lockdep_init_map_type+0x9c/0x8e0 [ 401.300864][T13722] ? net_generic+0x1e/0x240 [ 401.305473][T13722] ? __raw_spin_lock_init+0x45/0x100 [ 401.310781][T13722] tipc_node_xmit+0x22f/0x1040 [ 401.315576][T13722] ? kasan_set_track+0x5f/0x70 [ 401.320361][T13722] ? kasan_set_track+0x4e/0x70 [ 401.325140][T13722] ? kasan_save_free_info+0x28/0x40 [ 401.330355][T13722] ? slab_free_freelist_hook+0x130/0x1a0 [ 401.336002][T13722] ? __kmem_cache_free+0xba/0x1f0 [ 401.341045][T13722] ? tipc_sk_leave+0x154/0x4d0 [ 401.345827][T13722] ? tipc_release+0x333/0x20e0 [ 401.350608][T13722] ? tipc_node_get_linkname+0x190/0x190 [ 401.356169][T13722] ? do_syscall_64+0x55/0xb0 [ 401.360769][T13722] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.366884][T13722] ? mark_lock+0x94/0x320 [ 401.371239][T13722] tipc_node_distr_xmit+0x2cb/0x3f0 [ 401.376465][T13722] ? tipc_node_xmit_skb+0x190/0x190 [ 401.381690][T13722] ? tipc_group_delete+0x3b7/0x4c0 [ 401.386819][T13722] ? __kmem_cache_free+0xba/0x1f0 [ 401.391897][T13722] tipc_group_delete+0x3ef/0x4c0 [ 401.396868][T13722] ? tipc_group_update_member+0x360/0x360 [ 401.402620][T13722] ? tipc_group_self+0x26/0x1c0 [ 401.407494][T13722] tipc_sk_leave+0x154/0x4d0 [ 401.412112][T13722] ? __tipc_shutdown+0x1590/0x1590 [ 401.417237][T13722] ? _local_bh_enable+0xa0/0xa0 [ 401.422109][T13722] tipc_release+0x333/0x20e0 [ 401.426713][T13722] ? ima_get_current_hash_algo+0x10/0x10 [ 401.432398][T13722] ? tipc_sock_destruct+0x180/0x180 [ 401.437608][T13722] ? down_write+0x16e/0x200 [ 401.442128][T13722] ? down_read_killable+0x340/0x340 [ 401.447353][T13722] sock_close+0xa7/0x210 [ 401.451616][T13722] ? sock_mmap+0xa0/0xa0 [ 401.455872][T13722] __fput+0x221/0x940 [ 401.459880][T13722] __se_sys_close+0x15c/0x1e0 [ 401.464581][T13722] do_syscall_64+0x55/0xb0 [ 401.469015][T13722] ? clear_bhb_loop+0x40/0x90 [ 401.473707][T13722] ? clear_bhb_loop+0x40/0x90 [ 401.478396][T13722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.484301][T13722] RIP: 0033:0x7fb795d9e019 [ 401.488725][T13722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.508347][T13722] RSP: 002b:00007fb796c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 401.516775][T13722] RAX: ffffffffffffffda RBX: 00007fb796025fa0 RCX: 00007fb795d9e019 [ 401.524759][T13722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 401.532738][T13722] RBP: 00007fb796c58090 R08: 0000000000000000 R09: 0000000000000000 [ 401.540723][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.548705][T13722] R13: 00007fb796026038 R14: 00007fb796025fa0 R15: 00007ffe495ad738 [ 401.556720][T13722] [ 401.569720][ T6185] hsr_slave_0: left promiscuous mode [ 401.582633][ T6185] hsr_slave_1: left promiscuous mode [ 401.662130][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.692893][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.753028][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.761485][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.795816][ T6185] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 401.802924][ T6185] batman_adv: batadv0: Removing interface: virt_wifi0 [ 401.812191][T13737] FAULT_INJECTION: forcing a failure. [ 401.812191][T13737] name failslab, interval 1, probability 0, space 0, times 0 [ 401.824859][T13737] CPU: 1 PID: 13737 Comm: syz.2.3010 Not tainted syzkaller #0 [ 401.832340][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.842413][T13737] Call Trace: [ 401.845707][T13737] [ 401.848654][T13737] dump_stack_lvl+0x18c/0x250 [ 401.854137][T13737] ? verify_lock_unused+0x140/0x140 [ 401.859363][T13737] ? show_regs_print_info+0x20/0x20 [ 401.864594][T13737] ? load_image+0x420/0x420 [ 401.869136][T13737] ? kernel_text_address+0xa0/0xd0 [ 401.874283][T13737] ? __kernel_text_address+0xd/0x30 [ 401.879511][T13737] ? unwind_get_return_address+0x91/0xc0 [ 401.885168][T13737] should_fail_ex+0x394/0x4c0 [ 401.889883][T13737] should_failslab+0x9/0x20 [ 401.894450][T13737] slab_pre_alloc_hook+0x59/0x300 [ 401.899511][T13737] kmem_cache_alloc_node+0x5e/0x310 [ 401.904715][T13737] ? __alloc_skb+0x103/0x2c0 [ 401.909303][T13737] __alloc_skb+0x103/0x2c0 [ 401.913719][T13737] tipc_msg_create+0x4a/0x4c0 [ 401.918418][T13737] ? tipc_own_addr+0x45/0x2a0 [ 401.923098][T13737] tipc_group_create_event+0x1f4/0x660 [ 401.928567][T13737] ? tipc_group_proto_rcv+0x1cd0/0x1cd0 [ 401.934115][T13737] ? tipc_group_proto_rcv+0xe12/0x1cd0 [ 401.939599][T13737] tipc_sk_proto_rcv+0x282/0x17d0 [ 401.944630][T13737] ? mark_lock+0x94/0x320 [ 401.948967][T13737] ? trace_tipc_sk_dump+0x200/0x200 [ 401.954161][T13737] ? __lock_acquire+0x1336/0x7d80 [ 401.959183][T13737] ? verify_lock_unused+0x140/0x140 [ 401.964387][T13737] ? tipc_sk_filtering+0x13c/0x510 [ 401.969501][T13737] tipc_sk_filter_rcv+0x2e65/0x3080 [ 401.974718][T13737] ? verify_lock_unused+0x140/0x140 [ 401.979934][T13737] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.985922][T13737] ? tipc_sk_publish+0x430/0x430 [ 401.990881][T13737] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.996288][T13737] tipc_sk_rcv+0x8c5/0x2ae0 [ 402.000797][T13737] ? deref_stack_reg+0x1ab/0x230 [ 402.005727][T13737] ? is_bpf_text_address+0x26/0x2a0 [ 402.010943][T13737] ? __skb_queue_purge+0x160/0x160 [ 402.016050][T13737] ? __asan_memset+0x22/0x40 [ 402.020658][T13737] ? lockdep_init_map_type+0x9c/0x8e0 [ 402.026061][T13737] ? net_generic+0x1e/0x240 [ 402.030602][T13737] ? __raw_spin_lock_init+0x45/0x100 [ 402.035892][T13737] tipc_node_xmit+0x22f/0x1040 [ 402.040652][T13737] ? kasan_set_track+0x5f/0x70 [ 402.045411][T13737] ? kasan_set_track+0x4e/0x70 [ 402.050171][T13737] ? kasan_save_free_info+0x28/0x40 [ 402.055363][T13737] ? slab_free_freelist_hook+0x130/0x1a0 [ 402.060987][T13737] ? __kmem_cache_free+0xba/0x1f0 [ 402.066017][T13737] ? tipc_sk_leave+0x154/0x4d0 [ 402.070775][T13737] ? tipc_release+0x333/0x20e0 [ 402.075581][T13737] ? tipc_node_get_linkname+0x190/0x190 [ 402.081182][T13737] ? do_syscall_64+0x55/0xb0 [ 402.085776][T13737] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.091854][T13737] ? mark_lock+0x94/0x320 [ 402.096193][T13737] tipc_node_distr_xmit+0x2cb/0x3f0 [ 402.101393][T13737] ? tipc_node_xmit_skb+0x190/0x190 [ 402.106612][T13737] ? tipc_group_delete+0x3b7/0x4c0 [ 402.111737][T13737] ? __kmem_cache_free+0xba/0x1f0 [ 402.116778][T13737] tipc_group_delete+0x3ef/0x4c0 [ 402.121730][T13737] ? tipc_group_update_member+0x360/0x360 [ 402.127463][T13737] ? tipc_group_self+0x26/0x1c0 [ 402.132317][T13737] tipc_sk_leave+0x154/0x4d0 [ 402.136913][T13737] ? __tipc_shutdown+0x1590/0x1590 [ 402.142026][T13737] ? _local_bh_enable+0xa0/0xa0 [ 402.146877][T13737] tipc_release+0x333/0x20e0 [ 402.151466][T13737] ? ima_get_current_hash_algo+0x10/0x10 [ 402.157101][T13737] ? tipc_sock_destruct+0x180/0x180 [ 402.162295][T13737] ? down_write+0x16e/0x200 [ 402.166801][T13737] ? down_read_killable+0x340/0x340 [ 402.172012][T13737] sock_close+0xa7/0x210 [ 402.176253][T13737] ? sock_mmap+0xa0/0xa0 [ 402.180491][T13737] __fput+0x221/0x940 [ 402.184478][T13737] __se_sys_close+0x15c/0x1e0 [ 402.189157][T13737] do_syscall_64+0x55/0xb0 [ 402.193567][T13737] ? clear_bhb_loop+0x40/0x90 [ 402.198244][T13737] ? clear_bhb_loop+0x40/0x90 [ 402.202917][T13737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.208804][T13737] RIP: 0033:0x7eff7d59e019 [ 402.213222][T13737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.232843][T13737] RSP: 002b:00007eff7e4d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 402.241265][T13737] RAX: ffffffffffffffda RBX: 00007eff7d825fa0 RCX: 00007eff7d59e019 [ 402.249237][T13737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 402.257221][T13737] RBP: 00007eff7e4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 402.265202][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.273174][T13737] R13: 00007eff7d826038 R14: 00007eff7d825fa0 R15: 00007ffc47f5b8d8 [ 402.281160][T13737] [ 402.331488][ T6185] veth1_macvtap: left promiscuous mode [ 402.353635][ T6185] veth1_vlan: left allmulticast mode [ 402.375088][ T6185] veth1_vlan: left promiscuous mode [ 402.382891][T13741] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.3002'. [ 402.399767][ T6185] veth0_vlan: left promiscuous mode [ 402.413783][T13741] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.3002'. [ 402.705018][ T5770] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 402.793318][T13757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3005'. [ 402.927176][T13762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'. [ 403.013057][ T6185] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 403.335342][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 403.375904][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 403.415435][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.461777][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.774068][ T6185] bond0 (unregistering): Released all slaves [ 403.814740][T13745] netlink: 'syz.1.3003': attribute type 10 has an invalid length. [ 403.830201][T13757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3005'. [ 403.850884][T13760] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 403.926003][T13760] veth0_vlan: left promiscuous mode [ 403.951115][T13760] veth0_vlan: entered promiscuous mode [ 403.969926][T13760] team0: Device veth0_vlan failed to register rx_handler [ 404.021978][T13762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'. [ 404.326365][T13780] FAULT_INJECTION: forcing a failure. [ 404.326365][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 404.339493][T13780] CPU: 0 PID: 13780 Comm: syz.3.3014 Not tainted syzkaller #0 [ 404.346988][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.357074][T13780] Call Trace: [ 404.360380][T13780] [ 404.363326][T13780] dump_stack_lvl+0x18c/0x250 [ 404.368050][T13780] ? show_regs_print_info+0x20/0x20 [ 404.373280][T13780] ? load_image+0x420/0x420 [ 404.377855][T13780] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.383263][T13780] ? lockdep_hardirqs_on+0x98/0x150 [ 404.388504][T13780] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.393907][T13780] should_fail_ex+0x394/0x4c0 [ 404.398624][T13780] should_failslab+0x9/0x20 [ 404.403153][T13780] slab_pre_alloc_hook+0x59/0x300 [ 404.408204][T13780] ? tipc_conn_lookup+0x1e6/0x270 [ 404.413260][T13780] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 404.418656][T13780] __kmem_cache_alloc_node+0x53/0x250 [ 404.424064][T13780] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 404.429456][T13780] kmalloc_trace+0x2a/0xe0 [ 404.433895][T13780] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 404.439117][T13780] tipc_sub_report_overlap+0x4b8/0x8a0 [ 404.444614][T13780] tipc_nametbl_remove_publ+0xcda/0x1ab0 [ 404.450303][T13780] tipc_nametbl_withdraw+0x7e/0x270 [ 404.455529][T13780] tipc_sk_leave+0x44f/0x4d0 [ 404.460170][T13780] ? __tipc_shutdown+0x1590/0x1590 [ 404.465303][T13780] ? _local_bh_enable+0xa0/0xa0 [ 404.470191][T13780] tipc_release+0x333/0x20e0 [ 404.474796][T13780] ? ima_get_current_hash_algo+0x10/0x10 [ 404.480462][T13780] ? tipc_sock_destruct+0x180/0x180 [ 404.485668][T13780] ? down_write+0x16e/0x200 [ 404.490189][T13780] ? down_read_killable+0x340/0x340 [ 404.495426][T13780] sock_close+0xa7/0x210 [ 404.499695][T13780] ? sock_mmap+0xa0/0xa0 [ 404.503951][T13780] __fput+0x221/0x940 [ 404.507976][T13780] __se_sys_close+0x15c/0x1e0 [ 404.512677][T13780] do_syscall_64+0x55/0xb0 [ 404.517102][T13780] ? clear_bhb_loop+0x40/0x90 [ 404.521798][T13780] ? clear_bhb_loop+0x40/0x90 [ 404.526506][T13780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.532413][T13780] RIP: 0033:0x7feb68f9e019 [ 404.536846][T13780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.556464][T13780] RSP: 002b:00007feb69e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 404.564895][T13780] RAX: ffffffffffffffda RBX: 00007feb69225fa0 RCX: 00007feb68f9e019 [ 404.572875][T13780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 404.580854][T13780] RBP: 00007feb69e36090 R08: 0000000000000000 R09: 0000000000000000 [ 404.588848][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.596841][T13780] R13: 00007feb69226038 R14: 00007feb69225fa0 R15: 00007ffc709ae118 [ 404.604863][T13780] [ 405.025258][T13797] netlink: 'syz.2.3019': attribute type 9 has an invalid length. [ 405.041893][T13797] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3019'. [ 405.177008][T13793] netlink: 'syz.3.3018': attribute type 10 has an invalid length. [ 405.219773][T13793] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 405.245601][T13803] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3022'. [ 405.335437][ T5770] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 406.100669][T13822] FAULT_INJECTION: forcing a failure. [ 406.100669][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 406.113360][T13822] CPU: 0 PID: 13822 Comm: syz.3.3027 Not tainted syzkaller #0 [ 406.120846][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.130924][T13822] Call Trace: [ 406.134226][T13822] [ 406.137176][T13822] dump_stack_lvl+0x18c/0x250 [ 406.141879][T13822] ? show_regs_print_info+0x20/0x20 [ 406.147104][T13822] ? load_image+0x420/0x420 [ 406.151632][T13822] ? __local_bh_enable_ip+0x13a/0x1c0 [ 406.157025][T13822] ? lockdep_hardirqs_on+0x98/0x150 [ 406.162262][T13822] ? __local_bh_enable_ip+0x13a/0x1c0 [ 406.167678][T13822] should_fail_ex+0x394/0x4c0 [ 406.172391][T13822] should_failslab+0x9/0x20 [ 406.176921][T13822] slab_pre_alloc_hook+0x59/0x300 [ 406.181981][T13822] ? tipc_conn_lookup+0x1e6/0x270 [ 406.187036][T13822] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 406.192474][T13822] __kmem_cache_alloc_node+0x53/0x250 [ 406.197880][T13822] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 406.203284][T13822] kmalloc_trace+0x2a/0xe0 [ 406.207732][T13822] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 406.212964][T13822] tipc_sub_report_overlap+0x4b8/0x8a0 [ 406.218459][T13822] tipc_nametbl_remove_publ+0xcda/0x1ab0 [ 406.224132][T13822] tipc_nametbl_withdraw+0x7e/0x270 [ 406.229361][T13822] tipc_sk_leave+0x44f/0x4d0 [ 406.233986][T13822] ? __tipc_shutdown+0x1590/0x1590 [ 406.239130][T13822] ? _local_bh_enable+0xa0/0xa0 [ 406.244030][T13822] tipc_release+0x333/0x20e0 [ 406.248658][T13822] ? ima_get_current_hash_algo+0x10/0x10 [ 406.254336][T13822] ? tipc_sock_destruct+0x180/0x180 [ 406.259557][T13822] ? down_write+0x16e/0x200 [ 406.264090][T13822] ? down_read_killable+0x340/0x340 [ 406.269327][T13822] sock_close+0xa7/0x210 [ 406.273594][T13822] ? sock_mmap+0xa0/0xa0 [ 406.277868][T13822] __fput+0x221/0x940 [ 406.281885][T13822] __se_sys_close+0x15c/0x1e0 [ 406.286588][T13822] do_syscall_64+0x55/0xb0 [ 406.291027][T13822] ? clear_bhb_loop+0x40/0x90 [ 406.295732][T13822] ? clear_bhb_loop+0x40/0x90 [ 406.300439][T13822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.306353][T13822] RIP: 0033:0x7feb68f9e019 [ 406.310787][T13822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.330414][T13822] RSP: 002b:00007feb69e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 406.338873][T13822] RAX: ffffffffffffffda RBX: 00007feb69225fa0 RCX: 00007feb68f9e019 [ 406.346869][T13822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 406.354861][T13822] RBP: 00007feb69e36090 R08: 0000000000000000 R09: 0000000000000000 [ 406.362863][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.370855][T13822] R13: 00007feb69226038 R14: 00007feb69225fa0 R15: 00007ffc709ae118 [ 406.378865][T13822] [ 406.574796][T13845] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3034'. [ 407.116317][T13864] macvlan0: entered promiscuous mode [ 407.147081][T13864] macvlan0: entered allmulticast mode [ 407.159038][T13864] qXGO: entered allmulticast mode [ 407.630679][T13887] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 407.645344][T13887] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3042'. [ 407.680798][T13887] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 407.696056][T13888] FAULT_INJECTION: forcing a failure. [ 407.696056][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 407.708782][T13888] CPU: 0 PID: 13888 Comm: syz.1.3043 Not tainted syzkaller #0 [ 407.716261][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.726336][T13888] Call Trace: [ 407.729630][T13888] [ 407.732576][T13888] dump_stack_lvl+0x18c/0x250 [ 407.737288][T13888] ? show_regs_print_info+0x20/0x20 [ 407.742516][T13888] ? load_image+0x420/0x420 [ 407.747049][T13888] ? __local_bh_enable_ip+0x13a/0x1c0 [ 407.752443][T13888] ? lockdep_hardirqs_on+0x98/0x150 [ 407.757673][T13888] ? __local_bh_enable_ip+0x13a/0x1c0 [ 407.763058][T13888] should_fail_ex+0x394/0x4c0 [ 407.767739][T13888] should_failslab+0x9/0x20 [ 407.772239][T13888] slab_pre_alloc_hook+0x59/0x300 [ 407.777261][T13888] ? tipc_conn_lookup+0x1e6/0x270 [ 407.782283][T13888] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 407.787652][T13888] __kmem_cache_alloc_node+0x53/0x250 [ 407.793023][T13888] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 407.798390][T13888] kmalloc_trace+0x2a/0xe0 [ 407.802814][T13888] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 407.808011][T13888] tipc_sub_report_overlap+0x4b8/0x8a0 [ 407.813479][T13888] tipc_nametbl_remove_publ+0xcda/0x1ab0 [ 407.819121][T13888] tipc_nametbl_withdraw+0x7e/0x270 [ 407.824319][T13888] tipc_sk_leave+0x44f/0x4d0 [ 407.828906][T13888] ? __tipc_shutdown+0x1590/0x1590 [ 407.834013][T13888] ? _local_bh_enable+0xa0/0xa0 [ 407.838865][T13888] tipc_release+0x333/0x20e0 [ 407.843447][T13888] ? ima_get_current_hash_algo+0x10/0x10 [ 407.849087][T13888] ? tipc_sock_destruct+0x180/0x180 [ 407.854279][T13888] ? down_write+0x16e/0x200 [ 407.858777][T13888] ? down_read_killable+0x340/0x340 [ 407.863981][T13888] sock_close+0xa7/0x210 [ 407.868221][T13888] ? sock_mmap+0xa0/0xa0 [ 407.872462][T13888] __fput+0x221/0x940 [ 407.876443][T13888] __se_sys_close+0x15c/0x1e0 [ 407.881121][T13888] do_syscall_64+0x55/0xb0 [ 407.885531][T13888] ? clear_bhb_loop+0x40/0x90 [ 407.890200][T13888] ? clear_bhb_loop+0x40/0x90 [ 407.894869][T13888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.900755][T13888] RIP: 0033:0x7f0ed119e019 [ 407.905165][T13888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.924771][T13888] RSP: 002b:00007f0ed1f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 407.933178][T13888] RAX: ffffffffffffffda RBX: 00007f0ed1425fa0 RCX: 00007f0ed119e019 [ 407.941143][T13888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 407.949107][T13888] RBP: 00007f0ed1f84090 R08: 0000000000000000 R09: 0000000000000000 [ 407.957068][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.965037][T13888] R13: 00007f0ed1426038 R14: 00007f0ed1425fa0 R15: 00007fffaefd2a18 [ 407.973013][T13888] [ 407.981340][T13887] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3042'. [ 408.431392][T13910] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3046'. [ 408.467597][T13913] netlink: 'syz.3.3048': attribute type 29 has an invalid length. [ 408.477773][T13910] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3046'. [ 408.496997][T13913] netlink: 'syz.3.3048': attribute type 3 has an invalid length. [ 408.527651][T13913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3048'. [ 408.739981][T13931] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 408.755075][T13935] FAULT_INJECTION: forcing a failure. [ 408.755075][T13935] name failslab, interval 1, probability 0, space 0, times 0 [ 408.768905][T13935] CPU: 0 PID: 13935 Comm: syz.0.3052 Not tainted syzkaller #0 [ 408.776369][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.786416][T13935] Call Trace: [ 408.789689][T13935] [ 408.792611][T13935] dump_stack_lvl+0x18c/0x250 [ 408.797293][T13935] ? show_regs_print_info+0x20/0x20 [ 408.802481][T13935] ? load_image+0x420/0x420 [ 408.806980][T13935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 408.812345][T13935] ? lockdep_hardirqs_on+0x98/0x150 [ 408.817541][T13935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 408.822916][T13935] should_fail_ex+0x394/0x4c0 [ 408.827624][T13935] should_failslab+0x9/0x20 [ 408.832124][T13935] slab_pre_alloc_hook+0x59/0x300 [ 408.837149][T13935] ? tipc_conn_lookup+0x1e6/0x270 [ 408.842169][T13935] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 408.847537][T13935] __kmem_cache_alloc_node+0x53/0x250 [ 408.852911][T13935] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 408.858281][T13935] kmalloc_trace+0x2a/0xe0 [ 408.862696][T13935] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 408.867900][T13935] tipc_sub_report_overlap+0x4b8/0x8a0 [ 408.873366][T13935] tipc_nametbl_remove_publ+0xcda/0x1ab0 [ 408.879004][T13935] tipc_nametbl_withdraw+0x7e/0x270 [ 408.884204][T13935] tipc_sk_leave+0x44f/0x4d0 [ 408.888794][T13935] ? __tipc_shutdown+0x1590/0x1590 [ 408.893902][T13935] ? _local_bh_enable+0xa0/0xa0 [ 408.898752][T13935] tipc_release+0x333/0x20e0 [ 408.903337][T13935] ? ima_get_current_hash_algo+0x10/0x10 [ 408.908995][T13935] ? tipc_sock_destruct+0x180/0x180 [ 408.914185][T13935] ? down_write+0x16e/0x200 [ 408.918681][T13935] ? down_read_killable+0x340/0x340 [ 408.923879][T13935] sock_close+0xa7/0x210 [ 408.928125][T13935] ? sock_mmap+0xa0/0xa0 [ 408.932357][T13935] __fput+0x221/0x940 [ 408.936342][T13935] __se_sys_close+0x15c/0x1e0 [ 408.941018][T13935] do_syscall_64+0x55/0xb0 [ 408.945434][T13935] ? clear_bhb_loop+0x40/0x90 [ 408.950107][T13935] ? clear_bhb_loop+0x40/0x90 [ 408.954778][T13935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.960660][T13935] RIP: 0033:0x7fb795d9e019 [ 408.965068][T13935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.984671][T13935] RSP: 002b:00007fb796c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 408.993078][T13935] RAX: ffffffffffffffda RBX: 00007fb796025fa0 RCX: 00007fb795d9e019 [ 409.001063][T13935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 409.009039][T13935] RBP: 00007fb796c58090 R08: 0000000000000000 R09: 0000000000000000 [ 409.017013][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.024980][T13935] R13: 00007fb796026038 R14: 00007fb796025fa0 R15: 00007ffe495ad738 [ 409.032960][T13935] [ 410.357005][T13938] __nla_validate_parse: 1 callbacks suppressed [ 410.357023][T13938] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3054'. [ 410.400341][T13937] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3054'. [ 410.829726][T13967] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3060'. [ 410.907823][T13970] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3061'. [ 411.344107][T13986] delete_channel: no stack [ 411.452826][T13986] delete_channel: no stack [ 411.595337][T13990] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 411.606128][T13990] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 412.261763][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.345139][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3088'. [ 414.448125][T14063] netlink: 'syz.0.3085': attribute type 29 has an invalid length. [ 414.489625][T14063] netlink: 'syz.0.3085': attribute type 29 has an invalid length. [ 414.514417][T14063] netlink: 'syz.0.3085': attribute type 29 has an invalid length. [ 414.543150][T14063] netlink: 'syz.0.3085': attribute type 29 has an invalid length. [ 414.571351][T14063] netlink: 'syz.0.3085': attribute type 29 has an invalid length. [ 414.826998][T14075] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3092'. [ 414.906176][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3092'. [ 414.958083][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3092'. [ 415.035484][T14075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3092'. [ 415.122118][T14081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3092'. [ 415.402988][T14087] netlink: 'syz.3.3095': attribute type 21 has an invalid length. [ 415.434859][T14087] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.442700][T14087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.449978][T14087] IPv6: NLM_F_CREATE should be set when creating new route [ 415.457281][T14087] IPv6: NLM_F_CREATE should be set when creating new route [ 415.464504][T14087] IPv6: NLM_F_CREATE should be set when creating new route [ 415.552539][T14092] __nla_validate_parse: 1 callbacks suppressed [ 415.552555][T14092] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3096'. [ 415.682892][T14100] tipc: Withdrawal distribution failure [ 416.178676][T14125] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3104'. [ 416.199871][T14125] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3104'. [ 416.221913][T14126] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3105'. [ 416.389539][T14133] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3107'. [ 416.476876][T14133] netlink: 'syz.1.3107': attribute type 10 has an invalid length. [ 416.590459][T14143] tipc: Withdrawal distribution failure [ 417.142065][T14133] team0: Port device geneve1 added [ 417.278879][T14133] syz.1.3107 (14133) used greatest stack depth: 18632 bytes left [ 417.767348][T14172] FAULT_INJECTION: forcing a failure. [ 417.767348][T14172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.800805][T14172] CPU: 0 PID: 14172 Comm: syz.2.3119 Not tainted syzkaller #0 [ 417.808324][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.818396][T14172] Call Trace: [ 417.821708][T14172] [ 417.824648][T14172] dump_stack_lvl+0x18c/0x250 [ 417.829353][T14172] ? show_regs_print_info+0x20/0x20 [ 417.834581][T14172] ? load_image+0x420/0x420 [ 417.839115][T14172] ? __might_fault+0xaa/0x120 [ 417.843817][T14172] ? __lock_acquire+0x7d80/0x7d80 [ 417.848868][T14172] should_fail_ex+0x394/0x4c0 [ 417.853575][T14172] _copy_from_user+0x2f/0xe0 [ 417.858192][T14172] kstrtouint_from_user+0xde/0x170 [ 417.863346][T14172] ? kstrtol_from_user+0x190/0x190 [ 417.868502][T14172] proc_fail_nth_write+0x8f/0x250 [ 417.873554][T14172] ? proc_fail_nth_read+0x260/0x260 [ 417.878784][T14172] ? proc_fail_nth_read+0x260/0x260 [ 417.884009][T14172] vfs_write+0x299/0x9a0 [ 417.888283][T14172] ? file_end_write+0x250/0x250 [ 417.893160][T14172] ? __fget_files+0x28/0x460 [ 417.897779][T14172] ? __fget_files+0x3fc/0x460 [ 417.902487][T14172] ? __fdget_pos+0x2a3/0x330 [ 417.907097][T14172] ? ksys_write+0x74/0x260 [ 417.911543][T14172] ksys_write+0x151/0x260 [ 417.915911][T14172] ? __ia32_sys_read+0x90/0x90 [ 417.920712][T14172] ? lockdep_hardirqs_on+0x98/0x150 [ 417.925938][T14172] do_syscall_64+0x55/0xb0 [ 417.930376][T14172] ? clear_bhb_loop+0x40/0x90 [ 417.935070][T14172] ? clear_bhb_loop+0x40/0x90 [ 417.939775][T14172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.945693][T14172] RIP: 0033:0x7eff7d55e84e [ 417.950128][T14172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.969757][T14172] RSP: 002b:00007eff7e4d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.978204][T14172] RAX: ffffffffffffffda RBX: 00007eff7e4d16c0 RCX: 00007eff7d55e84e [ 417.986200][T14172] RDX: 0000000000000001 RSI: 00007eff7e4d10a0 RDI: 0000000000000009 [ 417.994196][T14172] RBP: 00007eff7e4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.002189][T14172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.010181][T14172] R13: 00007eff7d826038 R14: 00007eff7d825fa0 R15: 00007ffc47f5b8d8 [ 418.018201][T14172] [ 418.115699][T14176] netlink: 'syz.0.3120': attribute type 33 has an invalid length. [ 418.135419][T14176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3120'. [ 418.157929][T14176] `: renamed from ip6tnl0 (while UP) [ 418.224163][T14176] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 418.280606][T14181] netlink: 'syz.3.3121': attribute type 10 has an invalid length. [ 418.433402][T14181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.482340][T14181] team0: Port device bond0 added [ 418.692096][T14189] can: request_module (can-proto-4) failed. [ 418.926977][T14205] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 419.970079][T14228] syzkaller0: entered promiscuous mode [ 419.983412][T14228] syzkaller0: entered allmulticast mode [ 420.807740][T14251] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3137'. [ 420.840159][T14251] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 420.864166][T14251] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.614892][T14258] netlink: 'syz.3.3140': attribute type 21 has an invalid length. [ 422.895000][T14273] netlink: 'syz.1.3145': attribute type 3 has an invalid length. [ 422.912071][T14273] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3145'. [ 422.957496][T14278] netlink: 'syz.3.3144': attribute type 7 has an invalid length. [ 422.972928][T14278] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3144'. [ 423.157391][T14285] netlink: 'syz.1.3147': attribute type 21 has an invalid length. [ 423.198808][T14285] netlink: 'syz.1.3147': attribute type 6 has an invalid length. [ 423.947194][T14317] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3157'. [ 424.633395][T14334] netlink: 'syz.1.3159': attribute type 2 has an invalid length. [ 424.765697][T14334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'. [ 425.012858][T14347] bridge_slave_0: entered allmulticast mode [ 425.164211][T14350] netlink: 'syz.0.3165': attribute type 9 has an invalid length. [ 425.192349][T14350] netlink: 'syz.0.3165': attribute type 23 has an invalid length. [ 425.210606][T14350] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.3165'. [ 425.604594][T14375] netlink: 'syz.0.3174': attribute type 21 has an invalid length. [ 425.612765][T14375] netlink: 'syz.0.3174': attribute type 1 has an invalid length. [ 425.626588][T14375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3174'. [ 426.178052][T14388] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3179'. [ 426.193403][T14388] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.3179'. [ 426.413506][T14390] qXGO (unregistering): left allmulticast mode [ 426.858955][T14344] Bluetooth: hci4: command 0x0406 tx timeout [ 428.291220][T14414] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3185'. [ 428.375267][T14424] netlink: 'syz.3.3187': attribute type 21 has an invalid length. [ 428.431430][T14427] veth0_vlan: entered allmulticast mode [ 428.705039][T14442] netlink: 'syz.0.3193': attribute type 10 has an invalid length. [ 428.713464][T14442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3193'. [ 428.725151][T14442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.672164][T14481] netlink: 'syz.0.3203': attribute type 39 has an invalid length. [ 429.802471][T14481] hsr_slave_1 (unregistering): left promiscuous mode [ 431.240484][T14532] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 431.285105][T14532] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3220'. [ 431.981406][T14344] Bluetooth: hci0: command 0x0406 tx timeout [ 432.253313][T14576] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3232'. [ 432.412039][T14580] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3234'. [ 433.361824][T14620] syzkaller0: entered promiscuous mode [ 433.367640][T14620] syzkaller0: entered allmulticast mode [ 433.741725][T14618] netlink: 'syz.1.3244': attribute type 10 has an invalid length. [ 433.755601][T14618] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3244'. [ 433.897393][T14624] netlink: 'syz.3.3247': attribute type 21 has an invalid length. [ 433.907162][T14624] netlink: 'syz.3.3247': attribute type 6 has an invalid length. [ 433.917713][T14624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3247'. [ 434.163207][T14636] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3250'. [ 434.589327][T14653] netlink: 'syz.2.3257': attribute type 21 has an invalid length. [ 434.815134][T14664] netlink: 'syz.3.3262': attribute type 39 has an invalid length. [ 434.913386][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3259'. [ 434.924599][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3259'. [ 434.941502][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3259'. [ 434.953794][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3259'. [ 435.088140][T14668] netlink: 'syz.2.3263': attribute type 21 has an invalid length. [ 435.151080][T14670] netlink: 'syz.0.3264': attribute type 33 has an invalid length. [ 435.161523][T14670] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 435.359958][T14678] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 435.396475][T14683] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 436.052977][T14702] netlink: 'syz.3.3276': attribute type 21 has an invalid length. [ 436.075632][T14702] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 436.089106][T14706] netlink: 'syz.3.3276': attribute type 21 has an invalid length. [ 437.235076][T14708] __nla_validate_parse: 6 callbacks suppressed [ 437.235093][T14708] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3278'. [ 437.302019][T14708] bridge_slave_1: default FDB implementation only supports local addresses [ 439.195505][T14742] validate_nla: 1 callbacks suppressed [ 439.195522][T14742] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 439.269645][T14742] netlink: 185580 bytes leftover after parsing attributes in process `syz.1.3288'. [ 439.672948][T14769] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3295'. [ 439.939368][T14783] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3300'. [ 439.970982][T14783] openvswitch: netlink: Flow actions attr not present in new flow. [ 440.126775][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.147872][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.154407][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.761523][T14807] netlink: 'syz.1.3306': attribute type 10 has an invalid length. [ 442.215259][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 442.980141][T14847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.066057][T14850] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 445.407670][T14888] ref_ctr_offset mismatch. inode: 0x528 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 445.663977][T14906] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3331'. [ 445.683942][T14906] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.3331'. [ 445.703823][T14906] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3331'. [ 446.761256][T14948] lo: entered allmulticast mode [ 446.782032][T14949] lo: entered promiscuous mode [ 446.834904][T14949] lo: left allmulticast mode [ 447.631728][T14965] netlink: 'syz.0.3347': attribute type 10 has an invalid length. [ 447.664812][T14965] netlink: 'syz.0.3347': attribute type 25 has an invalid length. [ 448.465201][T14991] netlink: set zone limit has 8 unknown bytes [ 449.241934][T14995] netlink: 'syz.2.3358': attribute type 1 has an invalid length. [ 449.355337][T14995] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3358'. [ 449.486983][T14999] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3359'. [ 452.435681][T15021] netlink: 'syz.0.3366': attribute type 21 has an invalid length. [ 452.461259][T15021] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3366'. [ 452.521544][T15021] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 452.556661][T15021] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 452.604870][T15023] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 452.660182][T15023] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 452.693592][T15021] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 452.715793][T15023] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3366'. [ 453.782055][T15047] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 453.811586][T15047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3373'. [ 453.838992][T15047] batman_adv: batadv0: Adding interface: veth0_vlan [ 453.854485][T15047] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.895874][T15047] batman_adv: batadv0: Interface activated: veth0_vlan [ 454.660362][T15065] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3379'. [ 454.674936][T15065] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 454.705696][T15058] netlink: 'syz.2.3378': attribute type 12 has an invalid length. [ 454.743890][T15058] netlink: 'syz.2.3378': attribute type 15 has an invalid length. [ 455.697119][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.715237][T15104] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.3391'. [ 455.910692][T15115] netlink: 'syz.1.3395': attribute type 21 has an invalid length. [ 455.934780][T15115] netlink: 'syz.1.3395': attribute type 19 has an invalid length. [ 455.942712][T15115] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.3395'. [ 456.018599][T15117] veth1_to_bond: entered allmulticast mode [ 456.253754][T15133] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3400'. [ 456.289569][T15133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.355785][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 456.581640][T15145] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3403'. [ 457.019212][T15170] netlink: 'syz.1.3410': attribute type 9 has an invalid length. [ 457.029078][T15170] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3410'. [ 457.559297][T15194] __nla_validate_parse: 1 callbacks suppressed [ 457.559316][T15194] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3415'. [ 457.587479][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 457.677205][T15193] netlink: 'syz.0.3417': attribute type 39 has an invalid length. [ 461.127556][T15213] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3422'. [ 462.151694][T15244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3430'. [ 462.162714][T15244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3430'. [ 462.520519][T15267] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 462.530448][T15267] netlink: 'syz.0.3436': attribute type 29 has an invalid length. [ 463.142724][ T6191] tipc: Subscription rejected, illegal request [ 463.790799][T15306] netlink: 'syz.3.3446': attribute type 3 has an invalid length. [ 463.808323][T15306] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3446'. [ 464.136689][T15315] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.585785][T15330] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3455'. [ 465.601261][T15371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3466'. [ 465.655305][T15368] netlink: 'syz.2.3465': attribute type 25 has an invalid length. [ 465.663537][T15368] netlink: 'syz.2.3465': attribute type 3 has an invalid length. [ 465.696788][T15368] netlink: 'syz.2.3465': attribute type 10 has an invalid length. [ 465.709749][T15368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3465'. [ 465.881747][T15382] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.3468'. [ 466.092261][T15390] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 466.107202][T15390] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3470'. [ 466.382786][T15394] cgroup: fork rejected by pids controller in /syz1 [ 467.065684][ T6191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.244281][ T6191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.389100][ T6191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.593761][T15525] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 467.639617][T15525] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3481'. [ 467.667329][ T6191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.234794][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.244440][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.252966][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.262125][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.271677][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.279380][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.107821][T15546] netlink: 'syz.3.3486': attribute type 10 has an invalid length. [ 469.292312][T15551] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3487'. [ 469.412988][T15547] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3486'. [ 469.423813][T15547] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3486'. [ 469.464850][T15550] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3487'. [ 470.236157][T15574] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3492'. [ 470.254498][T15574] tc_dump_action: action bad kind [ 470.374934][ T5782] Bluetooth: hci3: command tx timeout [ 472.465782][ T5782] Bluetooth: hci3: command tx timeout [ 473.411302][T15592] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3494'. [ 473.434073][T15592] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3494'. [ 473.784431][T15538] chnl_net:caif_netlink_parms(): no params data found [ 474.121823][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.148109][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.165360][T15538] bridge_slave_0: entered allmulticast mode [ 474.172933][T15538] bridge_slave_0: entered promiscuous mode [ 474.210843][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.238470][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.254345][T15538] bridge_slave_1: entered allmulticast mode [ 474.263610][T15538] bridge_slave_1: entered promiscuous mode [ 474.339808][T15638] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 474.354784][T15638] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3501'. [ 474.421003][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.467798][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.534989][ T5782] Bluetooth: hci3: command tx timeout [ 474.595110][T15538] team0: Port device team_slave_0 added [ 474.690198][T15538] team0: Port device team_slave_1 added [ 474.880062][T15655] : renamed from team_slave_1 (while UP) [ 474.933774][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.955134][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.017809][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.060521][ T6191] hsr_slave_0: left promiscuous mode [ 475.079052][ T6191] hsr_slave_1: left promiscuous mode [ 475.099682][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.107406][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.151366][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.168314][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.227205][ T6191] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 475.234318][ T6191] batman_adv: batadv0: Removing interface: virt_wifi0 [ 475.571387][ T6191] veth1_macvtap: left allmulticast mode [ 475.580016][ T6191] veth1_macvtap: left promiscuous mode [ 475.588922][ T6191] veth0_macvtap: left promiscuous mode [ 475.594597][ T6191] veth1_vlan: left promiscuous mode [ 475.694301][ T6191] team0 (unregistering): Port device geneve1 removed [ 476.101257][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 476.141012][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 476.493209][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.500446][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.526535][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.547730][T15663] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3507'. [ 476.626824][ T5782] Bluetooth: hci3: command tx timeout [ 476.676079][T15538] hsr_slave_0: entered promiscuous mode [ 476.695417][T15538] hsr_slave_1: entered promiscuous mode [ 476.707956][T15538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.728214][T15538] Cannot create hsr debugfs directory [ 476.738176][T15665] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3509'. [ 476.919307][T15676] netlink: 'syz.3.3511': attribute type 10 has an invalid length. [ 476.968301][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3511'. [ 477.231046][T15685] netlink: 'syz.0.3513': attribute type 9 has an invalid length. [ 477.271531][T15685] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3513'. [ 477.792313][T15721] netlink: 'syz.2.3519': attribute type 21 has an invalid length. [ 477.904137][T15723] netlink: 'syz.2.3519': attribute type 21 has an invalid length. [ 478.236596][T15538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.268379][T15538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.305193][T15538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.371913][T15538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.539870][T15743] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3524'. [ 478.549149][T15743] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3524'. [ 478.671062][T15743] syzkaller0: entered promiscuous mode [ 478.677172][T15743] syzkaller0: entered allmulticast mode [ 480.483828][T15538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.550404][T15538] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.567332][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.574486][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.649232][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.656433][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.850530][T15538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.959525][T15772] delete_channel: no stack [ 481.167233][T15787] netlink: 'syz.0.3532': attribute type 4 has an invalid length. [ 481.176806][T15787] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3532'. [ 481.422526][T15538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.680965][T15538] veth0_vlan: entered promiscuous mode [ 481.708679][T15538] veth1_vlan: entered promiscuous mode [ 481.783686][T15538] veth0_macvtap: entered promiscuous mode [ 481.806956][T15538] veth1_macvtap: entered promiscuous mode [ 481.857005][T15538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.874350][T15538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.890236][T15538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.901296][T15538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.938199][T15538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.959222][T15538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.991508][T15538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.051886][T15538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.075906][T15538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.114535][T15538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.143399][T15538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.157968][T15538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.175452][T15538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.184354][T15538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.200473][T15538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.210882][T15538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.432519][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.458388][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.544100][ T6191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.569265][ T6191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.388501][T15850] netlink: 'syz.0.3544': attribute type 21 has an invalid length. [ 483.425020][T15850] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3544'. [ 483.454793][T15850] netlink: 'syz.0.3544': attribute type 5 has an invalid length. [ 483.462605][T15850] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3544'. [ 483.915440][T15871] pim6reg1: entered promiscuous mode [ 483.920808][T15871] pim6reg1: entered allmulticast mode [ 486.567236][T15909] netlink: 'syz.0.3550': attribute type 10 has an invalid length. [ 486.575204][T15909] netlink: 'syz.0.3550': attribute type 19 has an invalid length. [ 486.583175][T15909] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.3550'. [ 489.212572][T15976] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3571'. [ 489.653572][T15988] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3575'. [ 490.015005][T16000] netlink: 'syz.3.3579': attribute type 10 has an invalid length. [ 490.172841][T16000] team0: Device veth1_vlan failed to register rx_handler [ 490.555379][T16019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3583'. [ 490.569896][T16019] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3583'. [ 490.595491][T16019] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3583'. [ 490.620173][T16021] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3585'. [ 490.995350][T16038] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.3588'. [ 494.299488][T16080] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3598'. [ 494.353175][T16080] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3598'. [ 494.382677][T16074] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3598'. [ 494.430297][T16081] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3598'. [ 494.967923][T16105] syzkaller0: entered promiscuous mode [ 494.979494][T16105] syzkaller0: entered allmulticast mode [ 497.296892][T16122] netlink: 'syz.3.3610': attribute type 21 has an invalid length. [ 497.305089][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3610'. [ 497.521988][T16146] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3615'. [ 497.947269][T16164] netlink: 'syz.0.3620': attribute type 10 has an invalid length. [ 498.099729][T16164] team0: Port device virt_wifi0 added [ 499.149222][T16211] netlink: 'syz.2.3631': attribute type 16 has an invalid length. [ 499.157725][T16211] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3631'. [ 499.307981][T16217] syzkaller0: entered promiscuous mode [ 499.322268][T16217] syzkaller0: entered allmulticast mode [ 499.421607][T16221] netlink: 'syz.1.3634': attribute type 9 has an invalid length. [ 499.429849][T16221] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3634'. [ 499.682926][T16234] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3640'. [ 499.785510][T16240] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.3641'. [ 499.829124][T16244] netlink: 'syz.1.3643': attribute type 11 has an invalid length. [ 499.860784][T16250] Q6`Ҙ: renamed from lo (while UP) [ 500.269223][T16271] netlink: 'syz.2.3649': attribute type 2 has an invalid length. [ 500.277190][T16271] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3649'. [ 500.301341][T16271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.397033][T16278] netlink: 'syz.3.3652': attribute type 10 has an invalid length. [ 500.426889][T16282] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3654'. [ 500.444880][T16282] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 500.468749][ T5782] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 500.483038][T16285] netlink: 'syz.3.3652': attribute type 9 has an invalid length. [ 500.524075][T16285] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3652'. [ 500.659452][T16278] team0 (unregistering): Port device team_slave_0 removed [ 500.741454][T16278] team0 (unregistering): Port device removed [ 500.797094][T16278] team0 (unregistering): Port device bond0 removed [ 500.898966][T16288] netlink: 'syz.3.3652': attribute type 9 has an invalid length. [ 500.999662][T16288] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3652'. [ 501.416701][T16313] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.3662'. [ 501.512486][T16313] netlink: 'syz.1.3662': attribute type 6 has an invalid length. [ 501.578322][T16318] syz_tun: entered promiscuous mode [ 501.583594][T16318] syz_tun: entered allmulticast mode [ 501.589991][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.596469][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004580][T16327] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3667'. [ 502.025001][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 505.249784][T16351] __nla_validate_parse: 3 callbacks suppressed [ 505.249802][T16351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3675'. [ 505.431941][T16361] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3678'. [ 505.472254][T16361] netlink: 'syz.1.3678': attribute type 1 has an invalid length. [ 505.506605][T16361] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3678'. [ 505.515375][T16362] netlink: 'syz.3.3677': attribute type 12 has an invalid length. [ 505.523764][T16362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3677'. [ 505.562188][T16362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3677'. [ 505.886313][T16368] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 506.820388][T16394] netlink: 'syz.3.3687': attribute type 10 has an invalid length. [ 507.398358][T16410] netlink: 'syz.1.3690': attribute type 12 has an invalid length. [ 507.424262][T16410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3690'. [ 507.480203][T16412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3690'. [ 508.151351][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 508.271273][T16422] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 509.122748][T16445] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3704'. [ 510.148073][T16459] netlink: 'syz.0.3707': attribute type 27 has an invalid length. [ 510.178404][T16459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3707'. [ 510.225507][T16459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 510.740887][T16487] netlink: 'syz.3.3719': attribute type 13 has an invalid length. [ 510.755059][T16491] netlink: 'syz.1.3717': attribute type 9 has an invalid length. [ 510.757525][T16493] netlink: 'syz.0.3718': attribute type 12 has an invalid length. [ 510.762978][T16491] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3717'. [ 511.018037][T16500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3721'. [ 511.514614][T16519] syzkaller0: entered promiscuous mode [ 511.520434][T16519] syzkaller0: entered allmulticast mode [ 511.850716][T16526] netlink: 'syz.0.3730': attribute type 3 has an invalid length. [ 511.914902][T16526] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3730'. [ 512.733797][T16541] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3732'. [ 515.456260][T16607] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 515.467937][T16607] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 515.504790][T16607] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 515.528428][T16607] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 515.553034][T16607] netlink: 'syz.3.3749': attribute type 29 has an invalid length. [ 516.282793][T16624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3754'. [ 516.318660][T16624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3754'. [ 516.370022][T16618] FAULT_INJECTION: forcing a failure. [ 516.370022][T16618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.406546][T16618] CPU: 0 PID: 16618 Comm: syz.0.3752 Not tainted syzkaller #0 [ 516.414753][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.424811][T16618] Call Trace: [ 516.428081][T16618] [ 516.431003][T16618] dump_stack_lvl+0x18c/0x250 [ 516.435687][T16618] ? show_regs_print_info+0x20/0x20 [ 516.440880][T16618] ? load_image+0x420/0x420 [ 516.445402][T16618] ? __might_fault+0xaa/0x120 [ 516.450085][T16618] ? __lock_acquire+0x7d80/0x7d80 [ 516.455108][T16618] should_fail_ex+0x394/0x4c0 [ 516.459781][T16618] _copy_from_user+0x2f/0xe0 [ 516.464374][T16618] __sys_bpf+0x23e/0x890 [ 516.468610][T16618] ? bpf_link_show_fdinfo+0x390/0x390 [ 516.473985][T16618] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.480144][T16618] __x64_sys_bpf+0x7c/0x90 [ 516.484553][T16618] do_syscall_64+0x55/0xb0 [ 516.488959][T16618] ? clear_bhb_loop+0x40/0x90 [ 516.493626][T16618] ? clear_bhb_loop+0x40/0x90 [ 516.498293][T16618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.504176][T16618] RIP: 0033:0x7fb795d9e019 [ 516.508597][T16618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.528196][T16618] RSP: 002b:00007fb796c58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.536602][T16618] RAX: ffffffffffffffda RBX: 00007fb796025fa0 RCX: 00007fb795d9e019 [ 516.544560][T16618] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 516.552525][T16618] RBP: 00007fb796c58090 R08: 0000000000000000 R09: 0000000000000000 [ 516.560488][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.568454][T16618] R13: 00007fb796026038 R14: 00007fb796025fa0 R15: 00007ffe495ad738 [ 516.576429][T16618] [ 516.958224][T16633] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.3757'. [ 517.029166][T16633] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 517.545979][T16638] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 517.554114][T16638] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3758'. [ 517.659430][T16638] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 517.890260][T16647] syzkaller0: entered promiscuous mode [ 517.900807][T16647] syzkaller0: entered allmulticast mode [ 522.117486][T16669] FAULT_INJECTION: forcing a failure. [ 522.117486][T16669] name failslab, interval 1, probability 0, space 0, times 0 [ 522.131104][T16669] CPU: 0 PID: 16669 Comm: syz.3.3766 Not tainted syzkaller #0 [ 522.138696][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.148762][T16669] Call Trace: [ 522.152037][T16669] [ 522.154967][T16669] dump_stack_lvl+0x18c/0x250 [ 522.159678][T16669] ? show_regs_print_info+0x20/0x20 [ 522.164874][T16669] ? load_image+0x420/0x420 [ 522.169381][T16669] ? __might_sleep+0xe0/0xe0 [ 522.173968][T16669] ? __lock_acquire+0x7d80/0x7d80 [ 522.178994][T16669] should_fail_ex+0x394/0x4c0 [ 522.183688][T16669] should_failslab+0x9/0x20 [ 522.188193][T16669] slab_pre_alloc_hook+0x59/0x300 [ 522.193217][T16669] ? __get_vm_area_node+0x125/0x370 [ 522.198412][T16669] __kmem_cache_alloc_node+0x53/0x250 [ 522.203787][T16669] ? __get_vm_area_node+0x125/0x370 [ 522.208981][T16669] kmalloc_node_trace+0x26/0xe0 [ 522.213831][T16669] __get_vm_area_node+0x125/0x370 [ 522.218877][T16669] __vmalloc_node_range+0x36f/0x1320 [ 522.224162][T16669] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 522.229708][T16669] ? irqentry_enter+0x37/0x50 [ 522.234395][T16669] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 522.240382][T16669] ? lock_chain_count+0x20/0x20 [ 522.245230][T16669] ? aa_get_newest_label+0xfd/0x5c0 [ 522.250434][T16669] ? free_vm_area+0x50/0x50 [ 522.254941][T16669] ? lockdep_hardirqs_on+0x98/0x150 [ 522.260145][T16669] ? end_current_label_crit_section+0x170/0x170 [ 522.266432][T16669] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 522.271987][T16669] __vmalloc+0x7a/0x90 [ 522.276071][T16669] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 522.281622][T16669] bpf_prog_alloc_no_stats+0x46/0x430 [ 522.286999][T16669] bpf_prog_alloc+0x3d/0x1a0 [ 522.291611][T16669] bpf_prog_load+0x6b2/0x1610 [ 522.296296][T16669] ? map_freeze+0x420/0x420 [ 522.300812][T16669] ? __might_fault+0xaa/0x120 [ 522.305495][T16669] ? __lock_acquire+0x7d80/0x7d80 [ 522.310518][T16669] ? __might_fault+0xaa/0x120 [ 522.315197][T16669] ? __might_fault+0xc6/0x120 [ 522.319871][T16669] ? __might_fault+0xaa/0x120 [ 522.324544][T16669] ? bpf_lsm_bpf+0x9/0x10 [ 522.328876][T16669] ? security_bpf+0x7e/0xa0 [ 522.333384][T16669] __sys_bpf+0x5ba/0x890 [ 522.337633][T16669] ? bpf_link_show_fdinfo+0x390/0x390 [ 522.343025][T16669] ? lock_chain_count+0x20/0x20 [ 522.347878][T16669] __x64_sys_bpf+0x7c/0x90 [ 522.352309][T16669] do_syscall_64+0x55/0xb0 [ 522.356720][T16669] ? clear_bhb_loop+0x40/0x90 [ 522.361400][T16669] ? clear_bhb_loop+0x40/0x90 [ 522.366079][T16669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.371973][T16669] RIP: 0033:0x7feb68f9e019 [ 522.376388][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.396001][T16669] RSP: 002b:00007feb69e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.404423][T16669] RAX: ffffffffffffffda RBX: 00007feb69225fa0 RCX: 00007feb68f9e019 [ 522.412396][T16669] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 522.420373][T16669] RBP: 00007feb69e36090 R08: 0000000000000000 R09: 0000000000000000 [ 522.428345][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.436313][T16669] R13: 00007feb69226038 R14: 00007feb69225fa0 R15: 00007ffc709ae118 [ 522.444295][T16669] [ 522.457734][T16669] syz.3.3766: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 522.475266][T16669] CPU: 1 PID: 16669 Comm: syz.3.3766 Not tainted syzkaller #0 [ 522.482773][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.492847][T16669] Call Trace: [ 522.496126][T16669] [ 522.499054][T16669] dump_stack_lvl+0x18c/0x250 [ 522.503746][T16669] ? show_regs_print_info+0x20/0x20 [ 522.508957][T16669] ? load_image+0x420/0x420 [ 522.513469][T16669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.519942][T16669] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 522.526484][T16669] warn_alloc+0x246/0x340 [ 522.530832][T16669] ? __get_vm_area_node+0x125/0x370 [ 522.536032][T16669] ? zone_watermark_ok_safe+0x230/0x230 [ 522.541582][T16669] ? rcu_is_watching+0x15/0xb0 [ 522.546347][T16669] ? __get_vm_area_node+0x356/0x370 [ 522.551552][T16669] __vmalloc_node_range+0x394/0x1320 [ 522.556858][T16669] ? irqentry_enter+0x37/0x50 [ 522.561975][T16669] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 522.567959][T16669] ? lock_chain_count+0x20/0x20 [ 522.572894][T16669] ? aa_get_newest_label+0xfd/0x5c0 [ 522.578193][T16669] ? free_vm_area+0x50/0x50 [ 522.582728][T16669] ? lockdep_hardirqs_on+0x98/0x150 [ 522.587977][T16669] ? end_current_label_crit_section+0x170/0x170 [ 522.594254][T16669] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 522.599846][T16669] __vmalloc+0x7a/0x90 [ 522.603922][T16669] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 522.609527][T16669] bpf_prog_alloc_no_stats+0x46/0x430 [ 522.614913][T16669] bpf_prog_alloc+0x3d/0x1a0 [ 522.619615][T16669] bpf_prog_load+0x6b2/0x1610 [ 522.624369][T16669] ? map_freeze+0x420/0x420 [ 522.628911][T16669] ? __might_fault+0xaa/0x120 [ 522.633644][T16669] ? __lock_acquire+0x7d80/0x7d80 [ 522.638681][T16669] ? __might_fault+0xaa/0x120 [ 522.643367][T16669] ? __might_fault+0xc6/0x120 [ 522.648056][T16669] ? __might_fault+0xaa/0x120 [ 522.652753][T16669] ? bpf_lsm_bpf+0x9/0x10 [ 522.657128][T16669] ? security_bpf+0x7e/0xa0 [ 522.661682][T16669] __sys_bpf+0x5ba/0x890 [ 522.665962][T16669] ? bpf_link_show_fdinfo+0x390/0x390 [ 522.671395][T16669] ? lock_chain_count+0x20/0x20 [ 522.676277][T16669] __x64_sys_bpf+0x7c/0x90 [ 522.680725][T16669] do_syscall_64+0x55/0xb0 [ 522.685158][T16669] ? clear_bhb_loop+0x40/0x90 [ 522.689925][T16669] ? clear_bhb_loop+0x40/0x90 [ 522.694650][T16669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.700583][T16669] RIP: 0033:0x7feb68f9e019 [ 522.705032][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.725106][T16669] RSP: 002b:00007feb69e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.733554][T16669] RAX: ffffffffffffffda RBX: 00007feb69225fa0 RCX: 00007feb68f9e019 [ 522.741546][T16669] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 522.749539][T16669] RBP: 00007feb69e36090 R08: 0000000000000000 R09: 0000000000000000 [ 522.757522][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.765498][T16669] R13: 00007feb69226038 R14: 00007feb69225fa0 R15: 00007ffc709ae118 [ 522.773486][T16669] [ 522.782573][T16669] Mem-Info: [ 522.786144][T16669] active_anon:8961 inactive_anon:0 isolated_anon:0 [ 522.786144][T16669] active_file:15194 inactive_file:40138 isolated_file:0 [ 522.786144][T16669] unevictable:768 dirty:232 writeback:0 [ 522.786144][T16669] slab_reclaimable:10891 slab_unreclaimable:100441 [ 522.786144][T16669] mapped:24505 shmem:1361 pagetables:515 [ 522.786144][T16669] sec_pagetables:0 bounce:0 [ 522.786144][T16669] kernel_misc_reclaimable:0 [ 522.786144][T16669] free:1339260 free_pcp:6866 free_cma:0 [ 522.835622][T16669] Node 0 active_anon:35844kB inactive_anon:0kB active_file:60776kB inactive_file:160348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98020kB dirty:928kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10292kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no [ 522.870569][T16669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 522.902289][T16669] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.930401][T16669] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 522.937501][T16669] Node 0 DMA32 free:1443940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35808kB inactive_anon:0kB active_file:60776kB inactive_file:159524kB unevictable:1536kB writepending:916kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:9732kB local_pcp:5836kB free_cma:0kB [ 522.984986][T16669] lowmem_reserve[]: 0 0 0 0 0 [ 522.990422][T16669] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 523.024438][T16669] lowmem_reserve[]: 0 0 0 0 0 [ 523.029760][T16669] Node 1 Normal free:3897736kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19892kB local_pcp:11056kB free_cma:0kB [ 523.059957][T16669] lowmem_reserve[]: 0 0 0 0 0 [ 523.065275][T16669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 523.079326][T16669] Node 0 DMA32: 969*4kB (UME) 938*8kB (UME) 929*16kB (UME) 1929*32kB (UME) 1083*64kB (UME) 668*128kB (UME) 182*256kB (UME) 67*512kB (UM) 50*1024kB (UM) 18*2048kB (UME) 252*4096kB (UM) = 1443940kB [ 523.100128][T16669] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 523.113663][T16669] Node 1 Normal: 178*4kB (UE) 38*8kB (UME) 25*16kB (UME) 42*32kB (UME) 9*64kB (UE) 5*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 1*2048kB (U) 950*4096kB (M) = 3897736kB [ 523.132126][T16669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.147073][T16669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.156869][T16669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.166640][T16669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.176352][T16669] 56694 total pagecache pages [ 523.181262][T16669] 1 pages in swap cache [ 523.185718][T16669] Free swap = 124728kB [ 523.190171][T16669] Total swap = 124996kB [ 523.194579][T16669] 2097051 pages RAM [ 523.198822][T16669] 0 pages HighMem/MovableOnly [ 523.204381][T16669] 416955 pages reserved [ 523.209017][T16669] 0 pages cma reserved [ 524.714571][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3774'. [ 524.736022][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3774'. [ 524.759347][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3774'. [ 525.216264][T16711] netlink: 'syz.3.3777': attribute type 10 has an invalid length. [ 525.224510][T16715] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.3778'. [ 525.597374][T16730] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3784'. [ 526.237254][T16747] netlink: 'syz.3.3789': attribute type 29 has an invalid length. [ 526.255870][T16747] netlink: 'syz.3.3789': attribute type 29 has an invalid length. [ 526.402777][T16748] netlink: 'syz.3.3789': attribute type 29 has an invalid length. [ 528.665242][T16782] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3797'. [ 528.675895][T16782] openvswitch: netlink: Key type 29 is not supported [ 528.995094][T16774] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 529.002974][T16774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3795'. [ 529.013699][T16775] netlink: 'syz.3.3795': attribute type 21 has an invalid length. [ 529.021817][T16775] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 529.030070][T16775] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3795'. [ 530.157454][T16818] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3806'. [ 530.167174][T16818] openvswitch: netlink: Key type 29 is not supported [ 530.409018][T16825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3808'. [ 530.413051][T16822] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3808'. [ 530.445056][T16825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3808'. [ 530.485597][T16826] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3808'. [ 530.568987][T16822] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 530.742984][T16842] netlink: 'syz.3.3814': attribute type 21 has an invalid length. [ 530.752518][T16837] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 530.761117][T16840] netlink: 'syz.1.3815': attribute type 30 has an invalid length. [ 530.774998][T16837] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3813'. [ 530.998666][T16853] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3818'. [ 531.453213][T16865] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3820'. [ 531.471871][T16865] openvswitch: netlink: Key type 29 is not supported [ 531.636828][T16867] netlink: 'syz.1.3822': attribute type 2 has an invalid length. [ 531.653895][T16867] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3822'. [ 532.344431][T16869] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3821'. [ 532.409051][T16885] netlink: 'syz.3.3825': attribute type 10 has an invalid length. [ 532.702083][T16900] syzkaller0: entered promiscuous mode [ 532.723208][T16900] syzkaller0: entered allmulticast mode [ 532.799219][T16900] delete_channel: no stack [ 532.816158][T16900] delete_channel: no stack [ 536.083294][T16963] netlink: 'syz.1.3846': attribute type 2 has an invalid length. [ 536.103176][T16963] netlink: 'syz.1.3846': attribute type 8 has an invalid length. [ 536.128174][T16963] __nla_validate_parse: 6 callbacks suppressed [ 536.128206][T16963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3846'. [ 536.154985][T16966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3845'. [ 536.180707][T16966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3845'. [ 536.201107][T16966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3845'. [ 536.383078][T16974] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3849'. [ 536.392930][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 536.519259][T16977] netlink: 'syz.2.3850': attribute type 21 has an invalid length. [ 536.549811][T16977] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3850'. [ 536.880016][T16980] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3852'. [ 536.909522][T16980] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3852'. [ 537.410549][T16998] netlink: 'syz.1.3859': attribute type 25 has an invalid length. [ 537.421384][T17001] netlink: 'syz.3.3861': attribute type 3 has an invalid length. [ 537.421995][T16998] netlink: 'syz.1.3859': attribute type 9 has an invalid length. [ 537.434853][T17001] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3861'. [ 537.666256][T17009] tap0: tun_chr_ioctl cmd 35108 [ 537.711101][T17014] netlink: 'syz.1.3865': attribute type 2 has an invalid length. [ 537.728974][T17015] netlink: 'syz.1.3865': attribute type 2 has an invalid length. [ 537.777227][T17012] : port 1(ip6gretap0) entered blocking state [ 537.787737][T17012] : port 1(ip6gretap0) entered disabled state [ 537.797704][T17012] ip6gretap0: entered allmulticast mode [ 537.811873][T17012] ip6gretap0: entered promiscuous mode [ 538.157721][T17030] netlink: 'syz.0.3869': attribute type 3 has an invalid length. [ 538.444458][T17035] netlink: 'syz.3.3871': attribute type 21 has an invalid length. [ 539.626505][T17065] team0: Port device team_slave_0 removed [ 539.636014][T17065] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 541.153482][T17120] validate_nla: 10 callbacks suppressed [ 541.153501][T17120] netlink: 'syz.0.3896': attribute type 2 has an invalid length. [ 541.191398][T17120] netlink: 'syz.0.3896': attribute type 1 has an invalid length. [ 541.205124][T17120] __nla_validate_parse: 12 callbacks suppressed [ 541.205138][T17120] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3896'. [ 541.374030][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.394794][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.416168][T17125] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.438167][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.457253][T17125] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.489299][T17125] netlink: 'syz.3.3897': attribute type 46 has an invalid length. [ 541.509174][T17125] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3897'. [ 541.535994][T17125] netlink: 'syz.3.3897': attribute type 4 has an invalid length. [ 541.588105][T17132] netlink: 'syz.0.3899': attribute type 10 has an invalid length. [ 541.596440][T17132] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3899'. [ 541.691674][T17137] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3901'. [ 541.847140][T17148] syzkaller0: entered promiscuous mode [ 541.852948][T17148] syzkaller0: entered allmulticast mode [ 542.016663][T17153] netlink: 'syz.2.3906': attribute type 3 has an invalid length. [ 542.028166][T17153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3906'. [ 542.674052][T17193] netlink: 'syz.0.3915': attribute type 12 has an invalid length. [ 543.948266][T17234] team0: Port device team_slave_0 removed [ 543.956905][T17234] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 544.127133][T17243] syzkaller0: create flow: hash 268882138 index 1 [ 544.386533][T17135] syzkaller0: tun_net_xmit 76 [ 544.402693][T17135] syzkaller0: tun_net_xmit 48 [ 544.415062][ T27] syzkaller0: tun_net_xmit 76 [ 544.480608][T17236] syzkaller0: delete flow: hash 268882138 index 1 [ 546.607468][T17269] netlink: 'syz.2.3935': attribute type 1 has an invalid length. [ 546.645390][T17269] __nla_validate_parse: 6 callbacks suppressed [ 546.645406][T17269] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3935'. [ 546.652394][T17271] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3937'. [ 546.753326][ T5782] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 546.993277][T17283] netlink: 'syz.3.3941': attribute type 29 has an invalid length. [ 547.039044][T17289] netlink: 'syz.2.3940': attribute type 9 has an invalid length. [ 547.048058][T17276] syzkaller0: entered promiscuous mode [ 547.053580][T17276] syzkaller0: entered allmulticast mode [ 547.059459][T17289] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3940'. [ 547.078795][T17283] netlink: 'syz.3.3941': attribute type 29 has an invalid length. [ 547.113481][T17290] netlink: 703 bytes leftover after parsing attributes in process `syz.2.3940'. [ 547.139176][T17289] netlink: 703 bytes leftover after parsing attributes in process `syz.2.3940'. [ 547.341394][T17292] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3942'. [ 547.381007][T17292] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 547.400122][T17292] CPU: 1 PID: 17292 Comm: syz.3.3942 Not tainted syzkaller #0 [ 547.407657][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.417737][T17292] Call Trace: [ 547.421032][T17292] [ 547.423974][T17292] dump_stack_lvl+0x18c/0x250 [ 547.428686][T17292] ? show_regs_print_info+0x20/0x20 [ 547.433911][T17292] ? load_image+0x420/0x420 [ 547.438463][T17292] sysfs_warn_dup+0x8e/0xa0 [ 547.442988][T17292] sysfs_do_create_link_sd+0xc0/0x110 [ 547.448387][T17292] device_add_class_symlinks+0x1cf/0x240 [ 547.454103][T17292] device_add+0x4f9/0xc40 [ 547.458458][T17292] wiphy_register+0x1d99/0x2ac0 [ 547.463447][T17292] ? cfg80211_event_work+0x40/0x40 [ 547.468586][T17292] ? minstrel_ht_alloc+0x88a/0x990 [ 547.473817][T17292] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 547.480010][T17292] ieee80211_register_hw+0x2dd8/0x3b30 [ 547.485557][T17292] ? ieee80211_register_hw+0xed1/0x3b30 [ 547.491139][T17292] ? ieee80211_tasklet_handler+0x20/0x20 [ 547.496807][T17292] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 547.502733][T17292] ? __debug_object_init+0xec/0x450 [ 547.507960][T17292] ? __asan_memset+0x22/0x40 [ 547.512667][T17292] ? __hrtimer_init+0x189/0x270 [ 547.517543][T17292] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 547.523380][T17292] ? mac80211_hwsim_free+0x220/0x220 [ 547.528725][T17292] ? rcu_is_watching+0x15/0xb0 [ 547.533519][T17292] ? kstrndup+0xbd/0x140 [ 547.537795][T17292] hwsim_new_radio_nl+0xdad/0x1a70 [ 547.542935][T17292] ? __nla_validate+0x50/0x50 [ 547.547660][T17292] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 547.554022][T17292] ? __nla_parse+0x40/0x50 [ 547.558473][T17292] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 547.564924][T17292] genl_family_rcv_msg_doit+0x21a/0x310 [ 547.570506][T17292] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 547.576651][T17292] ? bpf_lsm_capable+0x9/0x10 [ 547.581390][T17292] ? security_capable+0x89/0xb0 [ 547.586283][T17292] genl_rcv_msg+0x611/0x7a0 [ 547.590819][T17292] ? genl_bind+0x360/0x360 [ 547.595253][T17292] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 547.601606][T17292] ? ref_tracker_free+0x686/0x830 [ 547.606646][T17292] ? __kasan_kmalloc_large+0x8b/0xa0 [ 547.612053][T17292] netlink_rcv_skb+0x235/0x4c0 [ 547.616917][T17292] ? genl_bind+0x360/0x360 [ 547.621348][T17292] ? netlink_ack+0x1160/0x1160 [ 547.626152][T17292] ? __lock_acquire+0x7d80/0x7d80 [ 547.631207][T17292] ? down_read+0x1ac/0x2e0 [ 547.635655][T17292] genl_rcv+0x28/0x40 [ 547.639659][T17292] netlink_unicast+0x7b1/0x930 [ 547.644475][T17292] netlink_sendmsg+0x8d0/0xbf0 [ 547.649287][T17292] ? netlink_getsockopt+0x590/0x590 [ 547.654509][T17292] ? apparmor_socket_sendmsg+0x8e/0x330 [ 547.660094][T17292] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 547.665415][T17292] ? security_socket_sendmsg+0x80/0xa0 [ 547.670990][T17292] ? netlink_getsockopt+0x590/0x590 [ 547.676228][T17292] ____sys_sendmsg+0x61b/0x980 [ 547.681025][T17292] ? __asan_memset+0x22/0x40 [ 547.685638][T17292] ? __sys_sendmsg_sock+0x30/0x30 [ 547.690678][T17292] ? __import_iovec+0x5f2/0x850 [ 547.695569][T17292] ? import_iovec+0x73/0xa0 [ 547.700113][T17292] ___sys_sendmsg+0x2a6/0x360 [ 547.704827][T17292] ? __sys_sendmsg+0x2b0/0x2b0 [ 547.709637][T17292] ? __lock_acquire+0x7d80/0x7d80 [ 547.714753][T17292] __se_sys_sendmsg+0x1d0/0x2c0 [ 547.719627][T17292] ? __x64_sys_sendmsg+0x80/0x80 [ 547.724600][T17292] ? lockdep_hardirqs_on+0x98/0x150 [ 547.729821][T17292] do_syscall_64+0x55/0xb0 [ 547.734260][T17292] ? clear_bhb_loop+0x40/0x90 [ 547.738968][T17292] ? clear_bhb_loop+0x40/0x90 [ 547.743661][T17292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.749938][T17292] RIP: 0033:0x7feb68f9e019 [ 547.754378][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.774385][T17292] RSP: 002b:00007feb69e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.782851][T17292] RAX: ffffffffffffffda RBX: 00007feb69225fa0 RCX: 00007feb68f9e019 [ 547.790856][T17292] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 547.798859][T17292] RBP: 00007feb6903500c R08: 0000000000000000 R09: 0000000000000000 [ 547.806863][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.814907][T17292] R13: 00007feb69226038 R14: 00007feb69225fa0 R15: 00007ffc709ae118 [ 547.822915][T17292] [ 547.944107][T17294] netlink: 'syz.2.3943': attribute type 2 has an invalid length. [ 547.994095][T17294] netlink: 'syz.2.3943': attribute type 8 has an invalid length. [ 548.032967][T17294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3943'. [ 548.093192][T17295] netlink: 'syz.2.3943': attribute type 2 has an invalid length. [ 548.150984][T17295] netlink: 'syz.2.3943': attribute type 8 has an invalid length. [ 548.204348][T17295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3943'. [ 550.600778][T17342] netlink: 'syz.1.3957': attribute type 10 has an invalid length. [ 550.609832][T17342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3957'. [ 550.691458][T17342] syzkaller0: entered promiscuous mode [ 550.697390][T17342] syzkaller0: entered allmulticast mode [ 550.904251][T17349] netlink: 'syz.2.3959': attribute type 27 has an invalid length. [ 550.923181][T17349] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3959'. [ 554.715301][T17379] netlink: 'syz.1.3967': attribute type 10 has an invalid length. [ 554.759711][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.785688][T17379] bridge_slave_1: left allmulticast mode [ 554.801528][T17379] bridge_slave_1: left promiscuous mode [ 554.814203][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.844568][T17379] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 555.236117][T17400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.257151][T17398] netlink: 'syz.1.3972': attribute type 10 has an invalid length. [ 555.529627][T17398] team0 (unregistering): Port device team_slave_0 removed [ 555.578524][T17398] team0 (unregistering): Port device team_slave_1 removed [ 555.832094][T17411] netlink: 'syz.3.3976': attribute type 11 has an invalid length. [ 555.868728][T17411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3976'. [ 556.025089][T17418] sock: sock_set_timeout: `syz.1.3978' (pid 17418) tries to set negative timeout [ 556.200755][T17410] sit0: entered allmulticast mode [ 556.496262][T17425] syzkaller0: entered promiscuous mode [ 556.578242][T17432] netlink: 'syz.2.3981': attribute type 29 has an invalid length. [ 559.291027][T17432] netlink: 'syz.2.3981': attribute type 29 has an invalid length. [ 559.299536][T17435] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3982'. [ 559.310801][T17438] bridge_slave_1: left allmulticast mode [ 559.317023][T17438] bridge_slave_1: left promiscuous mode [ 559.322845][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.333802][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.061112][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0d [ 560.341209][T17457] netlink: 'syz.0.3987': attribute type 10 has an invalid length. [ 561.067489][T17457] team0 (unregistering): Port device team_slave_1 removed [ 561.111309][T17457] team0 (unregistering): Port device wlan1 removed [ 561.134943][T17457] team0 (unregistering): Port device virt_wifi0 removed [ 561.302851][T17471] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 561.374798][T17471] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.3991'. [ 562.468087][T17505] syzkaller0: entered promiscuous mode [ 562.473625][T17505] syzkaller0: entered allmulticast mode [ 563.064612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.071217][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.348517][T17541] netlink: 'syz.3.4008': attribute type 33 has an invalid length. [ 566.364948][T17541] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4008'. [ 566.386524][T17541] `: renamed from ip6tnl0 (while UP) [ 566.414196][T17541] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 566.571087][T17544] syzkaller0: entered promiscuous mode [ 566.605136][T17544] syzkaller0: entered allmulticast mode [ 569.274308][T17594] netlink: 'syz.2.4021': attribute type 5 has an invalid length. [ 569.438868][T17602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4024'. [ 569.459648][T17595] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4020'. [ 569.476848][T17595] bridge_slave_1: default FDB implementation only supports local addresses [ 570.741894][T17632] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4033'. [ 570.806298][T17635] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4033'. [ 571.161282][T17647] can: request_module (can-proto-0) failed. [ 571.700464][T17667] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4042'. [ 573.070226][T17686] netlink: 'syz.3.4049': attribute type 21 has an invalid length. [ 573.115509][T17686] netlink: 'syz.3.4049': attribute type 6 has an invalid length. [ 573.155361][T17686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4049'. [ 573.355535][T17690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4046'. [ 573.733611][T17690] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4046'. [ 574.229550][T17704] netlink: 'syz.3.4054': attribute type 29 has an invalid length. [ 574.258111][T17704] netlink: 'syz.3.4054': attribute type 29 has an invalid length. [ 574.283009][T17710] netlink: 'syz.3.4054': attribute type 29 has an invalid length. [ 574.845535][T17722] netlink: 'syz.0.4056': attribute type 1 has an invalid length. [ 574.853345][T17722] netlink: 'syz.0.4056': attribute type 3 has an invalid length. [ 574.891288][T17724] netlink: 'syz.2.4058': attribute type 29 has an invalid length. [ 574.936718][T17724] netlink: 'syz.2.4058': attribute type 29 has an invalid length. [ 574.965641][T17725] netlink: 'syz.2.4058': attribute type 29 has an invalid length. [ 574.965890][T17722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4056'. [ 575.661244][T17745] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4064'. [ 575.835261][T17750] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.4066'. [ 577.770993][T17783] delete_channel: no stack [ 578.005249][T17793] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4078'. [ 578.076040][ T5782] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 578.105593][T17793] netlink: set zone limit has 8 unknown bytes [ 578.170870][T17802] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4081'. [ 578.543985][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4084'. [ 578.653009][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4084'. [ 578.678199][T17811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4084'. [ 578.854342][T17818] validate_nla: 7 callbacks suppressed [ 578.854363][T17818] netlink: 'syz.2.4087': attribute type 9 has an invalid length. [ 578.880270][T17818] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4087'. [ 578.954165][T17824] netlink: 'syz.2.4087': attribute type 9 has an invalid length. [ 579.004222][T17824] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4087'. [ 579.302095][T17827] delete_channel: no stack [ 579.910037][T17861] netlink: 'syz.2.4100': attribute type 10 has an invalid length. [ 580.037115][T17861] hsr0: entered promiscuous mode [ 580.052983][T17861] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 580.075741][T17861] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 580.087432][T17862] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4097'. [ 580.101504][T17861] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 580.117223][T17861] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 580.124357][T17862] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4097'. [ 580.145686][T17849] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4097'. [ 580.169279][T17862] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4097'. [ 580.252883][T17870] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.4101'. [ 580.392921][T17873] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4102'. [ 580.423275][T17873] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.4102'. [ 580.479327][T17857] ------------[ cut here ]------------ [ 580.485163][T17857] WARNING: CPU: 0 PID: 17857 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 580.495099][T17857] Modules linked in: [ 580.499317][T17857] CPU: 0 PID: 17857 Comm: syz.1.4098 Not tainted syzkaller #0 [ 580.507317][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.517788][T17857] RIP: 0010:perf_pending_task+0x357/0x480 [ 580.523564][T17857] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 a0 f9 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 580.543271][T17857] RSP: 0018:ffffc9000526f9c8 EFLAGS: 00010293 [ 580.549539][T17857] RAX: ffffffff81b1a397 RBX: ffff88801c314158 RCX: ffff888025fd5a00 [ 580.558014][T17857] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 580.566197][T17857] RBP: ffff88801c313f18 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 580.574220][T17857] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff888025fd5a00 [ 580.582297][T17857] R13: ffff88807b0a0530 R14: 0000000000000000 R15: 1ffff110038627e3 [ 580.590627][T17857] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 580.599921][T17857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.606667][T17857] CR2: 00007eff7e48fd58 CR3: 0000000033b62000 CR4: 00000000003506f0 [ 580.614908][T17857] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 580.622902][T17857] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 580.630961][T17857] Call Trace: [ 580.634259][T17857] [ 580.637258][T17857] task_work_run+0x1d4/0x260 [ 580.641893][T17857] ? task_work_cancel+0x220/0x220 [ 580.647028][T17857] do_exit+0x986/0x2530 [ 580.651398][T17857] ? put_task_struct+0xc0/0xc0 [ 580.656292][T17857] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 580.662312][T17857] ? get_signal+0x100e/0x1390 [ 580.667087][T17857] ? lock_chain_count+0x20/0x20 [ 580.671986][T17857] ? _raw_spin_lock_irq+0xbb/0xf0 [ 580.677247][T17857] do_group_exit+0x22d/0x2f0 [ 580.681894][T17857] ? lockdep_hardirqs_on+0x98/0x150 [ 580.687213][T17857] get_signal+0x12a6/0x1390 [ 580.691772][T17857] arch_do_signal_or_restart+0xc2/0x7b0 [ 580.697456][T17857] ? __ia32_sys_get_robust_list+0x110/0x110 [ 580.703377][T17857] ? get_sigframe_size+0x20/0x20 [ 580.708418][T17857] ? exit_to_user_mode_loop+0x3b/0x110 [ 580.713903][T17857] exit_to_user_mode_loop+0x70/0x110 [ 580.719469][T17857] exit_to_user_mode_prepare+0xee/0x180 [ 580.725123][T17857] syscall_exit_to_user_mode+0x1a/0x50 [ 580.730635][T17857] do_syscall_64+0x61/0xb0 [ 580.735152][T17857] ? clear_bhb_loop+0x40/0x90 [ 580.739862][T17857] ? clear_bhb_loop+0x40/0x90 [ 580.744580][T17857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.750554][T17857] RIP: 0033:0x7f763999e019 [ 580.755125][T17857] Code: Unable to access opcode bytes at 0x7f763999dfef. [ 580.762692][T17857] RSP: 002b:00007f763a8370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 580.771260][T17857] RAX: fffffffffffffe00 RBX: 00007f7639c25fa8 RCX: 00007f763999e019 [ 580.779290][T17857] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7639c25fa8 [ 580.787335][T17857] RBP: 00007f7639c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 580.795362][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.803806][T17857] R13: 00007f7639c26038 R14: 00007ffd3cf58e50 R15: 00007ffd3cf58f38 [ 580.811938][T17857] [ 580.815044][T17857] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 580.822323][T17857] CPU: 0 PID: 17857 Comm: syz.1.4098 Not tainted syzkaller #0 [ 580.829792][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.839870][T17857] Call Trace: [ 580.843179][T17857] [ 580.846115][T17857] dump_stack_lvl+0x18c/0x250 [ 580.850803][T17857] ? show_regs_print_info+0x20/0x20 [ 580.856012][T17857] ? load_image+0x420/0x420 [ 580.860535][T17857] panic+0x2ca/0x720 [ 580.864527][T17857] ? bpf_jit_dump+0xd0/0xd0 [ 580.869045][T17857] __warn+0x2e0/0x470 [ 580.873032][T17857] ? perf_pending_task+0x357/0x480 [ 580.878150][T17857] ? perf_pending_task+0x357/0x480 [ 580.883278][T17857] report_bug+0x2be/0x4f0 [ 580.887683][T17857] ? perf_pending_task+0x357/0x480 [ 580.892829][T17857] ? perf_pending_task+0x357/0x480 [ 580.897958][T17857] ? perf_pending_task+0x359/0x480 [ 580.903082][T17857] handle_bug+0xcf/0x120 [ 580.907347][T17857] exc_invalid_op+0x1a/0x50 [ 580.911855][T17857] asm_exc_invalid_op+0x1a/0x20 [ 580.916709][T17857] RIP: 0010:perf_pending_task+0x357/0x480 [ 580.922442][T17857] Code: e8 3e ce d5 ff 84 db 75 10 e8 a5 cb d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 95 cb d5 ff e8 a0 f9 4e ff eb e9 e8 89 cb d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 580.942491][T17857] RSP: 0018:ffffc9000526f9c8 EFLAGS: 00010293 [ 580.948560][T17857] RAX: ffffffff81b1a397 RBX: ffff88801c314158 RCX: ffff888025fd5a00 [ 580.957086][T17857] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 580.965269][T17857] RBP: ffff88801c313f18 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 580.973273][T17857] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff888025fd5a00 [ 580.981241][T17857] R13: ffff88807b0a0530 R14: 0000000000000000 R15: 1ffff110038627e3 [ 580.989219][T17857] ? perf_pending_task+0x357/0x480 [ 580.994345][T17857] ? perf_pending_task+0x357/0x480 [ 580.999466][T17857] task_work_run+0x1d4/0x260 [ 581.004176][T17857] ? task_work_cancel+0x220/0x220 [ 581.009216][T17857] do_exit+0x986/0x2530 [ 581.013418][T17857] ? put_task_struct+0xc0/0xc0 [ 581.018205][T17857] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 581.024202][T17857] ? get_signal+0x100e/0x1390 [ 581.028892][T17857] ? lock_chain_count+0x20/0x20 [ 581.033743][T17857] ? _raw_spin_lock_irq+0xbb/0xf0 [ 581.038771][T17857] do_group_exit+0x22d/0x2f0 [ 581.043361][T17857] ? lockdep_hardirqs_on+0x98/0x150 [ 581.048574][T17857] get_signal+0x12a6/0x1390 [ 581.053139][T17857] arch_do_signal_or_restart+0xc2/0x7b0 [ 581.058806][T17857] ? __ia32_sys_get_robust_list+0x110/0x110 [ 581.064717][T17857] ? get_sigframe_size+0x20/0x20 [ 581.069680][T17857] ? exit_to_user_mode_loop+0x3b/0x110 [ 581.075147][T17857] exit_to_user_mode_loop+0x70/0x110 [ 581.080436][T17857] exit_to_user_mode_prepare+0xee/0x180 [ 581.085982][T17857] syscall_exit_to_user_mode+0x1a/0x50 [ 581.091442][T17857] do_syscall_64+0x61/0xb0 [ 581.095854][T17857] ? clear_bhb_loop+0x40/0x90 [ 581.100543][T17857] ? clear_bhb_loop+0x40/0x90 [ 581.105235][T17857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.111125][T17857] RIP: 0033:0x7f763999e019 [ 581.115536][T17857] Code: Unable to access opcode bytes at 0x7f763999dfef. [ 581.122550][T17857] RSP: 002b:00007f763a8370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 581.130963][T17857] RAX: fffffffffffffe00 RBX: 00007f7639c25fa8 RCX: 00007f763999e019 [ 581.138949][T17857] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7639c25fa8 [ 581.146936][T17857] RBP: 00007f7639c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 581.154910][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.162877][T17857] R13: 00007f7639c26038 R14: 00007ffd3cf58e50 R15: 00007ffd3cf58f38 [ 581.170863][T17857] [ 581.174143][T17857] Kernel Offset: disabled [ 581.178461][T17857] Rebooting in 86400 seconds..