last executing test programs: 4.932596527s ago: executing program 0 (id=4061): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @mcast2, 0x7}}, 0x80, &(0x7f0000000400)}, 0x4010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xd0ff, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c35000000000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) 4.647127235s ago: executing program 0 (id=4064): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.035928923s ago: executing program 0 (id=4071): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.8060055s ago: executing program 0 (id=4073): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.392533151s ago: executing program 0 (id=4078): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x5, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0xa, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r4}, 0x18) r8 = socket$kcm(0xa, 0x2, 0x88) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91624fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}], 0x2}, 0x200ce0c0) sendmsg$kcm(r8, 0x0, 0x20040080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) 3.221738087s ago: executing program 1 (id=4081): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="1400000010013507d25a806f8c6394f98abc977b", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000740)="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", 0x15f}, {&(0x7f00000002c0)="7512f99c31a84227bf641b5af9b87026c9985c9885c8a9cd91aab695958452fdec28c62363efede9b248e20dacf567def95d3a86b5c9abb04abdfd9c4e050f8bede183dc95fc5e1fe978ebe4dc52b16d1504f5ebc44ede54dd99c52c9e61b79b657f435fabf2e7fffb7da32f4667b831a9bdeed323235f5a87310c2d19d8e0958c0b85c3d2406c", 0x87}, {&(0x7f0000000a00)="a263ad53a5736ccdab436d566cce5f31d6c11611f5c5375d30821e004ab17df8078f31e8453bc666a60173449849676759d48afc62673f6fdb2315039ddddc84cde190e0d4303c6ac1217b6d3033b47104644f6c11c32a0780a945a8ba2fba4b6164c664d523accc1297d70764feffffffa82248cb61720d56eacbc3c4207719827209b5e7c9020ab658628063c0f729f8032df71fa9e8aaf854d91ffa89e1c99285b3bcc9ffc001522ef7a42d5022610770f4e3c95e1a37a0d072c6c7decaadb06b", 0xc2}], 0x3}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x4c0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000600)=ANY=[]) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4d31, 0x20200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000000000000001, 0x7fffffff}, 0x10020, 0x2, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000000c0)="1400000015000b63d25a9a648c0f9de72f1a4a1d", 0x14}]}, 0x2000c8c4) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x5e, 0x6, 0xdb, 0x1, 0x0, 0x93, 0x340c, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x7}, 0x10008a, 0x7, 0x7ff, 0x5, 0x25, 0xfffff001, 0x7, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a800160020e40001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd637796d09d3603c3e318eb805eb57e917013982fb30381b6c408a0b354023e2089b77f6f4b7a3a81a40f8e3869a1cc6972684b956bf", 0xb7}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0xf, 0x7400}, 0x10) 3.200035707s ago: executing program 4 (id=4082): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006116000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000607070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1878a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c05073779fc3fa0e268c62b06e9fdc2977dfef1ced98270263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e5900"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.176576528s ago: executing program 0 (id=4083): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0x0, 0x56, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000003c0), 0x8, 0x1000007c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000ed008500f200500000009500090000000000"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa210e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe30e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8800, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f00000001c0)=[{0x4d, 0x0, 0x0, 0xfffffffe}, {0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 2.975841364s ago: executing program 1 (id=4086): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r2, 0x0, 0x3e8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32, @ANYBLOB="70fabed44248118ec6810ad77c00000100", @ANYRESHEX=r0, @ANYRESOCT=r3], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001640)="33e302e6", 0x4}], 0x1}, 0x40810) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 2.708315481s ago: executing program 4 (id=4088): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.615182184s ago: executing program 4 (id=4089): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) r2 = bpf$MAP_CREATE(0x300000000000000, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03400000010000cd0ddd2c0000000000000000000000e8ffcd823b62fc1cb14259506c75c4b2dee9535852904f24c1b86b8c93022915e5868f70dab6f34300000000"], 0x48) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000066aef4a000000000000000004000000bf7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0xb}, 0x8825, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.43481595s ago: executing program 1 (id=4090): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff8500000004000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 7) 1.549627215s ago: executing program 2 (id=4094): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) 1.450235788s ago: executing program 2 (id=4095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.320605142s ago: executing program 2 (id=4096): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000800)=@in6={0xa, 0x3ffd, 0xfffffffc, @mcast2, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.238869274s ago: executing program 2 (id=4097): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x20, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5cd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x1, 0x2, 0x0, 0x3, 0x1, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x10000, 0xc9, &(0x7f0000000a40)=""/201, 0x41100, 0x1, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000c40)=[{0x0, 0x5, 0x7, 0x8}, {0x2, 0x2, 0xe, 0x9}, {0x4, 0x1, 0x1, 0x5}, {0x3, 0x5, 0x7, 0x1}, {0x2, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x4, 0x9}, {0x4, 0x4, 0x3, 0x7}, {0x0, 0x5, 0x0, 0x6}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x5, 0x9}], 0x10, 0x5e}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) 990.543662ms ago: executing program 3 (id=4098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000000)="14b7e7b1e30dc16c6ff594493ce7315cfcb90685f252daf2db09b91421cfa93c5de8a4654c2219d328e07d2bf32abcf4dea254f0559689c284073f8ed615e8eb0effc93652ab526422b98d2aaf1d02d3b9c88c", &(0x7f0000000180)=""/203, &(0x7f0000000340)="db52047310c848722272aa00863f6d3f3b283bdea8dfc3294184a25fb85b6ea975869f8b8bbb30f2fb9c9c2298912f5ea742ae5f51d77357053048e5a5cfb85ba37f537a42bf55cbcec43baf6f6c0a79b905f8a08260b1fe76f93c695a4f65b8752295f41ddf8b6f7331a9e7b5e641eedf622376b6079b474ad69c1d7fcdcea3811a07ccbce50dbf50477f620925e5d7a16f84ff8dac09bfe7c2c51927fd2fc782cc413e097cd9e571a8b0d338f4b7a9a882", &(0x7f00000006c0)="ae06d2e5f87936ba1b0bfc2105f93e5757621f7095723304fd8ee0fd9ac9098785e409cd75a565eb0142ae0b1562996f535f5be1b0a8afb68941f660c41a881de0d9c1c6ae05099fa3d3691eadd995e391104f53bcf066a3df3255e9946b82fd6b0b2b072ebc", 0x1, r0, 0x4}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x38, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r3) 968.137612ms ago: executing program 1 (id=4099): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg(r0, &(0x7f0000002840)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0xa00}, 0xc180) 967.290452ms ago: executing program 4 (id=4100): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 833.540266ms ago: executing program 1 (id=4101): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) (fail_nth: 2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) 832.277156ms ago: executing program 3 (id=4102): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000140)='GPL\x00'}, 0xfffffffffffffe4b) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) 803.969067ms ago: executing program 4 (id=4103): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r2, 0x0, 0x3e8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32, @ANYBLOB="70fabed44248118ec6810ad77c00000100", @ANYRESHEX=r0, @ANYRESOCT=r3], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001640)="33e302e6", 0x4}], 0x1}, 0x40810) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 636.190942ms ago: executing program 4 (id=4104): r0 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x686, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0xfffffffffffffd97}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg(r0, &(0x7f0000002840)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xc180) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000002180)={&(0x7f0000000b40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/118, 0x76}], 0x1, &(0x7f0000002100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x2020) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="ebd4115700000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001d9d0000850000000600000085000000020000008500000055000000186900000b000000000000000200000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004971b01d8500000006000000772840000800000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xf, &(0x7f0000000080)=""/15, 0x1e00, 0x50, '\x00', 0x0, @fallback=0x4f, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x1, 0x5, 0x10, 0x7}, {0x3, 0x1, 0xb, 0xa}, {0x5, 0x4, 0x9}, {0x0, 0x5, 0x0, 0xb}, {0x0, 0x5, 0xe, 0x1}], 0x10, 0x9}, 0x94) r10 = getpid() r11 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000800)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000009c0)="7df4e84a3a045565acf913515e09172375aada3f85e945ad45c590a9166dec872d06025955a2a257012e5c368d59be950328d86d15256e34a53daf2e30cb6ab6d18d7c406ac8dfb0b41d75755864a6e86a48cb79658536e0609b8b1f014e1c3b7551a9d3e678a6b54985c1aaa6e1a1b0aa13f136b9648334e624058fb7afa6010780b5f000477713893d0a18a17887", 0x8f}, {&(0x7f0000000a80)="50b6360e90342ba81e1d2d35d13a68594b60741259a2db11407ac8a3e26ad147bdc0a4dbfd9a17b88df2006369ae06431f3b53fb897d60dd58c20474d686f8035313b7738360d42978e6c362c58f8845e19cd7f799ac430b25f8658ecbcefd572514e30a47b40005311b716e8a77d95a6a7e6f4ada8c1829ceb4c1c3514bcee743144969e59dcaabb387de5aee46", 0x8e}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="c93bc336e90965c27db982273f44ac12c76567230c7239702432c926a916dfce45cf03c56b2ed2c2eb9e82a8bfed3adf0dde50f3c65805144043a2d80c4ef568001aeb1ec626c3965b448364b131285270339ecdc28ddada35ad29b5e0fb1867", 0x60}, {&(0x7f0000001cc0)="4461a43b476679ab74248e641712a61768b20dd32af92f4f83950f8a5fa6d86ba4a5ceecf5bc724f10673a1dff197c8e7a3ded1af2b5da591818404bec8e2a5d60db083fdc8a3d1e55008881b7805a5b7ecd25d8caa3802a1d61730abd95220ed39d2dc031c76eb0690349a9ae0b98c05f2cfbe99ed699e135c18d8e03d4740668b346c7346f3120ab6167b826cb48769caa55f07736cf3fb243b3a5df75250adefed67102c4942a43b0d4d875fdfd110ccf6e72603c9415d69bdd8ad362151d9e18da209856", 0xc6}, {&(0x7f0000001dc0)="19e9b815b4600bb60cdf23db8d91818e1b36c83921be73ad3ed44c18b40a2a2ac03968344f763966a521a4a7ce175a2d240231b2b70a54c4146db08a54616fd12acf380519716a1561ef3223da369e86e4c6f1f319b998b0c32efb763cbc00572567097549dd98b7c96e0cc368e956608266a970cf5db26ed73596803ddceca35f093f5f73b13fe23829ac6b5fa0e0ea002185e28ff118d40cfd32c595bab10e88250b6ea89c6d07ac2f5cb6c23b238ca31577b67b1a37e83c3aecac4d4ac723c76b78a3f5974963323239c78a", 0xcd}], 0x6, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r9, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}], 0x98, 0x20000000}, 0x4000800) 563.588344ms ago: executing program 3 (id=4105): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) 313.883881ms ago: executing program 3 (id=4106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 246.843563ms ago: executing program 2 (id=4107): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000800)=@in6={0xa, 0x3ffd, 0xfffffffc, @mcast2, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 136.536507ms ago: executing program 2 (id=4108): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x101}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff75, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x3e, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x20, 0x0, 0x4, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair(0xa, 0x2, 0x2, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003000b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800"], 0x50) 136.348616ms ago: executing program 3 (id=4109): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000180004000000080000000800000000000000", @ANYRES16, @ANYBLOB="0000fffffffffffffffffffffffd2e2e"], 0x48) 61.869758ms ago: executing program 1 (id=4110): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff8500000004000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000009a000000050000000200000005150000", @ANYRES32=0x1, @ANYBLOB="0600"/17, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100000601000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 3 (id=4111): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000080000000000000000000000000000000000000000000000002fea91aa18964646783ccfd47e886861975873145469e4fd3deac468dc9a23123b127a83d7b5fac7f0d7b0b8725dceb7653ea20d88ce7c593f227faa69a3f80ac016a1bb0bf883945ac98b5f7506dad0c1e3e58cee7907086f8a85e94df2b048c1178287a694a4eda4"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000122000028"], 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="1400000015000b63d25a9a197b9df73d05000000", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x10070) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r7, 0x0, 0x40002020) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 390.249435][T12935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.258139][T12935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.280106][T12935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.312140][T13097] netlink: 'syz.0.3000': attribute type 10 has an invalid length. [ 390.676767][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.709118][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.735904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.878261][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.919814][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.927475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.136735][T13127] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3012'. [ 391.161297][T13127] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 391.238258][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.276619][T13127] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 391.387090][T13139] netlink: 'syz.1.3015': attribute type 21 has an invalid length. [ 391.659098][T13143] netlink: 170988 bytes leftover after parsing attributes in process `syz.1.3020'. [ 391.711794][T13143] netlink: zone id is out of range [ 391.727790][T13148] netlink: 'syz.1.3020': attribute type 29 has an invalid length. [ 391.750693][T13143] netlink: zone id is out of range [ 391.769753][T13148] netlink: 'syz.1.3020': attribute type 29 has an invalid length. [ 391.806923][T13143] netlink: zone id is out of range [ 391.844732][T13153] netlink: 'syz.1.3020': attribute type 29 has an invalid length. [ 391.871668][T13143] netlink: zone id is out of range [ 391.876804][T13143] netlink: zone id is out of range [ 391.899325][T13143] netlink: zone id is out of range [ 391.934104][T13143] netlink: zone id is out of range [ 391.941192][T13143] netlink: zone id is out of range [ 391.959320][T13143] netlink: zone id is out of range [ 391.987153][T13143] netlink: zone id is out of range [ 392.133235][T13155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3022'. [ 392.576069][T13169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3025'. [ 393.037264][ T6259] team0: Port device wlan1 removed [ 393.107651][T13156] chnl_net:caif_netlink_parms(): no params data found [ 393.202472][T13187] netlink: 'syz.3.3031': attribute type 10 has an invalid length. [ 393.279083][T13187] team0: Device wg1 is of different type [ 393.840414][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.879763][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.944136][T13156] device bridge_slave_0 entered promiscuous mode [ 393.984817][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.994957][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 394.016737][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.045102][T13156] device bridge_slave_1 entered promiscuous mode [ 394.152014][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.247399][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.379041][ T6259] device hsr_slave_0 left promiscuous mode [ 394.388044][ T6259] device hsr_slave_1 left promiscuous mode [ 394.454548][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.505110][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.520150][ T6259] device batadv0 left promiscuous mode [ 394.576352][ T6259] bridge0: port 4(batadv0) entered disabled state [ 394.643617][ T6259] bridge0: port 3(hsr0) entered disabled state [ 394.673862][ T6259] device bridge_slave_1 left promiscuous mode [ 394.690652][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.700978][ T6259] device ÿÿÿÿÿÿ left promiscuous mode [ 394.706455][ T6259] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 394.772100][ T6259] device veth1_macvtap left promiscuous mode [ 394.780972][T13240] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3051'. [ 394.798311][ T6259] device veth0_macvtap left promiscuous mode [ 395.297482][ T6259] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 395.329074][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 395.358571][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 395.374295][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.392571][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.492695][ T6259] team0 (unregistering): Port device bridge0 removed [ 395.524806][ T6259] bond0 (unregistering): Released all slaves [ 395.588047][T13227] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3044'. [ 395.606359][T13223] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3044'. [ 395.629655][T13245] netlink: 'syz.1.3051': attribute type 10 has an invalid length. [ 395.686251][T13245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.721357][T13245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 395.983844][T13262] FAULT_INJECTION: forcing a failure. [ 395.983844][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 395.999465][T13262] CPU: 0 PID: 13262 Comm: syz.3.3056 Not tainted syzkaller #0 [ 396.006946][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.017005][T13262] Call Trace: [ 396.020287][T13262] [ 396.023221][T13262] dump_stack_lvl+0x188/0x250 [ 396.027911][T13262] ? show_regs_print_info+0x20/0x20 [ 396.033121][T13262] ? load_image+0x400/0x400 [ 396.037632][T13262] ? __might_sleep+0xf0/0xf0 [ 396.042227][T13262] ? __lock_acquire+0x7d10/0x7d10 [ 396.047252][T13262] ? mark_lock+0x94/0x320 [ 396.051585][T13262] should_fail+0x38c/0x4c0 [ 396.056018][T13262] should_failslab+0x5/0x20 [ 396.060530][T13262] slab_pre_alloc_hook+0x51/0xc0 [ 396.065479][T13262] __kmalloc+0x6b/0x330 [ 396.069638][T13262] ? tomoyo_realpath_from_path+0x118/0x610 [ 396.075456][T13262] tomoyo_realpath_from_path+0x118/0x610 [ 396.081112][T13262] tomoyo_path_number_perm+0x242/0x660 [ 396.086581][T13262] ? verify_lock_unused+0x140/0x140 [ 396.091793][T13262] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 396.097260][T13262] ? ksys_write+0x1c6/0x260 [ 396.101836][T13262] security_file_ioctl+0x6c/0xa0 [ 396.106793][T13262] __se_sys_ioctl+0x48/0x170 [ 396.111390][T13262] do_syscall_64+0x4c/0xa0 [ 396.115810][T13262] ? clear_bhb_loop+0x30/0x80 [ 396.120491][T13262] ? clear_bhb_loop+0x30/0x80 [ 396.125185][T13262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.131083][T13262] RIP: 0033:0x7fba15bede59 [ 396.135494][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.155095][T13262] RSP: 002b:00007fba13e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.163497][T13262] RAX: ffffffffffffffda RBX: 00007fba15e67090 RCX: 00007fba15bede59 [ 396.171464][T13262] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000d [ 396.179423][T13262] RBP: 00007fba13e26090 R08: 0000000000000000 R09: 0000000000000000 [ 396.187379][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.195419][T13262] R13: 00007fba15e67128 R14: 00007fba15e67090 R15: 00007ffe999a7488 [ 396.203389][T13262] [ 396.207523][ T4178] Bluetooth: hci1: command 0x041b tx timeout [ 396.216212][T13262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.385334][T13156] team0: Port device team_slave_0 added [ 396.395009][T13156] team0: Port device team_slave_1 added [ 396.410465][T13267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3059'. [ 396.515728][T13273] netlink: 'syz.3.3061': attribute type 29 has an invalid length. [ 396.542407][T13273] netlink: 'syz.3.3061': attribute type 29 has an invalid length. [ 396.568226][T13273] netlink: 'syz.3.3061': attribute type 29 has an invalid length. [ 396.579622][T13275] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3062'. [ 396.599784][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.606738][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.643664][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.707131][T13276] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 396.722116][T13276] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3061'. [ 396.734728][T13277] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 396.781077][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.809536][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.837715][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.412960][T13156] device hsr_slave_0 entered promiscuous mode [ 397.438750][T13156] device hsr_slave_1 entered promiscuous mode [ 397.500886][T13156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.508476][T13156] Cannot create hsr debugfs directory [ 397.582753][T13288] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3064'. [ 397.627180][T13289] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3064'. [ 398.230494][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 398.236524][T13156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.328049][T13305] netlink: 'syz.0.3072': attribute type 3 has an invalid length. [ 398.377088][T13156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.404304][T13305] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3072'. [ 398.577490][T13156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.701254][T13156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.743159][T13316] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 398.760556][T13316] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 398.780725][T13316] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 398.797136][T13320] netlink: 'syz.1.3077': attribute type 29 has an invalid length. [ 398.856505][T13318] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3075'. [ 398.919706][T13324] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3077'. [ 399.244332][T13329] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.308049][T13156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.330273][T13156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.347233][T13156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.366677][T13156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.463129][T13330] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3080'. [ 400.309516][ T4178] Bluetooth: hci1: command 0x0419 tx timeout [ 401.282562][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.388940][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.427145][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.491337][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.560206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.596629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.673435][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.680581][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.743481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.808967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.830652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.868193][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.875302][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.966184][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.981443][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.012852][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.075982][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.138495][T13156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.166522][T13156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.196740][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.207232][T13363] validate_nla: 5 callbacks suppressed [ 402.207245][T13363] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 402.224577][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.282822][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.295462][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.313851][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.327990][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.349951][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.478788][T13363] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 402.625366][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.050155][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.057679][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.117217][T13382] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3094'. [ 403.184226][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.392310][T13382] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3094'. [ 403.414770][T13381] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3093'. [ 404.245874][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.258211][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.301187][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.326367][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.212990][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.225823][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.238792][T13156] device veth0_vlan entered promiscuous mode [ 408.257358][T13156] device veth1_vlan entered promiscuous mode [ 408.354868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.371440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.438161][T13156] device veth0_macvtap entered promiscuous mode [ 408.467395][T13156] device veth1_macvtap entered promiscuous mode [ 408.978055][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.996683][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.007192][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.049636][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.067960][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.079417][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.104416][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.149389][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.169658][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.204553][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.286460][T13438] device syzkaller0 entered promiscuous mode [ 409.333839][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.347026][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.381620][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.397412][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.409847][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.427567][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.470169][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.481422][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.491518][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.502210][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.529885][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.746696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.770256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.811798][T13156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.822073][T13156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.840893][T13156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.861982][T13156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.922417][T13462] FAULT_INJECTION: forcing a failure. [ 409.922417][T13462] name failslab, interval 1, probability 0, space 0, times 0 [ 409.962990][T13462] CPU: 0 PID: 13462 Comm: syz.3.3117 Not tainted syzkaller #0 [ 409.970472][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.980532][T13462] Call Trace: [ 409.983814][T13462] [ 409.986740][T13462] dump_stack_lvl+0x188/0x250 [ 409.991420][T13462] ? show_regs_print_info+0x20/0x20 [ 409.996623][T13462] ? load_image+0x400/0x400 [ 410.001129][T13462] ? __might_sleep+0xf0/0xf0 [ 410.005728][T13462] ? __lock_acquire+0x7d10/0x7d10 [ 410.010761][T13462] should_fail+0x38c/0x4c0 [ 410.015186][T13462] should_failslab+0x5/0x20 [ 410.019690][T13462] slab_pre_alloc_hook+0x51/0xc0 [ 410.024632][T13462] __kmalloc+0x6b/0x330 [ 410.028791][T13462] ? tomoyo_encode+0x27e/0x540 [ 410.033562][T13462] tomoyo_encode+0x27e/0x540 [ 410.038158][T13462] tomoyo_realpath_from_path+0x5cd/0x610 [ 410.043803][T13462] tomoyo_path_number_perm+0x242/0x660 [ 410.049272][T13462] ? verify_lock_unused+0x140/0x140 [ 410.054478][T13462] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 410.059942][T13462] ? ksys_write+0x1c6/0x260 [ 410.064492][T13462] security_file_ioctl+0x6c/0xa0 [ 410.069436][T13462] __se_sys_ioctl+0x48/0x170 [ 410.074032][T13462] do_syscall_64+0x4c/0xa0 [ 410.078448][T13462] ? clear_bhb_loop+0x30/0x80 [ 410.083123][T13462] ? clear_bhb_loop+0x30/0x80 [ 410.087805][T13462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.093697][T13462] RIP: 0033:0x7fba15bede59 [ 410.098117][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.117723][T13462] RSP: 002b:00007fba13e05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.126140][T13462] RAX: ffffffffffffffda RBX: 00007fba15e67180 RCX: 00007fba15bede59 [ 410.134114][T13462] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000008 [ 410.142088][T13462] RBP: 00007fba13e05090 R08: 0000000000000000 R09: 0000000000000000 [ 410.150058][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.158029][T13462] R13: 00007fba15e67218 R14: 00007fba15e67180 R15: 00007ffe999a7488 [ 410.166014][T13462] [ 410.209299][T13462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.251841][T13462] nr0: port 1(hsr0) entered blocking state [ 410.261244][T13462] nr0: port 1(hsr0) entered disabled state [ 410.298791][T13462] device hsr0 entered promiscuous mode [ 410.564494][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.587113][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.647742][T13480] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 410.663086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.670609][T13480] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3122'. [ 410.690257][ T5035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.706457][ T5035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.716960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.882172][ T6259] team0: Port device wlan1 removed [ 412.249366][ T6259] device hsr_slave_0 left promiscuous mode [ 412.303416][ T6259] device hsr_slave_1 left promiscuous mode [ 412.312598][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.321674][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.348509][ T6259] device veth1_macvtap left promiscuous mode [ 412.525368][ T6259] team0 (unregistering): Port device geneve1 removed [ 412.586544][ T6259] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 412.603638][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 412.620507][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 412.636770][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.653377][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.696630][ T6259] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 412.730784][ T6259] bond0 (unregistering): Released all slaves [ 412.746826][T13515] netlink: 'syz.1.3135': attribute type 10 has an invalid length. [ 412.761693][T13515] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.769519][T13515] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.797054][T13515] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.804356][T13515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.812277][T13515] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.819648][T13515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.862673][T13515] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 412.876843][T13512] device sit0 left promiscuous mode [ 412.980849][T13521] device sit0 entered promiscuous mode [ 413.392564][T13509] chnl_net:caif_netlink_parms(): no params data found [ 413.863771][T13557] netlink: 'syz.3.3148': attribute type 9 has an invalid length. [ 413.946149][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.006258][T13509] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.073101][T13509] device bridge_slave_0 entered promiscuous mode [ 414.098295][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.125772][T13509] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.165142][T13572] net_ratelimit: 111 callbacks suppressed [ 414.165157][T13572] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.175386][T13509] device bridge_slave_1 entered promiscuous mode [ 414.177300][T13572] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 414.229588][ T4235] Bluetooth: hci2: command 0x0409 tx timeout [ 414.307076][T13509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.392789][T13509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.559111][T13509] team0: Port device team_slave_0 added [ 414.590555][T13509] team0: Port device team_slave_1 added [ 414.610002][T13586] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 414.763569][T13509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.787389][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.843736][T13509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.857625][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.866402][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.893548][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.076287][T13509] device hsr_slave_0 entered promiscuous mode [ 415.093029][T13509] device hsr_slave_1 entered promiscuous mode [ 415.644924][T13509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.767039][T13509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.309762][ T4178] Bluetooth: hci2: command 0x041b tx timeout [ 416.572585][T13509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.694175][T13632] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 416.737422][T13632] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 416.848943][T13641] netlink: 'syz.3.3174': attribute type 4 has an invalid length. [ 416.872445][T13632] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 416.997782][T13509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.023177][T13509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.047454][T13509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.085613][T13509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.355941][T13509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.521110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.539612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.587205][T13509] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.625770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.648795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.687775][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.694950][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.794271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.821033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.851531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.897111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.904303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.975986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.038240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.068619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.127178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.159625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.216790][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.246358][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.267316][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.290464][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.345869][T13509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.399332][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 418.399412][T13509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.477655][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.520892][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.575041][T13688] netlink: 'syz.1.3190': attribute type 21 has an invalid length. [ 418.622523][T13688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3190'. [ 418.737429][T13696] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3193'. [ 418.790743][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 418.803351][T13696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.842756][T13692] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3192'. [ 419.288942][T13509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.311116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.318590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.449428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.470898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.516923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.550570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.559042][T13726] netlink: 'syz.3.3200': attribute type 153 has an invalid length. [ 419.760270][T13726] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.3200'. [ 420.051087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.061199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.100644][T13509] device veth0_vlan entered promiscuous mode [ 420.256451][T13509] device veth1_vlan entered promiscuous mode [ 420.271873][T13732] netlink: 'syz.4.3202': attribute type 10 has an invalid length. [ 420.378677][T13733] netlink: 'syz.0.3201': attribute type 1 has an invalid length. [ 420.380274][T13732] team0: Port device geneve1 added [ 420.429524][T13738] netlink: 'syz.1.3203': attribute type 2 has an invalid length. [ 420.437308][T13738] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.3203'. [ 420.459437][T13733] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3201'. [ 420.469350][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 420.544750][T13740] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 420.585556][T13740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3203'. [ 420.618901][T13740] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 420.700238][T13740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.805294][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.819028][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.855915][T13509] device veth0_macvtap entered promiscuous mode [ 420.911061][T13509] device veth1_macvtap entered promiscuous mode [ 420.966200][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.992509][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.018160][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.048288][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.074840][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.107269][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.137343][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.168331][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.211534][T13509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.275067][T13749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3205'. [ 421.366848][T13749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 421.407169][T13749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.488870][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.512917][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.546045][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.668055][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.682449][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.713961][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.747222][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.757711][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.789248][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.799082][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.847533][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.862670][T13509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.909249][T13509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.948015][T13509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.051511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.090435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 422.122227][T13509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.131982][T13509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.169148][T13509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.188834][T13509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.691956][ T5035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.709273][ T5035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.760676][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.321990][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.359006][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.387694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 423.591517][ T6259] device wlan1 left promiscuous mode [ 423.652274][ T6259] team0: Port device wlan1 removed [ 423.765771][T13799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3221'. [ 423.791070][T13799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 423.876487][T13799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.363094][ T6259] ¥: port 1(team0) entered disabled state [ 424.421499][ T6259] device hsr_slave_0 left promiscuous mode [ 424.628039][ T6259] device hsr_slave_1 left promiscuous mode [ 424.652049][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.681479][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.753786][ T6259] device veth1_macvtap left promiscuous mode [ 424.771203][ T6259] device veth0_macvtap left promiscuous mode [ 425.573178][ T6259] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 425.794719][ T6259] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 425.848508][ T6259] device team_slave_1 left promiscuous mode [ 425.877614][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 425.907595][ T6259] device team_slave_0 left promiscuous mode [ 425.950280][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 425.988772][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.052888][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.174443][ T6259] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 426.226597][ T6259] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 426.280025][ T6259] bond0 (unregistering): Released all slaves [ 426.442417][T13824] FAULT_INJECTION: forcing a failure. [ 426.442417][T13824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.483265][T13824] CPU: 1 PID: 13824 Comm: syz.0.3227 Not tainted syzkaller #0 [ 426.490760][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.500818][T13824] Call Trace: [ 426.504098][T13824] [ 426.507032][T13824] dump_stack_lvl+0x188/0x250 [ 426.511717][T13824] ? show_regs_print_info+0x20/0x20 [ 426.516916][T13824] ? load_image+0x400/0x400 [ 426.521429][T13824] ? __lock_acquire+0x7d10/0x7d10 [ 426.526463][T13824] ? lockdep_hardirqs_on+0x94/0x140 [ 426.531682][T13824] should_fail+0x38c/0x4c0 [ 426.536110][T13824] _copy_to_user+0x2e/0x130 [ 426.540617][T13824] simple_read_from_buffer+0xe3/0x150 [ 426.546007][T13824] proc_fail_nth_read+0x1a6/0x220 [ 426.551055][T13824] ? proc_fault_inject_write+0x310/0x310 [ 426.556706][T13824] ? fsnotify_perm+0x254/0x560 [ 426.561486][T13824] ? proc_fault_inject_write+0x310/0x310 [ 426.567130][T13824] vfs_read+0x301/0xd60 [ 426.571308][T13824] ? kernel_read+0x1e0/0x1e0 [ 426.575901][T13824] ? rcu_nmi_exit+0x6f/0xf0 [ 426.580421][T13824] ? __fget_files+0x40f/0x480 [ 426.585116][T13824] ? mutex_lock_nested+0x17/0x20 [ 426.590064][T13824] ? __fdget_pos+0x2bf/0x370 [ 426.594659][T13824] ? ksys_read+0x71/0x260 [ 426.599004][T13824] ksys_read+0x152/0x260 [ 426.603252][T13824] ? vfs_write+0xd60/0xd60 [ 426.607682][T13824] ? syscall_enter_from_user_mode+0x2a/0x70 [ 426.613588][T13824] do_syscall_64+0x4c/0xa0 [ 426.618010][T13824] ? clear_bhb_loop+0x30/0x80 [ 426.622689][T13824] ? clear_bhb_loop+0x30/0x80 [ 426.627375][T13824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 426.633272][T13824] RIP: 0033:0x7f881867668e [ 426.637693][T13824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.657301][T13824] RSP: 002b:00007f881690efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.665721][T13824] RAX: ffffffffffffffda RBX: 00007f881690f6c0 RCX: 00007f881867668e [ 426.673700][T13824] RDX: 000000000000000f RSI: 00007f881690f0a0 RDI: 0000000000000007 [ 426.681672][T13824] RBP: 00007f881690f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.689646][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.697618][T13824] R13: 00007f881892f038 R14: 00007f881892efa0 R15: 00007fff45f6f6f8 [ 426.705607][T13824] [ 426.869305][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 427.238027][T13815] chnl_net:caif_netlink_parms(): no params data found [ 427.323712][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.333019][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.341346][T13815] device bridge_slave_0 entered promiscuous mode [ 427.350174][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.357433][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.365632][T13815] device bridge_slave_1 entered promiscuous mode [ 427.418656][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.590104][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.745461][T13815] team0: Port device team_slave_0 added [ 427.803499][T13815] team0: Port device team_slave_1 added [ 427.883058][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.904857][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.028105][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.069926][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.115177][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.202945][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.952376][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 429.222689][T13815] device hsr_slave_0 entered promiscuous mode [ 429.266217][T13815] device hsr_slave_1 entered promiscuous mode [ 429.305611][T13815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.322960][T13875] netlink: 'syz.2.3242': attribute type 49 has an invalid length. [ 429.334429][T13815] Cannot create hsr debugfs directory [ 429.407038][T13875] netlink: 'syz.2.3242': attribute type 49 has an invalid length. [ 429.513000][T13882] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.3243'. [ 429.630593][T13882] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.3243'. [ 429.659971][T13882] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.3243'. [ 430.434405][T13815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.563670][T13815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.003613][T13815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.029614][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 431.346898][T13815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.633648][T13928] netlink: 'syz.4.3258': attribute type 49 has an invalid length. [ 431.671100][T13928] netlink: 'syz.4.3258': attribute type 49 has an invalid length. [ 431.936363][T13934] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 431.959481][T13934] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3260'. [ 431.991030][T13815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.062732][T13815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.119530][T13815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.163719][T13936] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 432.182741][T13815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.251736][T13936] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3259'. [ 432.297452][T13947] FAULT_INJECTION: forcing a failure. [ 432.297452][T13947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.338173][T13947] CPU: 1 PID: 13947 Comm: syz.0.3264 Not tainted syzkaller #0 [ 432.345686][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.355762][T13947] Call Trace: [ 432.359060][T13947] [ 432.362005][T13947] dump_stack_lvl+0x188/0x250 [ 432.366715][T13947] ? show_regs_print_info+0x20/0x20 [ 432.371932][T13947] ? load_image+0x400/0x400 [ 432.376470][T13947] ? __lock_acquire+0x7d10/0x7d10 [ 432.381555][T13947] should_fail+0x38c/0x4c0 [ 432.386015][T13947] _copy_from_user+0x2e/0x170 [ 432.390722][T13947] ____sys_sendmsg+0x30a/0x8f0 [ 432.395531][T13947] ? __sys_sendmsg_sock+0x30/0x30 [ 432.400600][T13947] ? import_iovec+0x6f/0xa0 [ 432.405135][T13947] ___sys_sendmsg+0x236/0x2e0 [ 432.409850][T13947] ? __sys_sendmsg+0x2a0/0x2a0 [ 432.414655][T13947] ? trace_event_raw_event_lock+0x270/0x270 [ 432.420554][T13947] ? vfs_write+0x8b2/0xd60 [ 432.425028][T13947] __se_sys_sendmsg+0x1af/0x290 [ 432.429887][T13947] ? __x64_sys_sendmsg+0x80/0x80 [ 432.434818][T13947] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 432.440828][T13947] ? lockdep_hardirqs_on+0x94/0x140 [ 432.446030][T13947] do_syscall_64+0x4c/0xa0 [ 432.450441][T13947] ? clear_bhb_loop+0x30/0x80 [ 432.455112][T13947] ? clear_bhb_loop+0x30/0x80 [ 432.459794][T13947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.465682][T13947] RIP: 0033:0x7f88186b5e59 [ 432.470098][T13947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.489698][T13947] RSP: 002b:00007f881690f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.498111][T13947] RAX: ffffffffffffffda RBX: 00007f881892efa0 RCX: 00007f88186b5e59 [ 432.506077][T13947] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000f [ 432.514042][T13947] RBP: 00007f881690f090 R08: 0000000000000000 R09: 0000000000000000 [ 432.522011][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.529977][T13947] R13: 00007f881892f038 R14: 00007f881892efa0 R15: 00007fff45f6f6f8 [ 432.537979][T13947] [ 432.807341][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.845592][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.864767][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.905341][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.956089][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.968895][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.994976][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.002113][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.051951][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.087322][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.114952][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 433.127676][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.136341][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.143448][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.152497][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.186715][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.196185][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.210390][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.238746][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.247180][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.256801][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.308013][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.340921][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.381833][T13815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.416667][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.488014][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.512468][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.592952][T13976] netlink: 'syz.0.3273': attribute type 10 has an invalid length. [ 433.641542][T13978] netlink: 'syz.2.3270': attribute type 2 has an invalid length. [ 433.690319][T13978] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3270'. [ 434.269312][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.276943][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.331461][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.462261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.479867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.612375][T13815] device veth0_vlan entered promiscuous mode [ 434.619070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.679013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.710358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.723088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.790800][T13815] device veth1_vlan entered promiscuous mode [ 434.894347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.912496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.946201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.981595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.020932][T13815] device veth0_macvtap entered promiscuous mode [ 435.126740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.138278][T13815] device veth1_macvtap entered promiscuous mode [ 435.196159][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.241136][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.289373][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.329438][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.351157][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.395170][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.410289][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.429908][T14013] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 435.438509][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.455675][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.478363][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.529147][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.586374][T14013] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 435.600305][T14015] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 435.613648][T14014] netlink: 'syz.4.3283': attribute type 21 has an invalid length. [ 435.624155][T14014] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3283'. [ 435.640639][T14013] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 435.647310][T14014] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3283'. [ 435.651922][T14013] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3284'. [ 435.674076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.711897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.778402][T14018] netlink: 'syz.0.3285': attribute type 10 has an invalid length. [ 435.797426][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.869344][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.922202][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.967021][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.001630][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.033425][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.064376][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.103062][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.133257][T13815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.167167][T13815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.206183][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.239822][T14026] netlink: 'syz.0.3287': attribute type 4 has an invalid length. [ 436.329462][T14026] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3287'. [ 436.347833][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.399839][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.511151][T13815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.534054][T13815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.553489][T13815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.574159][T13815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.346504][T14039] FAULT_INJECTION: forcing a failure. [ 437.346504][T14039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.384618][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.396462][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.423166][T14039] CPU: 0 PID: 14039 Comm: syz.1.3291 Not tainted syzkaller #0 [ 437.430658][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.440714][T14039] Call Trace: [ 437.443987][T14039] [ 437.446910][T14039] dump_stack_lvl+0x188/0x250 [ 437.451585][T14039] ? show_regs_print_info+0x20/0x20 [ 437.456774][T14039] ? load_image+0x400/0x400 [ 437.461264][T14039] ? __lock_acquire+0x7d10/0x7d10 [ 437.466284][T14039] should_fail+0x38c/0x4c0 [ 437.470777][T14039] _copy_from_user+0x2e/0x170 [ 437.475441][T14039] iovec_from_user+0x142/0x370 [ 437.480201][T14039] __import_iovec+0x70/0x490 [ 437.484787][T14039] import_iovec+0x6f/0xa0 [ 437.489105][T14039] ___sys_sendmsg+0x1fd/0x2e0 [ 437.493775][T14039] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.498554][T14039] __se_sys_sendmsg+0x1af/0x290 [ 437.503393][T14039] ? __x64_sys_sendmsg+0x80/0x80 [ 437.508317][T14039] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 437.514293][T14039] ? lockdep_hardirqs_on+0x94/0x140 [ 437.519480][T14039] do_syscall_64+0x4c/0xa0 [ 437.523882][T14039] ? clear_bhb_loop+0x30/0x80 [ 437.528542][T14039] ? clear_bhb_loop+0x30/0x80 [ 437.533219][T14039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 437.539116][T14039] RIP: 0033:0x7f737725ce59 [ 437.543522][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.563119][T14039] RSP: 002b:00007f73754b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.571529][T14039] RAX: ffffffffffffffda RBX: 00007f73774d5fa0 RCX: 00007f737725ce59 [ 437.579489][T14039] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000007 [ 437.587447][T14039] RBP: 00007f73754b6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.595408][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.603365][T14039] R13: 00007f73774d6038 R14: 00007f73774d5fa0 R15: 00007ffcc806cfb8 [ 437.611338][T14039] [ 437.825970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.871759][T14051] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3296'. [ 437.914564][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.923177][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.972178][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.057835][T14055] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3297'. [ 439.771659][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.778381][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.020641][T14096] netlink: 'syz.1.3310': attribute type 3 has an invalid length. [ 440.040910][T14096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3310'. [ 440.041573][ T6259] team0: Port device wlan1 removed [ 440.134530][T14099] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3311'. [ 440.319512][T14103] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3322'. [ 440.618312][T14107] netlink: 'syz.3.3313': attribute type 3 has an invalid length. [ 440.670411][T14107] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3313'. [ 441.332446][ T6259] device hsr0 left promiscuous mode [ 441.337819][ T6259] nr0: port 1(hsr0) entered disabled state [ 441.378006][ T6259] device veth0_to_team left promiscuous mode [ 441.454365][ T6259] Ÿë: port 1(veth0_to_team) entered disabled state [ 441.475889][T14113] FAULT_INJECTION: forcing a failure. [ 441.475889][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 441.520021][T14113] CPU: 0 PID: 14113 Comm: syz.2.3316 Not tainted syzkaller #0 [ 441.527521][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.537583][T14113] Call Trace: [ 441.540868][T14113] [ 441.543806][T14113] dump_stack_lvl+0x188/0x250 [ 441.548495][T14113] ? show_regs_print_info+0x20/0x20 [ 441.553703][T14113] ? load_image+0x400/0x400 [ 441.558218][T14113] ? perf_trace_lock+0xe4/0x390 [ 441.563084][T14113] should_fail+0x38c/0x4c0 [ 441.567519][T14113] should_failslab+0x5/0x20 [ 441.572029][T14113] slab_pre_alloc_hook+0x51/0xc0 [ 441.576975][T14113] ? skb_clone+0x1bd/0x350 [ 441.581399][T14113] kmem_cache_alloc+0x3d/0x290 [ 441.586177][T14113] skb_clone+0x1bd/0x350 [ 441.590443][T14113] __netlink_deliver_tap+0x3cd/0x7c0 [ 441.595762][T14113] netlink_deliver_tap+0x16c/0x180 [ 441.600886][T14113] netlink_dump+0x823/0xcf0 [ 441.605415][T14113] ? netlink_lookup+0x1d0/0x1d0 [ 441.610278][T14113] ? __inet_diag_dump_start+0x805/0x970 [ 441.615848][T14113] __netlink_dump_start+0x523/0x700 [ 441.621062][T14113] inet_diag_rcv_msg_compat+0x207/0x420 [ 441.626625][T14113] ? inet_diag_unregister+0xb0/0xb0 [ 441.631838][T14113] ? __mutex_trylock_common+0x155/0x260 [ 441.637396][T14113] ? mutex_lock_io_nested+0x60/0x60 [ 441.642604][T14113] ? __inet_diag_dump+0x380/0x380 [ 441.647637][T14113] ? inet_diag_dump_start_compat+0x20/0x20 [ 441.653449][T14113] ? inet_diag_dump+0x50/0x50 [ 441.658151][T14113] ? inet_diag_unregister+0xb0/0xb0 [ 441.663359][T14113] sock_diag_rcv_msg+0x164/0x3e0 [ 441.668312][T14113] netlink_rcv_skb+0x1f5/0x440 [ 441.673084][T14113] ? sock_diag_bind+0xa0/0xa0 [ 441.677767][T14113] ? netlink_ack+0xb50/0xb50 [ 441.682371][T14113] ? __lock_acquire+0x7d10/0x7d10 [ 441.687423][T14113] sock_diag_rcv+0x26/0x40 [ 441.691849][T14113] netlink_unicast+0x774/0x920 [ 441.696635][T14113] netlink_sendmsg+0x8ba/0xbe0 [ 441.701421][T14113] ? netlink_getsockopt+0x570/0x570 [ 441.706631][T14113] ? aa_sock_msg_perm+0x94/0x150 [ 441.711577][T14113] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 441.716870][T14113] ? security_socket_sendmsg+0x7c/0xa0 [ 441.722343][T14113] ? netlink_getsockopt+0x570/0x570 [ 441.727548][T14113] ____sys_sendmsg+0x5b7/0x8f0 [ 441.732333][T14113] ? __sys_sendmsg_sock+0x30/0x30 [ 441.737381][T14113] ? import_iovec+0x6f/0xa0 [ 441.741900][T14113] ___sys_sendmsg+0x236/0x2e0 [ 441.746604][T14113] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.751400][T14113] ? trace_event_raw_event_lock+0x270/0x270 [ 441.757303][T14113] ? vfs_write+0x8b2/0xd60 [ 441.761752][T14113] __se_sys_sendmsg+0x1af/0x290 [ 441.766624][T14113] ? __x64_sys_sendmsg+0x80/0x80 [ 441.771569][T14113] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 441.777578][T14113] ? lockdep_hardirqs_on+0x94/0x140 [ 441.782793][T14113] do_syscall_64+0x4c/0xa0 [ 441.787223][T14113] ? clear_bhb_loop+0x30/0x80 [ 441.791911][T14113] ? clear_bhb_loop+0x30/0x80 [ 441.796599][T14113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.802498][T14113] RIP: 0033:0x7f7eb892ee59 [ 441.806927][T14113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.826539][T14113] RSP: 002b:00007f7eb6b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.834966][T14113] RAX: ffffffffffffffda RBX: 00007f7eb8ba7fa0 RCX: 00007f7eb892ee59 [ 441.842947][T14113] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003 [ 441.850929][T14113] RBP: 00007f7eb6b88090 R08: 0000000000000000 R09: 0000000000000000 [ 441.858907][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.866888][T14113] R13: 00007f7eb8ba8038 R14: 00007f7eb8ba7fa0 R15: 00007fff7cbbb558 [ 441.874889][T14113] [ 441.897421][ T6259] device hsr_slave_0 left promiscuous mode [ 441.939830][ T6259] device hsr_slave_1 left promiscuous mode [ 441.968689][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.988229][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.029409][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.036889][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.060167][ T6259] device batadv0 left promiscuous mode [ 442.065807][ T6259] bridge0: port 3(batadv0) entered disabled state [ 442.095403][ T6259] device bridge_slave_1 left promiscuous mode [ 442.109373][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.121138][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.384258][ T6259] device veth1_macvtap left promiscuous mode [ 442.409646][ T6259] device veth0_macvtap left promiscuous mode [ 442.860604][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 442.899845][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 442.927578][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.967674][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.131794][ T6259] bond0 (unregistering): Released all slaves [ 443.916497][T14144] FAULT_INJECTION: forcing a failure. [ 443.916497][T14144] name failslab, interval 1, probability 0, space 0, times 0 [ 443.959446][T14144] CPU: 0 PID: 14144 Comm: syz.2.3327 Not tainted syzkaller #0 [ 443.966948][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.977013][T14144] Call Trace: [ 443.980302][T14144] [ 443.983246][T14144] dump_stack_lvl+0x188/0x250 [ 443.987945][T14144] ? show_regs_print_info+0x20/0x20 [ 443.993156][T14144] ? load_image+0x400/0x400 [ 443.997669][T14144] ? __might_sleep+0xf0/0xf0 [ 444.002268][T14144] ? __lock_acquire+0x7d10/0x7d10 [ 444.007310][T14144] ? mark_lock+0x94/0x320 [ 444.011658][T14144] should_fail+0x38c/0x4c0 [ 444.016095][T14144] should_failslab+0x5/0x20 [ 444.020610][T14144] slab_pre_alloc_hook+0x51/0xc0 [ 444.025554][T14144] __kmalloc+0x6b/0x330 [ 444.029708][T14144] ? tomoyo_realpath_from_path+0x118/0x610 [ 444.035520][T14144] tomoyo_realpath_from_path+0x118/0x610 [ 444.041164][T14144] tomoyo_path_number_perm+0x242/0x660 [ 444.046622][T14144] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 444.052069][T14144] ? perf_trace_lock+0xe4/0x390 [ 444.056922][T14144] ? ktime_get+0x7b/0x270 [ 444.061293][T14144] security_file_ioctl+0x6c/0xa0 [ 444.066231][T14144] __se_sys_ioctl+0x48/0x170 [ 444.070817][T14144] do_syscall_64+0x4c/0xa0 [ 444.075225][T14144] ? clear_bhb_loop+0x30/0x80 [ 444.079892][T14144] ? clear_bhb_loop+0x30/0x80 [ 444.084560][T14144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.090449][T14144] RIP: 0033:0x7f7eb892ee59 [ 444.094857][T14144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.114454][T14144] RSP: 002b:00007f7eb6b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.122866][T14144] RAX: ffffffffffffffda RBX: 00007f7eb8ba7fa0 RCX: 00007f7eb892ee59 [ 444.130827][T14144] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 000000000000000b [ 444.138790][T14144] RBP: 00007f7eb6b88090 R08: 0000000000000000 R09: 0000000000000000 [ 444.146749][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.154709][T14144] R13: 00007f7eb8ba8038 R14: 00007f7eb8ba7fa0 R15: 00007fff7cbbb558 [ 444.162686][T14144] [ 444.208322][T14148] device sit0 entered promiscuous mode [ 444.613515][T14144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 444.628694][T14144] device sit0 entered promiscuous mode [ 445.178717][T14177] netlink: 'syz.3.3336': attribute type 29 has an invalid length. [ 445.210130][T14177] netlink: 'syz.3.3336': attribute type 29 has an invalid length. [ 445.269141][T14178] netlink: 'syz.3.3336': attribute type 29 has an invalid length. [ 445.379880][T14178] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 445.426008][T14178] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3336'. [ 445.838656][T14189] delete_channel: no stack [ 446.241092][T14192] netlink: 'syz.2.3341': attribute type 3 has an invalid length. [ 446.421933][T14192] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3341'. [ 448.472636][T14201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3343'. [ 449.470434][T14233] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3353'. [ 449.832426][T14242] netlink: 'syz.4.3357': attribute type 3 has an invalid length. [ 449.862906][T14242] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3357'. [ 450.174989][T14253] FAULT_INJECTION: forcing a failure. [ 450.174989][T14253] name failslab, interval 1, probability 0, space 0, times 0 [ 450.357804][T14253] CPU: 1 PID: 14253 Comm: syz.0.3361 Not tainted syzkaller #0 [ 450.365303][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.375368][T14253] Call Trace: [ 450.378680][T14253] [ 450.381617][T14253] dump_stack_lvl+0x188/0x250 [ 450.386309][T14253] ? show_regs_print_info+0x20/0x20 [ 450.391605][T14253] ? load_image+0x400/0x400 [ 450.396115][T14253] ? __might_sleep+0xf0/0xf0 [ 450.400718][T14253] ? __lock_acquire+0x7d10/0x7d10 [ 450.405755][T14253] should_fail+0x38c/0x4c0 [ 450.410187][T14253] should_failslab+0x5/0x20 [ 450.414695][T14253] slab_pre_alloc_hook+0x51/0xc0 [ 450.419642][T14253] __kmalloc_node_track_caller+0x68/0x3a0 [ 450.425365][T14253] ? netlink_sendmsg+0x654/0xbe0 [ 450.430306][T14253] ? kmem_cache_alloc_node+0x162/0x2d0 [ 450.435775][T14253] ? __alloc_skb+0xf4/0x750 [ 450.440290][T14253] ? netlink_sendmsg+0x654/0xbe0 [ 450.445236][T14253] __alloc_skb+0x22c/0x750 [ 450.449667][T14253] netlink_sendmsg+0x654/0xbe0 [ 450.454447][T14253] ? netlink_getsockopt+0x570/0x570 [ 450.459660][T14253] ? aa_sock_msg_perm+0x94/0x150 [ 450.464611][T14253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 450.469909][T14253] ? security_socket_sendmsg+0x7c/0xa0 [ 450.475380][T14253] ? netlink_getsockopt+0x570/0x570 [ 450.480583][T14253] ____sys_sendmsg+0x5b7/0x8f0 [ 450.485365][T14253] ? __sys_sendmsg_sock+0x30/0x30 [ 450.490406][T14253] ? import_iovec+0x6f/0xa0 [ 450.494924][T14253] ___sys_sendmsg+0x236/0x2e0 [ 450.499616][T14253] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.504402][T14253] ? vfs_write+0x8b2/0xd60 [ 450.508853][T14253] __se_sys_sendmsg+0x1af/0x290 [ 450.513724][T14253] ? __x64_sys_sendmsg+0x80/0x80 [ 450.513830][T14268] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3365'. [ 450.518666][T14253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 450.518702][T14253] ? lockdep_hardirqs_on+0x94/0x140 [ 450.538865][T14253] do_syscall_64+0x4c/0xa0 [ 450.543301][T14253] ? clear_bhb_loop+0x30/0x80 [ 450.547982][T14253] ? clear_bhb_loop+0x30/0x80 [ 450.552680][T14253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.558584][T14253] RIP: 0033:0x7f88186b5e59 [ 450.563026][T14253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.582632][T14253] RSP: 002b:00007f881690f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.591039][T14253] RAX: ffffffffffffffda RBX: 00007f881892efa0 RCX: 00007f88186b5e59 [ 450.599001][T14253] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 450.606959][T14253] RBP: 00007f881690f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.614919][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.622882][T14253] R13: 00007f881892f038 R14: 00007f881892efa0 R15: 00007fff45f6f6f8 [ 450.630863][T14253] [ 450.681847][T14265] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3366'. [ 452.035410][T14292] netlink: 'syz.1.3371': attribute type 3 has an invalid length. [ 452.085213][T14292] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3371'. [ 452.400140][T14313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3382'. [ 452.422643][T14313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3382'. [ 452.455900][T14314] sctp: [Deprecated]: syz.1.3383 (pid 14314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.455900][T14314] Use struct sctp_sack_info instead [ 452.534369][T14311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3382'. [ 454.296482][T14346] FAULT_INJECTION: forcing a failure. [ 454.296482][T14346] name failslab, interval 1, probability 0, space 0, times 0 [ 454.332239][T14346] CPU: 1 PID: 14346 Comm: syz.3.3393 Not tainted syzkaller #0 [ 454.339730][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.349789][T14346] Call Trace: [ 454.353075][T14346] [ 454.356013][T14346] dump_stack_lvl+0x188/0x250 [ 454.360712][T14346] ? show_regs_print_info+0x20/0x20 [ 454.365925][T14346] ? load_image+0x400/0x400 [ 454.370442][T14346] ? __might_sleep+0xf0/0xf0 [ 454.375056][T14346] ? __lock_acquire+0x7d10/0x7d10 [ 454.380106][T14346] should_fail+0x38c/0x4c0 [ 454.384544][T14346] should_failslab+0x5/0x20 [ 454.389063][T14346] slab_pre_alloc_hook+0x51/0xc0 [ 454.394018][T14346] __kmalloc+0x6b/0x330 [ 454.398186][T14346] ? tomoyo_encode+0x27e/0x540 [ 454.402963][T14346] tomoyo_encode+0x27e/0x540 [ 454.407571][T14346] tomoyo_realpath_from_path+0x5cd/0x610 [ 454.413233][T14346] tomoyo_check_open_permission+0x1eb/0x410 [ 454.419145][T14346] ? tomoyo_check_path_number_acl+0x280/0x280 [ 454.425254][T14346] ? __lock_acquire+0x7d10/0x7d10 [ 454.430298][T14346] ? __rwlock_init+0x140/0x140 [ 454.435073][T14346] ? hook_file_open+0xf1/0x230 [ 454.439841][T14346] ? tomoyo_file_open+0xe9/0x170 [ 454.444790][T14346] security_file_open+0x5e/0xa0 [ 454.449658][T14346] do_dentry_open+0x322/0xf80 [ 454.454361][T14346] path_openat+0x26f5/0x2fa0 [ 454.458974][T14346] ? perf_trace_lock+0xe4/0x390 [ 454.463827][T14346] ? do_filp_open+0x410/0x410 [ 454.468501][T14346] ? perf_trace_lock+0xe4/0x390 [ 454.473359][T14346] ? trace_event_raw_event_lock+0x270/0x270 [ 454.479255][T14346] do_filp_open+0x1e2/0x410 [ 454.483756][T14346] ? vfs_tmpfile+0x300/0x300 [ 454.488354][T14346] ? _raw_spin_unlock+0x24/0x40 [ 454.493194][T14346] ? alloc_fd+0x598/0x630 [ 454.497525][T14346] do_sys_openat2+0x150/0x4b0 [ 454.502194][T14346] ? __lock_acquire+0x7d10/0x7d10 [ 454.507215][T14346] ? do_sys_open+0xe0/0xe0 [ 454.511622][T14346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 454.517597][T14346] ? lock_chain_count+0x20/0x20 [ 454.522449][T14346] ? vtime_user_exit+0x2c8/0x3e0 [ 454.527397][T14346] __x64_sys_openat+0x135/0x160 [ 454.532241][T14346] do_syscall_64+0x4c/0xa0 [ 454.536649][T14346] ? clear_bhb_loop+0x30/0x80 [ 454.541313][T14346] ? clear_bhb_loop+0x30/0x80 [ 454.545981][T14346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.551864][T14346] RIP: 0033:0x7f47d288968e [ 454.556270][T14346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.575863][T14346] RSP: 002b:00007f47d0b00ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.584297][T14346] RAX: ffffffffffffffda RBX: 00007f47d0b016c0 RCX: 00007f47d288968e [ 454.592260][T14346] RDX: 0000000000000000 RSI: 00007f47d0b00f90 RDI: ffffffffffffff9c [ 454.600222][T14346] RBP: 00007f47d0b01090 R08: 0000000000000000 R09: 0000000000000000 [ 454.608183][T14346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.616139][T14346] R13: 00007f47d2b42128 R14: 00007f47d2b42090 R15: 00007fff45043648 [ 454.624117][T14346] [ 454.783304][T14356] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 454.815673][T14356] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3394'. [ 455.127412][T14346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.176827][T14365] netlink: 'syz.4.3397': attribute type 10 has an invalid length. [ 455.229041][T14362] netlink: 'syz.1.3398': attribute type 1 has an invalid length. [ 455.306708][T14362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3398'. [ 455.865706][T14387] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3407'. [ 456.908028][T14406] netlink: 'syz.1.3410': attribute type 1 has an invalid length. [ 457.072873][T14406] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3410'. [ 458.463976][T14467] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 458.707282][T14467] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3431'. [ 459.362114][T14479] device syzkaller0 entered promiscuous mode [ 459.789429][T14496] netlink: 'syz.2.3442': attribute type 3 has an invalid length. [ 459.818231][T14496] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3442'. [ 462.703710][T14502] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3445'. [ 462.926092][T14504] delete_channel: no stack [ 463.259836][T14526] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 463.420693][T14526] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3451'. [ 463.602384][T14532] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3455'. [ 463.722605][T14536] netlink: 'syz.2.3466': attribute type 1 has an invalid length. [ 463.793356][T14536] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3466'. [ 463.868810][T14541] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 463.905692][T14541] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3456'. [ 466.908023][T14558] netlink: 91456 bytes leftover after parsing attributes in process `syz.1.3459'. [ 467.348579][T14564] netlink: 189520 bytes leftover after parsing attributes in process `syz.3.3465'. [ 467.419329][T14564] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3465'. [ 467.516627][T14576] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3470'. [ 467.674576][T14581] netlink: 'syz.0.3469': attribute type 3 has an invalid length. [ 467.699895][T14581] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3469'. [ 470.610731][T14588] FAULT_INJECTION: forcing a failure. [ 470.610731][T14588] name failslab, interval 1, probability 0, space 0, times 0 [ 470.729300][T14588] CPU: 0 PID: 14588 Comm: syz.0.3472 Not tainted syzkaller #0 [ 470.736808][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.746879][T14588] Call Trace: [ 470.750169][T14588] [ 470.753118][T14588] dump_stack_lvl+0x188/0x250 [ 470.757825][T14588] ? show_regs_print_info+0x20/0x20 [ 470.763052][T14588] ? load_image+0x400/0x400 [ 470.767582][T14588] ? __might_sleep+0xf0/0xf0 [ 470.772196][T14588] ? __lock_acquire+0x7d10/0x7d10 [ 470.777238][T14588] ? mark_lock+0x94/0x320 [ 470.781597][T14588] should_fail+0x38c/0x4c0 [ 470.786047][T14588] should_failslab+0x5/0x20 [ 470.790566][T14588] slab_pre_alloc_hook+0x51/0xc0 [ 470.795530][T14588] __kmalloc+0x6b/0x330 [ 470.799699][T14588] ? tomoyo_realpath_from_path+0x118/0x610 [ 470.805530][T14588] tomoyo_realpath_from_path+0x118/0x610 [ 470.811190][T14588] tomoyo_path_number_perm+0x242/0x660 [ 470.816655][T14588] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 470.823258][T14588] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 470.828806][T14588] security_file_ioctl+0x6c/0xa0 [ 470.833746][T14588] __se_sys_ioctl+0x48/0x170 [ 470.838333][T14588] do_syscall_64+0x4c/0xa0 [ 470.842746][T14588] ? clear_bhb_loop+0x30/0x80 [ 470.847416][T14588] ? clear_bhb_loop+0x30/0x80 [ 470.852088][T14588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.857980][T14588] RIP: 0033:0x7f88186b5e59 [ 470.862394][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.881989][T14588] RSP: 002b:00007f881690f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.890399][T14588] RAX: ffffffffffffffda RBX: 00007f881892efa0 RCX: 00007f88186b5e59 [ 470.898366][T14588] RDX: 0000200000000040 RSI: 0000000000008b20 RDI: 0000000000000005 [ 470.906331][T14588] RBP: 00007f881690f090 R08: 0000000000000000 R09: 0000000000000000 [ 470.914293][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.922256][T14588] R13: 00007f881892f038 R14: 00007f881892efa0 R15: 00007fff45f6f6f8 [ 470.930248][T14588] [ 471.406989][T14588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.840171][T14616] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 471.955402][T14616] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3484'. [ 471.972297][T14622] netlink: 'syz.4.3483': attribute type 3 has an invalid length. [ 472.087671][T14622] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3483'. [ 472.247014][T14617] device syzkaller0 entered promiscuous mode [ 475.133041][T14649] netlink: 189520 bytes leftover after parsing attributes in process `syz.4.3489'. [ 475.204049][T14649] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.3489'. [ 475.891561][T14678] netlink: 'syz.2.3505': attribute type 10 has an invalid length. [ 476.052348][T14678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3505'. [ 476.065498][T14678] device team0 entered promiscuous mode [ 476.072315][T14678] device team_slave_0 entered promiscuous mode [ 476.103427][T14678] device team_slave_1 entered promiscuous mode [ 476.189563][T14678] bridge0: port 3(team0) entered blocking state [ 476.231146][T14678] bridge0: port 3(team0) entered disabled state [ 476.304759][T14678] bridge0: port 3(team0) entered blocking state [ 476.311172][T14678] bridge0: port 3(team0) entered forwarding state [ 476.363178][T14687] netlink: 'syz.1.3506': attribute type 1 has an invalid length. [ 476.406862][T14687] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3506'. [ 476.710018][T14705] sctp: [Deprecated]: syz.1.3511 (pid 14705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.710018][T14705] Use struct sctp_sack_info instead [ 477.176259][T14718] device syzkaller0 entered promiscuous mode [ 477.506042][T14742] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 477.595144][T14742] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3521'. [ 478.083610][T14763] netlink: 'syz.2.3526': attribute type 21 has an invalid length. [ 478.097438][T14763] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3526'. [ 478.172061][T14768] netlink: 'syz.3.3527': attribute type 21 has an invalid length. [ 478.245414][T14763] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 478.262979][T14763] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 478.273711][T14763] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 478.318313][T14773] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 478.336556][T14773] team0: Device veth1_vlan failed to register rx_handler [ 479.250553][T14785] device syzkaller0 entered promiscuous mode [ 479.507230][T14798] netlink: 'syz.0.3536': attribute type 1 has an invalid length. [ 479.528555][T14798] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3536'. [ 480.112243][T14812] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3544'. [ 480.711146][T14822] device syzkaller0 entered promiscuous mode [ 481.308835][T14835] device syzkaller0 entered promiscuous mode [ 481.734762][T14859] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 481.844931][T14859] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3556'. [ 482.028851][T14866] netlink: 'syz.2.3561': attribute type 21 has an invalid length. [ 482.056827][T14866] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.750453][T14888] netlink: 'syz.1.3566': attribute type 22 has an invalid length. [ 482.758337][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 483.011646][T14897] netlink: 'syz.4.3571': attribute type 21 has an invalid length. [ 483.170842][T14898] netlink: 'syz.4.3571': attribute type 10 has an invalid length. [ 483.245502][T14898] team0: Device veth1_vlan failed to register rx_handler [ 483.534480][T14903] IPv6: Can't replace route, no match found [ 483.659164][T14910] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 483.684847][T14910] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3574'. [ 484.034895][T14923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3581'. [ 484.287140][T14929] netlink: 'syz.3.3585': attribute type 3 has an invalid length. [ 484.362983][T14929] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3585'. [ 485.626486][T14957] netlink: 'syz.2.3592': attribute type 1 has an invalid length. [ 485.691674][T14957] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3592'. [ 486.081135][T14977] FAULT_INJECTION: forcing a failure. [ 486.081135][T14977] name failslab, interval 1, probability 0, space 0, times 0 [ 486.110078][T14977] CPU: 0 PID: 14977 Comm: syz.4.3602 Not tainted syzkaller #0 [ 486.117569][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.127623][T14977] Call Trace: [ 486.130907][T14977] [ 486.133836][T14977] dump_stack_lvl+0x188/0x250 [ 486.138518][T14977] ? show_regs_print_info+0x20/0x20 [ 486.143715][T14977] ? load_image+0x400/0x400 [ 486.148214][T14977] ? __might_sleep+0xf0/0xf0 [ 486.152790][T14977] ? __lock_acquire+0x7d10/0x7d10 [ 486.157809][T14977] should_fail+0x38c/0x4c0 [ 486.162221][T14977] should_failslab+0x5/0x20 [ 486.166710][T14977] slab_pre_alloc_hook+0x51/0xc0 [ 486.171641][T14977] __kmalloc+0x6b/0x330 [ 486.175781][T14977] ? bpf_test_init+0xf8/0x1b0 [ 486.180445][T14977] ? __lock_acquire+0x7d10/0x7d10 [ 486.185458][T14977] bpf_test_init+0xf8/0x1b0 [ 486.189950][T14977] bpf_prog_test_run_skb+0x181/0x10b0 [ 486.195337][T14977] ? __fget_files+0x40f/0x480 [ 486.200007][T14977] ? cpu_online+0x60/0x60 [ 486.204323][T14977] bpf_prog_test_run+0x31e/0x390 [ 486.209251][T14977] __sys_bpf+0x5a5/0x6f0 [ 486.213481][T14977] ? bpf_link_show_fdinfo+0x380/0x380 [ 486.218844][T14977] ? vtime_user_exit+0x2c8/0x3e0 [ 486.223778][T14977] __x64_sys_bpf+0x78/0x90 [ 486.228181][T14977] do_syscall_64+0x4c/0xa0 [ 486.232583][T14977] ? clear_bhb_loop+0x30/0x80 [ 486.237245][T14977] ? clear_bhb_loop+0x30/0x80 [ 486.241912][T14977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.247791][T14977] RIP: 0033:0x7faf31354e59 [ 486.252193][T14977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.271784][T14977] RSP: 002b:00007faf2f5ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.280193][T14977] RAX: ffffffffffffffda RBX: 00007faf315cdfa0 RCX: 00007faf31354e59 [ 486.288161][T14977] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 486.296125][T14977] RBP: 00007faf2f5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 486.304087][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.312053][T14977] R13: 00007faf315ce038 R14: 00007faf315cdfa0 R15: 00007ffcbf75a618 [ 486.320026][T14977] [ 487.027529][T14996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 487.073127][T14996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3609'. [ 487.088343][T14996] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 487.098115][T14996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.357936][T14996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.403491][T14996] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 487.488677][T15003] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 487.513610][T15003] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3610'. [ 487.900368][T15028] netlink: 'syz.3.3617': attribute type 4 has an invalid length. [ 487.909420][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 487.945813][T15028] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.3617'. [ 488.598229][T15046] netlink: 'syz.3.3627': attribute type 12 has an invalid length. [ 488.639511][T15046] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.3627'. [ 488.993337][T15056] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3631'. [ 489.073860][T15062] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 489.124109][T15062] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3630'. [ 491.138304][T15109] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 491.222224][T15109] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3647'. [ 491.307683][T15111] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.3650'. [ 492.711173][T15130] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.3656'. [ 492.804897][T15139] sctp: [Deprecated]: syz.3.3656 (pid 15139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.804897][T15139] Use struct sctp_sack_info instead [ 493.019358][T15145] netlink: 'syz.4.3660': attribute type 10 has an invalid length. [ 493.104905][T15149] netlink: 'syz.1.3664': attribute type 29 has an invalid length. [ 493.203048][T15145] device veth1_macvtap left promiscuous mode [ 493.611059][T15149] netlink: 'syz.1.3664': attribute type 29 has an invalid length. [ 495.261677][T15194] netlink: 'syz.3.3678': attribute type 3 has an invalid length. [ 495.290415][T15194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3678'. [ 495.312172][T15198] netlink: 'syz.2.3681': attribute type 9 has an invalid length. [ 495.536907][T15206] FAULT_INJECTION: forcing a failure. [ 495.536907][T15206] name failslab, interval 1, probability 0, space 0, times 0 [ 495.593910][T15206] CPU: 1 PID: 15206 Comm: syz.0.3684 Not tainted syzkaller #0 [ 495.601404][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.611465][T15206] Call Trace: [ 495.614746][T15206] [ 495.617683][T15206] dump_stack_lvl+0x188/0x250 [ 495.622374][T15206] ? show_regs_print_info+0x20/0x20 [ 495.627583][T15206] ? load_image+0x400/0x400 [ 495.632096][T15206] ? __lock_acquire+0x7d10/0x7d10 [ 495.637143][T15206] ? rcu_is_watching+0x11/0xa0 [ 495.641920][T15206] should_fail+0x38c/0x4c0 [ 495.646354][T15206] should_failslab+0x5/0x20 [ 495.650862][T15206] slab_pre_alloc_hook+0x51/0xc0 [ 495.655808][T15206] __kmalloc+0x6b/0x330 [ 495.659965][T15206] ? sk_prot_alloc+0xe7/0x210 [ 495.664652][T15206] sk_prot_alloc+0xe7/0x210 [ 495.669159][T15206] ? sk_alloc+0x1d/0x310 [ 495.673413][T15206] sk_alloc+0x2f/0x310 [ 495.677490][T15206] bpf_prog_test_run_skb+0x240/0x10b0 [ 495.682867][T15206] ? lockdep_hardirqs_on+0x94/0x140 [ 495.688074][T15206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 495.694254][T15206] ? cpu_online+0x60/0x60 [ 495.698594][T15206] bpf_prog_test_run+0x31e/0x390 [ 495.703542][T15206] __sys_bpf+0x5a5/0x6f0 [ 495.707793][T15206] ? bpf_link_show_fdinfo+0x380/0x380 [ 495.713195][T15206] __x64_sys_bpf+0x78/0x90 [ 495.717621][T15206] do_syscall_64+0x4c/0xa0 [ 495.722041][T15206] ? clear_bhb_loop+0x30/0x80 [ 495.726723][T15206] ? clear_bhb_loop+0x30/0x80 [ 495.731410][T15206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.737309][T15206] RIP: 0033:0x7f88186b5e59 [ 495.741729][T15206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.761339][T15206] RSP: 002b:00007f881690f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.769761][T15206] RAX: ffffffffffffffda RBX: 00007f881892efa0 RCX: 00007f88186b5e59 [ 495.777735][T15206] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 495.785708][T15206] RBP: 00007f881690f090 R08: 0000000000000000 R09: 0000000000000000 [ 495.793681][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.801656][T15206] R13: 00007f881892f038 R14: 00007f881892efa0 R15: 00007fff45f6f6f8 [ 495.809651][T15206] [ 496.306888][T15226] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3690'. [ 496.335768][T15205] delete_channel: no stack [ 496.733782][T15235] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3692'. [ 496.744476][T15235] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.3692'. [ 496.855846][T15238] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3692'. [ 496.911925][T15238] netlink: get zone limit has 8 unknown bytes [ 497.275876][T15248] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3697'. [ 500.032563][T15317] FAULT_INJECTION: forcing a failure. [ 500.032563][T15317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.138887][T15317] CPU: 0 PID: 15317 Comm: syz.4.3722 Not tainted syzkaller #0 [ 500.146390][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.156453][T15317] Call Trace: [ 500.159737][T15317] [ 500.162672][T15317] dump_stack_lvl+0x188/0x250 [ 500.167366][T15317] ? show_regs_print_info+0x20/0x20 [ 500.172572][T15317] ? load_image+0x400/0x400 [ 500.177088][T15317] ? __lock_acquire+0x7d10/0x7d10 [ 500.182126][T15317] ? perf_trace_lock_acquire+0xed/0x3e0 [ 500.187688][T15317] should_fail+0x38c/0x4c0 [ 500.192130][T15317] _copy_from_user+0x2e/0x170 [ 500.196819][T15317] __copy_msghdr_from_user+0x48a/0x630 [ 500.202292][T15317] ? verify_lock_unused+0x140/0x140 [ 500.207502][T15317] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 500.212811][T15317] ___sys_sendmsg+0x19a/0x2e0 [ 500.217504][T15317] ? __sys_sendmsg+0x2a0/0x2a0 [ 500.222312][T15317] __se_sys_sendmsg+0x1af/0x290 [ 500.227177][T15317] ? __x64_sys_sendmsg+0x80/0x80 [ 500.232120][T15317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 500.238121][T15317] ? lockdep_hardirqs_on+0x94/0x140 [ 500.243333][T15317] do_syscall_64+0x4c/0xa0 [ 500.247761][T15317] ? clear_bhb_loop+0x30/0x80 [ 500.252444][T15317] ? clear_bhb_loop+0x30/0x80 [ 500.257135][T15317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.263035][T15317] RIP: 0033:0x7faf31354e59 [ 500.267455][T15317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.287066][T15317] RSP: 002b:00007faf2f5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.295494][T15317] RAX: ffffffffffffffda RBX: 00007faf315cdfa0 RCX: 00007faf31354e59 [ 500.303476][T15317] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 500.311455][T15317] RBP: 00007faf2f5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 500.319430][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.327405][T15317] R13: 00007faf315ce038 R14: 00007faf315cdfa0 R15: 00007ffcbf75a618 [ 500.335402][T15317] [ 500.921281][T15326] netlink: 'syz.0.3726': attribute type 10 has an invalid length. [ 501.122899][T15326] team0: Device hsr_slave_0 failed to register rx_handler [ 501.193837][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.200204][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.510885][T15353] netlink: 'syz.0.3736': attribute type 3 has an invalid length. [ 501.565503][T15353] netlink: 'syz.0.3736': attribute type 16 has an invalid length. [ 501.598856][T15353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3736'. [ 501.875646][T15365] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3741'. [ 501.972112][T15365] tap0: tun_chr_ioctl cmd 1074025675 [ 501.977449][T15365] tap0: persist enabled [ 502.047285][T15368] tap0: tun_chr_ioctl cmd 1074025675 [ 502.070318][T15368] tap0: persist enabled [ 502.935575][T15386] netlink: 'syz.1.3747': attribute type 10 has an invalid length. [ 503.127052][T15386] team0: Device hsr_slave_0 failed to register rx_handler [ 503.457505][T15397] netlink: 'syz.3.3751': attribute type 25 has an invalid length. [ 503.479530][T15397] netlink: 'syz.3.3751': attribute type 25 has an invalid length. [ 503.502553][T15397] FAULT_INJECTION: forcing a failure. [ 503.502553][T15397] name failslab, interval 1, probability 0, space 0, times 0 [ 503.515301][T15397] CPU: 0 PID: 15397 Comm: syz.3.3751 Not tainted syzkaller #0 [ 503.522777][T15397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.532844][T15397] Call Trace: [ 503.536136][T15397] [ 503.539073][T15397] dump_stack_lvl+0x188/0x250 [ 503.543776][T15397] ? show_regs_print_info+0x20/0x20 [ 503.548992][T15397] ? load_image+0x400/0x400 [ 503.553522][T15397] ? kmem_cache_free+0x14c/0x210 [ 503.558471][T15397] ? skb_release_head_state+0x1e7/0x240 [ 503.564053][T15397] should_fail+0x38c/0x4c0 [ 503.568508][T15397] should_failslab+0x5/0x20 [ 503.573024][T15397] slab_pre_alloc_hook+0x51/0xc0 [ 503.577985][T15397] __kmalloc+0x6b/0x330 [ 503.582154][T15397] ? switchdev_deferred_enqueue+0x2a/0x210 [ 503.587990][T15397] ? switchdev_deferred_enqueue+0x210/0x210 [ 503.593895][T15397] switchdev_deferred_enqueue+0x2a/0x210 [ 503.599541][T15397] switchdev_port_attr_set+0xfb/0x270 [ 503.604931][T15397] ? switchdev_deferred_process+0x280/0x280 [ 503.610854][T15397] ? br_mdb_complete+0x1e0/0x1e0 [ 503.615812][T15397] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 503.621739][T15397] br_multicast_add_router+0x4ee/0x550 [ 503.627239][T15397] ? in_dev_get+0x250/0x250 [ 503.631781][T15397] ? __timer_delete+0x6c/0x220 [ 503.636576][T15397] br_multicast_set_port_router+0x38f/0xcd0 [ 503.642480][T15397] ? br_switchdev_set_port_flag+0x1d5/0x3a0 [ 503.648366][T15397] ? br_multicast_set_router+0x3f0/0x3f0 [ 503.654006][T15397] ? do_raw_spin_lock+0x128/0x2f0 [ 503.659019][T15397] ? br_port_flags_change+0x17c/0x1f0 [ 503.664388][T15397] br_setport+0xa5e/0x1070 [ 503.668806][T15397] br_setlink+0x52d/0x8c0 [ 503.673145][T15397] ? __lock_acquire+0x7d10/0x7d10 [ 503.678211][T15397] ? br_vlan_info+0x460/0x460 [ 503.682928][T15397] ? mutex_lock_io_nested+0x60/0x60 [ 503.688128][T15397] ? mutex_is_locked+0xe/0x40 [ 503.692800][T15397] rtnl_bridge_setlink+0x4ba/0x720 [ 503.697910][T15397] ? rtnl_bridge_dellink+0x680/0x680 [ 503.703183][T15397] rtnetlink_rcv_msg+0x844/0xf30 [ 503.708118][T15397] ? rtnetlink_bind+0x80/0x80 [ 503.712782][T15397] ? __local_bh_enable_ip+0x136/0x1c0 [ 503.718140][T15397] ? lockdep_hardirqs_on+0x94/0x140 [ 503.723342][T15397] ? __local_bh_enable_ip+0x136/0x1c0 [ 503.728723][T15397] ? _local_bh_enable+0xa0/0xa0 [ 503.733578][T15397] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 503.738822][T15397] ? perf_trace_lock+0xe4/0x390 [ 503.743671][T15397] ? trace_event_raw_event_lock+0x270/0x270 [ 503.749557][T15397] ? __skb_clone+0x480/0x790 [ 503.754154][T15397] netlink_rcv_skb+0x1f5/0x440 [ 503.758918][T15397] ? rtnetlink_bind+0x80/0x80 [ 503.763606][T15397] ? netlink_ack+0xb50/0xb50 [ 503.768207][T15397] netlink_unicast+0x774/0x920 [ 503.772998][T15397] netlink_sendmsg+0x8ba/0xbe0 [ 503.777787][T15397] ? netlink_getsockopt+0x570/0x570 [ 503.782982][T15397] ? aa_sock_msg_perm+0x94/0x150 [ 503.787918][T15397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 503.793192][T15397] ? security_socket_sendmsg+0x7c/0xa0 [ 503.798641][T15397] ? netlink_getsockopt+0x570/0x570 [ 503.803828][T15397] ____sys_sendmsg+0x5b7/0x8f0 [ 503.808615][T15397] ? __sys_sendmsg_sock+0x30/0x30 [ 503.813660][T15397] ? import_iovec+0x6f/0xa0 [ 503.818157][T15397] ___sys_sendmsg+0x236/0x2e0 [ 503.822863][T15397] ? __sys_sendmsg+0x2a0/0x2a0 [ 503.827655][T15397] ? trace_event_raw_event_lock+0x270/0x270 [ 503.833535][T15397] ? vfs_write+0x8b2/0xd60 [ 503.837984][T15397] __se_sys_sendmsg+0x1af/0x290 [ 503.842832][T15397] ? __x64_sys_sendmsg+0x80/0x80 [ 503.847761][T15397] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 503.853758][T15397] ? lockdep_hardirqs_on+0x94/0x140 [ 503.858956][T15397] do_syscall_64+0x4c/0xa0 [ 503.863360][T15397] ? clear_bhb_loop+0x30/0x80 [ 503.868020][T15397] ? clear_bhb_loop+0x30/0x80 [ 503.872700][T15397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.878601][T15397] RIP: 0033:0x7f47d28c8e59 [ 503.883006][T15397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.902598][T15397] RSP: 002b:00007f47d0b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.911005][T15397] RAX: ffffffffffffffda RBX: 00007f47d2b41fa0 RCX: 00007f47d28c8e59 [ 503.918965][T15397] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000007 [ 503.926924][T15397] RBP: 00007f47d0b22090 R08: 0000000000000000 R09: 0000000000000000 [ 503.934884][T15397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.942868][T15397] R13: 00007f47d2b42038 R14: 00007f47d2b41fa0 R15: 00007fff45043648 [ 503.950857][T15397] [ 505.362950][T15446] device syzkaller0 entered promiscuous mode [ 505.421858][T15449] netlink: 'syz.4.3768': attribute type 10 has an invalid length. [ 505.643358][T15449] team0: Device hsr_slave_0 failed to register rx_handler [ 506.152393][T15483] netlink: 'syz.2.3784': attribute type 10 has an invalid length. [ 506.189949][T15483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3784'. [ 506.811436][T15498] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3790'. [ 508.391567][T15444] Bluetooth: hci0: command 0x0406 tx timeout [ 508.507485][T15546] netlink: 'syz.3.3808': attribute type 10 has an invalid length. [ 508.549662][T15546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3808'. [ 508.596113][T15546] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 508.625726][T15546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.902505][T15563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3815'. [ 509.563818][T15591] tap0: tun_chr_ioctl cmd 1074025675 [ 509.579611][T15591] tap0: persist enabled [ 509.625058][T15589] tap0: tun_chr_ioctl cmd 1074025675 [ 509.630712][T15589] tap0: persist enabled [ 509.743147][T15593] FAULT_INJECTION: forcing a failure. [ 509.743147][T15593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.790152][T15593] CPU: 1 PID: 15593 Comm: syz.3.3824 Not tainted syzkaller #0 [ 509.797643][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.807702][T15593] Call Trace: [ 509.810984][T15593] [ 509.813920][T15593] dump_stack_lvl+0x188/0x250 [ 509.818609][T15593] ? show_regs_print_info+0x20/0x20 [ 509.823815][T15593] ? load_image+0x400/0x400 [ 509.828338][T15593] ? __lock_acquire+0x7d10/0x7d10 [ 509.833376][T15593] ? vfs_write+0x8b2/0xd60 [ 509.837804][T15593] should_fail+0x38c/0x4c0 [ 509.842233][T15593] _copy_from_user+0x2e/0x170 [ 509.846920][T15593] __sys_bpf+0x26d/0x6f0 [ 509.851172][T15593] ? bpf_link_show_fdinfo+0x380/0x380 [ 509.856560][T15593] ? vtime_user_exit+0x2c8/0x3e0 [ 509.861513][T15593] __x64_sys_bpf+0x78/0x90 [ 509.865935][T15593] do_syscall_64+0x4c/0xa0 [ 509.870357][T15593] ? clear_bhb_loop+0x30/0x80 [ 509.875037][T15593] ? clear_bhb_loop+0x30/0x80 [ 509.879721][T15593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.885617][T15593] RIP: 0033:0x7f47d28c8e59 [ 509.890033][T15593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.909639][T15593] RSP: 002b:00007f47d0b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.918055][T15593] RAX: ffffffffffffffda RBX: 00007f47d2b41fa0 RCX: 00007f47d28c8e59 [ 509.926030][T15593] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 509.934007][T15593] RBP: 00007f47d0b22090 R08: 0000000000000000 R09: 0000000000000000 [ 509.941983][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.949954][T15593] R13: 00007f47d2b42038 R14: 00007f47d2b41fa0 R15: 00007fff45043648 [ 509.957943][T15593] [ 510.077800][T15599] netlink: 'syz.4.3826': attribute type 4 has an invalid length. [ 510.099819][T15599] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 510.131019][T15599] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3826'. [ 510.743829][T15628] delete_channel: no stack [ 510.995290][T15637] netlink: 'syz.0.3842': attribute type 10 has an invalid length. [ 511.099866][T15639] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 511.195848][T15639] team0: Device hsr_slave_0 failed to register rx_handler [ 511.303397][T15646] netlink: 'syz.3.3846': attribute type 29 has an invalid length. [ 511.386401][T15646] netlink: 'syz.3.3846': attribute type 29 has an invalid length. [ 511.408351][T15650] netlink: 'syz.3.3846': attribute type 1 has an invalid length. [ 511.435301][T15650] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3846'. [ 511.847526][T15664] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3852'. [ 515.049562][T15678] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3859'. [ 515.251569][T15698] netlink: 'syz.3.3867': attribute type 29 has an invalid length. [ 515.300435][T15695] netlink: 'syz.2.3866': attribute type 10 has an invalid length. [ 515.341479][T15695] bridge0: port 3(team0) entered disabled state [ 515.351302][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.364130][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.381865][T15701] netlink: 'syz.3.3867': attribute type 1 has an invalid length. [ 515.434160][T15701] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3867'. [ 515.571566][T15695] team0: Device bridge0 is already an upper device of the team interface [ 515.600405][T15698] netlink: 'syz.3.3867': attribute type 29 has an invalid length. [ 516.303796][T15733] netlink: 'syz.3.3880': attribute type 29 has an invalid length. [ 516.311616][T15735] netlink: 'syz.0.3876': attribute type 21 has an invalid length. [ 516.370763][T15735] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3876'. [ 516.408987][T15736] delete_channel: no stack [ 516.425902][T15736] delete_channel: no stack [ 516.439534][T15733] netlink: 'syz.3.3880': attribute type 29 has an invalid length. [ 516.504555][T15740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.604006][T15736] netlink: 'syz.1.3879': attribute type 2 has an invalid length. [ 516.656060][T15736] netlink: 'syz.1.3879': attribute type 8 has an invalid length. [ 516.679374][T15736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3879'. [ 516.732450][T15739] netlink: 'syz.3.3880': attribute type 29 has an invalid length. [ 517.123862][T15758] netlink: 'syz.1.3884': attribute type 10 has an invalid length. [ 517.159509][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3884'. [ 517.168644][T15758] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 517.285445][T15758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 517.392388][T15758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.875928][T15776] netlink: 'syz.1.3891': attribute type 21 has an invalid length. [ 517.924574][T15776] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3891'. [ 517.980759][T15777] netlink: 'syz.4.3892': attribute type 21 has an invalid length. [ 517.994164][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3892'. [ 518.086418][T15779] netlink: 'syz.0.3893': attribute type 10 has an invalid length. [ 518.180519][T15779] team0: Device hsr_slave_0 failed to register rx_handler [ 518.202682][T15782] delete_channel: no stack [ 518.225577][T15775] delete_channel: no stack [ 518.235019][T15782] delete_channel: no stack [ 518.315800][T15782] netlink: 'syz.2.3894': attribute type 2 has an invalid length. [ 518.349947][T15782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3894'. [ 518.542445][T15794] device syzkaller0 entered promiscuous mode [ 518.630523][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 519.624213][T15825] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3905'. [ 520.390849][T15841] device syzkaller0 entered promiscuous mode [ 520.944684][T15862] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3917'. [ 521.134667][T15875] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3917'. [ 521.533157][T15879] validate_nla: 1 callbacks suppressed [ 521.533198][T15879] netlink: 'syz.3.3922': attribute type 12 has an invalid length. [ 521.563913][T15879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3922'. [ 522.168413][T15906] FAULT_INJECTION: forcing a failure. [ 522.168413][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 522.280275][T15906] CPU: 0 PID: 15906 Comm: syz.3.3934 Not tainted syzkaller #0 [ 522.287780][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.297848][T15906] Call Trace: [ 522.301141][T15906] [ 522.304083][T15906] dump_stack_lvl+0x188/0x250 [ 522.308788][T15906] ? show_regs_print_info+0x20/0x20 [ 522.314005][T15906] ? load_image+0x400/0x400 [ 522.318527][T15906] ? __might_sleep+0xf0/0xf0 [ 522.323139][T15906] ? __lock_acquire+0x7d10/0x7d10 [ 522.328190][T15906] should_fail+0x38c/0x4c0 [ 522.332636][T15906] should_failslab+0x5/0x20 [ 522.337153][T15906] slab_pre_alloc_hook+0x51/0xc0 [ 522.342114][T15906] __kmalloc_node+0x6e/0x3b0 [ 522.346713][T15906] ? memcg_alloc_page_obj_cgroups+0x81/0x120 [ 522.352715][T15906] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 522.358540][T15906] slab_post_alloc_hook+0xba/0x380 [ 522.363688][T15906] kmem_cache_alloc_node+0x12d/0x2d0 [ 522.368994][T15906] ? __alloc_skb+0xf4/0x750 [ 522.373523][T15906] __alloc_skb+0xf4/0x750 [ 522.377882][T15906] alloc_skb_with_frags+0xa7/0x730 [ 522.383025][T15906] sock_alloc_send_pskb+0x87f/0x9a0 [ 522.388271][T15906] ? sock_kzfree_s+0x50/0x50 [ 522.392897][T15906] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 522.399064][T15906] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 522.405331][T15906] unix_stream_sendmsg+0x428/0xc90 [ 522.410487][T15906] ? unix_show_fdinfo+0xa0/0xa0 [ 522.415352][T15906] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 522.421790][T15906] ? aa_sock_msg_perm+0x94/0x150 [ 522.426747][T15906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 522.432043][T15906] ? security_socket_sendmsg+0x7c/0xa0 [ 522.437519][T15906] ? unix_show_fdinfo+0xa0/0xa0 [ 522.442388][T15906] ____sys_sendmsg+0x5b7/0x8f0 [ 522.447184][T15906] ? __sys_sendmsg_sock+0x30/0x30 [ 522.452244][T15906] ? import_iovec+0x6f/0xa0 [ 522.456772][T15906] ___sys_sendmsg+0x236/0x2e0 [ 522.461484][T15906] ? __sys_sendmsg+0x2a0/0x2a0 [ 522.466334][T15906] __se_sys_sendmsg+0x1af/0x290 [ 522.471205][T15906] ? __x64_sys_sendmsg+0x80/0x80 [ 522.476153][T15906] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 522.482170][T15906] ? lockdep_hardirqs_on+0x94/0x140 [ 522.487390][T15906] do_syscall_64+0x4c/0xa0 [ 522.491832][T15906] ? clear_bhb_loop+0x30/0x80 [ 522.496519][T15906] ? clear_bhb_loop+0x30/0x80 [ 522.501209][T15906] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.507115][T15906] RIP: 0033:0x7f47d28c8e59 [ 522.511539][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.531161][T15906] RSP: 002b:00007f47d0b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.539596][T15906] RAX: ffffffffffffffda RBX: 00007f47d2b41fa0 RCX: 00007f47d28c8e59 [ 522.547583][T15906] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 522.555566][T15906] RBP: 00007f47d0b22090 R08: 0000000000000000 R09: 0000000000000000 [ 522.563559][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.571557][T15906] R13: 00007f47d2b42038 R14: 00007f47d2b41fa0 R15: 00007fff45043648 [ 522.579577][T15906] [ 525.454191][T15978] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3962'. [ 525.635938][T15985] netlink: 'syz.1.3964': attribute type 12 has an invalid length. [ 525.690486][T15985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3964'. [ 525.814909][T15985] FAULT_INJECTION: forcing a failure. [ 525.814909][T15985] name failslab, interval 1, probability 0, space 0, times 0 [ 525.873430][T15985] CPU: 1 PID: 15985 Comm: syz.1.3964 Not tainted syzkaller #0 [ 525.880931][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.890992][T15985] Call Trace: [ 525.894276][T15985] [ 525.897210][T15985] dump_stack_lvl+0x188/0x250 [ 525.901907][T15985] ? show_regs_print_info+0x20/0x20 [ 525.907114][T15985] ? load_image+0x400/0x400 [ 525.911629][T15985] ? __might_sleep+0xf0/0xf0 [ 525.916229][T15985] ? __lock_acquire+0x7d10/0x7d10 [ 525.921277][T15985] should_fail+0x38c/0x4c0 [ 525.925709][T15985] should_failslab+0x5/0x20 [ 525.930221][T15985] slab_pre_alloc_hook+0x51/0xc0 [ 525.935177][T15985] __kmalloc_node_track_caller+0x68/0x3a0 [ 525.940905][T15985] ? netlink_ack+0x372/0xb50 [ 525.945499][T15985] ? kmem_cache_alloc_node+0x162/0x2d0 [ 525.950963][T15985] ? __alloc_skb+0xf4/0x750 [ 525.955474][T15985] ? netlink_ack+0x372/0xb50 [ 525.960071][T15985] __alloc_skb+0x22c/0x750 [ 525.964501][T15985] netlink_ack+0x372/0xb50 [ 525.968934][T15985] ? __copy_skb_header+0x3ba/0x4f0 [ 525.974051][T15985] ? netlink_dump+0xcf0/0xcf0 [ 525.978739][T15985] ? __skb_clone+0x480/0x790 [ 525.983345][T15985] netlink_rcv_skb+0x27a/0x440 [ 525.988115][T15985] ? rtnetlink_bind+0x80/0x80 [ 525.992804][T15985] ? netlink_ack+0xb50/0xb50 [ 525.997417][T15985] netlink_unicast+0x774/0x920 [ 526.002200][T15985] netlink_sendmsg+0x8ba/0xbe0 [ 526.006985][T15985] ? netlink_getsockopt+0x570/0x570 [ 526.012195][T15985] ? aa_sock_msg_perm+0x94/0x150 [ 526.017147][T15985] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 526.022441][T15985] ? security_socket_sendmsg+0x7c/0xa0 [ 526.027908][T15985] ? netlink_getsockopt+0x570/0x570 [ 526.033110][T15985] ____sys_sendmsg+0x5b7/0x8f0 [ 526.037892][T15985] ? __sys_sendmsg_sock+0x30/0x30 [ 526.042935][T15985] ? import_iovec+0x6f/0xa0 [ 526.047451][T15985] ___sys_sendmsg+0x236/0x2e0 [ 526.052145][T15985] ? __sys_sendmsg+0x2a0/0x2a0 [ 526.056929][T15985] ? vfs_write+0x8b2/0xd60 [ 526.061376][T15985] __se_sys_sendmsg+0x1af/0x290 [ 526.066246][T15985] ? __x64_sys_sendmsg+0x80/0x80 [ 526.071203][T15985] ? syscall_enter_from_user_mode+0x2a/0x70 [ 526.077110][T15985] do_syscall_64+0x4c/0xa0 [ 526.081533][T15985] ? clear_bhb_loop+0x30/0x80 [ 526.086217][T15985] ? clear_bhb_loop+0x30/0x80 [ 526.090912][T15985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.096813][T15985] RIP: 0033:0x7f737725ce59 [ 526.101239][T15985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.120851][T15985] RSP: 002b:00007f73754b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.129271][T15985] RAX: ffffffffffffffda RBX: 00007f73774d5fa0 RCX: 00007f737725ce59 [ 526.137247][T15985] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 526.145220][T15985] RBP: 00007f73754b6090 R08: 0000000000000000 R09: 0000000000000000 [ 526.153200][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.161180][T15985] R13: 00007f73774d6038 R14: 00007f73774d5fa0 R15: 00007ffcc806cfb8 [ 526.169176][T15985] [ 526.194056][T15991] device bridge_slave_1 left promiscuous mode [ 526.210127][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.243722][T15991] device bridge_slave_0 left promiscuous mode [ 526.299415][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.566465][T16095] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3998'. [ 534.455129][T16143] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 536.101213][T16169] netlink: 'syz.1.4022': attribute type 21 has an invalid length. [ 536.415979][T16165] netlink: 'syz.1.4022': attribute type 3 has an invalid length. [ 536.543526][T16165] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4022'. [ 536.629101][T16169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4022'. [ 536.689789][T16169] netlink: 'syz.1.4022': attribute type 4 has an invalid length. [ 536.723701][T16166] bridge0: port 4(batadv0) entered blocking state [ 536.766783][T16166] bridge0: port 4(batadv0) entered disabled state [ 536.805628][T16166] device batadv0 entered promiscuous mode [ 537.025464][ T6261] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 537.035776][ T6261] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 537.455885][T16191] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 539.109923][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 540.267870][T16206] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4037'. [ 540.586109][T16219] netlink: 'syz.3.4040': attribute type 3 has an invalid length. [ 540.647034][T16219] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4040'. [ 541.123999][T16238] netlink: 'syz.2.4047': attribute type 29 has an invalid length. [ 541.237306][T16238] netlink: 'syz.2.4047': attribute type 29 has an invalid length. [ 541.345926][T16239] netlink: 'syz.2.4047': attribute type 29 has an invalid length. [ 541.457989][T16245] netlink: 'syz.3.4049': attribute type 10 has an invalid length. [ 541.698902][T16245] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 542.164911][T16263] netlink: 'syz.1.4055': attribute type 3 has an invalid length. [ 542.209499][T16263] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4055'. [ 542.272447][T16272] netlink: 'syz.3.4058': attribute type 29 has an invalid length. [ 542.313867][T16272] netlink: 'syz.3.4058': attribute type 29 has an invalid length. [ 542.407480][T16273] netlink: 'syz.3.4058': attribute type 29 has an invalid length. [ 543.051829][T16296] netlink: 'syz.0.4064': attribute type 10 has an invalid length. [ 543.192183][T16296] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 543.689508][T16311] FAULT_INJECTION: forcing a failure. [ 543.689508][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.731847][T16311] CPU: 1 PID: 16311 Comm: syz.4.4072 Not tainted syzkaller #0 [ 543.739337][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.749392][T16311] Call Trace: [ 543.752674][T16311] [ 543.755605][T16311] dump_stack_lvl+0x188/0x250 [ 543.760301][T16311] ? show_regs_print_info+0x20/0x20 [ 543.765504][T16311] ? load_image+0x400/0x400 [ 543.770013][T16311] ? __lock_acquire+0x7d10/0x7d10 [ 543.775039][T16311] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 543.781549][T16311] should_fail+0x38c/0x4c0 [ 543.785976][T16311] _copy_from_user+0x2e/0x170 [ 543.790660][T16311] iovec_from_user+0x142/0x370 [ 543.795440][T16311] __import_iovec+0x70/0x490 [ 543.800047][T16311] import_iovec+0x6f/0xa0 [ 543.804388][T16311] ___sys_sendmsg+0x1fd/0x2e0 [ 543.809080][T16311] ? __sys_sendmsg+0x2a0/0x2a0 [ 543.813862][T16311] ? trace_event_raw_event_lock+0x270/0x270 [ 543.819760][T16311] ? vfs_write+0x8b2/0xd60 [ 543.824203][T16311] __se_sys_sendmsg+0x1af/0x290 [ 543.829067][T16311] ? __x64_sys_sendmsg+0x80/0x80 [ 543.834020][T16311] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.840030][T16311] ? lockdep_hardirqs_on+0x94/0x140 [ 543.845245][T16311] do_syscall_64+0x4c/0xa0 [ 543.849668][T16311] ? clear_bhb_loop+0x30/0x80 [ 543.854351][T16311] ? clear_bhb_loop+0x30/0x80 [ 543.859036][T16311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 543.864941][T16311] RIP: 0033:0x7faf31354e59 [ 543.869363][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.888972][T16311] RSP: 002b:00007faf2f5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.897394][T16311] RAX: ffffffffffffffda RBX: 00007faf315cdfa0 RCX: 00007faf31354e59 [ 543.905368][T16311] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 543.913341][T16311] RBP: 00007faf2f5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 543.921313][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.929286][T16311] R13: 00007faf315ce038 R14: 00007faf315cdfa0 R15: 00007ffcbf75a618 [ 543.937279][T16311] [ 544.141475][T16325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4077'. [ 544.431064][T16336] netlink: 'syz.4.4082': attribute type 10 has an invalid length. [ 544.592103][T16336] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 545.204924][T16363] FAULT_INJECTION: forcing a failure. [ 545.204924][T16363] name failslab, interval 1, probability 0, space 0, times 0 [ 545.218254][T16363] CPU: 0 PID: 16363 Comm: syz.1.4090 Not tainted syzkaller #0 [ 545.225734][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.235802][T16363] Call Trace: [ 545.239097][T16363] [ 545.242044][T16363] dump_stack_lvl+0x188/0x250 [ 545.246750][T16363] ? lock_chain_count+0x20/0x20 [ 545.251630][T16363] ? show_regs_print_info+0x20/0x20 [ 545.256851][T16363] ? load_image+0x400/0x400 [ 545.261374][T16363] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 545.267605][T16363] should_fail+0x38c/0x4c0 [ 545.272063][T16363] should_failslab+0x5/0x20 [ 545.276583][T16363] slab_pre_alloc_hook+0x51/0xc0 [ 545.281536][T16363] ? skb_clone+0x1bd/0x350 [ 545.285975][T16363] kmem_cache_alloc+0x3d/0x290 [ 545.290777][T16363] skb_clone+0x1bd/0x350 [ 545.295039][T16363] ? dev_queue_xmit_nit+0x1df/0xb00 [ 545.300262][T16363] dev_queue_xmit_nit+0x2cc/0xb00 [ 545.305323][T16363] ? validate_xmit_skb+0x7b3/0xe40 [ 545.310472][T16363] dev_hard_start_xmit+0x13e/0x7e0 [ 545.315649][T16363] __dev_queue_xmit+0x1a9b/0x2f80 [ 545.320702][T16363] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 545.326928][T16363] ? dev_queue_xmit+0x20/0x20 [ 545.331625][T16363] ? memcpy+0x3c/0x60 [ 545.335632][T16363] ? __copy_skb_header+0x3ba/0x4f0 [ 545.340775][T16363] ? __skb_clone+0x480/0x790 [ 545.345407][T16363] ? skb_clone+0x1f1/0x350 [ 545.349866][T16363] __netlink_deliver_tap+0x53e/0x7c0 [ 545.355220][T16363] netlink_deliver_tap+0x16c/0x180 [ 545.360353][T16363] netlink_unicast+0x74f/0x920 [ 545.365169][T16363] netlink_sendmsg+0x8ba/0xbe0 [ 545.369981][T16363] ? netlink_getsockopt+0x570/0x570 [ 545.375208][T16363] ? aa_sock_msg_perm+0x94/0x150 [ 545.380172][T16363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 545.385473][T16363] ? security_socket_sendmsg+0x7c/0xa0 [ 545.390957][T16363] ? netlink_getsockopt+0x570/0x570 [ 545.396172][T16363] ____sys_sendmsg+0x5b7/0x8f0 [ 545.400983][T16363] ? __sys_sendmsg_sock+0x30/0x30 [ 545.406062][T16363] ? import_iovec+0x6f/0xa0 [ 545.410602][T16363] ___sys_sendmsg+0x236/0x2e0 [ 545.415329][T16363] ? __sys_sendmsg+0x2a0/0x2a0 [ 545.420152][T16363] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 545.425969][T16363] __se_sys_sendmsg+0x1af/0x290 [ 545.430854][T16363] ? __x64_sys_sendmsg+0x80/0x80 [ 545.435855][T16363] ? syscall_enter_from_user_mode+0x2a/0x70 [ 545.441780][T16363] do_syscall_64+0x4c/0xa0 [ 545.446213][T16363] ? clear_bhb_loop+0x30/0x80 [ 545.450904][T16363] ? clear_bhb_loop+0x30/0x80 [ 545.455611][T16363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 545.461519][T16363] RIP: 0033:0x7f737725ce59 [ 545.465951][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.485570][T16363] RSP: 002b:00007f73754b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.494007][T16363] RAX: ffffffffffffffda RBX: 00007f73774d5fa0 RCX: 00007f737725ce59 [ 545.501993][T16363] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 545.509978][T16363] RBP: 00007f73754b6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.517963][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.525946][T16363] R13: 00007f73774d6038 R14: 00007f73774d5fa0 R15: 00007ffcc806cfb8 [ 545.533985][T16363] [ 546.462374][T16363] netlink: 'syz.1.4090': attribute type 2 has an invalid length. [ 546.805774][T16388] FAULT_INJECTION: forcing a failure. [ 546.805774][T16388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.918495][T16388] CPU: 1 PID: 16388 Comm: syz.1.4101 Not tainted syzkaller #0 [ 546.925995][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.936051][T16388] Call Trace: [ 546.939329][T16388] [ 546.942261][T16388] dump_stack_lvl+0x188/0x250 [ 546.946947][T16388] ? show_regs_print_info+0x20/0x20 [ 546.952155][T16388] ? load_image+0x400/0x400 [ 546.956668][T16388] ? __lock_acquire+0x7d10/0x7d10 [ 546.961699][T16388] ? perf_trace_lock+0xe4/0x390 [ 546.966565][T16388] should_fail+0x38c/0x4c0 [ 546.971000][T16388] _copy_from_user+0x2e/0x170 [ 546.975683][T16388] ___sys_recvmsg+0x173/0x5c0 [ 546.980371][T16388] ? __sys_recvmsg+0x280/0x280 [ 546.985177][T16388] __x64_sys_recvmsg+0x1f9/0x2c0 [ 546.990129][T16388] ? ___sys_recvmsg+0x5c0/0x5c0 [ 546.994999][T16388] ? syscall_enter_from_user_mode+0x2a/0x70 [ 547.000905][T16388] do_syscall_64+0x4c/0xa0 [ 547.005324][T16388] ? clear_bhb_loop+0x30/0x80 [ 547.010006][T16388] ? clear_bhb_loop+0x30/0x80 [ 547.014689][T16388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.020591][T16388] RIP: 0033:0x7f737725ce59 [ 547.025009][T16388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.044615][T16388] RSP: 002b:00007f73754b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 547.053026][T16388] RAX: ffffffffffffffda RBX: 00007f73774d5fa0 RCX: 00007f737725ce59 [ 547.060988][T16388] RDX: 0000000000000100 RSI: 0000200000000580 RDI: 0000000000000004 [ 547.068944][T16388] RBP: 00007f73754b6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.076900][T16388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.084855][T16388] R13: 00007f73774d6038 R14: 00007f73774d5fa0 R15: 00007ffcc806cfb8 [ 547.092826][T16388] [ 547.525815][T16408] netlink: 'syz.2.4108': attribute type 3 has an invalid length. [ 547.570065][T16408] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4108'. [ 547.746185][T16411] netlink: 'syz.1.4110': attribute type 2 has an invalid length. [ 547.846228][ C0] [ 547.846237][ C0] ================================ [ 547.846242][ C0] WARNING: inconsistent lock state [ 547.846259][ C0] syzkaller #0 Not tainted [ 547.846268][ C0] -------------------------------- [ 547.846272][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 547.846280][ C0] syz.3.4111/16415 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 547.846298][ C0] ffffffff8c450238 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xb30 [ 547.846343][ C0] {INITIAL USE} state was registered at: [ 547.846354][ C0] lock_acquire+0x19e/0x400 [ 547.846372][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 547.846386][ C0] kernfs_rename_ns+0x52a/0x930 [ 547.846401][ C0] sysfs_rename_link_ns+0x171/0x1b0 [ 547.846414][ C0] device_rename+0x11c/0x1a0 [ 547.846429][ C0] dev_change_name+0x2dd/0xbf0 [ 547.846442][ C0] do_setlink+0xa4e/0x3d60 [ 547.846454][ C0] rtnl_newlink+0x1658/0x1a50 [ 547.846469][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 547.846484][ C0] netlink_rcv_skb+0x1f5/0x440 [ 547.846497][ C0] netlink_unicast+0x774/0x920 [ 547.846509][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 547.846522][ C0] __sys_sendto+0x46d/0x620 [ 547.846536][ C0] __x64_sys_sendto+0xda/0xf0 [ 547.846551][ C0] do_syscall_64+0x4c/0xa0 [ 547.846565][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.846580][ C0] irq event stamp: 4920 [ 547.846586][ C0] hardirqs last enabled at (4919): [] syscall_enter_from_user_mode+0x21/0x70 [ 547.846607][ C0] hardirqs last disabled at (4920): [] exc_debug+0x6e/0x130 [ 547.846625][ C0] softirqs last enabled at (4596): [] bpf_prog_load+0x10f9/0x1510 [ 547.846645][ C0] softirqs last disabled at (4594): [] bpf_ksym_add+0x29/0x340 [ 547.846668][ C0] [ 547.846668][ C0] other info that might help us debug this: [ 547.846673][ C0] Possible unsafe locking scenario: [ 547.846673][ C0] [ 547.846677][ C0] CPU0 [ 547.846680][ C0] ---- [ 547.846683][ C0] lock(kernfs_rename_lock); [ 547.846692][ C0] [ 547.846696][ C0] lock(kernfs_rename_lock); [ 547.846705][ C0] [ 547.846705][ C0] *** DEADLOCK *** [ 547.846705][ C0] [ 547.846709][ C0] no locks held by syz.3.4111/16415. [ 547.846716][ C0] [ 547.846716][ C0] stack backtrace: [ 547.846721][ C0] CPU: 0 PID: 16415 Comm: syz.3.4111 Not tainted syzkaller #0 [ 547.846737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.846745][ C0] Call Trace: [ 547.846751][ C0] <#DB> [ 547.846758][ C0] dump_stack_lvl+0x188/0x250 [ 547.846778][ C0] ? show_regs_print_info+0x20/0x20 [ 547.846800][ C0] ? print_usage_bug+0x42a/0x690 [ 547.846815][ C0] ? verify_lock_unused+0x18/0x140 [ 547.846837][ C0] lock_acquire+0x2c3/0x400 [ 547.846853][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 547.846873][ C0] ? kernfs_path_from_node+0x84/0xb30 [ 547.846893][ C0] ? read_lock_is_recursive+0x10/0x10 [ 547.846914][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 547.846932][ C0] ? verify_lock_unused+0x18/0x140 [ 547.846953][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 547.846968][ C0] ? kernfs_path_from_node+0x84/0xb30 [ 547.846985][ C0] ? _raw_spin_lock+0x40/0x40 [ 547.846998][ C0] ? rcu_is_watching+0x11/0xa0 [ 547.847014][ C0] ? lock_release+0xb5/0x8a0 [ 547.847030][ C0] ? __page_memcg+0x140/0x140 [ 547.847045][ C0] ? rcu_lock_acquire+0x30/0x30 [ 547.847064][ C0] kernfs_path_from_node+0x84/0xb30 [ 547.847082][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 547.847097][ C0] ? lock_release+0xb5/0x8a0 [ 547.847117][ C0] ? kernfs_name+0xc0/0xc0 [ 547.847144][ C0] get_mm_memcg_path+0xba/0x330 [ 547.847166][ C0] __mmap_lock_do_trace_start_locking+0xe2/0x2f0 [ 547.847188][ C0] ? __bpf_trace_mmap_lock_released+0x30/0x30 [ 547.847232][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 547.847255][ C0] stack_map_get_build_id_offset+0x562/0x860 [ 547.847280][ C0] ? __pcpu_freelist_pop+0x470/0x470 [ 547.847298][ C0] ? __bpf_get_stackid+0x920/0x920 [ 547.847319][ C0] ? read_lock_is_recursive+0x10/0x10 [ 547.847340][ C0] __bpf_get_stackid+0x55d/0x920 [ 547.847367][ C0] bpf_prog_12712c88fd19bd5b+0x21/0x54c [ 547.847383][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 547.847401][ C0] ? perf_get_page_size+0x430/0x430 [ 547.847421][ C0] ? perf_event_switch_output+0x730/0x730 [ 547.847436][ C0] ? trace_call_bpf+0x515/0x5b0 [ 547.847461][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 547.847480][ C0] __perf_event_overflow+0x364/0x530 [ 547.847503][ C0] perf_bp_event+0x276/0x320 [ 547.847517][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 547.847539][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 547.847583][ C0] ? rcu_lock_acquire+0x9/0x30 [ 547.847601][ C0] ? read_lock_is_recursive+0x10/0x10 [ 547.847627][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 547.847655][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 547.847677][ C0] notify_die+0x141/0x1a0 [ 547.847696][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 547.847718][ C0] ? exc_debug+0x6e/0x130 [ 547.847734][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 547.847754][ C0] notify_debug+0x20/0x30 [ 547.847771][ C0] exc_debug+0xcf/0x130 [ 547.847790][ C0] asm_exc_debug+0x1a/0x40 [ 547.847805][ C0] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 547.847825][ C0] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 547.847839][ C0] RSP: 0018:ffffc900030efa68 EFLAGS: 00040202 [ 547.847852][ C0] RAX: ffffffff83e43101 RBX: 0000000000000010 RCX: 0000000000000002 [ 547.847863][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc900030efce0 [ 547.847874][ C0] RBP: 0000000000000000 R08: 00002000000001c0 R09: 1ffff9200061df9d [ 547.847885][ C0] R10: dffffc0000000000 R11: fffff5200061df9e R12: 00007ffffffff000 [ 547.847898][ C0] R13: 0000200000000310 R14: ffffc900030efce0 R15: 0000200000000300 [ 547.847916][ C0] ? _copy_from_user+0x21/0x170 [ 547.847940][ C0] [ 547.847944][ C0] [ 547.847949][ C0] _copy_from_user+0xfa/0x170 [ 547.847968][ C0] iovec_from_user+0x142/0x370 [ 547.847992][ C0] __import_iovec+0x70/0x490 [ 547.848018][ C0] import_iovec+0x6f/0xa0 [ 547.848039][ C0] ___sys_sendmsg+0x1fd/0x2e0 [ 547.848065][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 547.848094][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 547.848135][ C0] __se_sys_sendmsg+0x1af/0x290 [ 547.848154][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 547.848170][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 547.848200][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 547.848221][ C0] do_syscall_64+0x4c/0xa0 [ 547.848235][ C0] ? clear_bhb_loop+0x30/0x80 [ 547.848250][ C0] ? clear_bhb_loop+0x30/0x80 [ 547.848267][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.848283][ C0] RIP: 0033:0x7f47d28c8e59 [ 547.848297][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.848310][ C0] RSP: 002b:00007f47d0b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.848325][ C0] RAX: ffffffffffffffda RBX: 00007f47d2b41fa0 RCX: 00007f47d28c8e59 [ 547.848336][ C0] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 547.848346][ C0] RBP: 00007f47d295ed6f R08: 0000000000000000 R09: 0000000000000000 [ 547.848356][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.848365][ C0] R13: 00007f47d2b42038 R14: 00007f47d2b41fa0 R15: 00007fff45043648 [ 547.848392][ C0] [ 549.359245][ T4231] Bluetooth: hci3: command 0x0406 tx timeout