last executing test programs: 13.856485471s ago: executing program 1 (id=4773): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) close(r3) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffff46e5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000700)={'wlan0\x00', @random}) sendmsg$kcm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602010000000e000a0010000000026e00001294", 0x2e}], 0x1}, 0x80840) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x8c00, 0x0) close(r10) ioctl$TUNSETLINK(r9, 0x400454cd, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000a00)) 13.534506593s ago: executing program 1 (id=4776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6cc", 0xd7}], 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) close(0x3) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r6, r2, 0x23, 0x17, r0, @void, @value=r4}, 0x20) 12.336797074s ago: executing program 1 (id=4782): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x100109, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x6, 0x4, &(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000004a80)='GPL\x00', 0x4, 0x1076, &(0x7f0000004ac0)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0) 11.989307789s ago: executing program 1 (id=4783): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b4000020000000007910480000000000710434000000000095000000"], &(0x7f00000009c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 11.754434033s ago: executing program 1 (id=4786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xef7a8e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff00"], 0xfdef) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x6004, 0x0, 0xfffffffd, 0x2, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000640)=@hci={0x1f, 0x1, 0x2}, 0x80, 0x0}, 0x40000) (async) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000840), 0x90) (async) socket$kcm(0x15, 0x5, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) socketpair(0x1, 0x1, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000580)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) (async) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[], 0x1d8}, 0x20008004) (async) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000780)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r2, &(0x7f0000000800), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x14}}}}], 0x20}, 0xe900) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8001}, 0x8) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000ff010000feffffff00040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ff00"/28], 0x48) socketpair(0x10, 0x3, 0x9, &(0x7f0000000540)) 10.974027092s ago: executing program 1 (id=4790): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="e169125748220018000000001811000000400000a12a56d0bc0c8a6664de3d3f45bdbab9315e487a68e599a066ce7430179d7f9fabc210abbc0f95390d059b23199a44d9e5b1b3f75615eb010703d1517a179ad8a306aa089362b715886e405cecd52248ed1f06b23379c0521048968952dfe25a4773356741c7ced37ee6fb1d2ecfa620e0d6d174ee3498a3b5ddfcc2dd3f055fb7728a3feeccd2addede53491f8fd03802c255f03e8f5d66aa41fbb584431a0cad5c4c26fb50691c9b6204cbf199c4053ebe9105f5665189f77d56fe3e4b1bab0ce7847e9f3fba11b2a0a7b5db4590d6fc02d9c32450c1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r4, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="120000002000", @ANYRES32=r5, @ANYBLOB="234cc895eb2bf558d7ccf12f9daebb1d41d15052c218d0ed6f4ecb470b6996dfaf22e3003eee51ba171881afa9374bbda25dcc1be5747e70eec56cab8d15044d75c862f8bc23d1c001e582293183610f7424569cdcb2f987cba5ce8311c90195d6976b678ceb891df5fe9857c4452fc07b6d275438eb9eac7fe101dabd29b226d18f8d480d28d5ba2a11c7773f6f284454e682ce4afbd2627c71580818c38b6f4822ebdbb85c43762718f9b06c5e960bcbfd870013bc41debfe6c3d70e9d8432382730d16316f4408fdd0da9ab4cc074ea0e75cd262d9d76e6fb69", @ANYRES32, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x27, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x31e8aeae}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xbd}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000800)='GPL\x00', 0xfffffffe, 0xb1, &(0x7f0000000840)=""/177, 0x40f00, 0x28, '\x00', r6, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x3, 0xc, 0x4, 0xadd}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x4, 0x3, 0x9, 0xc}, {0x2, 0x5, 0x8, 0x9}, {0x4, 0x3, 0x1, 0x9}, {0x0, 0x3, 0x3, 0x3}, {0x0, 0x1, 0x7, 0x7}, {0x5, 0x4, 0xb, 0xb}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001240)={0x80000001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, r5, 0x12, 0x20, 0x0, @void, @void, @void, @value=r7}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000680)={'wlan1\x00', @random="000500000020"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 7.03393751s ago: executing program 2 (id=4803): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x5b) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401c0d0}, 0x4000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xffffffffffffffff, 0x100}, 0x12018, 0x32, 0x43a1bdf6, 0x1, 0xdc56, 0x9, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310f, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="e03f020033000b35d25a806c8c6f94f91524fc6010000a", 0x17}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="a5", 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000800)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)='@', 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="18130a00556a000084000000000000007208000000000000"], 0x18}, 0x41) socketpair(0x23, 0x5, 0x1, 0x0) 6.721728871s ago: executing program 2 (id=4804): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x3, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xb, &(0x7f0000000d80)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000ec0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x800, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x800, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956", 0x15}, {0x0}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000500000000000013020000000000000000615f2500bb43f37a7c4d86853f9b2790d984fa7d7c188e27a32beff37d351b46ac115754ad86fa54971e216b5e82db11137cba91c4c6564cfce765437574b1dc056583ae4e559691ee44845a8c82f4714534a270e69a0042b15b87b5b4a1056e4b6ffe57a09c1c24edb9783338a68434304cab32696eda69b82815dcea3329ad77c6b418"], 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x35200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x6, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18200000", @ANYRES32=r1, @ANYBLOB="00000000040000000000000000000000180200000a0000010000000001000000bfa200000000000007020000c0ffffff224b5169b66ecfb3b7040000000000008500000045000000950000000000000085200000050000008510000003000000"], &(0x7f0000000500)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0xfffffffffffffcd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb110018"], 0x0, 0x2b, 0x0, 0x9}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000580)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[], 0xfe33) sendmsg(r7, &(0x7f0000000640)={&(0x7f0000000680)=@un=@file={0x0, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, 0x0}, 0x24040000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.297021076s ago: executing program 3 (id=4807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf00, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.773207258s ago: executing program 3 (id=4809): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) 4.501504906s ago: executing program 2 (id=4810): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000000a00)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r4, 0x6, 0x4, &(0x7f00000002c0), 0x4) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='cpu>\t\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000240)='cpu>\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x275f7}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x7d, &(0x7f00000006c0)=[{&(0x7f0000000700)="1400000028004b05d260027960b70d0003000900", 0x14}], 0x1}, 0x24000000) 3.821076244s ago: executing program 3 (id=4813): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xffffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r2}, 0x38) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000500)=r1, 0x4) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000580), 0x43) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="ebffffffffffffff1000000000030000000027aad9d5d2484413588683c1de986d771b5bfdc0f0de8636c9419fc3f9b87195a190bca56a7872e52d985e6eb790ef6ca6c9848c033dcbf556d1379bc392a53f00b75b993752c100"/101, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f00000006c0)}, 0x20) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000700), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f00000007c0)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x40000000000, 0x30080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x506}, 0x108092, 0xac5d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000a40)=""/76, 0x5, 0x0, 0x30, 0xa0, &(0x7f0000000100)="9c01bd6f9a6028c80db6c65dcb0ff2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000000ac0)="5b5211ec5fa5064aa88504a4ac7f4b62030e6715dedc7ca551f742569e90a9bddb4ef7e2d514de0288b0dbd92991509f9bada3959ffcd6373433adc4a92d4169d0ce1345e4a9ba5dd227f7ca193b2bbda1803daa7fc7b6bb71310e9de4ec19514724bea55b4b0da0f51b289da4e4ee5382b11960ae4f43103f310d03911450c35b9917ac1996d7a8aba3d199234f29424e13c3d1b5b69067b0d81ba055d91ee2", 0x0, 0x0, 0x13}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000b80)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f0000000bc0)={&(0x7f0000000c00)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000cc0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000d00)) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.910804466s ago: executing program 2 (id=4814): perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000"], 0x50) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000b80)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="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", 0x4f6}, {&(0x7f0000001100)}], 0x2, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x1}, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'pimreg0\x00', 0x7c2}) r4 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000980)={0x0, 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000017c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r6, 0x5, 0xe, 0x0, &(0x7f0000001880)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x6, &(0x7f00000006c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f00000009c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910f59875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b000000"], 0xfdef) 2.238969524s ago: executing program 0 (id=4816): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8002, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.066269492s ago: executing program 3 (id=4817): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a80)={0xffffffffffffffff, 0x0}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000740)={0x3, 0x80, 0x5, 0x4, 0x66, 0x4, 0x0, 0x4, 0x12, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x1, @perf_config_ext={0x3ed, 0x7}, 0x100, 0xaf0, 0x0, 0x9, 0x1, 0x9, 0x9, 0x0, 0x1, 0x0, 0xeb}, 0xffffffffffffffff, 0x8, r2, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xe, 0x80000001, 0x3, 0x10001, r1, 0x3, '\x00', 0x0, r2, 0x0, 0x3, 0x1, 0x2, @void, @value, @value=r3}, 0x50) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="b7", 0x1}], 0x1}, 0x40080c0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) 2.020086306s ago: executing program 0 (id=4818): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="2e00000010008188040f46ecdb4cb9cca7480ef431a1ff00e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 1.649055354s ago: executing program 0 (id=4819): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000c00)={&(0x7f0000000c40)=@in6={0x2, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x41, 0x1}}], 0x18}, 0x40) 1.444230345s ago: executing program 0 (id=4820): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) 1.39043873s ago: executing program 2 (id=4821): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000002c0), 0x4) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x10002) (async) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e618294938037e70e4509c5bb515e456df3a53e030d4090003f4b051c0c25135cec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008800) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f00000000c0)=""/2, 0x2}], 0x2, &(0x7f0000000300)=""/51, 0x33}, 0x10020) (async) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) (async) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000002600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a00)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.053278244s ago: executing program 0 (id=4822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x3b00, 0x0, 0x0, 0x0, 0x2}, 0x48) 970.697952ms ago: executing program 0 (id=4823): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00') close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="39000000140081ae001b2c000500015601618575e285af0180007a1b31d569d9ae52704806000000ffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) 896.51012ms ago: executing program 3 (id=4824): socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x6d5, 0xffffffff, 0x20008, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x8}, 0x50) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x3, 0x10, &(0x7f0000002200)=ANY=[@ANYBLOB="18050000000000000100000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000002280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 29.240298ms ago: executing program 3 (id=4825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc46, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x316}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x33, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7fff) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) 0s ago: executing program 2 (id=4826): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141042, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000000)={r0}) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x57, 0x10, &(0x7f0000001600), 0xffffffffffffffc9}, 0x48) r6 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xd, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="b400000000000000611478000000000005000000000000009500000000000000930b2a45123042ec2ac3a14b996ee0513324ab04629180f1e3f4a067df2d440218fba1452e2a5101ac5c9e2f78c2bb79be4641ca7ec8dbbe12c3e0d218e77bba902d9db585a837dd53c906ae8838e9"], &(0x7f0000001900)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001940)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xee, 0x5, 0x40, 0xa, 0x0, 0x40000000000, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1c541, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x3}, 0x2090, 0x2, 0x0, 0x4, 0x10, 0x7, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, r6, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000001680)=r5, 0x4) sendmsg$inet(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)="fa82", 0x3e80}], 0x53}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={&(0x7f00000000c0), 0x6e, 0x0}, 0x0) syz_clone(0x20201000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0xf00, &(0x7f00000009c0)=[{&(0x7f0000000a00)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): T18674] netlink: 'syz.1.4060': attribute type 10 has an invalid length. [ 805.505920][T18678] netlink: 'syz.2.4062': attribute type 28 has an invalid length. [ 808.884617][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.892339][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.078228][T18717] netlink: 'syz.1.4074': attribute type 10 has an invalid length. [ 809.097358][T18720] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.4075'. [ 809.135695][T18720] openvswitch: netlink: Flow key attr not present in new flow. [ 809.408987][T18725] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 809.550365][T18725] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 809.559106][T18727] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 809.570914][T18724] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 809.594221][T18727] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 809.611526][T18725] netlink: 'syz.3.4076': attribute type 29 has an invalid length. [ 811.009687][T18737] netlink: 'syz.0.4079': attribute type 28 has an invalid length. [ 811.060938][T18734] netlink: 'syz.1.4080': attribute type 10 has an invalid length. [ 811.092714][T18734] team0: Device vxcan1 is of different type [ 811.532439][T18751] netlink: 'syz.3.4085': attribute type 10 has an invalid length. [ 811.713862][T18760] FAULT_INJECTION: forcing a failure. [ 811.713862][T18760] name failslab, interval 1, probability 0, space 0, times 0 [ 811.803976][T18760] CPU: 0 PID: 18760 Comm: syz.2.4089 Not tainted syzkaller #0 [ 811.811540][T18760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 811.821686][T18760] Call Trace: [ 811.825008][T18760] [ 811.827980][T18760] dump_stack_lvl+0x18c/0x250 [ 811.832728][T18760] ? show_regs_print_info+0x20/0x20 [ 811.838028][T18760] ? load_image+0x420/0x420 [ 811.842596][T18760] ? __might_sleep+0xe0/0xe0 [ 811.847253][T18760] ? __lock_acquire+0x7eb0/0x7eb0 [ 811.852335][T18760] should_fail_ex+0x394/0x4c0 [ 811.857108][T18760] should_failslab+0x9/0x20 [ 811.861662][T18760] slab_pre_alloc_hook+0x59/0x300 [ 811.866740][T18760] ? sk_prot_alloc+0xe7/0x210 [ 811.871476][T18760] ? sk_prot_alloc+0xe7/0x210 [ 811.876220][T18760] __kmem_cache_alloc_node+0x53/0x260 [ 811.881645][T18760] ? sk_prot_alloc+0xe7/0x210 [ 811.886380][T18760] __kmalloc+0xa7/0x240 [ 811.890606][T18760] sk_prot_alloc+0xe7/0x210 [ 811.895166][T18760] ? sk_alloc+0x24/0x350 [ 811.899467][T18760] sk_alloc+0x3a/0x350 [ 811.903599][T18760] ? bpf_ctx_init+0x154/0x190 [ 811.908335][T18760] bpf_prog_test_run_skb+0x371/0x18f0 [ 811.913814][T18760] ? __fget_files+0x28/0x460 [ 811.918470][T18760] ? __fget_files+0x3fc/0x460 [ 811.923230][T18760] ? cpu_online+0x60/0x60 [ 811.927619][T18760] bpf_prog_test_run+0x31f/0x390 [ 811.932624][T18760] __sys_bpf+0x49d/0x890 [ 811.936923][T18760] ? bpf_link_show_fdinfo+0x560/0x560 [ 811.942368][T18760] ? lock_chain_count+0x20/0x20 [ 811.947289][T18760] __x64_sys_bpf+0x7c/0x90 [ 811.951762][T18760] do_syscall_64+0x55/0xb0 [ 811.956273][T18760] ? clear_bhb_loop+0x40/0x90 [ 811.961006][T18760] ? clear_bhb_loop+0x40/0x90 [ 811.965754][T18760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.971714][T18760] RIP: 0033:0x7fb306f9f559 [ 811.976185][T18760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.995866][T18760] RSP: 002b:00007fb3051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.004353][T18760] RAX: ffffffffffffffda RBX: 00007fb307226090 RCX: 00007fb306f9f559 [ 812.012487][T18760] RDX: 0000000000000050 RSI: 0000200000000dc0 RDI: 000000000000000a [ 812.020551][T18760] RBP: 00007fb3051f6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.028579][T18760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.036632][T18760] R13: 00007fb307226128 R14: 00007fb307226090 R15: 00007ffe28553518 [ 812.044685][T18760] [ 812.157652][T18765] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4090'. [ 812.167385][T18765] openvswitch: netlink: Key type 29 is not supported [ 812.254653][T18766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4091'. [ 812.587212][T18783] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4096'. [ 813.344252][T18810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4108'. [ 814.579478][T18830] validate_nla: 5 callbacks suppressed [ 814.601490][T18830] netlink: 'syz.2.4113': attribute type 10 has an invalid length. [ 814.829138][T18840] netlink: 'syz.3.4118': attribute type 19 has an invalid length. [ 814.837603][T18840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4118'. [ 816.059740][T18857] FAULT_INJECTION: forcing a failure. [ 816.059740][T18857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.082598][T18857] CPU: 1 PID: 18857 Comm: syz.0.4123 Not tainted syzkaller #0 [ 816.090134][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 816.100236][T18857] Call Trace: [ 816.103558][T18857] [ 816.106535][T18857] dump_stack_lvl+0x18c/0x250 [ 816.111283][T18857] ? show_regs_print_info+0x20/0x20 [ 816.116540][T18857] ? load_image+0x420/0x420 [ 816.121106][T18857] ? __might_fault+0xaa/0x120 [ 816.125853][T18857] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.130935][T18857] ? lockdep_hardirqs_on+0x98/0x150 [ 816.136187][T18857] should_fail_ex+0x394/0x4c0 [ 816.140931][T18857] _copy_from_user+0x2f/0xe0 [ 816.145582][T18857] ___sys_recvmsg+0x174/0x590 [ 816.150320][T18857] ? __sys_recvmsg+0x2a0/0x2a0 [ 816.155158][T18857] ? trace_call_bpf+0xc3/0x6c0 [ 816.159978][T18857] ? trace_call_bpf+0x5e9/0x6c0 [ 816.164899][T18857] ? __fget_files+0x3fc/0x460 [ 816.169662][T18857] __x64_sys_recvmsg+0x21e/0x2f0 [ 816.174672][T18857] ? ___sys_recvmsg+0x590/0x590 [ 816.179597][T18857] ? syscall_enter_from_user_mode+0x2e/0x80 [ 816.185552][T18857] do_syscall_64+0x55/0xb0 [ 816.190067][T18857] ? clear_bhb_loop+0x40/0x90 [ 816.194832][T18857] ? clear_bhb_loop+0x40/0x90 [ 816.199566][T18857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.205549][T18857] RIP: 0033:0x7ffa7d39f559 [ 816.210014][T18857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.229685][T18857] RSP: 002b:00007ffa7e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 816.238171][T18857] RAX: ffffffffffffffda RBX: 00007ffa7d625fa0 RCX: 00007ffa7d39f559 [ 816.246203][T18857] RDX: 0000000000000000 RSI: 0000200000001b80 RDI: 0000000000000009 [ 816.254269][T18857] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 816.262298][T18857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.270316][T18857] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 816.278411][T18857] [ 816.416781][T18862] netlink: 'syz.3.4125': attribute type 10 has an invalid length. [ 818.094120][T18896] netlink: 'syz.2.4136': attribute type 25 has an invalid length. [ 818.128084][T18896] netlink: 'syz.2.4136': attribute type 25 has an invalid length. [ 818.182678][T18895] netlink: 'syz.0.4137': attribute type 10 has an invalid length. [ 818.666570][T18907] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4140'. [ 818.897316][T18906] netlink: 'syz.0.4141': attribute type 10 has an invalid length. [ 819.716161][T18923] netlink: 'syz.0.4144': attribute type 12 has an invalid length. [ 819.743159][T18923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4144'. [ 819.873048][T18931] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4146'. [ 820.280604][T18937] netlink: 'syz.0.4149': attribute type 10 has an invalid length. [ 821.069035][T18950] netlink: 'syz.2.4153': attribute type 21 has an invalid length. [ 821.088169][T18950] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4153'. [ 821.205043][T18956] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4154'. [ 821.932169][T18968] netlink: 'syz.3.4159': attribute type 10 has an invalid length. [ 822.045349][T18975] netlink: 'syz.2.4161': attribute type 9 has an invalid length. [ 822.056160][T18975] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4161'. [ 822.552432][T18989] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4167'. [ 822.577478][T18989] netlink: 'syz.0.4167': attribute type 29 has an invalid length. [ 822.635010][T18991] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4168'. [ 822.916176][T18998] netlink: 'syz.2.4171': attribute type 3 has an invalid length. [ 822.932450][T18998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4171'. [ 823.069713][T18996] netlink: 'syz.0.4170': attribute type 10 has an invalid length. [ 823.467944][T19004] netlink: 'syz.1.4173': attribute type 10 has an invalid length. [ 823.488990][T19004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4173'. [ 823.653246][T19009] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4175'. [ 823.766380][T19013] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4177'. [ 824.113944][T19021] netlink: 'syz.2.4181': attribute type 28 has an invalid length. [ 824.561078][T19032] team0: Port device veth0_to_hsr added [ 825.446531][T19051] __nla_validate_parse: 1 callbacks suppressed [ 825.446550][T19051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4194'. [ 826.167481][T19069] validate_nla: 3 callbacks suppressed [ 826.167517][T19069] netlink: 'syz.1.4196': attribute type 10 has an invalid length. [ 826.499101][T19089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4204'. [ 826.746083][T19093] rxe_eth0 speed is unknown, defaulting to 1000 [ 827.015787][T19106] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4209'. [ 827.069354][T19109] FAULT_INJECTION: forcing a failure. [ 827.069354][T19109] name failslab, interval 1, probability 0, space 0, times 0 [ 827.082730][T19109] CPU: 1 PID: 19109 Comm: syz.2.4210 Not tainted syzkaller #0 [ 827.090291][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 827.100390][T19109] Call Trace: [ 827.103725][T19109] [ 827.106695][T19109] dump_stack_lvl+0x18c/0x250 [ 827.111417][T19109] ? sctp_sendmsg+0x1519/0x27b0 [ 827.116365][T19109] ? ___sys_sendmsg+0x2a6/0x360 [ 827.121270][T19109] ? show_regs_print_info+0x20/0x20 [ 827.126517][T19109] ? load_image+0x420/0x420 [ 827.131071][T19109] should_fail_ex+0x394/0x4c0 [ 827.135812][T19109] should_failslab+0x9/0x20 [ 827.140362][T19109] slab_pre_alloc_hook+0x59/0x300 [ 827.145433][T19109] ? sctp_add_bind_addr+0x8c/0x360 [ 827.150581][T19109] __kmem_cache_alloc_node+0x53/0x260 [ 827.155985][T19109] ? sctp_add_bind_addr+0x8c/0x360 [ 827.161239][T19109] kmalloc_trace+0x2a/0xe0 [ 827.165703][T19109] sctp_add_bind_addr+0x8c/0x360 [ 827.170682][T19109] sctp_copy_local_addr_list+0x31b/0x4e0 [ 827.176443][T19109] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 827.182207][T19109] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 827.188370][T19109] ? sctp_v4_is_any+0x35/0x60 [ 827.193084][T19109] ? sctp_copy_one_addr+0x8c/0x350 [ 827.198238][T19109] sctp_bind_addr_copy+0xb3/0x3c0 [ 827.203303][T19109] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 827.209675][T19109] sctp_connect_new_asoc+0x2f9/0x6a0 [ 827.215006][T19109] ? __sctp_connect+0xd80/0xd80 [ 827.219902][T19109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 827.225315][T19109] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 827.231024][T19109] ? security_sctp_bind_connect+0x89/0xb0 [ 827.236792][T19109] sctp_sendmsg+0x1519/0x27b0 [ 827.241523][T19109] ? sctp_getsockopt+0xb60/0xb60 [ 827.246504][T19109] ? aa_sk_perm+0x7bb/0x8e0 [ 827.251046][T19109] ? aa_af_perm+0x330/0x330 [ 827.255590][T19109] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 827.262590][T19109] ? sock_rps_record_flow+0x19/0x3f0 [ 827.267997][T19109] ? inet_sendmsg+0xce/0x2a0 [ 827.272637][T19109] ? inet_send_prepare+0x250/0x250 [ 827.277797][T19109] ____sys_sendmsg+0x61b/0x980 [ 827.282602][T19109] ? __asan_memset+0x22/0x40 [ 827.287234][T19109] ? __sys_sendmsg_sock+0x30/0x30 [ 827.292290][T19109] ? __import_iovec+0x5f2/0x850 [ 827.297197][T19109] ? import_iovec+0x73/0xa0 [ 827.301866][T19109] ___sys_sendmsg+0x2a6/0x360 [ 827.306616][T19109] ? __sys_sendmsg+0x2b0/0x2b0 [ 827.311444][T19109] ? trace_call_bpf+0xc3/0x6c0 [ 827.316267][T19109] __se_sys_sendmsg+0x1d0/0x2c0 [ 827.321155][T19109] ? perf_trace_preemptirq_template+0x269/0x330 [ 827.327471][T19109] ? __x64_sys_sendmsg+0x80/0x80 [ 827.332634][T19109] ? lockdep_hardirqs_on+0x98/0x150 [ 827.337958][T19109] do_syscall_64+0x55/0xb0 [ 827.342412][T19109] ? clear_bhb_loop+0x40/0x90 [ 827.347124][T19109] ? clear_bhb_loop+0x40/0x90 [ 827.351866][T19109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.357796][T19109] RIP: 0033:0x7fb306f9f559 [ 827.362245][T19109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.381979][T19109] RSP: 002b:00007fb307d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.390455][T19109] RAX: ffffffffffffffda RBX: 00007fb307225fa0 RCX: 00007fb306f9f559 [ 827.398472][T19109] RDX: 0000000000008800 RSI: 0000200000000380 RDI: 0000000000000003 [ 827.406770][T19109] RBP: 00007fb307d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 827.414772][T19109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.422950][T19109] R13: 00007fb307226038 R14: 00007fb307225fa0 R15: 00007ffe28553518 [ 827.430977][T19109] [ 827.587078][T19113] netlink: 'syz.2.4211': attribute type 21 has an invalid length. [ 827.598678][T19113] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.613834][T19113] IPv6: Can't replace route, no match found [ 827.641417][T19113] netlink: 'syz.2.4211': attribute type 10 has an invalid length. [ 827.733904][T19113] team0: Device wg1 is of different type [ 827.977738][T19126] netlink: 'syz.1.4215': attribute type 10 has an invalid length. [ 828.025974][T19126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4215'. [ 828.046897][T19124] netlink: 'syz.2.4214': attribute type 10 has an invalid length. [ 828.085076][T19128] netlink: 'syz.3.4216': attribute type 5 has an invalid length. [ 828.136961][T19128] delete_channel: no stack [ 828.154152][T19128] delete_channel: no stack [ 828.899647][T19141] netlink: 'syz.2.4219': attribute type 10 has an invalid length. [ 829.612969][T19153] netlink: 'syz.0.4223': attribute type 46 has an invalid length. [ 829.662310][T19153] netlink: 'syz.0.4223': attribute type 46 has an invalid length. [ 829.812546][T19153] netlink: 'syz.0.4223': attribute type 2 has an invalid length. [ 829.838554][T19153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4223'. [ 829.922167][T19157] team0: Port device hsr_slave_0 added [ 830.084677][T19161] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4225'. [ 830.132794][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.768525][T19173] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4230'. [ 831.361137][T19184] validate_nla: 4 callbacks suppressed [ 831.361159][T19184] netlink: 'syz.0.4231': attribute type 10 has an invalid length. [ 832.141674][T19197] netlink: 'syz.0.4238': attribute type 10 has an invalid length. [ 832.568216][T19201] rxe_eth0 speed is unknown, defaulting to 1000 [ 832.819288][T19209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4242'. [ 833.589942][T19218] FAULT_INJECTION: forcing a failure. [ 833.589942][T19218] name failslab, interval 1, probability 0, space 0, times 0 [ 833.602707][T19218] CPU: 1 PID: 19218 Comm: syz.3.4244 Not tainted syzkaller #0 [ 833.610221][T19218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 833.620333][T19218] Call Trace: [ 833.623662][T19218] [ 833.626636][T19218] dump_stack_lvl+0x18c/0x250 [ 833.631405][T19218] ? show_regs_print_info+0x20/0x20 [ 833.636688][T19218] ? load_image+0x420/0x420 [ 833.641245][T19218] should_fail_ex+0x394/0x4c0 [ 833.645958][T19218] should_failslab+0x9/0x20 [ 833.650488][T19218] slab_pre_alloc_hook+0x59/0x300 [ 833.655555][T19218] kmem_cache_alloc_node+0x5e/0x320 [ 833.660784][T19218] ? __alloc_skb+0x103/0x2c0 [ 833.665417][T19218] __alloc_skb+0x103/0x2c0 [ 833.669877][T19218] ip_frag_next+0xcd/0xb00 [ 833.674332][T19218] ? ip_skb_dst_mtu+0x18d/0xb70 [ 833.679216][T19218] ? ip_skb_dst_mtu+0x922/0xb70 [ 833.684098][T19218] ip_do_fragment+0x851/0x17f0 [ 833.688909][T19218] ? ip_fragment+0x210/0x210 [ 833.693530][T19218] ? ip_skb_dst_mtu+0x922/0xb70 [ 833.698504][T19218] ip_output+0x29f/0x440 [ 833.702780][T19218] ? ip_output+0x5a/0x440 [ 833.707143][T19218] iptunnel_xmit+0x58a/0xae0 [ 833.711798][T19218] ip_tunnel_xmit+0x1cf7/0x2560 [ 833.716697][T19218] ? ip4_dst_hoplimit+0x380/0x380 [ 833.721862][T19218] ? skb_push+0x8e/0xe0 [ 833.726057][T19218] ipgre_xmit+0x7eb/0xb70 [ 833.730426][T19218] dev_hard_start_xmit+0x269/0x790 [ 833.735584][T19218] __dev_queue_xmit+0x1d1e/0x3a30 [ 833.740680][T19218] ? __dev_queue_xmit+0x6d1/0x3a30 [ 833.745836][T19218] ? pskb_expand_head+0x17a/0x1150 [ 833.750975][T19218] ? pskb_expand_head+0x17a/0x1150 [ 833.756113][T19218] ? netdev_core_pick_tx+0x370/0x370 [ 833.761453][T19218] ? skb_release_data+0x1de/0x7f0 [ 833.766535][T19218] ? __bpf_redirect+0x4d1/0xdf0 [ 833.771424][T19218] __bpf_tx_skb+0x181/0x260 [ 833.776052][T19218] bpf_clone_redirect+0x315/0x4a0 [ 833.781124][T19218] bpf_prog_208b094576c80b22+0x5e/0x63 [ 833.786625][T19218] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 833.792638][T19218] ? __lock_acquire+0x7eb0/0x7eb0 [ 833.797700][T19218] ? lock_chain_count+0x20/0x20 [ 833.802588][T19218] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 833.808601][T19218] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 833.813923][T19218] ? lock_chain_count+0x20/0x20 [ 833.818804][T19218] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 833.825091][T19218] ? __local_bh_disable_ip+0x108/0x1a0 [ 833.830593][T19218] ? __cant_sleep+0x220/0x220 [ 833.835299][T19218] ? __local_bh_enable_ip+0x13a/0x1c0 [ 833.840702][T19218] ? _local_bh_enable+0xa0/0xa0 [ 833.845587][T19218] ? bpf_test_timer_continue+0x137/0x3f0 [ 833.851252][T19218] ? bpf_test_run+0x174/0x870 [ 833.855957][T19218] bpf_test_run+0x2df/0x870 [ 833.860508][T19218] ? bpf_test_run+0x174/0x870 [ 833.865214][T19218] ? dst_hold+0x70/0x70 [ 833.869407][T19218] ? eth_get_headlen+0x210/0x210 [ 833.874377][T19218] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 833.879804][T19218] ? cpu_online+0x60/0x60 [ 833.884173][T19218] bpf_prog_test_run+0x31f/0x390 [ 833.889150][T19218] __sys_bpf+0x49d/0x890 [ 833.893425][T19218] ? bpf_link_show_fdinfo+0x560/0x560 [ 833.898845][T19218] ? lock_chain_count+0x20/0x20 [ 833.903736][T19218] __x64_sys_bpf+0x7c/0x90 [ 833.908184][T19218] do_syscall_64+0x55/0xb0 [ 833.912634][T19218] ? clear_bhb_loop+0x40/0x90 [ 833.917344][T19218] ? clear_bhb_loop+0x40/0x90 [ 833.922057][T19218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.927984][T19218] RIP: 0033:0x7f9931d9f559 [ 833.932427][T19218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.952235][T19218] RSP: 002b:00007f9932cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 833.960675][T19218] RAX: ffffffffffffffda RBX: 00007f9932025fa0 RCX: 00007f9931d9f559 [ 833.968762][T19218] RDX: 0000000000000048 RSI: 0000200000001340 RDI: 000000000000000a [ 833.976786][T19218] RBP: 00007f9932cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 833.984803][T19218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.992811][T19218] R13: 00007f9932026038 R14: 00007f9932025fa0 R15: 00007ffdbb8f9d88 [ 834.000924][T19218] [ 834.214874][T19224] delete_channel: no stack [ 834.485856][T19232] netlink: 'syz.0.4249': attribute type 10 has an invalid length. [ 834.973274][T19236] netlink: 'syz.3.4250': attribute type 10 has an invalid length. [ 835.063315][T19243] FAULT_INJECTION: forcing a failure. [ 835.063315][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 835.078450][T19243] CPU: 0 PID: 19243 Comm: syz.0.4253 Not tainted syzkaller #0 [ 835.086072][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 835.096201][T19243] Call Trace: [ 835.099523][T19243] [ 835.102505][T19243] dump_stack_lvl+0x18c/0x250 [ 835.107242][T19243] ? sctp_sendmsg+0x1519/0x27b0 [ 835.112151][T19243] ? ___sys_sendmsg+0x2a6/0x360 [ 835.117049][T19243] ? show_regs_print_info+0x20/0x20 [ 835.122309][T19243] ? load_image+0x420/0x420 [ 835.126882][T19243] should_fail_ex+0x394/0x4c0 [ 835.131631][T19243] should_failslab+0x9/0x20 [ 835.136178][T19243] slab_pre_alloc_hook+0x59/0x300 [ 835.141253][T19243] ? sctp_add_bind_addr+0x8c/0x360 [ 835.146422][T19243] __kmem_cache_alloc_node+0x53/0x260 [ 835.151852][T19243] ? sctp_add_bind_addr+0x8c/0x360 [ 835.157017][T19243] kmalloc_trace+0x2a/0xe0 [ 835.161498][T19243] sctp_add_bind_addr+0x8c/0x360 [ 835.166505][T19243] sctp_copy_local_addr_list+0x31b/0x4e0 [ 835.172238][T19243] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 835.178019][T19243] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 835.184237][T19243] ? sctp_v4_is_any+0x35/0x60 [ 835.188970][T19243] ? sctp_copy_one_addr+0x8c/0x350 [ 835.194140][T19243] sctp_bind_addr_copy+0xb3/0x3c0 [ 835.199223][T19243] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 835.205622][T19243] sctp_connect_new_asoc+0x2f9/0x6a0 [ 835.210979][T19243] ? __sctp_connect+0xd80/0xd80 [ 835.215893][T19243] ? __local_bh_enable_ip+0x13a/0x1c0 [ 835.221324][T19243] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 835.226929][T19243] ? security_sctp_bind_connect+0x89/0xb0 [ 835.232729][T19243] sctp_sendmsg+0x1519/0x27b0 [ 835.237664][T19243] ? sctp_getsockopt+0xb60/0xb60 [ 835.242659][T19243] ? aa_sk_perm+0x7bb/0x8e0 [ 835.247224][T19243] ? aa_af_perm+0x330/0x330 [ 835.251785][T19243] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 835.258296][T19243] ? sock_rps_record_flow+0x19/0x3f0 [ 835.263655][T19243] ? inet_sendmsg+0xce/0x2a0 [ 835.268330][T19243] ? inet_send_prepare+0x250/0x250 [ 835.273544][T19243] ____sys_sendmsg+0x61b/0x980 [ 835.278373][T19243] ? __asan_memset+0x22/0x40 [ 835.283030][T19243] ? __sys_sendmsg_sock+0x30/0x30 [ 835.288115][T19243] ? __import_iovec+0x5f2/0x850 [ 835.293042][T19243] ? import_iovec+0x73/0xa0 [ 835.297616][T19243] ___sys_sendmsg+0x2a6/0x360 [ 835.302348][T19243] ? get_pid_task+0x20/0x1e0 [ 835.307041][T19243] ? __sys_sendmsg+0x2b0/0x2b0 [ 835.311994][T19243] ? __lock_acquire+0x7eb0/0x7eb0 [ 835.317118][T19243] __se_sys_sendmsg+0x1d0/0x2c0 [ 835.322033][T19243] ? perf_trace_preemptirq_template+0x269/0x330 [ 835.328433][T19243] ? __x64_sys_sendmsg+0x80/0x80 [ 835.333444][T19243] ? lockdep_hardirqs_on+0x98/0x150 [ 835.338701][T19243] do_syscall_64+0x55/0xb0 [ 835.343174][T19243] ? clear_bhb_loop+0x40/0x90 [ 835.347911][T19243] ? clear_bhb_loop+0x40/0x90 [ 835.352654][T19243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.358604][T19243] RIP: 0033:0x7ffa7d39f559 [ 835.363071][T19243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.382730][T19243] RSP: 002b:00007ffa7e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.391200][T19243] RAX: ffffffffffffffda RBX: 00007ffa7d625fa0 RCX: 00007ffa7d39f559 [ 835.399232][T19243] RDX: 0000000000008040 RSI: 0000200000002700 RDI: 0000000000000004 [ 835.407252][T19243] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 835.415271][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.423297][T19243] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 835.431342][T19243] [ 835.704894][T19249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4254'. [ 835.878189][T19254] netlink: 'syz.2.4257': attribute type 10 has an invalid length. [ 835.936806][T19254] team0: Device vxcan1 is of different type [ 836.765022][T19265] netlink: 'syz.2.4259': attribute type 10 has an invalid length. [ 837.099294][T19279] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 837.288511][T19282] netlink: 'syz.1.4265': attribute type 3 has an invalid length. [ 837.314456][T19282] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4265'. [ 837.399657][T19285] netlink: 'syz.3.4266': attribute type 10 has an invalid length. [ 837.428474][T19278] netlink: 'syz.0.4263': attribute type 10 has an invalid length. [ 837.841504][T19291] netlink: 'syz.3.4268': attribute type 6 has an invalid length. [ 837.849432][T19291] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4268'. [ 837.952563][T19293] FAULT_INJECTION: forcing a failure. [ 837.952563][T19293] name failslab, interval 1, probability 0, space 0, times 0 [ 837.985709][T19293] CPU: 1 PID: 19293 Comm: syz.0.4269 Not tainted syzkaller #0 [ 837.993276][T19293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 838.003386][T19293] Call Trace: [ 838.006709][T19293] [ 838.009690][T19293] dump_stack_lvl+0x18c/0x250 [ 838.014430][T19293] ? sctp_sendmsg+0x1519/0x27b0 [ 838.019363][T19293] ? ___sys_sendmsg+0x2a6/0x360 [ 838.024303][T19293] ? show_regs_print_info+0x20/0x20 [ 838.029627][T19293] ? load_image+0x420/0x420 [ 838.034202][T19293] should_fail_ex+0x394/0x4c0 [ 838.038941][T19293] should_failslab+0x9/0x20 [ 838.043499][T19293] slab_pre_alloc_hook+0x59/0x300 [ 838.048583][T19293] ? sctp_add_bind_addr+0x8c/0x360 [ 838.053753][T19293] __kmem_cache_alloc_node+0x53/0x260 [ 838.059182][T19293] ? sctp_add_bind_addr+0x8c/0x360 [ 838.064433][T19293] kmalloc_trace+0x2a/0xe0 [ 838.068915][T19293] sctp_add_bind_addr+0x8c/0x360 [ 838.073934][T19293] sctp_copy_local_addr_list+0x31b/0x4e0 [ 838.079662][T19293] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 838.085528][T19293] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 838.091659][T19293] ? sctp_v4_is_any+0x35/0x60 [ 838.096381][T19293] ? sctp_copy_one_addr+0x8c/0x350 [ 838.101530][T19293] sctp_bind_addr_copy+0xb3/0x3c0 [ 838.106612][T19293] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 838.112986][T19293] sctp_connect_new_asoc+0x2f9/0x6a0 [ 838.118317][T19293] ? __sctp_connect+0xd80/0xd80 [ 838.123220][T19293] ? __local_bh_enable_ip+0x13a/0x1c0 [ 838.128646][T19293] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 838.134242][T19293] ? security_sctp_bind_connect+0x89/0xb0 [ 838.140015][T19293] sctp_sendmsg+0x1519/0x27b0 [ 838.144764][T19293] ? sctp_getsockopt+0xb60/0xb60 [ 838.149764][T19293] ? aa_sk_perm+0x7bb/0x8e0 [ 838.154304][T19293] ? aa_af_perm+0x330/0x330 [ 838.158866][T19293] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 838.165325][T19293] ? sock_rps_record_flow+0x19/0x3f0 [ 838.170645][T19293] ? inet_sendmsg+0xce/0x2a0 [ 838.175268][T19293] ? inet_send_prepare+0x250/0x250 [ 838.180436][T19293] ____sys_sendmsg+0x61b/0x980 [ 838.185254][T19293] ? __asan_memset+0x22/0x40 [ 838.189882][T19293] ? __sys_sendmsg_sock+0x30/0x30 [ 838.194943][T19293] ? __import_iovec+0x5f2/0x850 [ 838.199837][T19293] ? import_iovec+0x73/0xa0 [ 838.204414][T19293] ___sys_sendmsg+0x2a6/0x360 [ 838.209122][T19293] ? get_pid_task+0x20/0x1e0 [ 838.213757][T19293] ? __sys_sendmsg+0x2b0/0x2b0 [ 838.218575][T19293] ? __lock_acquire+0x7eb0/0x7eb0 [ 838.223670][T19293] __se_sys_sendmsg+0x1d0/0x2c0 [ 838.228555][T19293] ? __x64_sys_sendmsg+0x80/0x80 [ 838.233534][T19293] ? lockdep_hardirqs_on+0x98/0x150 [ 838.238782][T19293] do_syscall_64+0x55/0xb0 [ 838.243229][T19293] ? clear_bhb_loop+0x40/0x90 [ 838.247946][T19293] ? clear_bhb_loop+0x40/0x90 [ 838.252664][T19293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.258588][T19293] RIP: 0033:0x7ffa7d39f559 [ 838.263033][T19293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.282670][T19293] RSP: 002b:00007ffa7e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.291124][T19293] RAX: ffffffffffffffda RBX: 00007ffa7d625fa0 RCX: 00007ffa7d39f559 [ 838.299128][T19293] RDX: 0000000024004091 RSI: 0000200000000840 RDI: 0000000000000003 [ 838.307128][T19293] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 838.315126][T19293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 838.323124][T19293] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 838.331140][T19293] [ 838.427306][T19295] netlink: 'syz.2.4270': attribute type 10 has an invalid length. [ 838.850382][T19313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4277'. [ 838.859782][T19313] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4277'. [ 839.108637][T19319] netlink: 'syz.2.4279': attribute type 10 has an invalid length. [ 839.543202][T19332] netlink: 'syz.3.4282': attribute type 10 has an invalid length. [ 840.111824][T19347] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4289'. [ 840.291602][T19348] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 841.267614][T19379] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.4299'. [ 841.397930][T19384] tap0: tun_chr_ioctl cmd 1074025677 [ 841.420605][T19384] tap0: linktype set to 776 [ 841.425523][T19382] tap0: tun_chr_ioctl cmd 1074025677 [ 841.440229][T19382] tap0: linktype set to 776 [ 841.447544][T19383] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4301'. [ 843.749498][T19386] validate_nla: 2 callbacks suppressed [ 843.749519][T19386] netlink: 'syz.0.4302': attribute type 10 has an invalid length. [ 843.895860][T19409] FAULT_INJECTION: forcing a failure. [ 843.895860][T19409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.924777][T19409] CPU: 0 PID: 19409 Comm: syz.3.4310 Not tainted syzkaller #0 [ 843.932410][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 843.942601][T19409] Call Trace: [ 843.945961][T19409] [ 843.948945][T19409] dump_stack_lvl+0x18c/0x250 [ 843.953663][T19409] ? show_regs_print_info+0x20/0x20 [ 843.958914][T19409] ? load_image+0x420/0x420 [ 843.963449][T19409] ? __might_fault+0xaa/0x120 [ 843.968159][T19409] ? __lock_acquire+0x7eb0/0x7eb0 [ 843.973221][T19409] should_fail_ex+0x394/0x4c0 [ 843.977984][T19409] _copy_from_user+0x2f/0xe0 [ 843.982606][T19409] ___sys_recvmsg+0x174/0x590 [ 843.987331][T19409] ? __sys_recvmsg+0x2a0/0x2a0 [ 843.992138][T19409] ? ksys_write+0x1d2/0x260 [ 843.996697][T19409] ? __fget_files+0x3fc/0x460 [ 844.001427][T19409] __x64_sys_recvmsg+0x21e/0x2f0 [ 844.006408][T19409] ? ___sys_recvmsg+0x590/0x590 [ 844.011311][T19409] ? lockdep_hardirqs_on+0x98/0x150 [ 844.016541][T19409] do_syscall_64+0x55/0xb0 [ 844.020997][T19409] ? clear_bhb_loop+0x40/0x90 [ 844.025711][T19409] ? clear_bhb_loop+0x40/0x90 [ 844.030433][T19409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.036364][T19409] RIP: 0033:0x7f9931d9f559 [ 844.040808][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.060443][T19409] RSP: 002b:00007f9932cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 844.068934][T19409] RAX: ffffffffffffffda RBX: 00007f9932025fa0 RCX: 00007f9931d9f559 [ 844.076941][T19409] RDX: 0000000000000020 RSI: 0000200000000840 RDI: 0000000000000003 [ 844.084941][T19409] RBP: 00007f9932cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 844.092941][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.100946][T19409] R13: 00007f9932026038 R14: 00007f9932025fa0 R15: 00007ffdbb8f9d88 [ 844.108964][T19409] [ 844.401019][T19424] FAULT_INJECTION: forcing a failure. [ 844.401019][T19424] name failslab, interval 1, probability 0, space 0, times 0 [ 844.430223][T19424] CPU: 0 PID: 19424 Comm: syz.3.4314 Not tainted syzkaller #0 [ 844.437793][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 844.447912][T19424] Call Trace: [ 844.451238][T19424] [ 844.454215][T19424] dump_stack_lvl+0x18c/0x250 [ 844.458966][T19424] ? show_regs_print_info+0x20/0x20 [ 844.464246][T19424] ? load_image+0x420/0x420 [ 844.468838][T19424] ? __might_sleep+0xe0/0xe0 [ 844.473511][T19424] ? __lock_acquire+0x7eb0/0x7eb0 [ 844.478612][T19424] should_fail_ex+0x394/0x4c0 [ 844.483369][T19424] should_failslab+0x9/0x20 [ 844.487926][T19424] slab_pre_alloc_hook+0x59/0x300 [ 844.493008][T19424] kmem_cache_alloc_lru+0x4d/0x2c0 [ 844.498253][T19424] ? sock_alloc_inode+0x28/0xc0 [ 844.503157][T19424] sock_alloc_inode+0x28/0xc0 [ 844.507901][T19424] ? sockfs_init_fs_context+0xb0/0xb0 [ 844.513332][T19424] new_inode_pseudo+0x63/0x1d0 [ 844.518163][T19424] __sock_create+0x12d/0x940 [ 844.522829][T19424] ? __might_fault+0xaa/0x120 [ 844.527553][T19424] ? __might_fault+0xc6/0x120 [ 844.532281][T19424] __sys_socketpair+0x1c1/0x550 [ 844.537184][T19424] __x64_sys_socketpair+0x9b/0xb0 [ 844.542272][T19424] do_syscall_64+0x55/0xb0 [ 844.546739][T19424] ? clear_bhb_loop+0x40/0x90 [ 844.551469][T19424] ? clear_bhb_loop+0x40/0x90 [ 844.556195][T19424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.562138][T19424] RIP: 0033:0x7f9931d9f559 [ 844.566604][T19424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.586349][T19424] RSP: 002b:00007f9932cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 844.594832][T19424] RAX: ffffffffffffffda RBX: 00007f9932026090 RCX: 00007f9931d9f559 [ 844.602851][T19424] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000018 [ 844.610862][T19424] RBP: 00007f9932cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 844.618873][T19424] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 844.626891][T19424] R13: 00007f9932026128 R14: 00007f9932026090 R15: 00007ffdbb8f9d88 [ 844.634928][T19424] [ 844.651915][T19424] socket: no more sockets [ 845.016363][T19430] netlink: 'syz.1.4315': attribute type 10 has an invalid length. [ 845.220211][T19433] netlink: 'syz.3.4318': attribute type 10 has an invalid length. [ 845.261006][T19440] netlink: 'syz.0.4319': attribute type 10 has an invalid length. [ 845.270239][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.287142][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.346505][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.415273][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.459435][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.509022][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.548790][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.605517][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.655012][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.692679][T19433] netlink: 'syz.3.4318': attribute type 11 has an invalid length. [ 845.721489][T19433] netlink: 'syz.3.4318': attribute type 4 has an invalid length. [ 845.734227][T19433] netlink: 'syz.3.4318': attribute type 5 has an invalid length. [ 845.769843][T19433] netlink: 208544 bytes leftover after parsing attributes in process `syz.3.4318'. [ 846.073767][T19454] netlink: 'syz.3.4323': attribute type 21 has an invalid length. [ 846.087819][T19454] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4323'. [ 846.107820][T19454] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4323'. [ 846.277212][T19458] FAULT_INJECTION: forcing a failure. [ 846.277212][T19458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.290669][T19458] CPU: 0 PID: 19458 Comm: syz.3.4326 Not tainted syzkaller #0 [ 846.298195][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 846.308346][T19458] Call Trace: [ 846.311704][T19458] [ 846.314690][T19458] dump_stack_lvl+0x18c/0x250 [ 846.319440][T19458] ? show_regs_print_info+0x20/0x20 [ 846.324709][T19458] ? load_image+0x420/0x420 [ 846.329298][T19458] ? __lock_acquire+0x7eb0/0x7eb0 [ 846.334389][T19458] ? snprintf+0xe9/0x140 [ 846.338812][T19458] should_fail_ex+0x394/0x4c0 [ 846.343575][T19458] _copy_to_user+0x2f/0xa0 [ 846.348047][T19458] simple_read_from_buffer+0xe7/0x150 [ 846.353490][T19458] proc_fail_nth_read+0x1e8/0x260 [ 846.358585][T19458] ? proc_fault_inject_write+0x360/0x360 [ 846.364325][T19458] ? fsnotify_perm+0x271/0x5e0 [ 846.369241][T19458] ? proc_fault_inject_write+0x360/0x360 [ 846.374942][T19458] vfs_read+0x298/0x990 [ 846.379259][T19458] ? kernel_read+0x1e0/0x1e0 [ 846.383940][T19458] ? __fget_files+0x28/0x460 [ 846.388599][T19458] ? __fget_files+0x3fc/0x460 [ 846.393325][T19458] ? __fdget_pos+0x2a3/0x330 [ 846.397960][T19458] ? ksys_read+0x74/0x260 [ 846.402421][T19458] ksys_read+0x151/0x260 [ 846.406740][T19458] ? vfs_write+0x9a0/0x9a0 [ 846.411806][T19458] ? lockdep_hardirqs_on+0x98/0x150 [ 846.417042][T19458] do_syscall_64+0x55/0xb0 [ 846.421492][T19458] ? clear_bhb_loop+0x40/0x90 [ 846.426208][T19458] ? clear_bhb_loop+0x40/0x90 [ 846.431013][T19458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.437033][T19458] RIP: 0033:0x7f9931d5fd8e [ 846.441476][T19458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 846.461202][T19458] RSP: 002b:00007f9932cd8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 846.469664][T19458] RAX: ffffffffffffffda RBX: 00007f9932cd96c0 RCX: 00007f9931d5fd8e [ 846.477841][T19458] RDX: 000000000000000f RSI: 00007f9932cd90a0 RDI: 0000000000000005 [ 846.485842][T19458] RBP: 00007f9932cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 846.493849][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.502550][T19458] R13: 00007f9932026038 R14: 00007f9932025fa0 R15: 00007ffdbb8f9d88 [ 846.510593][T19458] [ 846.885116][T19467] netlink: 'syz.3.4328': attribute type 10 has an invalid length. [ 848.051295][T19474] netlink: 'syz.2.4338': attribute type 10 has an invalid length. [ 848.414143][T19480] netlink: 'syz.0.4331': attribute type 10 has an invalid length. [ 848.426944][T19480] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4331'. [ 848.438210][T19480] FAULT_INJECTION: forcing a failure. [ 848.438210][T19480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.474944][T19480] CPU: 0 PID: 19480 Comm: syz.0.4331 Not tainted syzkaller #0 [ 848.482510][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 848.492619][T19480] Call Trace: [ 848.495938][T19480] [ 848.498916][T19480] dump_stack_lvl+0x18c/0x250 [ 848.503678][T19480] ? show_regs_print_info+0x20/0x20 [ 848.508931][T19480] ? load_image+0x420/0x420 [ 848.513491][T19480] ? __might_fault+0xaa/0x120 [ 848.518229][T19480] ? __lock_acquire+0x7eb0/0x7eb0 [ 848.523322][T19480] should_fail_ex+0x394/0x4c0 [ 848.528098][T19480] _copy_from_user+0x2f/0xe0 [ 848.532817][T19480] kstrtouint_from_user+0xde/0x170 [ 848.537964][T19480] ? kstrtol_from_user+0x190/0x190 [ 848.543119][T19480] proc_fail_nth_write+0x8f/0x250 [ 848.548200][T19480] ? proc_fail_nth_read+0x260/0x260 [ 848.553438][T19480] ? proc_fail_nth_read+0x260/0x260 [ 848.558703][T19480] vfs_write+0x299/0x9a0 [ 848.563072][T19480] ? file_end_write+0x250/0x250 [ 848.568061][T19480] ? __fget_files+0x28/0x460 [ 848.572688][T19480] ? __fget_files+0x3fc/0x460 [ 848.577411][T19480] ? __fdget_pos+0x2a3/0x330 [ 848.582148][T19480] ? ksys_write+0x74/0x260 [ 848.586621][T19480] ksys_write+0x151/0x260 [ 848.590985][T19480] ? __ia32_sys_read+0x90/0x90 [ 848.595814][T19480] ? lockdep_hardirqs_on+0x98/0x150 [ 848.601040][T19480] do_syscall_64+0x55/0xb0 [ 848.605484][T19480] ? clear_bhb_loop+0x40/0x90 [ 848.610202][T19480] ? clear_bhb_loop+0x40/0x90 [ 848.615021][T19480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.620977][T19480] RIP: 0033:0x7ffa7d35fd8e [ 848.625445][T19480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.645099][T19480] RSP: 002b:00007ffa7e1cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.653561][T19480] RAX: ffffffffffffffda RBX: 00007ffa7e1cc6c0 RCX: 00007ffa7d35fd8e [ 848.661558][T19480] RDX: 0000000000000001 RSI: 00007ffa7e1cc0a0 RDI: 0000000000000004 [ 848.669568][T19480] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 848.678001][T19480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.686004][T19480] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 848.694022][T19480] [ 848.913612][T19485] netlink: 'syz.2.4333': attribute type 10 has an invalid length. [ 848.928709][T19485] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4333'. [ 848.970725][T19482] netlink: 'syz.0.4332': attribute type 10 has an invalid length. [ 848.989458][T19487] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4334'. [ 848.999238][T19482] netlink: 'syz.0.4332': attribute type 4 has an invalid length. [ 849.016050][T19482] netlink: 'syz.0.4332': attribute type 5 has an invalid length. [ 849.026374][T19482] netlink: 208544 bytes leftover after parsing attributes in process `syz.0.4332'. [ 849.041786][T19486] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4334'. [ 849.190927][T19491] netlink: 'syz.2.4336': attribute type 6 has an invalid length. [ 849.257592][T19495] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4335'. [ 849.278886][T19495] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4335'. [ 849.294546][T19495] tipc: Started in network mode [ 849.299706][T19495] tipc: Node identity b, cluster identity 73 [ 849.305845][T19495] tipc: Node number set to 11 [ 849.593146][T19504] netlink: 'syz.3.4342': attribute type 10 has an invalid length. [ 849.719685][T19507] FAULT_INJECTION: forcing a failure. [ 849.719685][T19507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.750352][T19507] CPU: 0 PID: 19507 Comm: syz.0.4343 Not tainted syzkaller #0 [ 849.757900][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 849.768001][T19507] Call Trace: [ 849.771309][T19507] [ 849.774285][T19507] dump_stack_lvl+0x18c/0x250 [ 849.779022][T19507] ? show_regs_print_info+0x20/0x20 [ 849.784258][T19507] ? load_image+0x420/0x420 [ 849.788796][T19507] ? __might_fault+0xaa/0x120 [ 849.793518][T19507] ? __lock_acquire+0x7eb0/0x7eb0 [ 849.798577][T19507] should_fail_ex+0x394/0x4c0 [ 849.803295][T19507] _copy_from_iter+0x1cd/0x1290 [ 849.808179][T19507] ? rcu_is_watching+0x15/0xb0 [ 849.812981][T19507] ? copyout_mc+0x70/0x70 [ 849.817340][T19507] ? __virt_addr_valid+0x10c/0x380 [ 849.822500][T19507] ? __virt_addr_valid+0x10c/0x380 [ 849.827926][T19507] ? __virt_addr_valid+0x10c/0x380 [ 849.833102][T19507] ? __check_object_size+0x4fc/0xa40 [ 849.838443][T19507] netlink_sendmsg+0x76b/0xbf0 [ 849.843251][T19507] ? netlink_getsockopt+0x590/0x590 [ 849.848504][T19507] ? apparmor_socket_sendmsg+0x8e/0x330 [ 849.854096][T19507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 849.859501][T19507] ? security_socket_sendmsg+0x80/0xa0 [ 849.864994][T19507] ? netlink_getsockopt+0x590/0x590 [ 849.870221][T19507] ____sys_sendmsg+0x61b/0x980 [ 849.875023][T19507] ? __asan_memset+0x22/0x40 [ 849.879652][T19507] ? __sys_sendmsg_sock+0x30/0x30 [ 849.884710][T19507] ? __import_iovec+0x5f2/0x850 [ 849.889603][T19507] ? import_iovec+0x73/0xa0 [ 849.894142][T19507] ___sys_sendmsg+0x2a6/0x360 [ 849.898852][T19507] ? get_pid_task+0x20/0x1e0 [ 849.903482][T19507] ? __sys_sendmsg+0x2b0/0x2b0 [ 849.908305][T19507] ? __lock_acquire+0x7eb0/0x7eb0 [ 849.913386][T19507] __se_sys_sendmsg+0x1d0/0x2c0 [ 849.918282][T19507] ? __x64_sys_sendmsg+0x80/0x80 [ 849.923294][T19507] ? lockdep_hardirqs_on+0x98/0x150 [ 849.928561][T19507] do_syscall_64+0x55/0xb0 [ 849.933013][T19507] ? clear_bhb_loop+0x40/0x90 [ 849.937725][T19507] ? clear_bhb_loop+0x40/0x90 [ 849.942439][T19507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.948370][T19507] RIP: 0033:0x7ffa7d39f559 [ 849.952825][T19507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.972463][T19507] RSP: 002b:00007ffa7e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.980921][T19507] RAX: ffffffffffffffda RBX: 00007ffa7d625fa0 RCX: 00007ffa7d39f559 [ 849.988937][T19507] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 849.996949][T19507] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 850.004964][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.012973][T19507] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 850.020993][T19507] [ 850.492843][T19523] netlink: 'syz.2.4348': attribute type 10 has an invalid length. [ 850.512224][T19523] nla_validate_range_unsigned: 60 callbacks suppressed [ 850.512248][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.574023][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.607254][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.636692][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.664970][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.696768][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.728606][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.758690][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.790001][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.819371][T19523] netlink: 'syz.2.4348': attribute type 11 has an invalid length. [ 850.841354][T19523] netlink: 'syz.2.4348': attribute type 4 has an invalid length. [ 850.850476][T19523] netlink: 'syz.2.4348': attribute type 5 has an invalid length. [ 850.878572][T19523] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.4348'. [ 851.095842][T19531] netlink: 'syz.1.4350': attribute type 6 has an invalid length. [ 852.913287][T19569] netlink: 208544 bytes leftover after parsing attributes in process `syz.1.4361'. [ 854.466396][T19607] tap0: tun_chr_ioctl cmd 2148553947 [ 854.742811][T19615] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4376'. [ 854.893004][T19615] validate_nla: 5 callbacks suppressed [ 854.893026][T19615] netlink: 'syz.3.4376': attribute type 4 has an invalid length. [ 855.096804][T19615] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4376'. [ 855.480799][T19627] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4382'. [ 855.611669][T19631] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4381'. [ 855.900315][T19638] syzkaller0: entered promiscuous mode [ 855.905898][T19638] syzkaller0: entered allmulticast mode [ 856.206363][T19642] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4386'. [ 856.219286][T19642] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 856.305381][T19647] netlink: 'syz.0.4387': attribute type 10 has an invalid length. [ 856.328470][T19647] team0: Device vxcan1 is of different type [ 857.424523][T19662] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4390'. [ 857.639295][T19667] netlink: 'syz.3.4392': attribute type 10 has an invalid length. [ 857.715937][T19667] team0: Device vxcan1 is of different type [ 857.807367][T19677] FAULT_INJECTION: forcing a failure. [ 857.807367][T19677] name failslab, interval 1, probability 0, space 0, times 0 [ 857.836217][T19677] CPU: 0 PID: 19677 Comm: syz.0.4395 Not tainted syzkaller #0 [ 857.843874][T19677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 857.853964][T19677] Call Trace: [ 857.857291][T19677] [ 857.860254][T19677] dump_stack_lvl+0x18c/0x250 [ 857.864974][T19677] ? show_regs_print_info+0x20/0x20 [ 857.870225][T19677] ? load_image+0x420/0x420 [ 857.874759][T19677] ? __lock_acquire+0x7eb0/0x7eb0 [ 857.879819][T19677] ? verify_lock_unused+0x140/0x140 [ 857.885056][T19677] should_fail_ex+0x394/0x4c0 [ 857.889777][T19677] should_failslab+0x9/0x20 [ 857.894309][T19677] slab_pre_alloc_hook+0x59/0x300 [ 857.899482][T19677] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 857.905061][T19677] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 857.910638][T19677] __kmem_cache_alloc_node+0x53/0x260 [ 857.916075][T19677] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 857.921656][T19677] __kmalloc+0xa7/0x240 [ 857.925856][T19677] bpf_prog_test_run_skb+0x242/0x18f0 [ 857.931264][T19677] ? __fget_files+0x28/0x460 [ 857.935894][T19677] ? __fget_files+0x3fc/0x460 [ 857.940642][T19677] ? cpu_online+0x60/0x60 [ 857.945010][T19677] bpf_prog_test_run+0x31f/0x390 [ 857.949984][T19677] __sys_bpf+0x49d/0x890 [ 857.954268][T19677] ? bpf_link_show_fdinfo+0x560/0x560 [ 857.959684][T19677] ? lock_chain_count+0x20/0x20 [ 857.964587][T19677] __x64_sys_bpf+0x7c/0x90 [ 857.969059][T19677] do_syscall_64+0x55/0xb0 [ 857.973513][T19677] ? clear_bhb_loop+0x40/0x90 [ 857.978227][T19677] ? clear_bhb_loop+0x40/0x90 [ 857.982945][T19677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.988876][T19677] RIP: 0033:0x7ffa7d39f559 [ 857.993323][T19677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.012975][T19677] RSP: 002b:00007ffa7e1cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.021427][T19677] RAX: ffffffffffffffda RBX: 00007ffa7d625fa0 RCX: 00007ffa7d39f559 [ 858.029429][T19677] RDX: 000000000000002a RSI: 0000200000001840 RDI: 000000000000000a [ 858.037431][T19677] RBP: 00007ffa7e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 858.045429][T19677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.053432][T19677] R13: 00007ffa7d626038 R14: 00007ffa7d625fa0 R15: 00007fffb4dc33c8 [ 858.061449][T19677] [ 858.499730][T19697] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4403'. [ 858.533005][T19697] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4403'. [ 859.328249][T19711] netlink: 'syz.3.4407': attribute type 22 has an invalid length. [ 859.336544][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'. [ 859.865523][T19730] netlink: 'syz.2.4413': attribute type 27 has an invalid length. [ 859.893726][T19729] netlink: 'syz.3.4414': attribute type 10 has an invalid length. [ 859.922589][T19729] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4414'. [ 859.948295][T19726] netlink: 'syz.0.4412': attribute type 10 has an invalid length. [ 859.963753][T19732] FAULT_INJECTION: forcing a failure. [ 859.963753][T19732] name failslab, interval 1, probability 0, space 0, times 0 [ 859.976537][T19732] CPU: 0 PID: 19732 Comm: syz.1.4415 Not tainted syzkaller #0 [ 859.984035][T19732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 859.994128][T19732] Call Trace: [ 859.997436][T19732] [ 860.000623][T19732] dump_stack_lvl+0x18c/0x250 [ 860.005366][T19732] ? show_regs_print_info+0x20/0x20 [ 860.010694][T19732] ? load_image+0x420/0x420 [ 860.015243][T19732] should_fail_ex+0x394/0x4c0 [ 860.019994][T19732] should_failslab+0x9/0x20 [ 860.024625][T19732] slab_pre_alloc_hook+0x59/0x300 [ 860.029716][T19732] kmem_cache_alloc+0x5a/0x2d0 [ 860.034514][T19732] ? skb_clone+0x1eb/0x370 [ 860.038970][T19732] skb_clone+0x1eb/0x370 [ 860.043250][T19732] bpf_clone_redirect+0x16d/0x4a0 [ 860.048321][T19732] bpf_prog_c6f54bbad6dab1ee+0x5e/0x63 [ 860.053813][T19732] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 860.059670][T19732] ? perf_trace_preemptirq_template+0xac/0x330 [ 860.065878][T19732] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 860.071921][T19732] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 860.077247][T19732] ? lock_chain_count+0x20/0x20 [ 860.082153][T19732] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 860.088607][T19732] ? __local_bh_disable_ip+0x108/0x1a0 [ 860.094096][T19732] ? __cant_sleep+0x220/0x220 [ 860.098805][T19732] ? __local_bh_enable_ip+0x13a/0x1c0 [ 860.104219][T19732] ? _local_bh_enable+0xa0/0xa0 [ 860.109106][T19732] ? bpf_test_timer_continue+0x137/0x3f0 [ 860.114808][T19732] ? bpf_test_run+0x174/0x870 [ 860.119524][T19732] bpf_test_run+0x2df/0x870 [ 860.124073][T19732] ? bpf_test_run+0x174/0x870 [ 860.128786][T19732] ? dst_hold+0x70/0x70 [ 860.132990][T19732] ? convert___skb_to_skb+0x3d/0x590 [ 860.138331][T19732] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 860.143839][T19732] ? cpu_online+0x60/0x60 [ 860.148208][T19732] bpf_prog_test_run+0x31f/0x390 [ 860.153180][T19732] __sys_bpf+0x49d/0x890 [ 860.157483][T19732] ? bpf_link_show_fdinfo+0x560/0x560 [ 860.162936][T19732] ? lock_chain_count+0x20/0x20 [ 860.167845][T19732] __x64_sys_bpf+0x7c/0x90 [ 860.172299][T19732] do_syscall_64+0x55/0xb0 [ 860.176749][T19732] ? clear_bhb_loop+0x40/0x90 [ 860.181470][T19732] ? clear_bhb_loop+0x40/0x90 [ 860.186192][T19732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.192118][T19732] RIP: 0033:0x7f8ba999f559 [ 860.196604][T19732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.216243][T19732] RSP: 002b:00007f8baa790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.224689][T19732] RAX: ffffffffffffffda RBX: 00007f8ba9c25fa0 RCX: 00007f8ba999f559 [ 860.232715][T19732] RDX: 0000000000000050 RSI: 00002000000026c0 RDI: 000000000000000a [ 860.240719][T19732] RBP: 00007f8baa790090 R08: 0000000000000000 R09: 0000000000000000 [ 860.248719][T19732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.256716][T19732] R13: 00007f8ba9c26038 R14: 00007f8ba9c25fa0 R15: 00007ffc58e129b8 [ 860.264824][T19732] [ 860.270220][T19726] nla_validate_range_unsigned: 60 callbacks suppressed [ 860.270331][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.294738][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.303716][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.312762][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.323455][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.338723][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.354790][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.366007][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.378933][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.388791][T19726] netlink: 'syz.0.4412': attribute type 11 has an invalid length. [ 860.406112][T19726] netlink: 'syz.0.4412': attribute type 4 has an invalid length. [ 860.418117][T19726] netlink: 'syz.0.4412': attribute type 5 has an invalid length. [ 860.431701][T19726] netlink: 208544 bytes leftover after parsing attributes in process `syz.0.4412'. [ 863.848866][T19759] netlink: 'syz.0.4424': attribute type 10 has an invalid length. [ 863.878881][T19765] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4426'. [ 865.947259][T19770] netlink: 'syz.2.4425': attribute type 10 has an invalid length. [ 865.956546][T19770] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.4425'. [ 865.972608][T19769] netlink: 146596 bytes leftover after parsing attributes in process `syz.3.4426'. [ 866.212402][T19783] netlink: 'syz.3.4431': attribute type 2 has an invalid length. [ 866.232249][T19783] netlink: 'syz.3.4431': attribute type 8 has an invalid length. [ 866.258337][T19783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4431'. [ 866.408297][T19788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4433'. [ 866.445821][T19788] netlink: 'syz.2.4433': attribute type 12 has an invalid length. [ 866.465257][T19788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4433'. [ 866.505670][T19788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4433'. [ 866.794498][T19797] netlink: 'syz.0.4437': attribute type 10 has an invalid length. [ 866.805088][T19797] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.4437'. [ 866.842531][T19799] FAULT_INJECTION: forcing a failure. [ 866.842531][T19799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.856147][T19799] CPU: 0 PID: 19799 Comm: syz.2.4438 Not tainted syzkaller #0 [ 866.863684][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 866.873808][T19799] Call Trace: [ 866.877152][T19799] [ 866.880143][T19799] dump_stack_lvl+0x18c/0x250 [ 866.884937][T19799] ? show_regs_print_info+0x20/0x20 [ 866.890214][T19799] ? load_image+0x420/0x420 [ 866.894793][T19799] ? __lock_acquire+0x7eb0/0x7eb0 [ 866.899889][T19799] ? snprintf+0xe9/0x140 [ 866.904207][T19799] should_fail_ex+0x394/0x4c0 [ 866.908964][T19799] _copy_to_user+0x2f/0xa0 [ 866.913469][T19799] simple_read_from_buffer+0xe7/0x150 [ 866.918926][T19799] proc_fail_nth_read+0x1e8/0x260 [ 866.924048][T19799] ? proc_fault_inject_write+0x360/0x360 [ 866.929768][T19799] ? fsnotify_perm+0x271/0x5e0 [ 866.934634][T19799] ? proc_fault_inject_write+0x360/0x360 [ 866.940358][T19799] vfs_read+0x298/0x990 [ 866.944612][T19799] ? kernel_read+0x1e0/0x1e0 [ 866.949267][T19799] ? __fget_files+0x28/0x460 [ 866.953915][T19799] ? __fget_files+0x3fc/0x460 [ 866.958682][T19799] ? __fdget_pos+0x2a3/0x330 [ 866.963326][T19799] ? ksys_read+0x74/0x260 [ 866.967727][T19799] ksys_read+0x151/0x260 [ 866.972033][T19799] ? vfs_write+0x9a0/0x9a0 [ 866.976504][T19799] ? lockdep_hardirqs_on+0x98/0x150 [ 866.981759][T19799] do_syscall_64+0x55/0xb0 [ 866.986222][T19799] ? clear_bhb_loop+0x40/0x90 [ 866.990950][T19799] ? clear_bhb_loop+0x40/0x90 [ 866.995765][T19799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.001704][T19799] RIP: 0033:0x7fb306f5fd8e [ 867.006165][T19799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 867.025812][T19799] RSP: 002b:00007fb307d7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 867.034290][T19799] RAX: ffffffffffffffda RBX: 00007fb307d7f6c0 RCX: 00007fb306f5fd8e [ 867.042299][T19799] RDX: 000000000000000f RSI: 00007fb307d7f0a0 RDI: 0000000000000005 [ 867.050312][T19799] RBP: 00007fb307d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 867.058322][T19799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.066332][T19799] R13: 00007fb307226038 R14: 00007fb307225fa0 R15: 00007ffe28553518 [ 867.074377][T19799] [ 867.143095][T19793] netlink: 'syz.3.4435': attribute type 10 has an invalid length. [ 868.042672][T19825] netlink: 'syz.2.4445': attribute type 10 has an invalid length. [ 868.052583][T19825] team0: Device vxcan1 is of different type [ 868.142499][T19824] netlink: 'syz.1.4447': attribute type 10 has an invalid length. [ 868.170194][T19824] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.4447'. [ 868.252422][T19828] rxe_eth0 speed is unknown, defaulting to 1000 [ 868.338310][T19832] FAULT_INJECTION: forcing a failure. [ 868.338310][T19832] name failslab, interval 1, probability 0, space 0, times 0 [ 868.353276][T19832] CPU: 1 PID: 19832 Comm: syz.1.4449 Not tainted syzkaller #0 [ 868.360813][T19832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 868.370926][T19832] Call Trace: [ 868.374247][T19832] [ 868.377256][T19832] dump_stack_lvl+0x18c/0x250 [ 868.382033][T19832] ? show_regs_print_info+0x20/0x20 [ 868.387296][T19832] ? load_image+0x420/0x420 [ 868.391862][T19832] ? perf_trace_lock_acquire+0x105/0x400 [ 868.397556][T19832] should_fail_ex+0x394/0x4c0 [ 868.402296][T19832] should_failslab+0x9/0x20 [ 868.406855][T19832] slab_pre_alloc_hook+0x59/0x300 [ 868.411995][T19832] kmem_cache_alloc+0x5a/0x2d0 [ 868.416835][T19832] ? skb_clone+0x1eb/0x370 [ 868.421295][T19832] skb_clone+0x1eb/0x370 [ 868.425578][T19832] __netlink_deliver_tap+0x411/0x7f0 [ 868.430908][T19832] ? netlink_deliver_tap+0x2e/0x1b0 [ 868.436133][T19832] netlink_deliver_tap+0x19c/0x1b0 [ 868.441295][T19832] netlink_dump+0x95b/0xec0 [ 868.445842][T19832] ? netlink_lookup+0x200/0x200 [ 868.450741][T19832] ? netlink_lookup+0x30/0x200 [ 868.455532][T19832] ? netlink_lookup+0x30/0x200 [ 868.460354][T19832] __netlink_dump_start+0x57c/0x7a0 [ 868.465612][T19832] rtnetlink_rcv_msg+0xe19/0xf90 [ 868.470609][T19832] ? rtnetlink_rcv_msg+0x220/0xf90 [ 868.475752][T19832] ? rtnl_dellink+0x7c0/0x7c0 [ 868.480468][T19832] ? rtnetlink_bind+0x80/0x80 [ 868.485184][T19832] ? kasan_quarantine_put+0xd8/0x220 [ 868.490511][T19832] ? lockdep_hardirqs_on+0x98/0x150 [ 868.495757][T19832] ? perf_trace_preemptirq_template+0xac/0x330 [ 868.501955][T19832] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 868.507975][T19832] ? lock_chain_count+0x20/0x20 [ 868.512858][T19832] ? __local_bh_enable_ip+0x13a/0x1c0 [ 868.518274][T19832] ? lockdep_hardirqs_on+0x98/0x150 [ 868.523503][T19832] ? __local_bh_enable_ip+0x13a/0x1c0 [ 868.528907][T19832] ? _local_bh_enable+0xa0/0xa0 [ 868.533798][T19832] ? __dev_queue_xmit+0x1481/0x3a30 [ 868.539053][T19832] ? __dev_queue_xmit+0x6d1/0x3a30 [ 868.544303][T19832] ? rtnl_dellink+0x7c0/0x7c0 [ 868.549095][T19832] ? ref_tracker_free+0x686/0x830 [ 868.554162][T19832] netlink_rcv_skb+0x235/0x4c0 [ 868.558954][T19832] ? rtnetlink_bind+0x80/0x80 [ 868.563668][T19832] ? netlink_ack+0x1160/0x1160 [ 868.568478][T19832] ? __lock_acquire+0x7eb0/0x7eb0 [ 868.573541][T19832] ? netlink_deliver_tap+0x2e/0x1b0 [ 868.578775][T19832] netlink_unicast+0x856/0x9e0 [ 868.583592][T19832] netlink_sendmsg+0x8d0/0xbf0 [ 868.588399][T19832] ? netlink_getsockopt+0x590/0x590 [ 868.593631][T19832] ? apparmor_socket_sendmsg+0x8e/0x330 [ 868.599227][T19832] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 868.604548][T19832] ? security_socket_sendmsg+0x80/0xa0 [ 868.610046][T19832] ? netlink_getsockopt+0x590/0x590 [ 868.615277][T19832] ____sys_sendmsg+0x61b/0x980 [ 868.620078][T19832] ? __asan_memset+0x22/0x40 [ 868.624743][T19832] ? __sys_sendmsg_sock+0x30/0x30 [ 868.629798][T19832] ? __import_iovec+0x5f2/0x850 [ 868.634711][T19832] ? import_iovec+0x73/0xa0 [ 868.639252][T19832] ___sys_sendmsg+0x2a6/0x360 [ 868.643960][T19832] ? get_pid_task+0x20/0x1e0 [ 868.648589][T19832] ? __sys_sendmsg+0x2b0/0x2b0 [ 868.653403][T19832] ? __lock_acquire+0x7eb0/0x7eb0 [ 868.658486][T19832] __se_sys_sendmsg+0x1d0/0x2c0 [ 868.663375][T19832] ? __x64_sys_sendmsg+0x80/0x80 [ 868.668365][T19832] ? lockdep_hardirqs_on+0x98/0x150 [ 868.673617][T19832] do_syscall_64+0x55/0xb0 [ 868.678062][T19832] ? clear_bhb_loop+0x40/0x90 [ 868.682775][T19832] ? clear_bhb_loop+0x40/0x90 [ 868.687491][T19832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.693446][T19832] RIP: 0033:0x7f8ba999f559 [ 868.697890][T19832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.717528][T19832] RSP: 002b:00007f8baa790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.725981][T19832] RAX: ffffffffffffffda RBX: 00007f8ba9c25fa0 RCX: 00007f8ba999f559 [ 868.733977][T19832] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 868.741979][T19832] RBP: 00007f8baa790090 R08: 0000000000000000 R09: 0000000000000000 [ 868.751217][T19832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.759937][T19832] R13: 00007f8ba9c26038 R14: 00007f8ba9c25fa0 R15: 00007ffc58e129b8 [ 868.767974][T19832] [ 868.936730][T19835] netlink: 'syz.3.4450': attribute type 21 has an invalid length. [ 869.518846][T19846] netlink: 'syz.2.4452': attribute type 10 has an invalid length. [ 869.893697][T19851] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 869.908875][T19851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.082768][T19855] nla_validate_range_unsigned: 25 callbacks suppressed [ 870.082795][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.107963][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.116763][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.130849][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.139329][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.151695][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.188731][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.212913][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.260063][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.281923][T19855] netlink: 'syz.3.4457': attribute type 11 has an invalid length. [ 870.303123][T19855] netlink: 208544 bytes leftover after parsing attributes in process `syz.3.4457'. [ 870.326749][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.339440][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.314236][T19875] validate_nla: 3 callbacks suppressed [ 871.314270][T19875] netlink: 'syz.3.4463': attribute type 10 has an invalid length. [ 871.633290][T19882] syzkaller0: entered promiscuous mode [ 871.639298][T19882] syzkaller0: entered allmulticast mode [ 871.881888][T19892] netlink: 'syz.2.4468': attribute type 10 has an invalid length. [ 872.050712][T19894] netlink: 'syz.0.4469': attribute type 10 has an invalid length. [ 872.065793][T19894] netlink: 'syz.0.4469': attribute type 4 has an invalid length. [ 872.078596][T19894] netlink: 'syz.0.4469': attribute type 5 has an invalid length. [ 872.087536][T19894] netlink: 208544 bytes leftover after parsing attributes in process `syz.0.4469'. [ 872.816702][T19917] rxe_eth0 speed is unknown, defaulting to 1000 [ 872.891574][T19919] netlink: 'syz.2.4478': attribute type 10 has an invalid length. [ 873.118065][T19929] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4481'. [ 873.884509][T19946] netlink: set zone limit has 8 unknown bytes [ 874.235817][T19955] netlink: 'syz.2.4490': attribute type 10 has an invalid length. [ 875.457382][T19962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4492'. [ 875.528045][T19962] netlink: 'syz.3.4492': attribute type 12 has an invalid length. [ 875.537467][T19962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4492'. [ 875.586548][T19962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4492'. [ 876.286046][T19985] FAULT_INJECTION: forcing a failure. [ 876.286046][T19985] name failslab, interval 1, probability 0, space 0, times 0 [ 876.301702][T19985] CPU: 1 PID: 19985 Comm: syz.2.4497 Not tainted syzkaller #0 [ 876.309245][T19985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 876.319371][T19985] Call Trace: [ 876.322700][T19985] [ 876.325668][T19985] dump_stack_lvl+0x18c/0x250 [ 876.330415][T19985] ? show_regs_print_info+0x20/0x20 [ 876.335670][T19985] ? load_image+0x420/0x420 [ 876.340244][T19985] ? __might_sleep+0xe0/0xe0 [ 876.344888][T19985] ? __lock_acquire+0x7eb0/0x7eb0 [ 876.349960][T19985] should_fail_ex+0x394/0x4c0 [ 876.354703][T19985] should_failslab+0x9/0x20 [ 876.359252][T19985] slab_pre_alloc_hook+0x59/0x300 [ 876.364357][T19985] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 876.370131][T19985] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 876.375915][T19985] __kmem_cache_alloc_node+0x53/0x260 [ 876.381427][T19985] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 876.387204][T19985] __kmalloc+0xa7/0x240 [ 876.391423][T19985] tomoyo_realpath_from_path+0xe6/0x5c0 [ 876.397036][T19985] ? tomoyo_domain+0xd6/0x120 [ 876.401768][T19985] tomoyo_path_number_perm+0x248/0x5e0 [ 876.407262][T19985] ? tomoyo_path_number_perm+0x217/0x5e0 [ 876.412932][T19985] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 876.418432][T19985] ? ksys_write+0x1d2/0x260 [ 876.423010][T19985] ? __fget_files+0x28/0x460 [ 876.427671][T19985] security_file_ioctl+0x70/0xa0 [ 876.432647][T19985] __se_sys_ioctl+0x48/0x170 [ 876.437274][T19985] do_syscall_64+0x55/0xb0 [ 876.441722][T19985] ? clear_bhb_loop+0x40/0x90 [ 876.446432][T19985] ? clear_bhb_loop+0x40/0x90 [ 876.451233][T19985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.457159][T19985] RIP: 0033:0x7fb306f9f559 [ 876.461599][T19985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.481263][T19985] RSP: 002b:00007fb3051d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.489708][T19985] RAX: ffffffffffffffda RBX: 00007fb307226180 RCX: 00007fb306f9f559 [ 876.497707][T19985] RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 876.505731][T19985] RBP: 00007fb3051d5090 R08: 0000000000000000 R09: 0000000000000000 [ 876.513727][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.521809][T19985] R13: 00007fb307226218 R14: 00007fb307226180 R15: 00007ffe28553518 [ 876.529819][T19985] [ 876.547325][T19985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 877.246067][T20000] FAULT_INJECTION: forcing a failure. [ 877.246067][T20000] name failslab, interval 1, probability 0, space 0, times 0 [ 877.264089][T20000] CPU: 0 PID: 20000 Comm: syz.3.4504 Not tainted syzkaller #0 [ 877.271636][T20000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 877.281844][T20000] Call Trace: [ 877.285174][T20000] [ 877.288149][T20000] dump_stack_lvl+0x18c/0x250 [ 877.292886][T20000] ? sctp_sendmsg+0x1519/0x27b0 [ 877.297800][T20000] ? ___sys_sendmsg+0x2a6/0x360 [ 877.302902][T20000] ? show_regs_print_info+0x20/0x20 [ 877.308215][T20000] ? load_image+0x420/0x420 [ 877.312810][T20000] should_fail_ex+0x394/0x4c0 [ 877.317566][T20000] should_failslab+0x9/0x20 [ 877.322137][T20000] slab_pre_alloc_hook+0x59/0x300 [ 877.327234][T20000] ? sctp_add_bind_addr+0x8c/0x360 [ 877.332426][T20000] __kmem_cache_alloc_node+0x53/0x260 [ 877.337873][T20000] ? sctp_add_bind_addr+0x8c/0x360 [ 877.343062][T20000] kmalloc_trace+0x2a/0xe0 [ 877.347563][T20000] sctp_add_bind_addr+0x8c/0x360 [ 877.352582][T20000] sctp_copy_local_addr_list+0x31b/0x4e0 [ 877.358295][T20000] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 877.364182][T20000] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 877.370329][T20000] ? sctp_v4_is_any+0x35/0x60 [ 877.375074][T20000] ? sctp_copy_one_addr+0x8c/0x350 [ 877.380265][T20000] sctp_bind_addr_copy+0xb3/0x3c0 [ 877.385375][T20000] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 877.391793][T20000] sctp_connect_new_asoc+0x2f9/0x6a0 [ 877.397163][T20000] ? __sctp_connect+0xd80/0xd80 [ 877.402089][T20000] ? __local_bh_enable_ip+0x13a/0x1c0 [ 877.407539][T20000] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 877.413187][T20000] ? security_sctp_bind_connect+0x89/0xb0 [ 877.419005][T20000] sctp_sendmsg+0x1519/0x27b0 [ 877.423791][T20000] ? sctp_getsockopt+0xb60/0xb60 [ 877.428805][T20000] ? aa_sk_perm+0x7bb/0x8e0 [ 877.433390][T20000] ? aa_af_perm+0x330/0x330 [ 877.438010][T20000] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 877.444509][T20000] ? sock_rps_record_flow+0x19/0x3f0 [ 877.449880][T20000] ? inet_sendmsg+0xce/0x2a0 [ 877.454561][T20000] ? inet_send_prepare+0x250/0x250 [ 877.459759][T20000] ____sys_sendmsg+0x61b/0x980 [ 877.464605][T20000] ? __asan_memset+0x22/0x40 [ 877.469308][T20000] ? __sys_sendmsg_sock+0x30/0x30 [ 877.474407][T20000] ? __import_iovec+0x5f2/0x850 [ 877.479432][T20000] ? import_iovec+0x73/0xa0 [ 877.484024][T20000] ___sys_sendmsg+0x2a6/0x360 [ 877.488777][T20000] ? get_pid_task+0x20/0x1e0 [ 877.493451][T20000] ? __sys_sendmsg+0x2b0/0x2b0 [ 877.498313][T20000] ? __lock_acquire+0x7eb0/0x7eb0 [ 877.503451][T20000] __se_sys_sendmsg+0x1d0/0x2c0 [ 877.508362][T20000] ? perf_trace_preemptirq_template+0x269/0x330 [ 877.514684][T20000] ? __x64_sys_sendmsg+0x80/0x80 [ 877.519719][T20000] ? lockdep_hardirqs_on+0x98/0x150 [ 877.525004][T20000] do_syscall_64+0x55/0xb0 [ 877.529494][T20000] ? clear_bhb_loop+0x40/0x90 [ 877.534355][T20000] ? clear_bhb_loop+0x40/0x90 [ 877.539103][T20000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.545063][T20000] RIP: 0033:0x7f9931d9f559 [ 877.549540][T20000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.569212][T20000] RSP: 002b:00007f9932cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.577697][T20000] RAX: ffffffffffffffda RBX: 00007f9932025fa0 RCX: 00007f9931d9f559 [ 877.585735][T20000] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000004 [ 877.593776][T20000] RBP: 00007f9932cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 877.601816][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.609846][T20000] R13: 00007f9932026038 R14: 00007f9932025fa0 R15: 00007ffdbb8f9d88 [ 877.617902][T20000] [ 879.017299][T20026] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.318725][T20020] netlink: 'syz.3.4511': attribute type 10 has an invalid length. [ 879.350641][T20020] nla_validate_range_unsigned: 60 callbacks suppressed [ 879.350666][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.393342][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.401650][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.409794][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.443591][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.453491][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.570745][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.649041][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.696885][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.707031][T20031] FAULT_INJECTION: forcing a failure. [ 879.707031][T20031] name failslab, interval 1, probability 0, space 0, times 0 [ 879.721547][T20020] netlink: 'syz.3.4511': attribute type 11 has an invalid length. [ 879.737401][T20020] netlink: 'syz.3.4511': attribute type 4 has an invalid length. [ 879.750065][T20031] CPU: 0 PID: 20031 Comm: syz.1.4515 Not tainted syzkaller #0 [ 879.753846][T20020] netlink: 'syz.3.4511': attribute type 5 has an invalid length. [ 879.757580][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 879.757598][T20031] Call Trace: [ 879.757609][T20031] [ 879.757620][T20031] dump_stack_lvl+0x18c/0x250 [ 879.766676][T20020] netlink: 208544 bytes leftover after parsing attributes in process `syz.3.4511'. [ 879.775437][T20031] ? show_regs_print_info+0x20/0x20 [ 879.775476][T20031] ? load_image+0x420/0x420 [ 879.775505][T20031] ? __might_sleep+0xe0/0xe0 [ 879.775535][T20031] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.775567][T20031] should_fail_ex+0x394/0x4c0 [ 879.819994][T20031] should_failslab+0x9/0x20 [ 879.824556][T20031] slab_pre_alloc_hook+0x59/0x300 [ 879.829663][T20031] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.834732][T20031] ? kvmalloc_node+0x70/0x180 [ 879.839446][T20031] ? kvmalloc_node+0x70/0x180 [ 879.844244][T20031] __kmem_cache_alloc_node+0x53/0x260 [ 879.849644][T20031] ? __schedule_delayed_monitor_work+0x200/0x200 [ 879.856009][T20031] ? kvmalloc_node+0x70/0x180 [ 879.860725][T20031] __kmalloc_node+0xa6/0x240 [ 879.865367][T20031] kvmalloc_node+0x70/0x180 [ 879.869922][T20031] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 879.875349][T20031] ? 0xffffffffa0005500 [ 879.879551][T20031] ? 0xffffffffa0005500 [ 879.883734][T20031] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 879.889663][T20031] ? xdp_convert_md_to_buff+0x330/0x330 [ 879.895265][T20031] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 879.901567][T20031] ? bpf_prog_change_xdp+0x12/0x30 [ 879.906714][T20031] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 879.912145][T20031] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.917235][T20031] ? dev_put+0x80/0x80 [ 879.921349][T20031] ? dev_put+0x80/0x80 [ 879.925458][T20031] bpf_prog_test_run+0x31f/0x390 [ 879.930435][T20031] __sys_bpf+0x49d/0x890 [ 879.934707][T20031] ? bpf_link_show_fdinfo+0x560/0x560 [ 879.940140][T20031] ? lock_chain_count+0x20/0x20 [ 879.945032][T20031] __x64_sys_bpf+0x7c/0x90 [ 879.949480][T20031] do_syscall_64+0x55/0xb0 [ 879.953930][T20031] ? clear_bhb_loop+0x40/0x90 [ 879.958643][T20031] ? clear_bhb_loop+0x40/0x90 [ 879.963358][T20031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.969290][T20031] RIP: 0033:0x7f8ba999f559 [ 879.973741][T20031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.993377][T20031] RSP: 002b:00007f8baa790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.001826][T20031] RAX: ffffffffffffffda RBX: 00007f8ba9c25fa0 RCX: 00007f8ba999f559 [ 880.009830][T20031] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 880.017839][T20031] RBP: 00007f8baa790090 R08: 0000000000000000 R09: 0000000000000000 [ 880.025843][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.033845][T20031] R13: 00007f8ba9c26038 R14: 00007f8ba9c25fa0 R15: 00007ffc58e129b8 [ 880.041891][T20031] [ 881.577269][T20059] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4524'. [ 881.618543][T20059] sit0: left promiscuous mode [ 882.161612][T20060] sit0: entered promiscuous mode [ 884.433263][T20105] netlink: 'syz.1.4535': attribute type 10 has an invalid length. [ 885.093593][T20119] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 889.156362][T20161] netlink: 'syz.1.4553': attribute type 10 has an invalid length. [ 889.309678][T20157] netlink: 'syz.2.4550': attribute type 10 has an invalid length. [ 889.409643][T20166] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4554'. [ 889.695445][T20166] sit0: left promiscuous mode [ 890.487217][T20170] sit0: entered promiscuous mode [ 890.539695][T20177] netlink: 'syz.1.4564': attribute type 10 has an invalid length. [ 890.896898][T20189] FAULT_INJECTION: forcing a failure. [ 890.896898][T20189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.928317][T20189] CPU: 0 PID: 20189 Comm: syz.3.4558 Not tainted syzkaller #0 [ 890.935881][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 890.946022][T20189] Call Trace: [ 890.949346][T20189] [ 890.952351][T20189] dump_stack_lvl+0x18c/0x250 [ 890.957084][T20189] ? show_regs_print_info+0x20/0x20 [ 890.962306][T20189] ? load_image+0x420/0x420 [ 890.966884][T20189] ? __might_fault+0xaa/0x120 [ 890.971607][T20189] ? __lock_acquire+0x7eb0/0x7eb0 [ 890.976696][T20189] should_fail_ex+0x394/0x4c0 [ 890.981436][T20189] _copy_from_user+0x2f/0xe0 [ 890.986065][T20189] ___sys_sendmsg+0x1c7/0x360 [ 890.990803][T20189] ? __sys_sendmsg+0x2b0/0x2b0 [ 890.995840][T20189] __se_sys_sendmsg+0x1d0/0x2c0 [ 891.000737][T20189] ? perf_trace_preemptirq_template+0x269/0x330 [ 891.007055][T20189] ? __x64_sys_sendmsg+0x80/0x80 [ 891.012054][T20189] ? lockdep_hardirqs_on+0x98/0x150 [ 891.017322][T20189] do_syscall_64+0x55/0xb0 [ 891.021787][T20189] ? clear_bhb_loop+0x40/0x90 [ 891.026530][T20189] ? clear_bhb_loop+0x40/0x90 [ 891.031260][T20189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.037203][T20189] RIP: 0033:0x7f9931d9f559 [ 891.041651][T20189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.061310][T20189] RSP: 002b:00007f9932cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.069901][T20189] RAX: ffffffffffffffda RBX: 00007f9932025fa0 RCX: 00007f9931d9f559 [ 891.077955][T20189] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 891.085964][T20189] RBP: 00007f9932cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 891.093970][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.101978][T20189] R13: 00007f9932026038 R14: 00007f9932025fa0 R15: 00007ffdbb8f9d88 [ 891.110000][T20189] [ 892.395586][T20210] netlink: 'syz.2.4566': attribute type 6 has an invalid length. [ 892.436045][T20210] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4566'. [ 892.787426][T20207] netlink: 'syz.3.4565': attribute type 10 has an invalid length. [ 893.341358][T20224] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4568'. [ 893.474860][T20227] sit0: entered allmulticast mode [ 893.580826][T20224] sit0: entered promiscuous mode [ 894.240199][T20249] netlink: 'syz.0.4577': attribute type 6 has an invalid length. [ 894.260749][T20249] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4577'. [ 895.145744][T20259] netlink: 'syz.1.4588': attribute type 3 has an invalid length. [ 895.176034][T20259] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4588'. [ 895.605221][T20271] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 895.996493][T20276] netlink: 'syz.3.4584': attribute type 10 has an invalid length. [ 896.620710][T20293] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4590'. [ 896.917791][T20305] netlink: 'syz.3.4594': attribute type 10 has an invalid length. [ 897.504675][T20323] netlink: 'syz.2.4596': attribute type 10 has an invalid length. [ 898.147838][T20334] syzkaller0: entered promiscuous mode [ 898.162883][T20334] syzkaller0: entered allmulticast mode [ 899.547689][T20363] netlink: 'syz.1.4614': attribute type 10 has an invalid length. [ 899.555964][T20363] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.4614'. [ 900.795742][T20351] netlink: 'syz.3.4610': attribute type 10 has an invalid length. [ 901.001110][T20371] netlink: 'syz.1.4616': attribute type 6 has an invalid length. [ 901.022535][T20371] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4616'. [ 901.162625][T20374] netlink: 'syz.0.4618': attribute type 39 has an invalid length. [ 901.233487][T20365] netlink: 'syz.2.4615': attribute type 10 has an invalid length. [ 901.265530][T20365] nla_validate_range_unsigned: 25 callbacks suppressed [ 901.265550][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.302228][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.325694][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.350171][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.368444][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.391278][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.416805][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.434092][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.474936][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.483846][T20365] netlink: 'syz.2.4615': attribute type 11 has an invalid length. [ 901.498120][T20365] netlink: 'syz.2.4615': attribute type 4 has an invalid length. [ 901.507072][T20365] netlink: 'syz.2.4615': attribute type 5 has an invalid length. [ 901.524371][T20365] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.4615'. [ 901.984296][T20391] netlink: 'syz.1.4625': attribute type 10 has an invalid length. [ 902.007169][T20391] netlink: 'syz.1.4625': attribute type 4 has an invalid length. [ 902.046644][T20391] netlink: 'syz.1.4625': attribute type 5 has an invalid length. [ 902.060620][T20391] netlink: 208544 bytes leftover after parsing attributes in process `syz.1.4625'. [ 902.116173][T20394] netlink: 'syz.0.4626': attribute type 1 has an invalid length. [ 902.140022][T20394] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4626'. [ 902.170111][T20394] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4626'. [ 903.944766][T20431] netlink: 'syz.2.4635': attribute type 4 has an invalid length. [ 903.964318][T20431] FAULT_INJECTION: forcing a failure. [ 903.964318][T20431] name failslab, interval 1, probability 0, space 0, times 0 [ 903.986165][T20431] CPU: 0 PID: 20431 Comm: syz.2.4635 Not tainted syzkaller #0 [ 903.993715][T20431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 904.003829][T20431] Call Trace: [ 904.007182][T20431] [ 904.010158][T20431] dump_stack_lvl+0x18c/0x250 [ 904.014906][T20431] ? show_regs_print_info+0x20/0x20 [ 904.020160][T20431] ? load_image+0x420/0x420 [ 904.024740][T20431] ? verify_lock_unused+0x140/0x140 [ 904.030019][T20431] ? perf_trace_lock_acquire+0x105/0x400 [ 904.035705][T20431] should_fail_ex+0x394/0x4c0 [ 904.040441][T20431] should_failslab+0x9/0x20 [ 904.045026][T20431] slab_pre_alloc_hook+0x59/0x300 [ 904.050113][T20431] kmem_cache_alloc+0x5a/0x2d0 [ 904.054924][T20431] ? skb_clone+0x1eb/0x370 [ 904.059402][T20431] skb_clone+0x1eb/0x370 [ 904.063699][T20431] __netlink_deliver_tap+0x411/0x7f0 [ 904.069055][T20431] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.074326][T20431] netlink_deliver_tap+0x19c/0x1b0 [ 904.079489][T20431] netlink_sendskb+0x68/0x130 [ 904.084232][T20431] netlink_ack+0xcd5/0x1160 [ 904.088813][T20431] ? netlink_dump+0xec0/0xec0 [ 904.093542][T20431] ? perf_trace_lock+0xfc/0x3b0 [ 904.098454][T20431] netlink_rcv_skb+0x2b3/0x4c0 [ 904.103265][T20431] ? rtnetlink_bind+0x80/0x80 [ 904.107961][T20431] ? netlink_ack+0x1160/0x1160 [ 904.112752][T20431] ? __lock_acquire+0x7eb0/0x7eb0 [ 904.117807][T20431] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.123062][T20431] netlink_unicast+0x856/0x9e0 [ 904.127882][T20431] netlink_sendmsg+0x8d0/0xbf0 [ 904.132679][T20431] ? netlink_getsockopt+0x590/0x590 [ 904.137910][T20431] ? apparmor_socket_sendmsg+0x8e/0x330 [ 904.143500][T20431] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 904.148808][T20431] ? security_socket_sendmsg+0x80/0xa0 [ 904.154319][T20431] ? netlink_getsockopt+0x590/0x590 [ 904.159537][T20431] ____sys_sendmsg+0x61b/0x980 [ 904.164342][T20431] ? __asan_memset+0x22/0x40 [ 904.168952][T20431] ? __sys_sendmsg_sock+0x30/0x30 [ 904.173990][T20431] ? __import_iovec+0x5f2/0x850 [ 904.178869][T20431] ? import_iovec+0x73/0xa0 [ 904.183403][T20431] ___sys_sendmsg+0x2a6/0x360 [ 904.188101][T20431] ? __sys_sendmsg+0x2b0/0x2b0 [ 904.192910][T20431] ? __lock_acquire+0x7eb0/0x7eb0 [ 904.197972][T20431] __se_sys_sendmsg+0x1d0/0x2c0 [ 904.202848][T20431] ? perf_trace_preemptirq_template+0x269/0x330 [ 904.209116][T20431] ? __x64_sys_sendmsg+0x80/0x80 [ 904.214083][T20431] ? lockdep_hardirqs_on+0x98/0x150 [ 904.219295][T20431] do_syscall_64+0x55/0xb0 [ 904.223733][T20431] ? clear_bhb_loop+0x40/0x90 [ 904.228431][T20431] ? clear_bhb_loop+0x40/0x90 [ 904.233145][T20431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.239071][T20431] RIP: 0033:0x7fb306f9f559 [ 904.243516][T20431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.263145][T20431] RSP: 002b:00007fb307d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.271581][T20431] RAX: ffffffffffffffda RBX: 00007fb307225fa0 RCX: 00007fb306f9f559 [ 904.279563][T20431] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000008 [ 904.287548][T20431] RBP: 00007fb307d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 904.295534][T20431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.303522][T20431] R13: 00007fb307226038 R14: 00007fb307225fa0 R15: 00007ffe28553518 [ 904.311529][T20431] [ 904.519224][T20436] netlink: 208544 bytes leftover after parsing attributes in process `syz.3.4637'. [ 904.643866][T20440] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4639'. [ 906.275432][T20472] validate_nla: 5 callbacks suppressed [ 906.275572][T20472] netlink: 'syz.1.4649': attribute type 10 has an invalid length. [ 906.293334][T20472] nla_validate_range_unsigned: 95 callbacks suppressed [ 906.293476][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.309528][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.323047][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.340239][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.359341][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.386869][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.443759][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.523845][T20476] netlink: 'syz.0.4650': attribute type 10 has an invalid length. [ 906.536135][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.577994][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.609105][T20472] netlink: 'syz.1.4649': attribute type 11 has an invalid length. [ 906.669688][T20472] netlink: 'syz.1.4649': attribute type 4 has an invalid length. [ 906.705874][T20472] netlink: 'syz.1.4649': attribute type 5 has an invalid length. [ 906.718105][T20474] netlink: 'syz.2.4651': attribute type 10 has an invalid length. [ 906.736554][T20472] netlink: 208544 bytes leftover after parsing attributes in process `syz.1.4649'. [ 907.227488][T20490] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.4653'. [ 907.291392][T20482] rxe_eth0 speed is unknown, defaulting to 1000 [ 908.169108][T20498] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.4658'. [ 908.499787][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.509323][T20507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.546116][T20507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.560059][T20507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.736673][T20509] netlink: 'syz.0.4662': attribute type 10 has an invalid length. [ 908.753829][T20509] netlink: 'syz.0.4662': attribute type 4 has an invalid length. [ 908.780292][T20509] netlink: 'syz.0.4662': attribute type 5 has an invalid length. [ 908.788286][T20509] netlink: 208544 bytes leftover after parsing attributes in process `syz.0.4662'. [ 909.195430][T20518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.213859][T20518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.224728][T20518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.235700][T20518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.254089][T20518] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 909.263322][T20518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.308445][T20520] netlink: 'syz.1.4663': attribute type 10 has an invalid length. [ 909.392629][T20515] rxe_eth0 speed is unknown, defaulting to 1000 [ 909.953402][T17945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.268598][T17945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.549261][T17945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.666068][T20525] netlink: 'syz.1.4665': attribute type 10 has an invalid length. [ 910.693526][T17945] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 910.874117][T17945] batman_adv: batadv0: Removing interface: netdevsim0 [ 910.883532][T17945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.063114][T20515] chnl_net:caif_netlink_parms(): no params data found [ 911.360451][T14119] Bluetooth: hci2: command tx timeout [ 911.549049][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.577892][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.595541][T20515] bridge_slave_0: entered allmulticast mode [ 911.636156][T20515] bridge_slave_0: entered promiscuous mode [ 911.863664][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.871538][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.885823][T20515] bridge_slave_1: entered allmulticast mode [ 911.897728][T20515] bridge_slave_1: entered promiscuous mode [ 912.258606][T20569] netlink: 'syz.3.4671': attribute type 10 has an invalid length. [ 912.278331][T20515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.298998][T20569] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4671'. [ 912.344391][T20515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.504026][T20515] team0: Port device team_slave_0 added [ 912.544804][T20515] team0: Port device team_slave_1 added [ 912.870431][T20577] netlink: 'syz.0.4680': attribute type 10 has an invalid length. [ 913.001333][T20576] netlink: 'syz.3.4673': attribute type 10 has an invalid length. [ 913.040332][T20515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.055697][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.139893][T20515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.180459][T20515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.187481][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.255105][T20515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.358980][T20588] netlink: 'syz.0.4676': attribute type 10 has an invalid length. [ 913.440417][T14119] Bluetooth: hci2: command tx timeout [ 913.616419][T20602] netlink: 'syz.1.4681': attribute type 10 has an invalid length. [ 913.656075][T20515] hsr_slave_0: entered promiscuous mode [ 913.663801][T20602] nla_validate_range_unsigned: 60 callbacks suppressed [ 913.663819][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.694935][T20515] hsr_slave_1: entered promiscuous mode [ 913.700699][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.752189][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.777855][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.851451][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.859374][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.909889][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.917856][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 913.954059][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 914.004119][T20602] netlink: 'syz.1.4681': attribute type 11 has an invalid length. [ 914.032792][T20602] netlink: 'syz.1.4681': attribute type 4 has an invalid length. [ 914.046031][T20602] netlink: 'syz.1.4681': attribute type 5 has an invalid length. [ 914.070893][T20602] netlink: 208544 bytes leftover after parsing attributes in process `syz.1.4681'. [ 914.283591][T20614] netlink: 'syz.0.4684': attribute type 10 has an invalid length. [ 914.626026][T20622] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4686'. [ 915.524013][T14119] Bluetooth: hci2: command tx timeout [ 915.710420][T20633] netlink: 'syz.1.4687': attribute type 10 has an invalid length. [ 915.727981][T17945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.742287][T17945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.758099][T17945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.772550][T17945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.782616][T17945] bridge0: port 3(veth1_to_team) entered disabled state [ 915.794561][T17945] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.980171][T17945] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 916.177789][T17945] team0 (unregistering): Port device hsr_slave_0 removed [ 916.333176][T17945] team0 (unregistering): Port device team_slave_1 removed [ 916.436664][T17945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.489707][T17945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.875518][T17945] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 916.891576][T17945] bond0 (unregistering): Released all slaves [ 916.966454][T20635] netlink: 'syz.0.4694': attribute type 10 has an invalid length. [ 917.308801][T20515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 917.332313][T20515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 917.366675][T20515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 917.400167][T20515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 917.456898][T20651] netlink: 'syz.1.4693': attribute type 2 has an invalid length. [ 917.472033][T20651] netlink: 'syz.1.4693': attribute type 8 has an invalid length. [ 917.494488][T20651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4693'. [ 917.525966][T20661] netlink: 'syz.3.4696': attribute type 27 has an invalid length. [ 917.549438][T20661] netlink: 'syz.3.4696': attribute type 4 has an invalid length. [ 917.562377][T20661] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4696'. [ 917.607407][T14119] Bluetooth: hci2: command tx timeout [ 917.719160][T20515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.791335][T20515] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.827916][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.835224][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.895734][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.902983][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.256864][T20672] netlink: 'syz.0.4700': attribute type 10 has an invalid length. [ 918.415395][T20687] netlink: 'syz.1.4703': attribute type 27 has an invalid length. [ 918.487258][T20687] netlink: 'syz.1.4703': attribute type 4 has an invalid length. [ 918.496348][T20687] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4703'. [ 918.796503][T20515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.911305][T20515] veth0_vlan: entered promiscuous mode [ 918.974195][T20515] veth1_vlan: entered promiscuous mode [ 919.102404][T20706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4708'. [ 919.123955][T20515] veth0_macvtap: entered promiscuous mode [ 919.142659][T20706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4708'. [ 919.173578][T20515] veth1_macvtap: entered promiscuous mode [ 919.193545][T20702] netlink: 'syz.0.4707': attribute type 2 has an invalid length. [ 919.220342][T20713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4709'. [ 919.223208][T20702] netlink: 'syz.0.4707': attribute type 8 has an invalid length. [ 919.258483][T20702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4707'. [ 919.292913][T20703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4708'. [ 919.320404][T20704] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4708'. [ 919.447541][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.470804][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.491818][T20515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.523075][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.549352][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.586003][T20515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.619651][T20515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.652098][T20515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.670017][T20515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.678826][T20515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.859261][T20726] netlink: 'syz.0.4712': attribute type 10 has an invalid length. [ 919.952545][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.984014][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.122840][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.168947][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.191704][T20751] FAULT_INJECTION: forcing a failure. [ 921.191704][T20751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.243749][T20751] CPU: 0 PID: 20751 Comm: syz.1.4719 Not tainted syzkaller #0 [ 921.251348][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 921.261487][T20751] Call Trace: [ 921.264826][T20751] [ 921.267821][T20751] dump_stack_lvl+0x18c/0x250 [ 921.272616][T20751] ? show_regs_print_info+0x20/0x20 [ 921.277893][T20751] ? load_image+0x420/0x420 [ 921.282464][T20751] ? __might_fault+0xaa/0x120 [ 921.287381][T20751] ? __lock_acquire+0x7eb0/0x7eb0 [ 921.292479][T20751] should_fail_ex+0x394/0x4c0 [ 921.297229][T20751] _copy_to_user+0x2f/0xa0 [ 921.301718][T20751] bpf_test_finish+0x25a/0x650 [ 921.306584][T20751] ? convert_skb_to___skb+0x420/0x420 [ 921.312032][T20751] ? rep_movs_alternative+0x4a/0x90 [ 921.317321][T20751] ? bpf_test_init+0x119/0x140 [ 921.322163][T20751] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 921.327616][T20751] ? __lock_acquire+0x7eb0/0x7eb0 [ 921.332733][T20751] ? dev_put+0x80/0x80 [ 921.336883][T20751] ? dev_put+0x80/0x80 [ 921.341026][T20751] bpf_prog_test_run+0x31f/0x390 [ 921.346029][T20751] __sys_bpf+0x49d/0x890 [ 921.350337][T20751] ? bpf_link_show_fdinfo+0x560/0x560 [ 921.355800][T20751] ? lock_chain_count+0x20/0x20 [ 921.360763][T20751] __x64_sys_bpf+0x7c/0x90 [ 921.365276][T20751] do_syscall_64+0x55/0xb0 [ 921.369786][T20751] ? clear_bhb_loop+0x40/0x90 [ 921.374528][T20751] ? clear_bhb_loop+0x40/0x90 [ 921.379273][T20751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.385236][T20751] RIP: 0033:0x7f8ba999f559 [ 921.389717][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.409404][T20751] RSP: 002b:00007f8baa790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 921.417892][T20751] RAX: ffffffffffffffda RBX: 00007f8ba9c25fa0 RCX: 00007f8ba999f559 [ 921.425932][T20751] RDX: 000000000000004c RSI: 00002000000002c0 RDI: 000000000000000a [ 921.433993][T20751] RBP: 00007f8baa790090 R08: 0000000000000000 R09: 0000000000000000 [ 921.442144][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.450171][T20751] R13: 00007f8ba9c26038 R14: 00007f8ba9c25fa0 R15: 00007ffc58e129b8 [ 921.458230][T20751] [ 922.051988][T20755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4720'. [ 922.340351][T20518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 922.350921][T20518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 922.359993][T20518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 922.379147][T20518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 922.403342][T20518] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 922.414215][T20518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 922.498476][T17958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.676281][T17958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.718847][T20777] validate_nla: 4 callbacks suppressed [ 922.718887][T20777] netlink: 'syz.3.4725': attribute type 10 has an invalid length. [ 922.739537][T20771] rxe_eth0 speed is unknown, defaulting to 1000 [ 922.974767][T17958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.150224][T17958] batman_adv: batadv0: Removing interface: netdevsim0 [ 923.158464][T17958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.200857][T20792] netlink: 'syz.2.4731': attribute type 11 has an invalid length. [ 923.240321][T20792] FAULT_INJECTION: forcing a failure. [ 923.240321][T20792] name failslab, interval 1, probability 0, space 0, times 0 [ 923.311889][T20792] CPU: 1 PID: 20792 Comm: syz.2.4731 Not tainted syzkaller #0 [ 923.319523][T20792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 923.329720][T20792] Call Trace: [ 923.333053][T20792] [ 923.336029][T20792] dump_stack_lvl+0x18c/0x250 [ 923.340769][T20792] ? show_regs_print_info+0x20/0x20 [ 923.346022][T20792] ? load_image+0x420/0x420 [ 923.350763][T20792] ? __might_sleep+0xe0/0xe0 [ 923.355411][T20792] ? __lock_acquire+0x7eb0/0x7eb0 [ 923.360496][T20792] should_fail_ex+0x394/0x4c0 [ 923.365230][T20792] should_failslab+0x9/0x20 [ 923.369789][T20792] slab_pre_alloc_hook+0x59/0x300 [ 923.374875][T20792] ? lock_chain_count+0x20/0x20 [ 923.379792][T20792] kmem_cache_alloc_node+0x5e/0x320 [ 923.385050][T20792] ? __local_bh_enable_ip+0x13a/0x1c0 [ 923.390587][T20792] ? __alloc_skb+0x103/0x2c0 [ 923.395237][T20792] __alloc_skb+0x103/0x2c0 [ 923.399707][T20792] netlink_ack+0x377/0x1160 [ 923.404275][T20792] ? __dev_queue_xmit+0x6d1/0x3a30 [ 923.409452][T20792] ? netlink_dump+0xec0/0xec0 [ 923.414269][T20792] ? ref_tracker_free+0x686/0x830 [ 923.419374][T20792] netlink_rcv_skb+0x2b3/0x4c0 [ 923.424196][T20792] ? rtnetlink_bind+0x80/0x80 [ 923.428934][T20792] ? netlink_ack+0x1160/0x1160 [ 923.433769][T20792] ? __lock_acquire+0x7eb0/0x7eb0 [ 923.438857][T20792] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.444110][T20792] netlink_unicast+0x856/0x9e0 [ 923.448954][T20792] netlink_sendmsg+0x8d0/0xbf0 [ 923.453771][T20792] ? netlink_getsockopt+0x590/0x590 [ 923.459019][T20792] ? apparmor_socket_sendmsg+0x8e/0x330 [ 923.464646][T20792] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 923.469993][T20792] ? security_socket_sendmsg+0x80/0xa0 [ 923.475519][T20792] ? netlink_getsockopt+0x590/0x590 [ 923.480770][T20792] ____sys_sendmsg+0x61b/0x980 [ 923.485602][T20792] ? __asan_memset+0x22/0x40 [ 923.490265][T20792] ? __sys_sendmsg_sock+0x30/0x30 [ 923.495345][T20792] ? __import_iovec+0x5f2/0x850 [ 923.500277][T20792] ? import_iovec+0x73/0xa0 [ 923.504845][T20792] ___sys_sendmsg+0x2a6/0x360 [ 923.509571][T20792] ? get_pid_task+0x20/0x1e0 [ 923.514214][T20792] ? __sys_sendmsg+0x2b0/0x2b0 [ 923.519047][T20792] ? __lock_acquire+0x7eb0/0x7eb0 [ 923.524135][T20792] __se_sys_sendmsg+0x1d0/0x2c0 [ 923.529061][T20792] ? __x64_sys_sendmsg+0x80/0x80 [ 923.534079][T20792] ? lockdep_hardirqs_on+0x98/0x150 [ 923.539331][T20792] do_syscall_64+0x55/0xb0 [ 923.543810][T20792] ? clear_bhb_loop+0x40/0x90 [ 923.548547][T20792] ? clear_bhb_loop+0x40/0x90 [ 923.553291][T20792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.559276][T20792] RIP: 0033:0x7fecc4d9f559 [ 923.563748][T20792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.583409][T20792] RSP: 002b:00007fecc5d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.591891][T20792] RAX: ffffffffffffffda RBX: 00007fecc5025fa0 RCX: 00007fecc4d9f559 [ 923.599940][T20792] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 923.607998][T20792] RBP: 00007fecc5d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 923.616036][T20792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.624061][T20792] R13: 00007fecc5026038 R14: 00007fecc5025fa0 R15: 00007ffc985981d8 [ 923.632104][T20792] [ 923.667383][T20795] netlink: 'syz.1.4732': attribute type 10 has an invalid length. [ 924.146461][T20810] netlink: 'syz.1.4734': attribute type 10 has an invalid length. [ 924.489711][T14119] Bluetooth: hci1: command tx timeout [ 925.072140][T20810] team0: Port device wlan1 added [ 925.153621][T20771] chnl_net:caif_netlink_parms(): no params data found [ 926.246847][T20836] netlink: 'syz.2.4737': attribute type 10 has an invalid length. [ 926.560108][T14119] Bluetooth: hci1: command tx timeout [ 926.855217][T20841] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 927.114960][T20832] netlink: 'syz.3.4736': attribute type 27 has an invalid length. [ 927.202143][T20859] netlink: 'syz.1.4740': attribute type 10 has an invalid length. [ 927.210197][T20771] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.217395][T20771] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.224068][T20859] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.4740'. [ 927.246242][T20771] bridge_slave_0: entered allmulticast mode [ 927.258406][T20771] bridge_slave_0: entered promiscuous mode [ 927.274524][T20771] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.303956][T20771] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.319036][T20771] bridge_slave_1: entered allmulticast mode [ 927.327137][T20771] bridge_slave_1: entered promiscuous mode [ 927.469486][T20771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.603258][T20771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.630231][T20869] netlink: 'syz.3.4743': attribute type 21 has an invalid length. [ 927.790111][T20876] netlink: 'syz.2.4745': attribute type 29 has an invalid length. [ 927.838379][T17958] gretap0 (unregistering): left allmulticast mode [ 927.857739][T17958] gretap0 (unregistering): left promiscuous mode [ 927.880067][T17958] Ÿë: port 1(gretap0) entered disabled state [ 927.948568][T20881] netlink: 'syz.1.4746': attribute type 29 has an invalid length. [ 927.993808][T20876] netlink: 'syz.2.4745': attribute type 29 has an invalid length. [ 928.029303][T20878] netlink: 'syz.2.4745': attribute type 29 has an invalid length. [ 928.038107][T20880] netlink: 'syz.2.4745': attribute type 29 has an invalid length. [ 928.093974][T20771] team0: Port device team_slave_0 added [ 928.105205][T20881] netlink: 'syz.1.4746': attribute type 29 has an invalid length. [ 928.126936][T20883] netlink: 'syz.2.4745': attribute type 29 has an invalid length. [ 928.191699][T20771] team0: Port device team_slave_1 added [ 928.206004][T20884] netlink: 'syz.1.4746': attribute type 29 has an invalid length. [ 928.230003][T20887] netlink: 'syz.1.4746': attribute type 29 has an invalid length. [ 928.242138][T20881] netlink: 'syz.1.4746': attribute type 29 has an invalid length. [ 928.272030][T20872] rxe_eth0 speed is unknown, defaulting to 1000 [ 928.357553][T20771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.382577][T20771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.439887][T20771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.503822][T20771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.520008][T20771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.581164][T20771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.640368][T14119] Bluetooth: hci1: command tx timeout [ 928.864799][T20771] hsr_slave_0: entered promiscuous mode [ 928.897163][T20771] hsr_slave_1: entered promiscuous mode [ 928.914334][T20771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.932730][T20771] Cannot create hsr debugfs directory [ 929.830745][T17958] veth0_to_team: left allmulticast mode [ 929.836387][T17958] veth0_to_team: left promiscuous mode [ 929.857714][T17958] Ÿë: port 2(veth0_to_team) entered disabled state [ 929.879559][T20912] nla_validate_range_unsigned: 25 callbacks suppressed [ 929.879600][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 929.887181][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.887330][T17958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.930227][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 929.939605][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.959048][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 929.960345][T17958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.995827][T17958] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.001455][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.041118][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.054724][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.072785][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.105158][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.127405][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.187313][T20912] netlink: 'syz.1.4751': attribute type 11 has an invalid length. [ 930.211811][T20912] netlink: 208544 bytes leftover after parsing attributes in process `syz.1.4751'. [ 930.416045][T17958] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 930.669762][T17958] team0 (unregistering): Port device hsr_slave_0 removed [ 930.711069][T17958] team0 (unregistering): Port device veth0_to_hsr removed [ 930.719984][T14119] Bluetooth: hci1: command tx timeout [ 930.896104][T17958] team0 (unregistering): Port device team_slave_1 removed [ 930.969678][T17958] team0 (unregistering): Port device team_slave_0 removed [ 931.035117][T17958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.105797][T17958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.723723][T17958] bond0 (unregistering): Released all slaves [ 931.774562][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.781604][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.855407][T20975] IPv6: …: Disabled Multicast RS [ 934.544744][T20771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 935.000324][T20986] validate_nla: 11 callbacks suppressed [ 935.000345][T20986] netlink: 'syz.1.4769': attribute type 29 has an invalid length. [ 937.488844][T20979] netlink: 'syz.2.4767': attribute type 10 has an invalid length. [ 937.499400][T20986] netlink: 'syz.1.4769': attribute type 29 has an invalid length. [ 937.711623][T20771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 937.756457][T20771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 937.809520][T20771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 937.873951][T20989] netlink: 'syz.3.4770': attribute type 10 has an invalid length. [ 937.894763][T20991] netlink: 'syz.1.4771': attribute type 10 has an invalid length. [ 937.913515][T20989] nla_validate_range_unsigned: 25 callbacks suppressed [ 937.913561][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 937.970647][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.016245][T20991] team0: Port device geneve1 added [ 938.031696][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.074402][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.118351][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.126975][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.136038][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.145122][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.175909][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.209969][T20989] netlink: 'syz.3.4770': attribute type 11 has an invalid length. [ 938.218600][T20989] netlink: 'syz.3.4770': attribute type 4 has an invalid length. [ 938.252849][T20989] netlink: 'syz.3.4770': attribute type 5 has an invalid length. [ 938.276648][T20989] netlink: 208544 bytes leftover after parsing attributes in process `syz.3.4770'. [ 938.601272][T20771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.707359][T20771] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.790912][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.798154][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.917953][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.925246][T17958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.260388][T21020] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 939.291417][T21020] netlink: 'syz.2.4778': attribute type 4 has an invalid length. [ 939.320357][T21020] netlink: 'syz.2.4778': attribute type 5 has an invalid length. [ 939.328677][T21020] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.4778'. [ 939.868465][T20771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.000741][T20771] veth0_vlan: entered promiscuous mode [ 940.027233][T20771] veth1_vlan: entered promiscuous mode [ 940.107410][T20771] veth0_macvtap: entered promiscuous mode [ 940.153769][T20771] veth1_macvtap: entered promiscuous mode [ 940.212982][T20771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.241340][T20771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.261663][T20771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.308889][T21048] validate_nla: 1 callbacks suppressed [ 940.308912][T21048] netlink: 'syz.2.4784': attribute type 21 has an invalid length. [ 940.340237][T21048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4784'. [ 940.354682][T20771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.395074][T20771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.417566][T20771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.445977][T20771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.458821][T20771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.469102][T20771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.481575][T20771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.828771][T17932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.894203][T17932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.014011][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.045604][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.094279][T21069] netlink: 'syz.3.4788': attribute type 10 has an invalid length. [ 941.397256][T21076] netlink: 'syz.2.4789': attribute type 10 has an invalid length. [ 941.409797][T21076] netlink: 'syz.2.4789': attribute type 4 has an invalid length. [ 941.423527][T21076] netlink: 'syz.2.4789': attribute type 5 has an invalid length. [ 941.434246][T21076] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.4789'. [ 942.174832][T21092] delete_channel: no stack [ 942.611085][T21103] netlink: 'syz.3.4795': attribute type 10 has an invalid length. [ 943.217325][T20518] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 943.229524][T20518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 943.248595][T20518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 943.269551][T20518] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 943.289123][T20518] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 943.302814][T20518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 943.364680][T21115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4797'. [ 943.377442][T21115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4797'. [ 943.412771][T21115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4797'. [ 943.589439][T17932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.838881][T21117] rxe_eth0 speed is unknown, defaulting to 1000 [ 943.930017][T21115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4797'. [ 944.121010][T21133] netlink: 'syz.3.4800': attribute type 10 has an invalid length. [ 944.169354][T21133] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4800'. [ 944.215136][T17932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.284879][T21128] netlink: 'syz.0.4799': attribute type 10 has an invalid length. [ 944.829935][T21147] netlink: 'syz.3.4802': attribute type 9 has an invalid length. [ 944.868325][T21147] netlink: 134776 bytes leftover after parsing attributes in process `syz.3.4802'. [ 945.164405][T17932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.305628][T17932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.360237][T14119] Bluetooth: hci3: command tx timeout [ 945.999059][T21158] netlink: 'syz.0.4811': attribute type 10 has an invalid length. [ 946.013160][T21165] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4805'. [ 946.362989][T21117] chnl_net:caif_netlink_parms(): no params data found [ 947.440195][T14119] Bluetooth: hci3: command tx timeout [ 948.653603][T21117] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.680562][T21117] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.710431][T21117] bridge_slave_0: entered allmulticast mode [ 948.745086][T21117] bridge_slave_0: entered promiscuous mode [ 948.776514][T21117] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.801805][T21117] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.822602][T21117] bridge_slave_1: entered allmulticast mode [ 948.842385][T21117] bridge_slave_1: entered promiscuous mode [ 949.520070][T14119] Bluetooth: hci3: command tx timeout [ 949.778023][T21117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.828866][T21117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.117515][T21117] team0: Port device team_slave_0 added [ 950.175924][T21117] team0: Port device team_slave_1 added [ 950.285503][T21243] netlink: 'syz.0.4818': attribute type 10 has an invalid length. [ 950.300197][T21243] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4818'. [ 950.407443][T21117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.436100][T21117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.515281][T21117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.552774][T21117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.582391][T21117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.665062][T21117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.091385][T21117] hsr_slave_0: entered promiscuous mode [ 951.149851][T21117] hsr_slave_1: entered promiscuous mode [ 951.601667][T14119] Bluetooth: hci3: command tx timeout [ 951.940450][T21117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.948430][T21117] Cannot create hsr debugfs directory [ 952.082286][T17932] [ 952.084684][T17932] ====================================================== [ 952.091822][T17932] WARNING: possible circular locking dependency detected [ 952.098877][T17932] syzkaller #0 Not tainted [ 952.103309][T17932] ------------------------------------------------------ [ 952.110370][T17932] kworker/u4:4/17932 is trying to acquire lock: [ 952.116644][T17932] ffff888027aacdc0 (team->team_lock_key#2){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 952.126599][T17932] [ 952.126599][T17932] but task is already holding lock: [ 952.134001][T17932] ffff888048e30768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 952.144390][T17932] [ 952.144390][T17932] which lock already depends on the new lock. [ 952.144390][T17932] [ 952.154814][T17932] [ 952.154814][T17932] the existing dependency chain (in reverse order) is: [ 952.163845][T17932] [ 952.163845][T17932] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 952.171621][T17932] __mutex_lock+0x135/0xce0 [ 952.176688][T17932] ieee80211_open+0x144/0x200 [ 952.181920][T17932] __dev_open+0x2cb/0x430 [ 952.186804][T17932] dev_open+0xab/0x190 [ 952.191438][T17932] team_add_slave+0x703/0x28a0 [ 952.196760][T17932] do_setlink+0xda4/0x3f00 [ 952.201739][T17932] rtnl_newlink+0x1848/0x2170 [ 952.206968][T17932] rtnetlink_rcv_msg+0x843/0xf90 [ 952.212462][T17932] netlink_rcv_skb+0x235/0x4c0 [ 952.217785][T17932] netlink_unicast+0x856/0x9e0 [ 952.223112][T17932] netlink_sendmsg+0x8d0/0xbf0 [ 952.228423][T17932] ____sys_sendmsg+0x61b/0x980 [ 952.233738][T17932] ___sys_sendmsg+0x2a6/0x360 [ 952.238953][T17932] __se_sys_sendmsg+0x1d0/0x2c0 [ 952.244365][T17932] do_syscall_64+0x55/0xb0 [ 952.249340][T17932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.255789][T17932] [ 952.255789][T17932] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 952.263990][T17932] __lock_acquire+0x3a07/0x7eb0 [ 952.269487][T17932] lock_acquire+0x19e/0x420 [ 952.274563][T17932] __mutex_lock+0x135/0xce0 [ 952.279613][T17932] team_device_event+0x295/0xc50 [ 952.285093][T17932] notifier_call_chain+0x18f/0x380 [ 952.290754][T17932] unregister_netdevice_many_notify+0x1037/0x1910 [ 952.297714][T17932] unregister_netdevice_queue+0x2e9/0x330 [ 952.303982][T17932] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 952.310255][T17932] ieee80211_remove_interfaces+0x4b3/0x690 [ 952.316610][T17932] ieee80211_unregister_hw+0x5d/0x2a0 [ 952.322533][T17932] mac80211_hwsim_del_radio+0x289/0x480 [ 952.328640][T17932] hwsim_exit_net+0x58d/0x650 [ 952.333868][T17932] cleanup_net+0x6f7/0xb00 [ 952.338831][T17932] process_scheduled_works+0xa60/0x1600 [ 952.344922][T17932] worker_thread+0xa5e/0xfe0 [ 952.350075][T17932] kthread+0x2fa/0x390 [ 952.354682][T17932] ret_from_fork+0x48/0x80 [ 952.359648][T17932] ret_from_fork_asm+0x11/0x20 [ 952.364959][T17932] [ 952.364959][T17932] other info that might help us debug this: [ 952.364959][T17932] [ 952.375209][T17932] Possible unsafe locking scenario: [ 952.375209][T17932] [ 952.382675][T17932] CPU0 CPU1 [ 952.388056][T17932] ---- ---- [ 952.393438][T17932] lock(&rdev->wiphy.mtx); [ 952.397962][T17932] lock(team->team_lock_key#2); [ 952.405449][T17932] lock(&rdev->wiphy.mtx); [ 952.412496][T17932] lock(team->team_lock_key#2); [ 952.417458][T17932] [ 952.417458][T17932] *** DEADLOCK *** [ 952.417458][T17932] [ 952.425613][T17932] 5 locks held by kworker/u4:4/17932: [ 952.431001][T17932] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 952.441918][T17932] #1: ffffc9000d27fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 952.452478][T17932] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 952.461925][T17932] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 952.471797][T17932] #4: ffff888048e30768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 952.482722][T17932] [ 952.482722][T17932] stack backtrace: [ 952.488621][T17932] CPU: 1 PID: 17932 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 952.496285][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 952.506367][T17932] Workqueue: netns cleanup_net [ 952.511275][T17932] Call Trace: [ 952.514576][T17932] [ 952.517528][T17932] dump_stack_lvl+0x18c/0x250 [ 952.522238][T17932] ? load_image+0x420/0x420 [ 952.526769][T17932] ? show_regs_print_info+0x20/0x20 [ 952.532000][T17932] ? print_circular_bug+0x12b/0x1a0 [ 952.537232][T17932] check_noncircular+0x2fc/0x400 [ 952.542202][T17932] ? print_deadlock_bug+0x5d0/0x5d0 [ 952.547427][T17932] ? lockdep_lock+0xf5/0x230 [ 952.552059][T17932] ? _find_first_zero_bit+0xd6/0x100 [ 952.557380][T17932] __lock_acquire+0x3a07/0x7eb0 [ 952.562272][T17932] ? verify_lock_unused+0x140/0x140 [ 952.567501][T17932] ? verify_lock_unused+0x140/0x140 [ 952.572727][T17932] ? __up_read+0x2b8/0x6b0 [ 952.577162][T17932] ? up_read+0x20/0x20 [ 952.581282][T17932] lock_acquire+0x19e/0x420 [ 952.585818][T17932] ? team_device_event+0x295/0xc50 [ 952.590970][T17932] ? __might_sleep+0xe0/0xe0 [ 952.595587][T17932] ? read_lock_is_recursive+0x20/0x20 [ 952.601008][T17932] ? xsk_notifier+0x210/0x220 [ 952.605714][T17932] __mutex_lock+0x135/0xce0 [ 952.610237][T17932] ? team_device_event+0x295/0xc50 [ 952.615374][T17932] ? __mutex_lock+0x30d/0xce0 [ 952.620071][T17932] ? bond_netdev_event+0xeb/0xef0 [ 952.625119][T17932] ? team_device_event+0x295/0xc50 [ 952.630256][T17932] ? mutex_lock_nested+0x20/0x20 [ 952.635219][T17932] team_device_event+0x295/0xc50 [ 952.640358][T17932] notifier_call_chain+0x18f/0x380 [ 952.645501][T17932] unregister_netdevice_many_notify+0x1037/0x1910 [ 952.651951][T17932] ? unregister_netdevice_many+0x20/0x20 [ 952.657633][T17932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 952.663481][T17932] ? __lock_acquire+0x7eb0/0x7eb0 [ 952.668556][T17932] unregister_netdevice_queue+0x2e9/0x330 [ 952.674321][T17932] ? list_netdevice+0x730/0x730 [ 952.679195][T17932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 952.684938][T17932] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 952.690604][T17932] ieee80211_remove_interfaces+0x4b3/0x690 [ 952.696441][T17932] ? ieee80211_do_stop+0x2030/0x2030 [ 952.701772][T17932] ? rcu_is_watching+0x15/0xb0 [ 952.706565][T17932] ieee80211_unregister_hw+0x5d/0x2a0 [ 952.711967][T17932] mac80211_hwsim_del_radio+0x289/0x480 [ 952.717540][T17932] ? rhashtable_remove_fast+0xc00/0xc00 [ 952.723110][T17932] hwsim_exit_net+0x58d/0x650 [ 952.727824][T17932] ? hwsim_init_net+0x90/0x90 [ 952.732530][T17932] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 952.738369][T17932] cleanup_net+0x6f7/0xb00 [ 952.742926][T17932] ? ops_free_list+0x3b0/0x3b0 [ 952.747752][T17932] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.753062][T17932] ? process_scheduled_works+0x975/0x1600 [ 952.758818][T17932] ? process_scheduled_works+0x975/0x1600 [ 952.764573][T17932] process_scheduled_works+0xa60/0x1600 [ 952.770173][T17932] ? worker_attach_to_pool+0x370/0x370 [ 952.775665][T17932] ? assign_work+0x3cc/0x5d0 [ 952.780470][T17932] worker_thread+0xa5e/0xfe0 [ 952.785129][T17932] kthread+0x2fa/0x390 [ 952.789232][T17932] ? pr_cont_work+0x550/0x550 [ 952.793933][T17932] ? kthread_blkcg+0xd0/0xd0 [ 952.798612][T17932] ret_from_fork+0x48/0x80 [ 952.803144][T17932] ? kthread_blkcg+0xd0/0xd0 [ 952.807937][T17932] ret_from_fork_asm+0x11/0x20 [ 952.812745][T17932] [ 952.846190][T17932] team0: Port device wlan1 removed [ 953.229298][T17932] bridge_slave_0: left allmulticast mode [ 953.235260][T17932] bridge_slave_0: left promiscuous mode [ 953.241344][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.378700][T17932] team0 (unregistering): Port device geneve1 removed [ 953.494800][T17932] team0 (unregistering): Port device veth0_to_hsr removed [ 953.533646][T17932] team0 (unregistering): Port device team_slave_1 removed [ 953.548400][T17932] team0 (unregistering): Port device team_slave_0 removed [ 953.609061][T17932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.643439][T17932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.805615][T17932] team0 (unregistering): Port device bond0 removed [ 953.839620][T17932] bond0 (unregistering): Released all slaves [ 954.266795][T21117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 954.282769][T21117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 954.294230][T21117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 954.306740][T21117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 954.403330][T21117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.425249][T21117] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.441642][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.448867][T17932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.464395][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.471597][T17958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.718128][T21117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.774399][T21117] veth0_vlan: entered promiscuous mode [ 954.788587][T21117] veth1_vlan: entered promiscuous mode [ 954.828220][T21117] veth0_macvtap: entered promiscuous mode [ 954.841394][T21117] veth1_macvtap: entered promiscuous mode [ 954.863740][T21117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.875532][T21117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.890261][T21117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.902318][T21117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.913707][T21117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.932937][T21117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.945223][T21117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.956786][T21117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.974785][T21117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.988186][T21117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.004154][T21117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.015385][T21117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.024610][T21117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.034213][T21117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.086189][T21117] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 955.125039][T17932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.135519][T21117] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 955.143728][T17932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.181129][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.189670][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50