last executing test programs: 11.843994764s ago: executing program 0 (id=2340): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff0700000013000000000000850000002a00800018010012646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095000000000000007b2cff6ab9a4e3463acf1581a12c31bb9c55ac8bb72fab7c7d29e6b00bff917fcee909888aa3340e62111e253357e900982f8a260bc7f55bdeaab7c7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="d70a000020000000620a00000000000007000000000000009500000000000000"], &(0x7f0000000f40)='syzkaller\x00', 0x8, 0x3, &(0x7f0000000f80)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9b, 0x0, 0xffffffffffffffff, 0xffffffffffffffef, 0x0, 0x0, 0x10, 0x3}, 0x23) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d6, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000016b, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x6b, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f0000000700)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000880)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000002000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r6, &(0x7f0000000a40), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc0060641000850000002a00009c18d3da0000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000c40)={&(0x7f0000000c80)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000d00)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000d80)={0x0, 0xfffffffffffffeec, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="2e00000011008188040f80ec59acbc0413a181b230000000020100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair(0x10, 0x1, 0x100, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 11.21237483s ago: executing program 0 (id=2349): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f3, &(0x7f0000000900)={'ip6tnl0\x00', @multicast}) 9.741867742s ago: executing program 0 (id=2353): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={r0, 0x7, 0x8}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xc1842, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0xa8, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x3, 0x8000000000000001}, 0x0, 0x2, 0xffffffff, 0x4, 0x1, 0x77100000, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000019c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a40)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000001a80)=0x10000) 6.423420406s ago: executing program 0 (id=2359): socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='GPL\x00', 0x4, 0x7, &(0x7f0000001600)=""/4101, 0x0, 0xc}, 0x94) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, 0x0) 5.498804881s ago: executing program 0 (id=2362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000280)='GPL\x00', 0x2, 0xfd90, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x4, 0x8f61, &(0x7f00000011c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0x366, 0x10, &(0x7f0000001300), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000013c0)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r4}, &(0x7f0000001440), &(0x7f0000001480)=r0}, 0x20) sendmsg$inet(r2, &(0x7f00000014c0)={0x0, 0x4000000, &(0x7f0000001500)=[{&(0x7f0000001540)='>', 0x20000281}], 0x1}, 0x0) (fail_nth: 5) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00'}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x39, &(0x7f0000000000), 0x174) 5.294320342s ago: executing program 0 (id=2365): perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000d40)="d2ff030760038d66b89e08f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.448406203s ago: executing program 2 (id=2375): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x64, &(0x7f0000000fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}], 0x20}, 0xe900) 3.171970652s ago: executing program 2 (id=2377): perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000d40)="d2ff030760038d66b89e08f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.625647209s ago: executing program 2 (id=2380): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000002980)={&(0x7f00000029c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a80)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.436023508s ago: executing program 2 (id=2381): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x645b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b5e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000001000000000000000600000018ce50762ebe0899354b6c486f35110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b70200000000"], &(0x7f0000000700)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69da}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000001800)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x1000, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x890) 2.435394138s ago: executing program 1 (id=2382): socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000540)=0x2, &(0x7f00000006c0)=r0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000001440), &(0x7f0000001480)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000014c0)={r3, &(0x7f0000001500)}, 0x20) 2.298281233s ago: executing program 1 (id=2384): r0 = socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x4, 0x16, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00'}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x645b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b5e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x0, 0xc, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0xc, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001c40)={r7, 0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000001000000000000000600000018ce50762ebe0899354b6c486f35110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b70200000000"], &(0x7f0000000700)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69da}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f40)={r5, 0x58, &(0x7f0000001ec0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r4, &(0x7f0000001e80)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/244, 0xf4}], 0x1, &(0x7f0000001dc0)=""/155, 0x9b}, 0x8020) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x5, 0xc, &(0x7f0000002040)=ANY=[], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x4) unlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000001800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1000, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000070002000000000000"], 0x30}, 0x20000000) 2.231615749s ago: executing program 2 (id=2385): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444d217"], 0x50) r2 = socket$kcm(0x10, 0x0, 0x10) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x3f}, 0x0) sendmsg$kcm(r2, &(0x7f0000000740)={0x0, 0xd18c9b25, &(0x7f0000000780)=[{&(0x7f00000007c0)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='devices') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000a40)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_ext={0x1a, 0x45, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0x5ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call, @generic={0x4, 0x5, 0x9, 0x80d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe01}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffc0}]}, &(0x7f0000000b80)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000a80), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x102806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000000cc0)={&(0x7f0000000d00)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000000d40)=[{&(0x7f0000000d80)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001d80)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001dc0)=[@ip_tos_int={{0x12, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000001e80), 0x4) close(0xffffffffffffffff) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b72646d61202b64657669636573202b70696473202d2bcf657669636573202d6e65745f0600000000000000202d68756765746c622000000000"], 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r10 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000840)={&(0x7f0000000880)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 2.221362521s ago: executing program 3 (id=2386): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="0408005eafcfc47a2ec6b4001000b317a2c8e53a0d00"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x2}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="49e3b09d5fe760af5c28a1bb8ec96efb57d6f348a8c3bc48d1cd9c5f2676ece0e136cbc7fae0f53b93282657723c4a1d9b3c29d096c595f82dbdb8bb105a6be998172b37", 0x44}, {&(0x7f0000000340)="58e9780bdcde15521a78be32c77b19b9ba7e417b32393eebe36b09794c6d0a4d0e23ef0f883af4134e5646cccdd5c199d0d1339c47", 0x35}], 0x2, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa12}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xd8}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.678235287s ago: executing program 3 (id=2387): r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) 1.478839647s ago: executing program 3 (id=2388): perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000d40)="d2ff030760038d66b89e08f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.476785908s ago: executing program 2 (id=2395): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="2e00000036000d005fff80698c6394090124fc092a18af4016000180008e9279ed91d47825d7563c5ddbeceb16e741f28a", 0x31}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0xa, 0x985781883c6ef0dd, 0x3a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x42, &(0x7f00000008c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f0000000900)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/150, 0x96}], 0x3}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x366, 0x10, &(0x7f0000000340), 0x1ad}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1f, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000800000000feffffff850000005d00000095000000000000005263103c5cec5d48e65b0cfcbbfe65629abdb34c76d79a2844b9ee"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r4}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r4, r3, 0x26}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000f40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, &(0x7f0000000fc0)=[{&(0x7f0000001040)="c0d04578daf51a4c0fcb112cbd25bab604a07d4696bd5ac4fd211590d076584cb23a1bb06d4ba0b6f9da4483439599454e8d4c865796646ad63ff69d3452dc441b580442dd55f919834e0e0e75f2a87334071f05a2d87c49fbf8b3c02fd4dc032102e0cd4a4ff08638a1ff81163931a40764f879e8f407641b858e91cc01aac43c0e96d8ffdf084445aec49a5d8e0b6ed8008f1cc38dd6a9f963eba6f4ce0271e333687ac6855c7760afad7cae249b0bc9b1224f94a185c6f58a75864956c3cd08db9478b10c2455854d89c1c1328adc1631f52129f5a6c9c95d3cd63f9b6c76740d1baa4fdae7f0be0c65b3d431941055477164d9c39b351768523dbe3350785476c905b12339a7ad7221e27e961c17a72dcadce1139e74d2ab23d563221b3138f67926aab4d989f09d1db4f4ad8977bddff832c101163f1194c91f0b221eedf4a154e5d973cced93eff0aa0a8e54f89e48bc", 0xe6}, {&(0x7f00000011c0)="6047436ac635ee0dfa401da57898f5b2c35c112af169315d451353df62025435a57c763bd10743852e88b08a7c4319c1db5a203411fb5a4359962480af54798a49c8311f9c14f45decf603586f56f2305d9aa07d3bb1eb606998c6dbda05fdac54", 0x61}, {&(0x7f0000001240)="03e899ff2135a647c4e0205f4f6d9eb58c7d61b13345b770e22087", 0x1b}, {&(0x7f0000001280)="386ec6aa4b47e58da6", 0x9}, {&(0x7f00000012c0)="a1da407e679b130c41d382428f2d77fd5e7dc3ecc2528cb00cc054741810c12f0d6ddea65d9f28e0a8d4376329b51ab3aca1e98e90ff4b6c3431429dd7b1aa3c1a6f302fc3a71f36b45ea3ca53edf8c3f9050cb50a800e5ec57677a3859e462d7e0b0f02c2dbea48bef621449edcb73b1df142354bcb4393214b2385a4251fb74bb40183706011275186ff4bead69716b897c2d706229b0fb749278b87e692f32b0a9aaa456eabf32259cc9360d421ae768254f8fda0c18bba79836857af332aa5b465", 0xc3}], 0x5, &(0x7f00000013c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x18}, 0x4040) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000440)=r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x4, 0xb, 0x7, 0x1, 0xb2db517445a5b336}, @jmp={0x5, 0x0, 0x7, 0x0, 0x9, 0x6, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x20, &(0x7f0000000640)=""/32, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r4, r4], &(0x7f0000000700)=[{0x1, 0x5, 0x9, 0xc}, {0x4, 0x1, 0x4, 0x7}], 0x10, 0x6}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000001000000000000008eadf295556960a0135160cc71f13af95625553e5dc2a5ae497b3fd5a42262ddb98b79079f4bddcb38e24ccc27aaebe6601d2a9445073ec6bee6b06940268b344774ae67e017f86c3c322652034bb73463ca248c82a42a6f4a4904c9e1aec68102b446cf513cc8aab4f31b8beb6f69ba2a712c6b5aaa791", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYBLOB="0d19685794e20615f3bf776a573fc6ef99a864c4e88ca21e088b0641e4bd42c22fd9cf1638e78359326962979983070d555a0387588a42e9653e50e20ad0d4ac93ac2eb6f373e25e563ecf5801ee4e304cd8347275ae845f9150464258a3ed7b80e9ad05bbb6bb80509158094fbb00ce2d73db8410fe2c2b2c4701a2366a3563460d1a2b8cc2abceefb6d8a34440bd9f2c70f30033aedb488f6b66e09c86303daf18a14c2199435face0eae091d96be9990988cf752d6d11693dcef7c0055ca2fde8b55c33", @ANYBLOB="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"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r6, r7}, 0xc) 1.287318377s ago: executing program 1 (id=2389): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4095, 0xfff}, {&(0x7f0000001600)=""/82, 0x52}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000001780)=""/121, 0x79}], 0x4}, 0x6002) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.080852638s ago: executing program 3 (id=2390): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x3}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x3, 0x0, 0x0, &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000001bc0)={&(0x7f0000001c00)=@phonet={0x23, 0x14, 0xc, 0xc0}, 0x80, 0x0}, 0x2400c019) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x2, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) 858.860811ms ago: executing program 1 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000019c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000001a80)=0x10000) 857.930791ms ago: executing program 3 (id=2392): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000140)='./cgroup/cgroup.procs\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e", 0x27}], 0x1}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000500)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r2 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000ac0)='./file0\x00', r3, 0x4000, r3}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000b00)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000002cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002d00)={@cgroup=r4, r4, 0x2e}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002d40)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0xd, &(0x7f0000002e80)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000002f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000002f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000002fc0)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) 435.738795ms ago: executing program 1 (id=2393): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000100)={'bond0\x00'}) 2.07024ms ago: executing program 3 (id=2394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000380)=r1, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000c40)={&(0x7f0000000500)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000540)="7d72ac4d8e059972f6e06b792e4d5c5e9cac3005ceadbc6bf827421620150c4d8c9cde8f77032df19c725e19cb437fdf5fdc444a453d18531dcc32b1b05a25052de03ef90d7ff8176b0b4cbe4b380ba240a86224b62c7bf00c474a48a99ebc3d9739a451408bcd8c9bf77c02d0f9fb673c1258193f9892ce96c186710e067354644dd68c13cf67ddf8cb5f66cfa2774e8ca19b191c9f9faecb5f77658b9467fd338408740f4aab473b2145797280c4a4bf6ad8712eb545ffff678890cb736a6bf44f559e7c8afdf533a37c03", 0xcc}, {&(0x7f0000000640)="803995116c79ef0a5341ce4e3aecae8d6cdb31e4784123b3aeeb9c95701b193e6778976b128050", 0x27}, {&(0x7f0000000680)="4a7a51695ae84cc1b73aa85ed7b07f0762873cb82a83564bf9b74d9411241f220c24e57de1dab3cc383ba9a9a9dbefa9bf0bf89d1f8c6c94b14a2527d3af972f2831cd1c5755928b21c0b84b12f102cc384af20c1cb52e08ddc8ee5d72d632f98e37be45ff2b8d04e986f66d23dfd2a03f14a8691afbe1589285a7657372865bb7cfee10b0f262fa440667bb09377c5cd47237320d878a79", 0x98}, {&(0x7f0000000740)="595125f14363f78ba8c1e5", 0xb}], 0x4, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x89, 0xe, "89513dd7ccdfaea14b92c888"}, @noop, @cipso={0x86, 0x1b, 0x2, [{0xebbb226f34970e5d, 0x8, "0f7c9162c7be"}, {0x7, 0x7, "a224400504"}, {0x5, 0x6, "5535024a"}]}, @rr={0x7, 0xb, 0x83, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end]}}}], 0xb8}, 0x4801) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0xc027, &(0x7f00000010c0)=[{&(0x7f0000001100)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0x18, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x24000840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='memory.swap.events\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=2396): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x20002800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002d40)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002dc0)={0x6, 0x6, &(0x7f0000002e80)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1000}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000002ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002f00)={r3, 0x0, 0xe, 0x0, &(0x7f0000002f80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000100)={'bond0\x00'}) syz_clone(0x1000100, &(0x7f0000000000)="f9e2796db848fc38543b10623a0c7b3a6508a617cb15e009b7bfa183096e8730cd8770ffbb1bf9fdf089909e6d7de4c5cfb3c6916a68b9fb7bc0994860625d11cf1ff97d490e7ce5974266a88d9c94824044eedb2f7fab6095e5aa7274e55696b48979d980c75e9533dc405281f6a743448bc96aba7d52cf411ad2ce9e6fb1b2c5a6fc2787", 0x85, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="fb50a24fe4f3e2f0788c64a8793303fad06bb11b9374f08e8936ca006fe525ee083067bd2dd7baaa47e53f78b6b36d9fa76a544c64ed4ffc76b5f66beaef6b5d7e957a540f20f15b288fa3f686aa69da2516645dd7947c3f6857d871b415a4436f27fe8d3ee789f2a6c8857bc71f88b91cbb0c268020e64c381143978dab7d3934444bc234f3") r4 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000001ac0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000001b40)={&(0x7f0000001b80)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="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", 0xffa0}, {&(0x7f0000002c00)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000002c40)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000002cc0)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x2000c001}, 0x810) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xfff, @local, 0x0, 0x3}, 0x80, &(0x7f0000001440)=[{&(0x7f00000003c0)="82fb50851709b5ac0b73d70a1e00fcda429dbfc62eba0f32e9e035ff22b322d962dd56bbc7956cb833a46e62f5c9bdaa12518c064258822fb0bec1e7e06b6e569558a2e5f378d736dd1bbc530da6e824ba8938cabef3df73447bdbcc8b6064d7", 0x60}, {&(0x7f0000000440)="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", 0x1000}], 0x2, &(0x7f0000001480)=[{0x38, 0x10d, 0x7, "9cffd1504d7b097b313ba327030285e536a53e043bb391da1bb2f36236e41e57ba3cbb10"}, {0x20, 0x102, 0x6, "e2622c1e5fb6d1aa6f4ff031da0d"}, {0x110, 0x118, 0x3, "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"}, {0x38, 0x101, 0x5, "669f5b4fe6cede5ee34c93ea193f555e4068a381a21b69b99dc45e3789de00ddc9b83971f74d"}, {0x110, 0x107, 0x7, "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"}, {0x108, 0x27, 0x9, "95ba138ff71687df42a2049d097863ec9033d42f352c6f1ed850ecce95fde20a3657429c8793de6d5408836175d09e7034e5e4f9e4d7c9671e2975749c908a7468e1f19c22a8c4ac2f55ba6854bda70d5fec700e2248ce8f16ca43580d97a263e4320e3423c19fdd3b2ef2006ad793a35338569e9f9705454f9d7bb42c0049ca5d1b7ce775ff961c8ce00e953b2340adfcb6677d7397d5e56039270662a7b51e5a58685f7b4a39e96e28c14cc06e66291a0abacf2593bc975fcd8a9edc3ee423d97bea4fddb43500797609388dcdb6d0631b877351cb512eb5768d4433ba7f6be64c1eaaa7937f7036021193ecab7164ff8497cc"}, {0x98, 0x101, 0x47, "c673a861a422f48cc738709cc0d46ebd74f3ba6a662b37098d3d922b04a9d3b2d25e12331282bf5a3718a64b0efda063ad51c1fc394bf215f73308602a2d0a106782b47635b60ba17da272747a6506e5d1262e98d511b88da3348b853e073d11088e26ca40972e7769721f490bab1f703879c3b84a7c1a188787214d3cd1ee6dfa727f3e479c6802"}, {0xe0, 0x112, 0x7ff, "9f423cdcc8ebde5c79616a01e617385d03338da3d932df3f273bc76259dbfe00b20468ad94cc427966735dfa2bba2526e4d214d2ebbda2ea2dfa152c5ed531ede62e4e559551a22c7767122031a48bdf6bb525827f29cd4128161e2d56109e8741c936fa95a236ee5341775939f497ebdef20bb171ab2c8f6acfb1eb436e4e50255a9b01ec81d407168a64838ef0dc09319fd0165a549776a28fe42dd40a7a6b9c71008ee8785bff2f349bea2354a8de47b12b0240e248ee5c4aa07f3e6ecf659ddd07ad5c6622cb55e2599c"}], 0x530}, 0x4000001) kernel console output (not intermixed with test programs): name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.395521][T10440] CPU: 0 PID: 10440 Comm: syz.2.1523 Not tainted syzkaller #0 [ 428.403049][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.413132][T10440] Call Trace: [ 428.416427][T10440] [ 428.419383][T10440] dump_stack_lvl+0x18c/0x250 [ 428.424101][T10440] ? show_regs_print_info+0x20/0x20 [ 428.429602][T10440] ? load_image+0x420/0x420 [ 428.434123][T10440] ? __lock_acquire+0x7eb0/0x7eb0 [ 428.439154][T10440] should_fail_ex+0x394/0x4c0 [ 428.443837][T10440] _copy_from_user+0x2f/0xe0 [ 428.448452][T10440] bpf_prog_test_run_skb+0x267/0x18f0 [ 428.453843][T10440] ? __fget_files+0x28/0x460 [ 428.458436][T10440] ? __fget_files+0x3fc/0x460 [ 428.463129][T10440] ? cpu_online+0x60/0x60 [ 428.467462][T10440] bpf_prog_test_run+0x31f/0x390 [ 428.472404][T10440] __sys_bpf+0x49d/0x890 [ 428.476648][T10440] ? bpf_link_show_fdinfo+0x560/0x560 [ 428.482125][T10440] ? lock_chain_count+0x20/0x20 [ 428.486990][T10440] __x64_sys_bpf+0x7c/0x90 [ 428.491408][T10440] do_syscall_64+0x55/0xb0 [ 428.495824][T10440] ? clear_bhb_loop+0x40/0x90 [ 428.500501][T10440] ? clear_bhb_loop+0x40/0x90 [ 428.505185][T10440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.511082][T10440] RIP: 0033:0x7f2f6939f559 [ 428.515496][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.535097][T10440] RSP: 002b:00007f2f6a2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.543512][T10440] RAX: ffffffffffffffda RBX: 00007f2f69625fa0 RCX: 00007f2f6939f559 [ 428.551482][T10440] RDX: 000000000000004c RSI: 00002000000010c0 RDI: 000000000000000a [ 428.559446][T10440] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 428.567428][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.575395][T10440] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 428.583385][T10440] [ 430.198483][T10451] netlink: 'syz.0.1527': attribute type 3 has an invalid length. [ 430.206472][T10451] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1527'. [ 431.284879][T10464] netlink: 'syz.3.1531': attribute type 21 has an invalid length. [ 431.303777][T10464] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1531'. [ 431.354681][T10464] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 431.407615][T10464] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 431.841423][T10477] syzkaller0: entered promiscuous mode [ 431.849726][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1534'. [ 432.165678][T10484] netlink: 'syz.0.1538': attribute type 3 has an invalid length. [ 432.173954][T10484] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1538'. [ 435.536073][T10502] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 435.552120][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1544'. [ 435.562356][T10502] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 435.574914][T10502] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.612620][T10502] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 435.637167][T10494] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.654042][T10514] netlink: 'syz.3.1545': attribute type 21 has an invalid length. [ 435.679092][T10514] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1545'. [ 435.727317][T10514] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 435.824948][T10514] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 436.191270][T10526] netlink: 'syz.2.1550': attribute type 3 has an invalid length. [ 436.227004][T10526] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1550'. [ 436.888631][T10534] syzkaller0: entered promiscuous mode [ 437.383260][T10547] netlink: 'syz.2.1557': attribute type 63 has an invalid length. [ 437.399091][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 439.009076][T10547] netlink: 'syz.2.1557': attribute type 63 has an invalid length. [ 439.017169][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 439.174486][T10553] netlink: 'syz.2.1558': attribute type 21 has an invalid length. [ 439.186400][T10553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1558'. [ 439.215842][T10557] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 439.224180][T10557] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1560'. [ 439.258211][T10553] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 439.280628][T10553] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 439.747678][T10575] syzkaller0: entered promiscuous mode [ 440.013587][T10586] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 440.028147][T10586] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 440.094040][T10578] FAULT_INJECTION: forcing a failure. [ 440.094040][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.108811][T10578] CPU: 1 PID: 10578 Comm: syz.3.1568 Not tainted syzkaller #0 [ 440.116314][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.126368][T10578] Call Trace: [ 440.129640][T10578] [ 440.132560][T10578] dump_stack_lvl+0x18c/0x250 [ 440.137245][T10578] ? show_regs_print_info+0x20/0x20 [ 440.142447][T10578] ? load_image+0x420/0x420 [ 440.147036][T10578] ? __lock_acquire+0x7eb0/0x7eb0 [ 440.152061][T10578] ? snprintf+0xe9/0x140 [ 440.156305][T10578] should_fail_ex+0x394/0x4c0 [ 440.160997][T10578] _copy_to_user+0x2f/0xa0 [ 440.165425][T10578] simple_read_from_buffer+0xe7/0x150 [ 440.170795][T10578] proc_fail_nth_read+0x1e8/0x260 [ 440.175821][T10578] ? proc_fault_inject_write+0x360/0x360 [ 440.181453][T10578] ? fsnotify_perm+0x271/0x5e0 [ 440.186214][T10578] ? proc_fault_inject_write+0x360/0x360 [ 440.191847][T10578] vfs_read+0x298/0x990 [ 440.196004][T10578] ? kernel_read+0x1e0/0x1e0 [ 440.200594][T10578] ? __fget_files+0x28/0x460 [ 440.205197][T10578] ? __fget_files+0x3fc/0x460 [ 440.209892][T10578] ? __fdget_pos+0x2a3/0x330 [ 440.214492][T10578] ? ksys_read+0x74/0x260 [ 440.218830][T10578] ksys_read+0x151/0x260 [ 440.223078][T10578] ? vfs_write+0x9a0/0x9a0 [ 440.227495][T10578] ? lockdep_hardirqs_on+0x98/0x150 [ 440.232691][T10578] do_syscall_64+0x55/0xb0 [ 440.237104][T10578] ? clear_bhb_loop+0x40/0x90 [ 440.241776][T10578] ? clear_bhb_loop+0x40/0x90 [ 440.246445][T10578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.252334][T10578] RIP: 0033:0x7f5f39b5fd8e [ 440.256755][T10578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.276382][T10578] RSP: 002b:00007f5f3aa2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 440.284803][T10578] RAX: ffffffffffffffda RBX: 00007f5f3aa2e6c0 RCX: 00007f5f39b5fd8e [ 440.292864][T10578] RDX: 000000000000000f RSI: 00007f5f3aa2e0a0 RDI: 0000000000000004 [ 440.300832][T10578] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 440.308801][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.316768][T10578] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 440.324752][T10578] [ 440.345585][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.352260][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.631303][T10589] netlink: 'syz.3.1571': attribute type 21 has an invalid length. [ 441.647429][T10589] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1571'. [ 441.656615][T10590] netlink: 'syz.3.1571': attribute type 10 has an invalid length. [ 441.665642][T10591] netlink: 'syz.3.1571': attribute type 10 has an invalid length. [ 441.696112][T10583] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.593439][T10619] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 442.605806][T10619] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1580'. [ 442.715312][T10621] syzkaller0: entered promiscuous mode [ 444.117807][T10623] netlink: 'syz.3.1582': attribute type 21 has an invalid length. [ 444.125768][T10623] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1582'. [ 444.144094][T10624] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 444.152356][T10625] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 444.281474][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 444.692333][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 445.095332][T10648] netlink: 'syz.3.1589': attribute type 63 has an invalid length. [ 445.103583][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 445.120110][T10648] netlink: 'syz.3.1589': attribute type 63 has an invalid length. [ 445.136923][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 445.460011][T10654] netlink: 'syz.2.1591': attribute type 3 has an invalid length. [ 445.477203][T10654] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1591'. [ 445.599337][T10657] syzkaller0: entered promiscuous mode [ 445.752916][T10663] netlink: 'syz.3.1594': attribute type 21 has an invalid length. [ 445.765123][T10663] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1594'. [ 447.098096][T10663] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 447.110523][T10666] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 447.735744][T10692] netlink: 'syz.0.1605': attribute type 21 has an invalid length. [ 447.745157][T10692] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1605'. [ 447.813294][T10694] syzkaller0: entered promiscuous mode [ 447.820694][T10692] netlink: 'syz.0.1605': attribute type 10 has an invalid length. [ 447.859335][T10692] netlink: 'syz.0.1605': attribute type 10 has an invalid length. [ 448.051012][T10701] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1609'. [ 449.478428][T10703] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.047617][T10728] netlink: 'syz.2.1618': attribute type 21 has an invalid length. [ 450.078782][T10728] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1618'. [ 450.141218][T10728] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 450.184999][T10728] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 450.475441][T10739] syzkaller0: entered promiscuous mode [ 452.229989][T10754] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 452.327854][T10764] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 452.337410][T10764] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1628'. [ 452.389279][T10764] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 452.419990][T10764] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 453.183754][T10788] syzkaller0: entered promiscuous mode [ 455.415100][T10802] netlink: 'syz.1.1640': attribute type 21 has an invalid length. [ 455.423160][T10802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1640'. [ 455.432580][T10803] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 455.442716][T10806] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 456.313667][T10831] netlink: 'syz.2.1650': attribute type 21 has an invalid length. [ 456.365309][T10831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1650'. [ 456.398027][T10831] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 456.423239][T10831] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 456.505030][ T5791] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 456.653959][T10839] syzkaller0: entered promiscuous mode [ 458.423916][T10861] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.539060][T10868] netlink: 'syz.1.1662': attribute type 21 has an invalid length. [ 458.556387][T10868] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1662'. [ 458.599877][ T5791] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 458.622973][T10868] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 458.653630][T10868] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 458.860221][T10874] netlink: 'syz.1.1672': attribute type 21 has an invalid length. [ 458.912261][T10874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1672'. [ 459.614964][ T5791] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 459.628331][T10895] syzkaller0: entered promiscuous mode [ 461.432562][T10913] validate_nla: 2 callbacks suppressed [ 461.432596][T10913] netlink: 'syz.2.1676': attribute type 21 has an invalid length. [ 461.447349][T10913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1676'. [ 461.482063][T10913] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 461.500179][T10913] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 462.115450][T10918] syzkaller0: entered promiscuous mode [ 463.804163][T10934] rxe_eth0 speed is unknown, defaulting to 1000 [ 463.915678][T10947] netlink: 'syz.2.1688': attribute type 21 has an invalid length. [ 463.940725][T10947] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1688'. [ 463.982937][T10947] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 464.013185][T10947] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 464.533026][T10950] rxe_eth0 speed is unknown, defaulting to 1000 [ 466.516431][T10977] syzkaller0: entered promiscuous mode [ 466.541322][T10982] netlink: 'syz.2.1699': attribute type 21 has an invalid length. [ 466.556471][T10982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1699'. [ 466.591483][T10982] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 468.155332][T10982] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 468.216261][T10990] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.706073][T10991] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.308094][T11003] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.303335][T11019] netlink: 'syz.2.1712': attribute type 21 has an invalid length. [ 470.350330][T11019] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1712'. [ 470.519361][T11020] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 470.528897][T11019] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 471.020242][T11023] syzkaller0: entered promiscuous mode [ 472.781265][T11032] syzkaller0: entered promiscuous mode [ 474.589735][T11052] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 474.598228][T11052] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1721'. [ 474.644193][T11052] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 475.756532][T11067] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.249604][T11083] netlink: 'syz.3.1732': attribute type 21 has an invalid length. [ 476.306522][T11083] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 476.356951][T11084] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 476.784850][T11099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1738'. [ 476.811875][T11099] : renamed from caif0 [ 476.824535][T11099] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 477.268312][T11114] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1742'. [ 477.302711][T11114] openvswitch: netlink: Key type 4112 is out of range max 32 [ 477.644477][T11122] FAULT_INJECTION: forcing a failure. [ 477.644477][T11122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.660376][T11121] netlink: 'syz.0.1744': attribute type 21 has an invalid length. [ 477.681936][T11121] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1744'. [ 477.691566][T11122] CPU: 1 PID: 11122 Comm: syz.1.1745 Not tainted syzkaller #0 [ 477.699061][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.709136][T11122] Call Trace: [ 477.712419][T11122] [ 477.715355][T11122] dump_stack_lvl+0x18c/0x250 [ 477.720053][T11122] ? show_regs_print_info+0x20/0x20 [ 477.725264][T11122] ? load_image+0x420/0x420 [ 477.729777][T11122] ? __might_fault+0xaa/0x120 [ 477.734467][T11122] ? __lock_acquire+0x7eb0/0x7eb0 [ 477.739509][T11122] should_fail_ex+0x394/0x4c0 [ 477.744202][T11122] _copy_to_user+0x2f/0xa0 [ 477.748637][T11122] bpf_test_finish+0x25a/0x650 [ 477.753426][T11122] ? convert_skb_to___skb+0x420/0x420 [ 477.758805][T11122] ? read_tsc+0x9/0x20 [ 477.762890][T11122] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 477.769150][T11122] ? xdp_convert_buff_to_md+0x200/0x200 [ 477.774714][T11122] ? __fget_files+0x28/0x460 [ 477.779339][T11122] ? xdp_convert_buff_to_md+0x200/0x200 [ 477.784896][T11122] bpf_prog_test_run+0x31f/0x390 [ 477.789851][T11122] __sys_bpf+0x49d/0x890 [ 477.794107][T11122] ? bpf_link_show_fdinfo+0x560/0x560 [ 477.799502][T11122] ? lock_chain_count+0x20/0x20 [ 477.804372][T11122] __x64_sys_bpf+0x7c/0x90 [ 477.808802][T11122] do_syscall_64+0x55/0xb0 [ 477.813231][T11122] ? clear_bhb_loop+0x40/0x90 [ 477.817915][T11122] ? clear_bhb_loop+0x40/0x90 [ 477.822609][T11122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.828512][T11122] RIP: 0033:0x7efc6d19f559 [ 477.832939][T11122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.852552][T11122] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.860986][T11122] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 477.868961][T11122] RDX: 000000000000004c RSI: 0000200000000740 RDI: 000000000000000a [ 477.876937][T11122] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.884913][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.892889][T11122] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 477.900882][T11122] [ 477.931046][T11121] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 478.868424][T11135] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.000337][T11149] netlink: 'syz.3.1755': attribute type 21 has an invalid length. [ 479.025091][T11149] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1755'. [ 479.075395][T11149] netlink: 'syz.3.1755': attribute type 10 has an invalid length. [ 479.257089][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1757'. [ 479.294770][T11155] : renamed from caif0 [ 479.318122][T11155] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 479.975175][ T5791] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 480.124156][T11187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1768'. [ 480.133789][T11187] tc_dump_action: action bad kind [ 480.184290][T11189] netlink: 'syz.3.1767': attribute type 21 has an invalid length. [ 480.194069][T11189] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1767'. [ 480.248414][T11189] netlink: 'syz.3.1767': attribute type 10 has an invalid length. [ 480.992466][T11199] rxe_eth0 speed is unknown, defaulting to 1000 [ 481.507772][ T5791] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 481.706076][T11217] FAULT_INJECTION: forcing a failure. [ 481.706076][T11217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.720420][T11217] CPU: 1 PID: 11217 Comm: syz.3.1778 Not tainted syzkaller #0 [ 481.727916][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.737991][T11217] Call Trace: [ 481.741282][T11217] [ 481.744223][T11217] dump_stack_lvl+0x18c/0x250 [ 481.748926][T11217] ? show_regs_print_info+0x20/0x20 [ 481.754162][T11217] ? load_image+0x420/0x420 [ 481.758684][T11217] ? __might_fault+0xaa/0x120 [ 481.763388][T11217] ? __lock_acquire+0x7eb0/0x7eb0 [ 481.768430][T11217] ? __virt_addr_valid+0x10c/0x380 [ 481.773573][T11217] should_fail_ex+0x394/0x4c0 [ 481.778292][T11217] _copy_from_user+0x2f/0xe0 [ 481.782903][T11217] csum_and_copy_from_iter+0x660/0x1480 [ 481.788490][T11217] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 481.794135][T11217] ? __kasan_slab_alloc+0x6c/0x80 [ 481.799168][T11217] ? slab_post_alloc_hook+0x86/0x4d0 [ 481.804444][T11217] ? rcu_is_watching+0x15/0xb0 [ 481.809210][T11217] ip_generic_getfrag+0x163/0x2f0 [ 481.814255][T11217] ? ip_skb_dst_mtu+0xb70/0xb70 [ 481.819097][T11217] ? raw_getfrag+0x11d/0x390 [ 481.823702][T11217] ? __alloc_skb+0x1b2/0x2c0 [ 481.828286][T11217] ? skb_put+0x112/0x210 [ 481.832527][T11217] __ip_append_data+0x2f3b/0x3bf0 [ 481.837546][T11217] ? _local_bh_enable+0xa0/0xa0 [ 481.842404][T11217] ? ipv4_mtu+0x23/0x670 [ 481.846643][T11217] ? raw_send_hdrinc+0x1150/0x1150 [ 481.851750][T11217] ? mark_lock+0x94/0x320 [ 481.856079][T11217] ? ip_setup_cork+0x840/0x840 [ 481.860859][T11217] ? ipv4_mtu+0x564/0x670 [ 481.865182][T11217] ? ipv4_mtu+0x23/0x670 [ 481.869419][T11217] ? ip_setup_cork+0x527/0x840 [ 481.874177][T11217] ? lockdep_hardirqs_on+0x98/0x150 [ 481.879370][T11217] ip_append_data+0x10d/0x180 [ 481.884052][T11217] ? raw_send_hdrinc+0x1150/0x1150 [ 481.889162][T11217] raw_sendmsg+0x155e/0x1ba0 [ 481.893765][T11217] ? compat_raw_ioctl+0x70/0x70 [ 481.898618][T11217] ? __lock_acquire+0x135d/0x7eb0 [ 481.903653][T11217] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 481.910066][T11217] ? aa_sock_msg_perm+0x94/0x150 [ 481.914995][T11217] ? sock_rps_record_flow+0x19/0x3f0 [ 481.920283][T11217] ? inet_sendmsg+0x7e/0x2a0 [ 481.924865][T11217] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.930148][T11217] ? inet_send_prepare+0x250/0x250 [ 481.935345][T11217] ____sys_sendmsg+0x61b/0x980 [ 481.940212][T11217] ? __asan_memset+0x22/0x40 [ 481.944799][T11217] ? __sys_sendmsg_sock+0x30/0x30 [ 481.949816][T11217] ? __import_iovec+0x3fa/0x850 [ 481.954669][T11217] ? import_iovec+0x73/0xa0 [ 481.959168][T11217] ___sys_sendmsg+0x2a6/0x360 [ 481.963836][T11217] ? get_pid_task+0x20/0x1e0 [ 481.968422][T11217] ? __sys_sendmsg+0x2b0/0x2b0 [ 481.973190][T11217] ? __lock_acquire+0x7eb0/0x7eb0 [ 481.978226][T11217] __se_sys_sendmsg+0x1d0/0x2c0 [ 481.983107][T11217] ? __x64_sys_sendmsg+0x80/0x80 [ 481.988142][T11217] ? lockdep_hardirqs_on+0x98/0x150 [ 481.993361][T11217] do_syscall_64+0x55/0xb0 [ 481.997775][T11217] ? clear_bhb_loop+0x40/0x90 [ 482.002468][T11217] ? clear_bhb_loop+0x40/0x90 [ 482.007144][T11217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.013037][T11217] RIP: 0033:0x7f5f39b9f559 [ 482.017448][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.037174][T11217] RSP: 002b:00007f5f3aa2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.045674][T11217] RAX: ffffffffffffffda RBX: 00007f5f39e25fa0 RCX: 00007f5f39b9f559 [ 482.053657][T11217] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 482.061641][T11217] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 482.069621][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.077699][T11217] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 482.085689][T11217] [ 482.414763][T11223] netlink: 'syz.3.1781': attribute type 21 has an invalid length. [ 482.439156][T11223] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1781'. [ 482.479573][T11223] netlink: 'syz.3.1781': attribute type 10 has an invalid length. [ 482.877810][ T5791] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 483.254571][T11240] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 483.263619][T11240] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.441546][T11248] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 484.479719][T11248] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 484.645001][T11258] netlink: 'syz.2.1794': attribute type 21 has an invalid length. [ 484.658244][T11258] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1794'. [ 484.800741][T11256] syzkaller0: entered promiscuous mode [ 484.830102][T11256] syzkaller0: entered allmulticast mode [ 484.865259][T11258] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 485.342861][ T5791] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 486.942570][T11275] rxe_eth0 speed is unknown, defaulting to 1000 [ 487.138636][T11284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1802'. [ 487.407367][T11284] netlink: 'syz.3.1802': attribute type 2 has an invalid length. [ 487.418995][T11284] netlink: 'syz.3.1802': attribute type 8 has an invalid length. [ 487.429522][T11284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1802'. [ 487.737584][T11295] netlink: 'syz.3.1806': attribute type 21 has an invalid length. [ 487.754631][T11295] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1806'. [ 487.769687][T11299] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 487.815803][T11296] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.824142][T11296] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 488.192393][T11301] syzkaller0: entered promiscuous mode [ 490.284862][T11309] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.438441][ T5791] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 490.860697][T11329] netlink: 'syz.3.1817': attribute type 21 has an invalid length. [ 490.877378][T11329] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1817'. [ 491.078065][T11329] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 491.374455][T11334] syzkaller0: entered promiscuous mode [ 491.383688][T11334] syzkaller0: entered allmulticast mode [ 491.727105][T11341] netlink: 'syz.3.1824': attribute type 21 has an invalid length. [ 491.747235][T11341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1824'. [ 491.793756][T11341] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 491.820215][T11341] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 492.024139][T11353] netlink: 'syz.3.1826': attribute type 21 has an invalid length. [ 492.047086][T11353] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1826'. [ 492.203088][T11356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1827'. [ 492.389950][T11359] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1836'. [ 492.494223][T11359] validate_nla: 2 callbacks suppressed [ 492.494313][T11359] netlink: 'syz.3.1836': attribute type 10 has an invalid length. [ 492.540590][T11361] syzkaller0: entered promiscuous mode [ 492.555605][T11356] netlink: 'syz.1.1827': attribute type 2 has an invalid length. [ 492.583070][T11356] netlink: 'syz.1.1827': attribute type 8 has an invalid length. [ 492.603693][T11356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1827'. [ 494.672726][T11370] rxe_eth0 speed is unknown, defaulting to 1000 [ 494.927558][T11391] netlink: 'syz.0.1835': attribute type 21 has an invalid length. [ 494.977211][T11391] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1835'. [ 495.059660][T11391] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 495.157811][T11391] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 495.579797][T11398] netlink: 'syz.0.1838': attribute type 21 has an invalid length. [ 495.633228][T11398] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1838'. [ 495.732210][T11398] netlink: 'syz.0.1838': attribute type 10 has an invalid length. [ 496.785229][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.792983][T11418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.813641][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.824847][T11418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.797346][T11432] rxe_eth0 speed is unknown, defaulting to 1000 [ 499.666401][T11445] netlink: 'syz.3.1849': attribute type 21 has an invalid length. [ 499.690284][T11445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1849'. [ 499.764343][T11445] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 499.779749][T11451] syzkaller0: entered promiscuous mode [ 499.796063][T11451] syzkaller0: entered allmulticast mode [ 499.877493][T11448] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.108049][T11455] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.692491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.701138][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.124982][T11460] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.693338][T11477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.708282][T11477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.723353][T11477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.734385][T11477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.774703][T11477] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 504.802991][T11477] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 505.371897][T11474] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.064308][T11501] netlink: 'syz.3.1863': attribute type 21 has an invalid length. [ 506.075545][T11501] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1863'. [ 506.110647][T11501] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 506.763013][T11505] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.288395][T11512] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.453798][T11515] rxe_eth0 speed is unknown, defaulting to 1000 [ 509.528395][T11524] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 509.568124][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1871'. [ 509.611290][T11524] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 510.570423][T11532] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 510.578625][T11532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1873'. [ 510.589442][T11532] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 510.755364][T11534] netlink: 'syz.0.1875': attribute type 21 has an invalid length. [ 510.764141][T11534] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1875'. [ 510.800430][T11534] netlink: 'syz.0.1875': attribute type 10 has an invalid length. [ 510.924926][T11539] netlink: 'syz.0.1877': attribute type 21 has an invalid length. [ 511.751473][T11543] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.619306][T11557] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1885'. [ 512.685906][T11556] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1885'. [ 512.727526][T11557] openvswitch: netlink: Message has 20476 unknown bytes. [ 512.746765][T11556] openvswitch: netlink: Message has 20476 unknown bytes. [ 512.824702][T11560] netlink: 'syz.2.1886': attribute type 21 has an invalid length. [ 512.835353][T11560] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1886'. [ 512.885533][T11560] netlink: 'syz.2.1886': attribute type 10 has an invalid length. [ 512.969051][T11564] FAULT_INJECTION: forcing a failure. [ 512.969051][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 513.006863][T11564] CPU: 0 PID: 11564 Comm: syz.3.1888 Not tainted syzkaller #0 [ 513.014392][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 513.024471][T11564] Call Trace: [ 513.027776][T11564] [ 513.030725][T11564] dump_stack_lvl+0x18c/0x250 [ 513.035431][T11564] ? show_regs_print_info+0x20/0x20 [ 513.040738][T11564] ? load_image+0x420/0x420 [ 513.045265][T11564] ? __might_sleep+0xe0/0xe0 [ 513.049880][T11564] ? __lock_acquire+0x7eb0/0x7eb0 [ 513.054927][T11564] should_fail_ex+0x394/0x4c0 [ 513.059632][T11564] should_failslab+0x9/0x20 [ 513.064155][T11564] slab_pre_alloc_hook+0x59/0x300 [ 513.069228][T11564] kmem_cache_alloc_node+0x5e/0x320 [ 513.074443][T11564] ? perf_event_alloc+0x146/0x2110 [ 513.079582][T11564] perf_event_alloc+0x146/0x2110 [ 513.084579][T11564] ? _raw_spin_unlock+0x28/0x40 [ 513.089469][T11564] ? find_lively_task_by_vpid+0x19/0x290 [ 513.095128][T11564] ? find_lively_task_by_vpid+0x19/0x290 [ 513.100804][T11564] __se_sys_perf_event_open+0x78b/0x1d40 [ 513.106470][T11564] ? mutex_unlock+0x10/0x10 [ 513.111000][T11564] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 513.116678][T11564] ? lock_chain_count+0x20/0x20 [ 513.121562][T11564] ? lockdep_hardirqs_on+0x98/0x150 [ 513.126781][T11564] ? __x64_sys_perf_event_open+0x20/0xc0 [ 513.132450][T11564] do_syscall_64+0x55/0xb0 [ 513.136888][T11564] ? clear_bhb_loop+0x40/0x90 [ 513.141588][T11564] ? clear_bhb_loop+0x40/0x90 [ 513.146293][T11564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.152218][T11564] RIP: 0033:0x7f5f39b9f559 [ 513.156661][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.176290][T11564] RSP: 002b:00007f5f3aa2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 513.184742][T11564] RAX: ffffffffffffffda RBX: 00007f5f39e25fa0 RCX: 00007f5f39b9f559 [ 513.192740][T11564] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000300 [ 513.200745][T11564] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 513.208782][T11564] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 513.216786][T11564] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 513.224798][T11564] [ 513.720016][T11586] netlink: 'syz.2.1895': attribute type 21 has an invalid length. [ 516.598649][T11587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.612229][T11592] netlink: 'syz.0.1897': attribute type 21 has an invalid length. [ 516.637047][T11592] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1897'. [ 516.690887][T11592] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 516.734737][T11597] FAULT_INJECTION: forcing a failure. [ 516.734737][T11597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.759488][T11597] CPU: 0 PID: 11597 Comm: syz.2.1899 Not tainted syzkaller #0 [ 516.767003][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 516.777074][T11597] Call Trace: [ 516.780343][T11597] [ 516.783268][T11597] dump_stack_lvl+0x18c/0x250 [ 516.787964][T11597] ? show_regs_print_info+0x20/0x20 [ 516.793203][T11597] ? load_image+0x420/0x420 [ 516.797739][T11597] ? __lock_acquire+0x7eb0/0x7eb0 [ 516.802784][T11597] ? snprintf+0xe9/0x140 [ 516.807042][T11597] should_fail_ex+0x394/0x4c0 [ 516.811779][T11597] _copy_to_user+0x2f/0xa0 [ 516.816231][T11597] simple_read_from_buffer+0xe7/0x150 [ 516.821640][T11597] proc_fail_nth_read+0x1e8/0x260 [ 516.826689][T11597] ? proc_fault_inject_write+0x360/0x360 [ 516.832339][T11597] ? fsnotify_perm+0x271/0x5e0 [ 516.837180][T11597] ? proc_fault_inject_write+0x360/0x360 [ 516.842818][T11597] vfs_read+0x298/0x990 [ 516.846994][T11597] ? kernel_read+0x1e0/0x1e0 [ 516.851584][T11597] ? __fget_files+0x28/0x460 [ 516.856168][T11597] ? __fget_files+0x3fc/0x460 [ 516.860845][T11597] ? __fdget_pos+0x2a3/0x330 [ 516.865454][T11597] ? ksys_read+0x74/0x260 [ 516.869784][T11597] ksys_read+0x151/0x260 [ 516.874038][T11597] ? vfs_write+0x9a0/0x9a0 [ 516.878473][T11597] ? lockdep_hardirqs_on+0x98/0x150 [ 516.883686][T11597] do_syscall_64+0x55/0xb0 [ 516.888117][T11597] ? clear_bhb_loop+0x40/0x90 [ 516.892795][T11597] ? clear_bhb_loop+0x40/0x90 [ 516.897466][T11597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.903351][T11597] RIP: 0033:0x7f2f6935fd8e [ 516.907758][T11597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.927370][T11597] RSP: 002b:00007f2f6a2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.935835][T11597] RAX: ffffffffffffffda RBX: 00007f2f6a2c16c0 RCX: 00007f2f6935fd8e [ 516.943798][T11597] RDX: 000000000000000f RSI: 00007f2f6a2c10a0 RDI: 0000000000000003 [ 516.951773][T11597] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 516.959739][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.967780][T11597] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 516.975777][T11597] [ 517.585834][T11596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.037789][T11630] netlink: 'syz.2.1911': attribute type 21 has an invalid length. [ 519.056931][T11630] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1911'. [ 519.074443][T11630] netlink: 'syz.2.1911': attribute type 10 has an invalid length. [ 519.113546][T11634] netlink: 'syz.3.1912': attribute type 28 has an invalid length. [ 519.127682][T11634] netlink: 'syz.3.1912': attribute type 3 has an invalid length. [ 519.135571][T11634] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1912'. [ 519.155150][T11634] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1912'. [ 519.164917][T11635] syz.1.1913 uses obsolete (PF_INET,SOCK_PACKET) [ 519.203900][T11638] FAULT_INJECTION: forcing a failure. [ 519.203900][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 519.213773][T11640] netlink: 'syz.2.1915': attribute type 10 has an invalid length. [ 519.227091][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1915'. [ 519.238014][T11640] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 519.258028][T11638] CPU: 1 PID: 11638 Comm: syz.0.1914 Not tainted syzkaller #0 [ 519.265555][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.275641][T11638] Call Trace: [ 519.278947][T11638] [ 519.281900][T11638] dump_stack_lvl+0x18c/0x250 [ 519.286624][T11638] ? show_regs_print_info+0x20/0x20 [ 519.291872][T11638] ? load_image+0x420/0x420 [ 519.296520][T11638] ? __might_sleep+0xe0/0xe0 [ 519.301142][T11638] ? __lock_acquire+0x7eb0/0x7eb0 [ 519.306221][T11638] should_fail_ex+0x394/0x4c0 [ 519.310961][T11638] should_failslab+0x9/0x20 [ 519.315500][T11638] slab_pre_alloc_hook+0x59/0x300 [ 519.320560][T11638] ? tomoyo_encode+0x2ad/0x570 [ 519.325356][T11638] ? tomoyo_encode+0x2ad/0x570 [ 519.330144][T11638] __kmem_cache_alloc_node+0x53/0x260 [ 519.335612][T11638] ? tomoyo_encode+0x2ad/0x570 [ 519.340431][T11638] __kmalloc+0xa7/0x240 [ 519.344626][T11638] tomoyo_encode+0x2ad/0x570 [ 519.349258][T11638] tomoyo_realpath_from_path+0x57c/0x5c0 [ 519.354936][T11638] ? tomoyo_domain+0xd6/0x120 [ 519.359654][T11638] tomoyo_path_number_perm+0x248/0x5e0 [ 519.365140][T11638] ? tomoyo_path_number_perm+0x217/0x5e0 [ 519.370811][T11638] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 519.376320][T11638] ? ksys_write+0x1d2/0x260 [ 519.380945][T11638] ? __fget_files+0x28/0x460 [ 519.385594][T11638] security_file_ioctl+0x70/0xa0 [ 519.390649][T11638] __se_sys_ioctl+0x48/0x170 [ 519.395279][T11638] do_syscall_64+0x55/0xb0 [ 519.399729][T11638] ? clear_bhb_loop+0x40/0x90 [ 519.404440][T11638] ? clear_bhb_loop+0x40/0x90 [ 519.409153][T11638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.415121][T11638] RIP: 0033:0x7f1f21f9f559 [ 519.419563][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.439292][T11638] RSP: 002b:00007f1f22e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.447739][T11638] RAX: ffffffffffffffda RBX: 00007f1f22225fa0 RCX: 00007f1f21f9f559 [ 519.455729][T11638] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000005 [ 519.463723][T11638] RBP: 00007f1f22e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 519.471874][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.479875][T11638] R13: 00007f1f22226038 R14: 00007f1f22225fa0 R15: 00007ffed4ec09c8 [ 519.487911][T11638] [ 519.524224][T11638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 519.546062][T11635] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1913'. [ 519.711452][T11648] FAULT_INJECTION: forcing a failure. [ 519.711452][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 519.735558][T11648] CPU: 0 PID: 11648 Comm: syz.3.1917 Not tainted syzkaller #0 [ 519.743070][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.753243][T11648] Call Trace: [ 519.755226][T11635] team0: Port device team_slave_0 removed [ 519.756516][T11648] [ 519.756527][T11648] dump_stack_lvl+0x18c/0x250 [ 519.756560][T11648] ? show_regs_print_info+0x20/0x20 [ 519.756584][T11648] ? load_image+0x420/0x420 [ 519.756608][T11648] ? __might_sleep+0xe0/0xe0 [ 519.756633][T11648] ? __lock_acquire+0x7eb0/0x7eb0 [ 519.756661][T11648] should_fail_ex+0x394/0x4c0 [ 519.756688][T11648] should_failslab+0x9/0x20 [ 519.756703][T11648] slab_pre_alloc_hook+0x59/0x300 [ 519.756723][T11648] ? sk_prot_alloc+0xe7/0x210 [ 519.756747][T11648] ? sk_prot_alloc+0xe7/0x210 [ 519.756769][T11648] __kmem_cache_alloc_node+0x53/0x260 [ 519.756792][T11648] ? sk_prot_alloc+0xe7/0x210 [ 519.756820][T11648] __kmalloc+0xa7/0x240 [ 519.756849][T11648] sk_prot_alloc+0xe7/0x210 [ 519.756870][T11648] ? sk_alloc+0x24/0x350 [ 519.756895][T11648] sk_alloc+0x3a/0x350 [ 519.756917][T11648] ? bpf_ctx_init+0x154/0x190 [ 519.756942][T11648] bpf_prog_test_run_skb+0x371/0x18f0 [ 519.756967][T11648] ? __fget_files+0x28/0x460 [ 519.756993][T11648] ? __fget_files+0x3fc/0x460 [ 519.757027][T11648] ? cpu_online+0x60/0x60 [ 519.757049][T11648] bpf_prog_test_run+0x31f/0x390 [ 519.757074][T11648] __sys_bpf+0x49d/0x890 [ 519.757106][T11648] ? bpf_link_show_fdinfo+0x560/0x560 [ 519.757140][T11648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 519.757179][T11648] __x64_sys_bpf+0x7c/0x90 [ 519.757200][T11648] do_syscall_64+0x55/0xb0 [ 519.757221][T11648] ? clear_bhb_loop+0x40/0x90 [ 519.757243][T11648] ? clear_bhb_loop+0x40/0x90 [ 519.757268][T11648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.757291][T11648] RIP: 0033:0x7f5f39b9f559 [ 519.757309][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.757324][T11648] RSP: 002b:00007f5f3aa2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.757345][T11648] RAX: ffffffffffffffda RBX: 00007f5f39e25fa0 RCX: 00007f5f39b9f559 [ 519.757359][T11648] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 519.757371][T11648] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 519.757405][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.757417][T11648] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 519.757449][T11648] [ 520.079399][T11635] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 520.453924][T11666] netlink: 'syz.3.1923': attribute type 21 has an invalid length. [ 520.474174][T11666] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1923'. [ 520.498236][T11668] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 520.870917][T11688] netlink: 54419 bytes leftover after parsing attributes in process `syz.3.1931'. [ 521.862370][T11699] netlink: 'syz.0.1936': attribute type 21 has an invalid length. [ 521.872023][T11699] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1936'. [ 521.937655][T11699] netlink: 'syz.0.1936': attribute type 10 has an invalid length. [ 521.946418][T11701] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1935'. [ 522.188878][T11703] delete_channel: no stack [ 522.232592][T11715] FAULT_INJECTION: forcing a failure. [ 522.232592][T11715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.266559][T11715] CPU: 1 PID: 11715 Comm: syz.0.1939 Not tainted syzkaller #0 [ 522.274078][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 522.284151][T11715] Call Trace: [ 522.287443][T11715] [ 522.290384][T11715] dump_stack_lvl+0x18c/0x250 [ 522.295182][T11715] ? show_regs_print_info+0x20/0x20 [ 522.300403][T11715] ? load_image+0x420/0x420 [ 522.304925][T11715] ? __might_fault+0xaa/0x120 [ 522.309622][T11715] ? __lock_acquire+0x7eb0/0x7eb0 [ 522.314670][T11715] should_fail_ex+0x394/0x4c0 [ 522.319366][T11715] _copy_from_user+0x2f/0xe0 [ 522.323977][T11715] ___sys_sendmsg+0x1c7/0x360 [ 522.328684][T11715] ? get_pid_task+0x20/0x1e0 [ 522.333304][T11715] ? __sys_sendmsg+0x2b0/0x2b0 [ 522.338106][T11715] ? __lock_acquire+0x7eb0/0x7eb0 [ 522.343177][T11715] __se_sys_sendmsg+0x1d0/0x2c0 [ 522.348049][T11715] ? __x64_sys_sendmsg+0x80/0x80 [ 522.353025][T11715] ? lockdep_hardirqs_on+0x98/0x150 [ 522.358244][T11715] do_syscall_64+0x55/0xb0 [ 522.362680][T11715] ? clear_bhb_loop+0x40/0x90 [ 522.367374][T11715] ? clear_bhb_loop+0x40/0x90 [ 522.372073][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.378027][T11715] RIP: 0033:0x7f1f21f9f559 [ 522.382461][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.402100][T11715] RSP: 002b:00007f1f22e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.410610][T11715] RAX: ffffffffffffffda RBX: 00007f1f22225fa0 RCX: 00007f1f21f9f559 [ 522.418606][T11715] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 522.426601][T11715] RBP: 00007f1f22e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 522.434593][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.442586][T11715] R13: 00007f1f22226038 R14: 00007f1f22225fa0 R15: 00007ffed4ec09c8 [ 522.450602][T11715] [ 522.887249][T11730] syzkaller0: entered promiscuous mode [ 522.893340][T11730] syzkaller0: entered allmulticast mode [ 522.902023][T11734] netlink: 'syz.1.1948': attribute type 21 has an invalid length. [ 522.918667][T11734] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1948'. [ 525.282153][T11766] validate_nla: 1 callbacks suppressed [ 525.282165][T11766] netlink: 'syz.2.1958': attribute type 2 has an invalid length. [ 525.300220][T11766] __nla_validate_parse: 1 callbacks suppressed [ 525.300264][T11766] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1958'. [ 525.353490][T11768] netlink: 'syz.3.1959': attribute type 21 has an invalid length. [ 525.367148][T11768] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1959'. [ 525.402494][T11768] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 525.585030][T11779] netlink: 'syz.1.1963': attribute type 3 has an invalid length. [ 525.603449][T11779] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1963'. [ 525.762524][T11788] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 525.771442][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1966'. [ 525.783676][T11788] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 528.177587][T11808] netlink: 'syz.0.1972': attribute type 21 has an invalid length. [ 528.185584][T11808] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1972'. [ 528.236161][T11808] netlink: 'syz.0.1972': attribute type 10 has an invalid length. [ 528.673778][T11814] netlink: 'syz.2.1974': attribute type 3 has an invalid length. [ 528.688870][T11819] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 528.699211][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1976'. [ 528.710935][T11819] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 528.717560][T11814] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1974'. [ 529.289596][T11830] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1980'. [ 529.377014][T11838] netlink: 'syz.1.1982': attribute type 2 has an invalid length. [ 529.384811][T11838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1982'. [ 529.399049][T11837] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1983'. [ 530.421721][T11863] validate_nla: 7 callbacks suppressed [ 530.421736][T11863] netlink: 'syz.0.2001': attribute type 2 has an invalid length. [ 530.435553][T11863] __nla_validate_parse: 3 callbacks suppressed [ 530.435566][T11863] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2001'. [ 530.452309][T11863] FAULT_INJECTION: forcing a failure. [ 530.452309][T11863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.466508][T11863] CPU: 1 PID: 11863 Comm: syz.0.2001 Not tainted syzkaller #0 [ 530.474045][T11863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.484125][T11863] Call Trace: [ 530.487404][T11863] [ 530.490337][T11863] dump_stack_lvl+0x18c/0x250 [ 530.495032][T11863] ? show_regs_print_info+0x20/0x20 [ 530.500319][T11863] ? load_image+0x420/0x420 [ 530.504821][T11863] ? __lock_acquire+0x7eb0/0x7eb0 [ 530.509853][T11863] ? snprintf+0xe9/0x140 [ 530.514189][T11863] should_fail_ex+0x394/0x4c0 [ 530.518873][T11863] _copy_to_user+0x2f/0xa0 [ 530.523297][T11863] simple_read_from_buffer+0xe7/0x150 [ 530.528683][T11863] proc_fail_nth_read+0x1e8/0x260 [ 530.533718][T11863] ? proc_fault_inject_write+0x360/0x360 [ 530.539354][T11863] ? fsnotify_perm+0x271/0x5e0 [ 530.544127][T11863] ? proc_fault_inject_write+0x360/0x360 [ 530.549759][T11863] vfs_read+0x298/0x990 [ 530.553923][T11863] ? kernel_read+0x1e0/0x1e0 [ 530.558516][T11863] ? __fget_files+0x28/0x460 [ 530.563112][T11863] ? __fget_files+0x3fc/0x460 [ 530.567797][T11863] ? __fdget_pos+0x2a3/0x330 [ 530.572394][T11863] ? ksys_read+0x74/0x260 [ 530.576736][T11863] ksys_read+0x151/0x260 [ 530.580998][T11863] ? vfs_write+0x9a0/0x9a0 [ 530.585416][T11863] ? lockdep_hardirqs_on+0x98/0x150 [ 530.590610][T11863] do_syscall_64+0x55/0xb0 [ 530.595035][T11863] ? clear_bhb_loop+0x40/0x90 [ 530.599716][T11863] ? clear_bhb_loop+0x40/0x90 [ 530.604396][T11863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.610290][T11863] RIP: 0033:0x7f1f21f5fd8e [ 530.614716][T11863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.634323][T11863] RSP: 002b:00007f1f22e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.642734][T11863] RAX: ffffffffffffffda RBX: 00007f1f22e6e6c0 RCX: 00007f1f21f5fd8e [ 530.650701][T11863] RDX: 000000000000000f RSI: 00007f1f22e6e0a0 RDI: 0000000000000004 [ 530.658670][T11863] RBP: 00007f1f22e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 530.666640][T11863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.674724][T11863] R13: 00007f1f22226038 R14: 00007f1f22225fa0 R15: 00007ffed4ec09c8 [ 530.682709][T11863] [ 530.764876][T11866] netlink: 'syz.0.1993': attribute type 2 has an invalid length. [ 530.779341][T11866] netlink: 'syz.0.1993': attribute type 8 has an invalid length. [ 530.817914][T11866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 530.840573][T11869] FAULT_INJECTION: forcing a failure. [ 530.840573][T11869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.858765][T11869] CPU: 1 PID: 11869 Comm: syz.0.1993 Not tainted syzkaller #0 [ 530.866268][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.876367][T11869] Call Trace: [ 530.879748][T11869] [ 530.882704][T11869] dump_stack_lvl+0x18c/0x250 [ 530.887417][T11869] ? show_regs_print_info+0x20/0x20 [ 530.892672][T11869] ? load_image+0x420/0x420 [ 530.897211][T11869] ? __might_fault+0xaa/0x120 [ 530.901917][T11869] ? __lock_acquire+0x7eb0/0x7eb0 [ 530.906998][T11869] should_fail_ex+0x394/0x4c0 [ 530.911725][T11869] _copy_from_iter+0x1cd/0x1290 [ 530.916610][T11869] ? rcu_is_watching+0x15/0xb0 [ 530.921403][T11869] ? copyout_mc+0x70/0x70 [ 530.925739][T11869] ? __virt_addr_valid+0x10c/0x380 [ 530.930855][T11869] ? __virt_addr_valid+0x10c/0x380 [ 530.935975][T11869] ? __virt_addr_valid+0x10c/0x380 [ 530.941186][T11869] ? __check_object_size+0x4fc/0xa40 [ 530.946474][T11869] netlink_sendmsg+0x76b/0xbf0 [ 530.951241][T11869] ? netlink_getsockopt+0x590/0x590 [ 530.956435][T11869] ? apparmor_socket_sendmsg+0x8e/0x330 [ 530.961985][T11869] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 530.967276][T11869] ? security_socket_sendmsg+0x80/0xa0 [ 530.972915][T11869] ? netlink_getsockopt+0x590/0x590 [ 530.978123][T11869] ____sys_sendmsg+0x61b/0x980 [ 530.983065][T11869] ? __asan_memset+0x22/0x40 [ 530.987660][T11869] ? __sys_sendmsg_sock+0x30/0x30 [ 530.992677][T11869] ? __import_iovec+0x5f2/0x850 [ 530.997570][T11869] ? import_iovec+0x73/0xa0 [ 531.002079][T11869] ___sys_sendmsg+0x2a6/0x360 [ 531.006756][T11869] ? get_pid_task+0x20/0x1e0 [ 531.011464][T11869] ? __sys_sendmsg+0x2b0/0x2b0 [ 531.016251][T11869] ? __lock_acquire+0x7eb0/0x7eb0 [ 531.021314][T11869] __se_sys_sendmsg+0x1d0/0x2c0 [ 531.026175][T11869] ? __x64_sys_sendmsg+0x80/0x80 [ 531.031143][T11869] ? syscall_enter_from_user_mode+0x20/0x80 [ 531.037043][T11869] ? lockdep_hardirqs_on+0x98/0x150 [ 531.042288][T11869] do_syscall_64+0x55/0xb0 [ 531.046707][T11869] ? clear_bhb_loop+0x40/0x90 [ 531.051393][T11869] ? clear_bhb_loop+0x40/0x90 [ 531.056072][T11869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.062005][T11869] RIP: 0033:0x7f1f21f9f559 [ 531.066423][T11869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.086044][T11869] RSP: 002b:00007f1f22e4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.094518][T11869] RAX: ffffffffffffffda RBX: 00007f1f22226090 RCX: 00007f1f21f9f559 [ 531.102493][T11869] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 000000000000000b [ 531.110465][T11869] RBP: 00007f1f22e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 531.118524][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.126491][T11869] R13: 00007f1f22226128 R14: 00007f1f22226090 R15: 00007ffed4ec09c8 [ 531.134480][T11869] [ 531.262372][T11876] netlink: 'syz.1.2000': attribute type 21 has an invalid length. [ 531.279071][T11876] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2000'. [ 531.323285][T11876] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 531.499857][T11886] netlink: 'syz.2.2004': attribute type 2 has an invalid length. [ 531.515456][T11886] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2004'. [ 532.270559][T11912] netlink: 'syz.1.2013': attribute type 21 has an invalid length. [ 532.384395][T11912] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2013'. [ 532.456888][T11916] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 532.844087][T11930] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2021'. [ 533.661063][T11956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.801549][T11961] netlink: 'syz.0.2034': attribute type 3 has an invalid length. [ 533.810070][T11961] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2034'. [ 534.458359][T11986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.777119][T12003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.784433][T12003] IPv6: NLM_F_CREATE should be set when creating new route [ 534.791805][T12003] IPv6: NLM_F_CREATE should be set when creating new route [ 534.799143][T12003] IPv6: NLM_F_CREATE should be set when creating new route [ 534.832657][T12004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.342240][T12024] netlink: 'syz.0.2054': attribute type 3 has an invalid length. [ 535.370487][T12024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2054'. [ 535.462698][T12028] tun0: tun_chr_ioctl cmd 35108 [ 535.611689][T12032] FAULT_INJECTION: forcing a failure. [ 535.611689][T12032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.656885][T12032] CPU: 0 PID: 12032 Comm: syz.3.2057 Not tainted syzkaller #0 [ 535.664401][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.674483][T12032] Call Trace: [ 535.677784][T12032] [ 535.680741][T12032] dump_stack_lvl+0x18c/0x250 [ 535.685460][T12032] ? show_regs_print_info+0x20/0x20 [ 535.690690][T12032] ? load_image+0x420/0x420 [ 535.695226][T12032] ? __lock_acquire+0x7eb0/0x7eb0 [ 535.700281][T12032] ? snprintf+0xe9/0x140 [ 535.704643][T12032] should_fail_ex+0x394/0x4c0 [ 535.709388][T12032] _copy_to_user+0x2f/0xa0 [ 535.713831][T12032] simple_read_from_buffer+0xe7/0x150 [ 535.719239][T12032] proc_fail_nth_read+0x1e8/0x260 [ 535.724305][T12032] ? proc_fault_inject_write+0x360/0x360 [ 535.729980][T12032] ? fsnotify_perm+0x271/0x5e0 [ 535.734772][T12032] ? proc_fault_inject_write+0x360/0x360 [ 535.740446][T12032] vfs_read+0x298/0x990 [ 535.744649][T12032] ? kernel_read+0x1e0/0x1e0 [ 535.749276][T12032] ? __fget_files+0x28/0x460 [ 535.753898][T12032] ? __fget_files+0x3fc/0x460 [ 535.758614][T12032] ? __fdget_pos+0x2a3/0x330 [ 535.763236][T12032] ? ksys_read+0x74/0x260 [ 535.767603][T12032] ksys_read+0x151/0x260 [ 535.771876][T12032] ? vfs_write+0x9a0/0x9a0 [ 535.776332][T12032] ? lockdep_hardirqs_on+0x98/0x150 [ 535.781575][T12032] do_syscall_64+0x55/0xb0 [ 535.786031][T12032] ? clear_bhb_loop+0x40/0x90 [ 535.790742][T12032] ? clear_bhb_loop+0x40/0x90 [ 535.795451][T12032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.801381][T12032] RIP: 0033:0x7f5f39b5fd8e [ 535.805825][T12032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.825459][T12032] RSP: 002b:00007f5f3aa2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.833905][T12032] RAX: ffffffffffffffda RBX: 00007f5f3aa2e6c0 RCX: 00007f5f39b5fd8e [ 535.841903][T12032] RDX: 000000000000000f RSI: 00007f5f3aa2e0a0 RDI: 0000000000000006 [ 535.849897][T12032] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 535.857891][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.865883][T12032] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 535.873895][T12032] [ 536.278155][T12049] netlink: 3554 bytes leftover after parsing attributes in process `syz.3.2063'. [ 536.527853][T12057] FAULT_INJECTION: forcing a failure. [ 536.527853][T12057] name failslab, interval 1, probability 0, space 0, times 0 [ 536.577394][T12057] CPU: 1 PID: 12057 Comm: syz.3.2066 Not tainted syzkaller #0 [ 536.584916][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 536.594995][T12057] Call Trace: [ 536.598296][T12057] [ 536.601247][T12057] dump_stack_lvl+0x18c/0x250 [ 536.605954][T12057] ? show_regs_print_info+0x20/0x20 [ 536.611175][T12057] ? load_image+0x420/0x420 [ 536.615708][T12057] ? __might_sleep+0xe0/0xe0 [ 536.620330][T12057] ? __lock_acquire+0x7eb0/0x7eb0 [ 536.625389][T12057] should_fail_ex+0x394/0x4c0 [ 536.630094][T12057] should_failslab+0x9/0x20 [ 536.634612][T12057] slab_pre_alloc_hook+0x59/0x300 [ 536.639522][T12059] netlink: 'syz.0.2067': attribute type 3 has an invalid length. [ 536.639644][T12057] kmem_cache_alloc_lru+0x4d/0x2c0 [ 536.652466][T12057] ? sock_alloc_inode+0x28/0xc0 [ 536.657345][T12057] sock_alloc_inode+0x28/0xc0 [ 536.662041][T12057] ? sockfs_init_fs_context+0xb0/0xb0 [ 536.667435][T12057] new_inode_pseudo+0x63/0x1d0 [ 536.672234][T12057] __sock_create+0x12d/0x940 [ 536.676915][T12057] ? __might_fault+0xaa/0x120 [ 536.677954][T12059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2067'. [ 536.681617][T12057] ? __might_fault+0xc6/0x120 [ 536.695582][T12057] __sys_socketpair+0x1c1/0x550 [ 536.700452][T12057] __x64_sys_socketpair+0x9b/0xb0 [ 536.705485][T12057] do_syscall_64+0x55/0xb0 [ 536.709896][T12057] ? clear_bhb_loop+0x40/0x90 [ 536.714569][T12057] ? clear_bhb_loop+0x40/0x90 [ 536.719245][T12057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.725132][T12057] RIP: 0033:0x7f5f39b9f559 [ 536.729627][T12057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.749231][T12057] RSP: 002b:00007f5f3aa2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 536.757643][T12057] RAX: ffffffffffffffda RBX: 00007f5f39e25fa0 RCX: 00007f5f39b9f559 [ 536.765609][T12057] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 536.773570][T12057] RBP: 00007f5f3aa2e090 R08: 0000000000000000 R09: 0000000000000000 [ 536.781539][T12057] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.789512][T12057] R13: 00007f5f39e26038 R14: 00007f5f39e25fa0 R15: 00007ffe58e5b298 [ 536.797503][T12057] [ 536.837598][T12057] socket: no more sockets [ 536.850795][T12062] netlink: 'syz.1.2069': attribute type 21 has an invalid length. [ 536.859486][T12062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2069'. [ 536.956188][T12061] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 537.426621][T12079] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 537.492557][T12079] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.521673][T12079] team0: entered promiscuous mode [ 537.554204][T12079] team_slave_0: entered promiscuous mode [ 537.578274][T12079] team_slave_1: entered promiscuous mode [ 537.597603][T12079] dummy0: entered promiscuous mode [ 537.604000][T12079] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.647065][T12078] syzkaller0: entered promiscuous mode [ 537.655157][T12078] syzkaller0: entered allmulticast mode [ 538.035184][T12092] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 538.069857][T12092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2080'. [ 538.869395][T12122] syzkaller0: entered promiscuous mode [ 538.874919][T12122] syzkaller0: entered allmulticast mode [ 539.353081][T12126] netlink: 'syz.0.2091': attribute type 3 has an invalid length. [ 539.381547][T12126] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2091'. [ 539.910035][T12142] FAULT_INJECTION: forcing a failure. [ 539.910035][T12142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.977094][T12142] CPU: 1 PID: 12142 Comm: syz.1.2097 Not tainted syzkaller #0 [ 539.984711][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.994802][T12142] Call Trace: [ 539.998112][T12142] [ 540.001069][T12142] dump_stack_lvl+0x18c/0x250 [ 540.005794][T12142] ? show_regs_print_info+0x20/0x20 [ 540.011030][T12142] ? load_image+0x420/0x420 [ 540.015573][T12142] ? __lock_acquire+0x7eb0/0x7eb0 [ 540.020636][T12142] ? snprintf+0xe9/0x140 [ 540.024913][T12142] should_fail_ex+0x394/0x4c0 [ 540.029646][T12142] _copy_to_user+0x2f/0xa0 [ 540.034101][T12142] simple_read_from_buffer+0xe7/0x150 [ 540.039521][T12142] proc_fail_nth_read+0x1e8/0x260 [ 540.044583][T12142] ? proc_fault_inject_write+0x360/0x360 [ 540.050234][T12142] ? fsnotify_perm+0x271/0x5e0 [ 540.055010][T12142] ? proc_fault_inject_write+0x360/0x360 [ 540.060692][T12142] vfs_read+0x298/0x990 [ 540.064873][T12142] ? kernel_read+0x1e0/0x1e0 [ 540.069469][T12142] ? __fget_files+0x28/0x460 [ 540.074070][T12142] ? __fget_files+0x3fc/0x460 [ 540.078764][T12142] ? __fdget_pos+0x2a3/0x330 [ 540.083354][T12142] ? ksys_read+0x74/0x260 [ 540.087695][T12142] ksys_read+0x151/0x260 [ 540.091952][T12142] ? vfs_write+0x9a0/0x9a0 [ 540.096381][T12142] ? lockdep_hardirqs_on+0x98/0x150 [ 540.101585][T12142] do_syscall_64+0x55/0xb0 [ 540.106001][T12142] ? clear_bhb_loop+0x40/0x90 [ 540.110677][T12142] ? clear_bhb_loop+0x40/0x90 [ 540.115502][T12142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.121428][T12142] RIP: 0033:0x7efc6d15fd8e [ 540.125861][T12142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.145474][T12142] RSP: 002b:00007efc6b3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.153895][T12142] RAX: ffffffffffffffda RBX: 00007efc6b3f66c0 RCX: 00007efc6d15fd8e [ 540.161864][T12142] RDX: 000000000000000f RSI: 00007efc6b3f60a0 RDI: 0000000000000005 [ 540.169829][T12142] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.177798][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.185857][T12142] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 540.193857][T12142] [ 540.671297][T12154] syzkaller0: entered promiscuous mode [ 540.685295][T12154] syzkaller0: entered allmulticast mode [ 540.828684][T12156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.938977][T12160] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 540.967520][T12162] netlink: 'syz.3.2104': attribute type 3 has an invalid length. [ 540.975340][T12162] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2104'. [ 541.041480][T12160] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.070715][T12160] bond0: (slave team0): Enslaving as an active interface with an up link [ 541.226032][T12170] netlink: 'syz.2.2107': attribute type 21 has an invalid length. [ 541.247080][T12170] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2107'. [ 541.283957][T12170] netlink: 'syz.2.2107': attribute type 10 has an invalid length. [ 541.678280][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.979124][T12203] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 542.029724][T12203] netlink: 'syz.3.2118': attribute type 3 has an invalid length. [ 542.062090][T12203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2118'. [ 542.123323][T12208] netlink: 'syz.2.2119': attribute type 3 has an invalid length. [ 542.131291][T12208] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2119'. [ 542.181582][T12210] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 542.227221][T12210] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 542.255404][T12210] team0: Port device wlan1 added [ 542.279756][T12212] netlink: 'syz.1.2120': attribute type 10 has an invalid length. [ 542.291830][T12209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.304753][T12214] FAULT_INJECTION: forcing a failure. [ 542.304753][T12214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.325157][T12212] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.351392][T12214] CPU: 0 PID: 12214 Comm: syz.0.2123 Not tainted syzkaller #0 [ 542.358917][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.369014][T12214] Call Trace: [ 542.372310][T12214] [ 542.374723][T12212] bond0: (slave team0): Enslaving as an active interface with an up link [ 542.375267][T12214] dump_stack_lvl+0x18c/0x250 [ 542.388372][T12214] ? show_regs_print_info+0x20/0x20 [ 542.393606][T12214] ? load_image+0x420/0x420 [ 542.398138][T12214] ? __might_fault+0xaa/0x120 [ 542.402847][T12214] ? __lock_acquire+0x7eb0/0x7eb0 [ 542.407908][T12214] should_fail_ex+0x394/0x4c0 [ 542.412625][T12214] _copy_from_user+0x2f/0xe0 [ 542.417246][T12214] __sys_bpf+0x23e/0x890 [ 542.421513][T12214] ? bpf_link_show_fdinfo+0x560/0x560 [ 542.426954][T12214] ? lock_chain_count+0x20/0x20 [ 542.431844][T12214] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 542.437862][T12214] __x64_sys_bpf+0x7c/0x90 [ 542.442308][T12214] do_syscall_64+0x55/0xb0 [ 542.446752][T12214] ? clear_bhb_loop+0x40/0x90 [ 542.451463][T12214] ? clear_bhb_loop+0x40/0x90 [ 542.456168][T12214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.462084][T12214] RIP: 0033:0x7f1f21f9f559 [ 542.466517][T12214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.486237][T12214] RSP: 002b:00007f1f22e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.494675][T12214] RAX: ffffffffffffffda RBX: 00007f1f22225fa0 RCX: 00007f1f21f9f559 [ 542.502669][T12214] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 542.510667][T12214] RBP: 00007f1f22e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 542.518661][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.526652][T12214] R13: 00007f1f22226038 R14: 00007f1f22225fa0 R15: 00007ffed4ec09c8 [ 542.534662][T12214] [ 543.092545][T12232] rxe_eth0 speed is unknown, defaulting to 1000 [ 543.100139][T12219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.601493][T12246] netlink: 'syz.3.2130': attribute type 3 has an invalid length. [ 543.614607][T12246] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2130'. [ 544.907990][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.934452][T12262] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 544.993617][T12262] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.010147][T12262] bond0: (slave team0): Enslaving as an active interface with an up link [ 545.023102][T12263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.256601][T12274] netlink: 'syz.0.2141': attribute type 3 has an invalid length. [ 545.268508][T12274] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2141'. [ 545.368268][T12280] FAULT_INJECTION: forcing a failure. [ 545.368268][T12280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.395884][T12280] CPU: 0 PID: 12280 Comm: syz.1.2145 Not tainted syzkaller #0 [ 545.403407][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.413488][T12280] Call Trace: [ 545.416785][T12280] [ 545.419730][T12280] dump_stack_lvl+0x18c/0x250 [ 545.424524][T12280] ? show_regs_print_info+0x20/0x20 [ 545.429751][T12280] ? load_image+0x420/0x420 [ 545.434281][T12280] ? __might_fault+0xaa/0x120 [ 545.439023][T12280] ? __lock_acquire+0x7eb0/0x7eb0 [ 545.444072][T12280] ? __virt_addr_valid+0x10c/0x380 [ 545.449243][T12280] should_fail_ex+0x394/0x4c0 [ 545.453930][T12280] _copy_from_user+0x2f/0xe0 [ 545.458515][T12280] dccp_setsockopt+0x31d/0x850 [ 545.463347][T12280] ? aa_af_perm+0x330/0x330 [ 545.467847][T12280] ? dccp_ioctl+0x200/0x200 [ 545.472342][T12280] ? __fget_files+0x28/0x460 [ 545.476932][T12280] ? aa_sock_opt_perm+0x74/0x100 [ 545.481863][T12280] ? sock_common_setsockopt+0x36/0xc0 [ 545.487240][T12280] ? sock_common_recvmsg+0x190/0x190 [ 545.492518][T12280] do_sock_setsockopt+0x175/0x1a0 [ 545.497539][T12280] ? __fdget+0x180/0x210 [ 545.501807][T12280] __x64_sys_setsockopt+0x182/0x200 [ 545.507005][T12280] do_syscall_64+0x55/0xb0 [ 545.511418][T12280] ? clear_bhb_loop+0x40/0x90 [ 545.516091][T12280] ? clear_bhb_loop+0x40/0x90 [ 545.520766][T12280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.526660][T12280] RIP: 0033:0x7efc6d19f559 [ 545.531161][T12280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.550770][T12280] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.559241][T12280] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 545.567212][T12280] RDX: 000000000000000d RSI: 000000000000010d RDI: 0000000000000003 [ 545.575194][T12280] RBP: 00007efc6b3f6090 R08: 0000000000000004 R09: 0000000000000000 [ 545.583159][T12280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.591126][T12280] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 545.599179][T12280] [ 545.654072][T12276] rxe_eth0 speed is unknown, defaulting to 1000 [ 545.822684][T12286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.177967][T12292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.821399][T12309] : renamed from bond0 (while UP) [ 546.850221][T12309] : left promiscuous mode [ 546.854730][T12309] bond_slave_0: left promiscuous mode [ 546.882141][T12311] FAULT_INJECTION: forcing a failure. [ 546.882141][T12311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.896936][T12309] bond_slave_1: left promiscuous mode [ 546.898020][T12311] CPU: 1 PID: 12311 Comm: syz.1.2156 Not tainted syzkaller #0 [ 546.907340][T12309] bridge0: left promiscuous mode [ 546.909803][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.924803][T12311] Call Trace: [ 546.924993][T12309] team0: left promiscuous mode [ 546.928076][T12311] [ 546.928086][T12311] dump_stack_lvl+0x18c/0x250 [ 546.928115][T12311] ? show_regs_print_info+0x20/0x20 [ 546.928136][T12311] ? load_image+0x420/0x420 [ 546.928157][T12311] ? __might_fault+0xaa/0x120 [ 546.928178][T12311] ? __lock_acquire+0x7eb0/0x7eb0 [ 546.928203][T12311] should_fail_ex+0x394/0x4c0 [ 546.928229][T12311] _copy_from_user+0x2f/0xe0 [ 546.928249][T12311] ___sys_sendmsg+0x1c7/0x360 [ 546.928268][T12311] ? get_pid_task+0x20/0x1e0 [ 546.928296][T12311] ? __sys_sendmsg+0x2b0/0x2b0 [ 546.928330][T12311] ? __lock_acquire+0x7eb0/0x7eb0 [ 546.935158][T12309] team_slave_0: left promiscuous mode [ 546.936022][T12311] __se_sys_sendmsg+0x1d0/0x2c0 [ 546.941448][T12309] team_slave_1: left promiscuous mode [ 546.945845][T12311] ? __x64_sys_sendmsg+0x80/0x80 [ 546.945889][T12311] ? lockdep_hardirqs_on+0x98/0x150 [ 546.951140][T12309] dummy0: left promiscuous mode [ 546.955041][T12311] do_syscall_64+0x55/0xb0 [ 546.961879][T12309] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 546.964704][T12311] ? clear_bhb_loop+0x40/0x90 [ 547.034477][T12311] ? clear_bhb_loop+0x40/0x90 [ 547.039175][T12311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.045086][T12311] RIP: 0033:0x7efc6d19f559 [ 547.049505][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.069113][T12311] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.077525][T12311] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 547.085490][T12311] RDX: 0000000000000000 RSI: 00002000000013c0 RDI: 0000000000000003 [ 547.093457][T12311] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.101432][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.109401][T12311] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 547.117380][T12311] [ 547.328860][T12316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.537351][T12325] netlink: 'syz.0.2161': attribute type 10 has an invalid length. [ 547.580440][T12325] team0: Port device wlan1 added [ 547.641804][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.198945][T12339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.241656][T12344] netlink: 'syz.2.2172': attribute type 27 has an invalid length. [ 548.274376][T12344] netlink: 'syz.2.2172': attribute type 25 has an invalid length. [ 548.296816][T12344] FAULT_INJECTION: forcing a failure. [ 548.296816][T12344] name failslab, interval 1, probability 0, space 0, times 0 [ 548.323572][T12344] CPU: 0 PID: 12344 Comm: syz.2.2172 Not tainted syzkaller #0 [ 548.331087][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.341171][T12344] Call Trace: [ 548.344607][T12344] [ 548.347567][T12344] dump_stack_lvl+0x18c/0x250 [ 548.352283][T12344] ? show_regs_print_info+0x20/0x20 [ 548.357513][T12344] ? load_image+0x420/0x420 [ 548.362045][T12344] ? br_get_link_af_size_filtered+0x91/0xca0 [ 548.368050][T12344] ? __lock_acquire+0x7eb0/0x7eb0 [ 548.373095][T12344] should_fail_ex+0x394/0x4c0 [ 548.377785][T12344] should_failslab+0x9/0x20 [ 548.382288][T12344] slab_pre_alloc_hook+0x59/0x300 [ 548.387326][T12344] kmem_cache_alloc_node+0x5e/0x320 [ 548.392534][T12344] ? __alloc_skb+0x103/0x2c0 [ 548.397129][T12344] __alloc_skb+0x103/0x2c0 [ 548.401566][T12344] br_info_notify+0x105/0x240 [ 548.406247][T12344] br_setlink+0x387/0x860 [ 548.410575][T12344] ? is_bpf_text_address+0x28f/0x2a0 [ 548.415862][T12344] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.421929][T12344] ? br_vlan_info+0x460/0x460 [ 548.426627][T12344] ? trace_contention_end+0x39/0xe0 [ 548.431823][T12344] ? __mutex_lock+0x30d/0xce0 [ 548.436501][T12344] ? mutex_is_locked+0x12/0x40 [ 548.441262][T12344] rtnl_bridge_setlink+0x5b2/0x7d0 [ 548.446457][T12344] ? mutex_lock_nested+0x20/0x20 [ 548.451393][T12344] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 548.456691][T12344] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 548.461979][T12344] rtnetlink_rcv_msg+0x843/0xf90 [ 548.466936][T12344] ? rtnetlink_rcv_msg+0x220/0xf90 [ 548.472055][T12344] ? rtnetlink_bind+0x80/0x80 [ 548.476730][T12344] ? kasan_quarantine_put+0xd8/0x220 [ 548.482048][T12344] ? lockdep_hardirqs_on+0x98/0x150 [ 548.487252][T12344] ? slab_free_freelist_hook+0x154/0x240 [ 548.492886][T12344] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 548.498865][T12344] ? lock_chain_count+0x20/0x20 [ 548.503707][T12344] ? __local_bh_enable_ip+0x13a/0x1c0 [ 548.509073][T12344] ? lockdep_hardirqs_on+0x98/0x150 [ 548.514265][T12344] ? __local_bh_enable_ip+0x13a/0x1c0 [ 548.519628][T12344] ? _local_bh_enable+0xa0/0xa0 [ 548.524478][T12344] ? __dev_queue_xmit+0x1481/0x3a30 [ 548.529678][T12344] ? __dev_queue_xmit+0x6d1/0x3a30 [ 548.534880][T12344] ? ref_tracker_free+0x686/0x830 [ 548.539952][T12344] netlink_rcv_skb+0x235/0x4c0 [ 548.544724][T12344] ? rtnetlink_bind+0x80/0x80 [ 548.549418][T12344] ? netlink_ack+0x1160/0x1160 [ 548.554190][T12344] ? __lock_acquire+0x7eb0/0x7eb0 [ 548.559221][T12344] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.564421][T12344] netlink_unicast+0x856/0x9e0 [ 548.569205][T12344] netlink_sendmsg+0x8d0/0xbf0 [ 548.573991][T12344] ? netlink_getsockopt+0x590/0x590 [ 548.579207][T12344] ? apparmor_socket_sendmsg+0x8e/0x330 [ 548.584784][T12344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 548.590081][T12344] ? security_socket_sendmsg+0x80/0xa0 [ 548.595563][T12344] ? netlink_getsockopt+0x590/0x590 [ 548.600781][T12344] ____sys_sendmsg+0x61b/0x980 [ 548.605561][T12344] ? __asan_memset+0x22/0x40 [ 548.610157][T12344] ? __sys_sendmsg_sock+0x30/0x30 [ 548.615187][T12344] ? __import_iovec+0x5f2/0x850 [ 548.620063][T12344] ? import_iovec+0x73/0xa0 [ 548.624570][T12344] ___sys_sendmsg+0x2a6/0x360 [ 548.629249][T12344] ? get_pid_task+0x20/0x1e0 [ 548.633842][T12344] ? __sys_sendmsg+0x2b0/0x2b0 [ 548.638616][T12344] ? __lock_acquire+0x7eb0/0x7eb0 [ 548.643653][T12344] __se_sys_sendmsg+0x1d0/0x2c0 [ 548.648506][T12344] ? __x64_sys_sendmsg+0x80/0x80 [ 548.653455][T12344] ? lockdep_hardirqs_on+0x98/0x150 [ 548.658656][T12344] do_syscall_64+0x55/0xb0 [ 548.663088][T12344] ? clear_bhb_loop+0x40/0x90 [ 548.667778][T12344] ? clear_bhb_loop+0x40/0x90 [ 548.672465][T12344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.678364][T12344] RIP: 0033:0x7f2f6939f559 [ 548.682814][T12344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.702431][T12344] RSP: 002b:00007f2f6a2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.710846][T12344] RAX: ffffffffffffffda RBX: 00007f2f69625fa0 RCX: 00007f2f6939f559 [ 548.718914][T12344] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 548.726884][T12344] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 548.734873][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.742838][T12344] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 548.750905][T12344] [ 548.850139][T12351] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2174'. [ 548.906870][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2174'. [ 549.209820][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.550587][T12372] rxe_eth0 speed is unknown, defaulting to 1000 [ 549.770492][T12387] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2188'. [ 549.896150][T12387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2188'. [ 550.041104][T12395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.823971][T12419] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.858608][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.110495][T12429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.158745][T12432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2204'. [ 551.272507][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2204'. [ 551.342981][T12440] FAULT_INJECTION: forcing a failure. [ 551.342981][T12440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.386947][T12440] CPU: 1 PID: 12440 Comm: syz.1.2207 Not tainted syzkaller #0 [ 551.394462][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 551.404539][T12440] Call Trace: [ 551.407844][T12440] [ 551.410783][T12440] dump_stack_lvl+0x18c/0x250 [ 551.415583][T12440] ? show_regs_print_info+0x20/0x20 [ 551.420824][T12440] ? load_image+0x420/0x420 [ 551.425358][T12440] ? __lock_acquire+0x7eb0/0x7eb0 [ 551.430408][T12440] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 551.435984][T12440] should_fail_ex+0x394/0x4c0 [ 551.440696][T12440] _copy_from_user+0x2f/0xe0 [ 551.445317][T12440] bpf_prog_test_run_skb+0x267/0x18f0 [ 551.450721][T12440] ? __fget_files+0x28/0x460 [ 551.455346][T12440] ? __fget_files+0x3fc/0x460 [ 551.460063][T12440] ? cpu_online+0x60/0x60 [ 551.464417][T12440] bpf_prog_test_run+0x31f/0x390 [ 551.469381][T12440] __sys_bpf+0x49d/0x890 [ 551.473646][T12440] ? bpf_link_show_fdinfo+0x560/0x560 [ 551.479052][T12440] ? lock_chain_count+0x20/0x20 [ 551.483940][T12440] __x64_sys_bpf+0x7c/0x90 [ 551.488376][T12440] do_syscall_64+0x55/0xb0 [ 551.492812][T12440] ? clear_bhb_loop+0x40/0x90 [ 551.497517][T12440] ? clear_bhb_loop+0x40/0x90 [ 551.502227][T12440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.508143][T12440] RIP: 0033:0x7efc6d19f559 [ 551.512573][T12440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.532204][T12440] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.540647][T12440] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 551.548639][T12440] RDX: 0000000000000050 RSI: 0000200000001740 RDI: 000000000000000a [ 551.556631][T12440] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.564624][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.572619][T12440] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 551.580628][T12440] [ 552.393846][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.445414][T12458] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.740021][T12474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2221'. [ 553.102680][T12467] rxe_eth0 speed is unknown, defaulting to 1000 [ 553.595491][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.122452][T12499] FAULT_INJECTION: forcing a failure. [ 554.122452][T12499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.151943][T12499] CPU: 0 PID: 12499 Comm: syz.2.2232 Not tainted syzkaller #0 [ 554.159460][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.169540][T12499] Call Trace: [ 554.172850][T12499] [ 554.175805][T12499] dump_stack_lvl+0x18c/0x250 [ 554.180518][T12499] ? show_regs_print_info+0x20/0x20 [ 554.185836][T12499] ? load_image+0x420/0x420 [ 554.190377][T12499] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.195427][T12499] ? snprintf+0xe9/0x140 [ 554.199687][T12499] should_fail_ex+0x394/0x4c0 [ 554.204392][T12499] _copy_to_user+0x2f/0xa0 [ 554.208831][T12499] simple_read_from_buffer+0xe7/0x150 [ 554.214231][T12499] proc_fail_nth_read+0x1e8/0x260 [ 554.219279][T12499] ? proc_fault_inject_write+0x360/0x360 [ 554.224935][T12499] ? fsnotify_perm+0x271/0x5e0 [ 554.229711][T12499] ? proc_fault_inject_write+0x360/0x360 [ 554.235388][T12499] vfs_read+0x298/0x990 [ 554.239582][T12499] ? kernel_read+0x1e0/0x1e0 [ 554.244193][T12499] ? __fget_files+0x28/0x460 [ 554.248807][T12499] ? __fget_files+0x3fc/0x460 [ 554.253507][T12499] ? __fdget_pos+0x2a3/0x330 [ 554.258114][T12499] ? ksys_read+0x74/0x260 [ 554.262479][T12499] ksys_read+0x151/0x260 [ 554.266747][T12499] ? vfs_write+0x9a0/0x9a0 [ 554.271183][T12499] ? lockdep_hardirqs_on+0x98/0x150 [ 554.276412][T12499] do_syscall_64+0x55/0xb0 [ 554.280872][T12499] ? clear_bhb_loop+0x40/0x90 [ 554.285567][T12499] ? clear_bhb_loop+0x40/0x90 [ 554.290267][T12499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.296192][T12499] RIP: 0033:0x7f2f6935fd8e [ 554.300632][T12499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.320261][T12499] RSP: 002b:00007f2f6a2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.328692][T12499] RAX: ffffffffffffffda RBX: 00007f2f6a2c16c0 RCX: 00007f2f6935fd8e [ 554.336760][T12499] RDX: 000000000000000f RSI: 00007f2f6a2c10a0 RDI: 0000000000000006 [ 554.344739][T12499] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 554.352804][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.360782][T12499] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 554.368783][T12499] [ 555.056296][T12513] syzkaller0: entered promiscuous mode [ 555.062059][T12513] syzkaller0: entered allmulticast mode [ 555.703648][T12524] FAULT_INJECTION: forcing a failure. [ 555.703648][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 555.721275][T12524] CPU: 1 PID: 12524 Comm: syz.1.2242 Not tainted syzkaller #0 [ 555.728732][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 555.738780][T12524] Call Trace: [ 555.742055][T12524] [ 555.744982][T12524] dump_stack_lvl+0x18c/0x250 [ 555.749662][T12524] ? sctp_sendmsg+0x1519/0x27b0 [ 555.754521][T12524] ? ___sys_sendmsg+0x2a6/0x360 [ 555.759372][T12524] ? show_regs_print_info+0x20/0x20 [ 555.764563][T12524] ? load_image+0x420/0x420 [ 555.769069][T12524] ? mark_lock+0x94/0x320 [ 555.773407][T12524] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 555.779386][T12524] should_fail_ex+0x394/0x4c0 [ 555.784067][T12524] should_failslab+0x9/0x20 [ 555.788564][T12524] slab_pre_alloc_hook+0x59/0x300 [ 555.793587][T12524] ? lockdep_hardirqs_on+0x98/0x150 [ 555.798780][T12524] ? sctp_add_bind_addr+0x8c/0x360 [ 555.803909][T12524] __kmem_cache_alloc_node+0x53/0x260 [ 555.809282][T12524] ? sctp_add_bind_addr+0x8c/0x360 [ 555.814392][T12524] kmalloc_trace+0x2a/0xe0 [ 555.818813][T12524] sctp_add_bind_addr+0x8c/0x360 [ 555.823756][T12524] sctp_copy_local_addr_list+0x31b/0x4e0 [ 555.829387][T12524] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 555.835102][T12524] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 555.841166][T12524] ? sctp_v4_is_any+0x35/0x60 [ 555.845836][T12524] ? sctp_copy_one_addr+0x8c/0x350 [ 555.850946][T12524] sctp_bind_addr_copy+0xb3/0x3c0 [ 555.855983][T12524] sctp_connect_new_asoc+0x2f9/0x6a0 [ 555.861269][T12524] ? __sctp_connect+0xd80/0xd80 [ 555.866112][T12524] ? __local_bh_enable_ip+0x13a/0x1c0 [ 555.871486][T12524] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 555.877027][T12524] ? security_sctp_bind_connect+0x89/0xb0 [ 555.882753][T12524] sctp_sendmsg+0x1519/0x27b0 [ 555.887436][T12524] ? sctp_getsockopt+0xb60/0xb60 [ 555.892372][T12524] ? aa_sk_perm+0x7bb/0x8e0 [ 555.896876][T12524] ? aa_af_perm+0x330/0x330 [ 555.901379][T12524] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 555.907791][T12524] ? sock_rps_record_flow+0x19/0x3f0 [ 555.913077][T12524] ? inet_sendmsg+0xce/0x2a0 [ 555.917664][T12524] ? inet_send_prepare+0x250/0x250 [ 555.922774][T12524] ____sys_sendmsg+0x61b/0x980 [ 555.927563][T12524] ? __asan_memset+0x22/0x40 [ 555.932152][T12524] ? __sys_sendmsg_sock+0x30/0x30 [ 555.937164][T12524] ? __import_iovec+0x5f2/0x850 [ 555.942018][T12524] ? import_iovec+0x73/0xa0 [ 555.946518][T12524] ___sys_sendmsg+0x2a6/0x360 [ 555.951193][T12524] ? __sys_sendmsg+0x2b0/0x2b0 [ 555.955974][T12524] ? __lock_acquire+0x7eb0/0x7eb0 [ 555.961016][T12524] __se_sys_sendmsg+0x1d0/0x2c0 [ 555.965887][T12524] ? __x64_sys_sendmsg+0x80/0x80 [ 555.970852][T12524] ? lockdep_hardirqs_on+0x98/0x150 [ 555.976059][T12524] do_syscall_64+0x55/0xb0 [ 555.980479][T12524] ? clear_bhb_loop+0x40/0x90 [ 555.985160][T12524] ? clear_bhb_loop+0x40/0x90 [ 555.989843][T12524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.995747][T12524] RIP: 0033:0x7efc6d19f559 [ 556.000165][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.019765][T12524] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.028197][T12524] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 556.036182][T12524] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 556.044153][T12524] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.052124][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.060180][T12524] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 556.068163][T12524] [ 556.512899][T12531] netlink: 'syz.1.2245': attribute type 41 has an invalid length. [ 557.311474][T12531] netlink: 'syz.1.2245': attribute type 41 has an invalid length. [ 557.547256][T12535] FAULT_INJECTION: forcing a failure. [ 557.547256][T12535] name failslab, interval 1, probability 0, space 0, times 0 [ 557.587074][T12535] CPU: 1 PID: 12535 Comm: syz.1.2246 Not tainted syzkaller #0 [ 557.594597][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.604665][T12535] Call Trace: [ 557.607956][T12535] [ 557.610886][T12535] dump_stack_lvl+0x18c/0x250 [ 557.615569][T12535] ? sctp_sendmsg+0x1519/0x27b0 [ 557.620416][T12535] ? ___sys_sendmsg+0x2a6/0x360 [ 557.625261][T12535] ? show_regs_print_info+0x20/0x20 [ 557.630455][T12535] ? load_image+0x420/0x420 [ 557.634963][T12535] should_fail_ex+0x394/0x4c0 [ 557.639655][T12535] should_failslab+0x9/0x20 [ 557.644149][T12535] slab_pre_alloc_hook+0x59/0x300 [ 557.649165][T12535] ? sctp_add_bind_addr+0x8c/0x360 [ 557.654279][T12535] __kmem_cache_alloc_node+0x53/0x260 [ 557.659648][T12535] ? sctp_add_bind_addr+0x8c/0x360 [ 557.664753][T12535] kmalloc_trace+0x2a/0xe0 [ 557.669168][T12535] sctp_add_bind_addr+0x8c/0x360 [ 557.674114][T12535] sctp_copy_local_addr_list+0x31b/0x4e0 [ 557.679741][T12535] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 557.685539][T12535] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 557.691601][T12535] ? sctp_v4_is_any+0x35/0x60 [ 557.696279][T12535] ? sctp_copy_one_addr+0x8c/0x350 [ 557.701387][T12535] sctp_bind_addr_copy+0x189/0x3c0 [ 557.706498][T12535] sctp_connect_new_asoc+0x2f9/0x6a0 [ 557.711781][T12535] ? __sctp_connect+0xd80/0xd80 [ 557.716630][T12535] ? __local_bh_enable_ip+0x13a/0x1c0 [ 557.721999][T12535] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 557.727544][T12535] ? security_sctp_bind_connect+0x89/0xb0 [ 557.733264][T12535] sctp_sendmsg+0x1519/0x27b0 [ 557.737946][T12535] ? sctp_getsockopt+0xb60/0xb60 [ 557.742904][T12535] ? aa_sk_perm+0x7bb/0x8e0 [ 557.747406][T12535] ? aa_af_perm+0x330/0x330 [ 557.751909][T12535] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 557.758409][T12535] ? sock_rps_record_flow+0x19/0x3f0 [ 557.763696][T12535] ? inet_sendmsg+0xce/0x2a0 [ 557.768280][T12535] ? inet_send_prepare+0x250/0x250 [ 557.773387][T12535] ____sys_sendmsg+0x61b/0x980 [ 557.778150][T12535] ? __asan_memset+0x22/0x40 [ 557.782738][T12535] ? __sys_sendmsg_sock+0x30/0x30 [ 557.787756][T12535] ? __import_iovec+0x5f2/0x850 [ 557.792608][T12535] ? import_iovec+0x73/0xa0 [ 557.797115][T12535] ___sys_sendmsg+0x2a6/0x360 [ 557.801797][T12535] ? __sys_sendmsg+0x2b0/0x2b0 [ 557.806597][T12535] __se_sys_sendmsg+0x1d0/0x2c0 [ 557.811659][T12535] ? __x64_sys_sendmsg+0x80/0x80 [ 557.816611][T12535] ? syscall_enter_from_user_mode+0x2e/0x80 [ 557.822498][T12535] do_syscall_64+0x55/0xb0 [ 557.826908][T12535] ? clear_bhb_loop+0x40/0x90 [ 557.831611][T12535] ? clear_bhb_loop+0x40/0x90 [ 557.836285][T12535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.842195][T12535] RIP: 0033:0x7efc6d19f559 [ 557.846606][T12535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.866211][T12535] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.874625][T12535] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 557.882593][T12535] RDX: 54f4e10222cdd2ec RSI: 0000200000000380 RDI: 0000000000000006 [ 557.890553][T12535] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.898517][T12535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.906480][T12535] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 557.914470][T12535] [ 558.024679][T12535] netlink: 'syz.1.2246': attribute type 41 has an invalid length. [ 558.044616][T12535] netlink: 'syz.1.2246': attribute type 41 has an invalid length. [ 558.789254][T12553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.797590][T12553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.805276][T12553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.816221][T12553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.825927][T12553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 558.833400][T12553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.901203][T12552] rxe_eth0 speed is unknown, defaulting to 1000 [ 559.375945][T12552] chnl_net:caif_netlink_parms(): no params data found [ 559.541317][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.569115][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.576389][T12552] bridge_slave_0: entered allmulticast mode [ 559.620691][T12552] bridge_slave_0: entered promiscuous mode [ 559.645379][T12577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.650142][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.689169][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.706517][T12552] bridge_slave_1: entered allmulticast mode [ 559.729503][T12552] bridge_slave_1: entered promiscuous mode [ 559.789200][T12584] FAULT_INJECTION: forcing a failure. [ 559.789200][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 559.797702][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.802618][T12584] CPU: 0 PID: 12584 Comm: syz.0.2262 Not tainted syzkaller #0 [ 559.818729][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 559.828807][T12584] Call Trace: [ 559.832101][T12584] [ 559.835062][T12584] dump_stack_lvl+0x18c/0x250 [ 559.839867][T12584] ? show_regs_print_info+0x20/0x20 [ 559.845096][T12584] ? load_image+0x420/0x420 [ 559.847729][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.849611][T12584] ? __might_sleep+0xe0/0xe0 [ 559.849641][T12584] ? __lock_acquire+0x7eb0/0x7eb0 [ 559.868279][T12584] ? trace_raw_output_contention_end+0xd0/0xd0 [ 559.874535][T12584] should_fail_ex+0x394/0x4c0 [ 559.879239][T12584] should_failslab+0x9/0x20 [ 559.883760][T12584] slab_pre_alloc_hook+0x59/0x300 [ 559.888813][T12584] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 559.894716][T12584] ? find_get_pmu_context+0x81/0x9e0 [ 559.900014][T12584] __kmem_cache_alloc_node+0x53/0x260 [ 559.905393][T12584] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 559.911293][T12584] ? find_get_pmu_context+0x81/0x9e0 [ 559.916584][T12584] kmalloc_trace+0x2a/0xe0 [ 559.921004][T12584] find_get_pmu_context+0x81/0x9e0 [ 559.926121][T12584] __se_sys_perf_event_open+0xbc9/0x1d40 [ 559.931763][T12584] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 559.937406][T12584] ? lock_chain_count+0x20/0x20 [ 559.942263][T12584] ? lockdep_hardirqs_on+0x98/0x150 [ 559.947460][T12584] ? __x64_sys_perf_event_open+0x20/0xc0 [ 559.953095][T12584] do_syscall_64+0x55/0xb0 [ 559.957514][T12584] ? clear_bhb_loop+0x40/0x90 [ 559.962193][T12584] ? clear_bhb_loop+0x40/0x90 [ 559.966870][T12584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.972771][T12584] RIP: 0033:0x7f1f21f9f559 [ 559.977193][T12584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.996805][T12584] RSP: 002b:00007f1f22e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 560.005216][T12584] RAX: ffffffffffffffda RBX: 00007f1f22225fa0 RCX: 00007f1f21f9f559 [ 560.013212][T12584] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000016c0 [ 560.021184][T12584] RBP: 00007f1f22e6e090 R08: 0000000000000008 R09: 0000000000000000 [ 560.029150][T12584] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 560.037125][T12584] R13: 00007f1f22226038 R14: 00007f1f22225fa0 R15: 00007ffed4ec09c8 [ 560.045117][T12584] [ 560.082560][T12552] team0: Port device team_slave_0 added [ 560.091577][T12552] team0: Port device team_slave_1 added [ 560.124207][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.134638][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.163545][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.181802][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.193210][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.229728][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.307413][T12582] rxe_eth0 speed is unknown, defaulting to 1000 [ 560.363812][T12552] hsr_slave_0: entered promiscuous mode [ 560.397127][T12552] hsr_slave_1: entered promiscuous mode [ 560.416817][T12552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.444722][T12552] Cannot create hsr debugfs directory [ 560.876921][T12553] Bluetooth: hci0: command tx timeout [ 561.076639][T12552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.318252][T12552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.406019][T12609] netlink: 'syz.0.2269': attribute type 41 has an invalid length. [ 561.452352][T12552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.465153][T12609] netlink: 'syz.0.2269': attribute type 41 has an invalid length. [ 561.560012][T12552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.605712][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.802145][T12552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 561.834852][T12620] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 561.849930][T12552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.877079][T12552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.899912][T12552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 562.013273][T12622] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 562.013706][T12623] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2274'. [ 562.105873][T12622] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2274'. [ 562.183361][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.279531][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.294722][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.301841][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.330102][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.337327][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.429268][T12552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.541138][T12632] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 562.566943][T12632] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 562.957218][T12553] Bluetooth: hci0: command tx timeout [ 563.146497][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.153271][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.492680][T12638] rxe_eth0 speed is unknown, defaulting to 1000 [ 563.577562][T12639] can: request_module (can-proto-0) failed. [ 563.602229][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.796310][T12552] veth0_vlan: entered promiscuous mode [ 563.829291][T12552] veth1_vlan: entered promiscuous mode [ 563.904423][T12552] veth0_macvtap: entered promiscuous mode [ 563.922002][T12552] veth1_macvtap: entered promiscuous mode [ 563.950929][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.964143][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.983476][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.043998][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.055248][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.067264][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.074873][T12659] netlink: 'syz.2.2282': attribute type 25 has an invalid length. [ 564.084996][T12659] netlink: 'syz.2.2282': attribute type 5 has an invalid length. [ 564.094265][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2282'. [ 564.131172][T12659] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2282'. [ 564.164639][T12552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.176531][T12552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.187684][T12552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.196504][T12552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.428469][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.449137][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.484072][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.492284][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.589541][T12669] netlink: 'syz.3.2248': attribute type 21 has an invalid length. [ 564.599381][T12669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2248'. [ 565.029821][T12673] syzkaller0: entered promiscuous mode [ 565.035376][T12673] syzkaller0: entered allmulticast mode [ 565.041254][T12553] Bluetooth: hci0: command tx timeout [ 565.105339][T12680] netlink: 'syz.2.2290': attribute type 39 has an invalid length. [ 565.167003][T12681] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2290'. [ 565.213227][T12680] hsr_slave_1 (unregistering): left promiscuous mode [ 566.766631][T12689] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 566.963910][T12696] FAULT_INJECTION: forcing a failure. [ 566.963910][T12696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.995943][T12696] CPU: 1 PID: 12696 Comm: syz.1.2295 Not tainted syzkaller #0 [ 567.003467][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 567.013545][T12696] Call Trace: [ 567.016860][T12696] [ 567.019822][T12696] dump_stack_lvl+0x18c/0x250 [ 567.024545][T12696] ? show_regs_print_info+0x20/0x20 [ 567.029779][T12696] ? load_image+0x420/0x420 [ 567.034323][T12696] ? __might_fault+0xaa/0x120 [ 567.039117][T12696] ? __lock_acquire+0x7eb0/0x7eb0 [ 567.044174][T12696] should_fail_ex+0x394/0x4c0 [ 567.048883][T12696] _copy_to_user+0x2f/0xa0 [ 567.053328][T12696] bpf_test_finish+0x25a/0x650 [ 567.058132][T12696] ? dst_hold+0x70/0x70 [ 567.062350][T12696] ? convert_skb_to___skb+0x420/0x420 [ 567.067787][T12696] ? __virt_addr_valid+0x10c/0x380 [ 567.072923][T12696] ? __might_fault+0xaa/0x120 [ 567.077619][T12696] ? __might_fault+0xaa/0x120 [ 567.082331][T12696] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 567.087817][T12696] ? __lock_acquire+0x7eb0/0x7eb0 [ 567.092857][T12696] ? dev_put+0x80/0x80 [ 567.096950][T12696] ? dev_put+0x80/0x80 [ 567.101032][T12696] bpf_prog_test_run+0x31f/0x390 [ 567.105980][T12696] __sys_bpf+0x49d/0x890 [ 567.110227][T12696] ? bpf_link_show_fdinfo+0x560/0x560 [ 567.115625][T12696] ? lock_chain_count+0x20/0x20 [ 567.120512][T12696] __x64_sys_bpf+0x7c/0x90 [ 567.124964][T12696] do_syscall_64+0x55/0xb0 [ 567.129392][T12696] ? clear_bhb_loop+0x40/0x90 [ 567.134077][T12696] ? clear_bhb_loop+0x40/0x90 [ 567.138757][T12696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.144741][T12696] RIP: 0033:0x7efc6d19f559 [ 567.149160][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.168778][T12696] RSP: 002b:00007efc6b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.177196][T12696] RAX: ffffffffffffffda RBX: 00007efc6d425fa0 RCX: 00007efc6d19f559 [ 567.185166][T12696] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 567.193134][T12696] RBP: 00007efc6b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.201137][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.209106][T12696] R13: 00007efc6d426038 R14: 00007efc6d425fa0 R15: 00007fffc0df3098 [ 567.217176][T12696] [ 567.228079][T12553] Bluetooth: hci0: command tx timeout [ 567.264538][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.274078][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.300448][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.310227][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.323924][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.333344][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.346496][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.354774][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.368862][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.377786][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.391279][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.399730][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.427815][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.443447][T12708] netlink: 'syz.1.2299': attribute type 19 has an invalid length. [ 567.446282][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.458478][T12708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2299'. [ 567.473185][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.486856][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 567.503995][T12703] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 567.513364][T12703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 568.891044][T12769] syzkaller0: entered promiscuous mode [ 568.896604][T12769] syzkaller0: entered allmulticast mode [ 569.159211][T12787] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.941192][T12803] hsr_slave_1 (unregistering): left promiscuous mode [ 572.859604][T12844] __nla_validate_parse: 60 callbacks suppressed [ 572.859621][T12844] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2354'. [ 575.962678][T12844] rxe_eth0 speed is unknown, defaulting to 1000 [ 576.062626][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2357'. [ 577.146610][T12874] validate_nla: 59 callbacks suppressed [ 577.146630][T12874] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 577.167185][T12874] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2361'. [ 577.176331][T12874] bond0: entered promiscuous mode [ 577.193441][T12874] bond_slave_0: entered promiscuous mode [ 577.210783][T12882] FAULT_INJECTION: forcing a failure. [ 577.210783][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.238584][T12874] bond_slave_1: entered promiscuous mode [ 577.244623][T12874] bridge0: entered promiscuous mode [ 577.254930][T12882] CPU: 0 PID: 12882 Comm: syz.3.2364 Not tainted syzkaller #0 [ 577.262447][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.272520][T12882] Call Trace: [ 577.275807][T12882] [ 577.278763][T12882] dump_stack_lvl+0x18c/0x250 [ 577.283524][T12882] ? show_regs_print_info+0x20/0x20 [ 577.288847][T12882] ? load_image+0x420/0x420 [ 577.293357][T12882] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.298383][T12882] ? snprintf+0xe9/0x140 [ 577.302630][T12882] should_fail_ex+0x394/0x4c0 [ 577.307313][T12882] _copy_to_user+0x2f/0xa0 [ 577.311726][T12882] simple_read_from_buffer+0xe7/0x150 [ 577.317100][T12882] proc_fail_nth_read+0x1e8/0x260 [ 577.322135][T12882] ? proc_fault_inject_write+0x360/0x360 [ 577.327785][T12882] ? fsnotify_perm+0x271/0x5e0 [ 577.332545][T12882] ? proc_fault_inject_write+0x360/0x360 [ 577.338360][T12882] vfs_read+0x298/0x990 [ 577.342520][T12882] ? kernel_read+0x1e0/0x1e0 [ 577.347115][T12882] ? __fget_files+0x28/0x460 [ 577.351703][T12882] ? __fget_files+0x3fc/0x460 [ 577.356383][T12882] ? __fdget_pos+0x2a3/0x330 [ 577.360983][T12882] ? ksys_read+0x74/0x260 [ 577.365492][T12882] ksys_read+0x151/0x260 [ 577.369738][T12882] ? vfs_write+0x9a0/0x9a0 [ 577.374159][T12882] ? lockdep_hardirqs_on+0x98/0x150 [ 577.379358][T12882] do_syscall_64+0x55/0xb0 [ 577.383770][T12882] ? clear_bhb_loop+0x40/0x90 [ 577.388460][T12882] ? clear_bhb_loop+0x40/0x90 [ 577.393144][T12882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.399039][T12882] RIP: 0033:0x7f31b175fd8e [ 577.403450][T12882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 577.423055][T12882] RSP: 002b:00007f31b26f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.431488][T12882] RAX: ffffffffffffffda RBX: 00007f31b26f76c0 RCX: 00007f31b175fd8e [ 577.439468][T12882] RDX: 000000000000000f RSI: 00007f31b26f70a0 RDI: 0000000000000006 [ 577.447433][T12882] RBP: 00007f31b26f7090 R08: 0000000000000000 R09: 0000000000000000 [ 577.455409][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.463473][T12882] R13: 00007f31b1a26038 R14: 00007f31b1a25fa0 R15: 00007ffcd3e9d7b8 [ 577.471474][T12882] [ 577.509464][T12874] team0: entered promiscuous mode [ 577.514846][T12874] team_slave_1: entered promiscuous mode [ 577.521936][T12874] dummy0: entered promiscuous mode [ 577.530001][T12874] bridge0: port 3(bond0) entered blocking state [ 577.538256][T12874] bridge0: port 3(bond0) entered disabled state [ 577.545683][T12874] bond0: entered allmulticast mode [ 577.560775][T12889] FAULT_INJECTION: forcing a failure. [ 577.560775][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 577.566888][T12874] bond_slave_0: entered allmulticast mode [ 577.602479][T12889] CPU: 1 PID: 12889 Comm: syz.2.2366 Not tainted syzkaller #0 [ 577.610003][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.620099][T12889] Call Trace: [ 577.623408][T12889] [ 577.626363][T12889] dump_stack_lvl+0x18c/0x250 [ 577.631117][T12889] ? sctp_sendmsg+0x1519/0x27b0 [ 577.635979][T12889] ? ___sys_sendmsg+0x2a6/0x360 [ 577.640854][T12889] ? show_regs_print_info+0x20/0x20 [ 577.646102][T12889] ? load_image+0x420/0x420 [ 577.650631][T12889] should_fail_ex+0x394/0x4c0 [ 577.655325][T12889] should_failslab+0x9/0x20 [ 577.659840][T12889] slab_pre_alloc_hook+0x59/0x300 [ 577.664889][T12889] ? sctp_add_bind_addr+0x8c/0x360 [ 577.670012][T12889] __kmem_cache_alloc_node+0x53/0x260 [ 577.675405][T12889] ? sctp_add_bind_addr+0x8c/0x360 [ 577.680520][T12889] kmalloc_trace+0x2a/0xe0 [ 577.685027][T12889] sctp_add_bind_addr+0x8c/0x360 [ 577.689970][T12889] sctp_copy_local_addr_list+0x31b/0x4e0 [ 577.695604][T12889] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 577.701352][T12889] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 577.707421][T12889] ? sctp_v6_is_any+0x64/0x70 [ 577.712102][T12889] ? sctp_copy_one_addr+0x8c/0x350 [ 577.717216][T12889] sctp_bind_addr_copy+0xb3/0x3c0 [ 577.722241][T12889] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 577.728577][T12889] sctp_connect_new_asoc+0x2f9/0x6a0 [ 577.733864][T12889] ? __sctp_connect+0xd80/0xd80 [ 577.738716][T12889] ? __local_bh_enable_ip+0x13a/0x1c0 [ 577.744263][T12889] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 577.749814][T12889] ? security_sctp_bind_connect+0x89/0xb0 [ 577.755538][T12889] sctp_sendmsg+0x1519/0x27b0 [ 577.760233][T12889] ? sctp_getsockopt+0xb60/0xb60 [ 577.765172][T12889] ? aa_sk_perm+0x7bb/0x8e0 [ 577.769681][T12889] ? aa_af_perm+0x330/0x330 [ 577.774197][T12889] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 577.780632][T12889] ? sock_rps_record_flow+0x19/0x3f0 [ 577.785929][T12889] ? inet_sendmsg+0xce/0x2a0 [ 577.790520][T12889] ? inet_send_prepare+0x250/0x250 [ 577.795638][T12889] ____sys_sendmsg+0x61b/0x980 [ 577.800407][T12889] ? __asan_memset+0x22/0x40 [ 577.804998][T12889] ? __sys_sendmsg_sock+0x30/0x30 [ 577.810044][T12889] ? __import_iovec+0x5f2/0x850 [ 577.814920][T12889] ? import_iovec+0x73/0xa0 [ 577.819422][T12889] ___sys_sendmsg+0x2a6/0x360 [ 577.824100][T12889] ? get_pid_task+0x20/0x1e0 [ 577.828694][T12889] ? __sys_sendmsg+0x2b0/0x2b0 [ 577.833472][T12889] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.838537][T12889] __se_sys_sendmsg+0x1d0/0x2c0 [ 577.843398][T12889] ? __x64_sys_sendmsg+0x80/0x80 [ 577.848347][T12889] ? lockdep_hardirqs_on+0x98/0x150 [ 577.853979][T12889] do_syscall_64+0x55/0xb0 [ 577.858396][T12889] ? clear_bhb_loop+0x40/0x90 [ 577.863074][T12889] ? clear_bhb_loop+0x40/0x90 [ 577.867751][T12889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.873734][T12889] RIP: 0033:0x7f2f6939f559 [ 577.878150][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.897763][T12889] RSP: 002b:00007f2f6a2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.906183][T12889] RAX: ffffffffffffffda RBX: 00007f2f69625fa0 RCX: 00007f2f6939f559 [ 577.914154][T12889] RDX: 0000000000000041 RSI: 00002000000003c0 RDI: 0000000000000003 [ 577.922122][T12889] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 577.930088][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.938061][T12889] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 577.946045][T12889] [ 577.971149][T12874] bond_slave_1: entered allmulticast mode [ 577.977623][T12874] bridge0: entered allmulticast mode [ 577.989937][T12874] team0: entered allmulticast mode [ 577.995134][T12874] team_slave_1: entered allmulticast mode [ 578.002755][T12874] dummy0: entered allmulticast mode [ 578.011211][T12874] bond0: left allmulticast mode [ 578.022720][T12874] bond_slave_0: left allmulticast mode [ 578.037743][T12874] bond_slave_1: left allmulticast mode [ 578.044211][T12874] bridge0: left allmulticast mode [ 578.057069][T12874] team0: left allmulticast mode [ 578.061985][T12874] team_slave_1: left allmulticast mode [ 578.083791][T12874] dummy0: left allmulticast mode [ 578.202126][T12897] netlink: 'syz.1.2370': attribute type 17 has an invalid length. [ 578.236942][T12897] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2370'. [ 578.287344][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.354956][T12902] FAULT_INJECTION: forcing a failure. [ 578.354956][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 578.371158][T12902] CPU: 0 PID: 12902 Comm: syz.2.2372 Not tainted syzkaller #0 [ 578.378652][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.388720][T12902] Call Trace: [ 578.392006][T12902] [ 578.394931][T12902] dump_stack_lvl+0x18c/0x250 [ 578.399621][T12902] ? show_regs_print_info+0x20/0x20 [ 578.404821][T12902] ? load_image+0x420/0x420 [ 578.409350][T12902] ? __might_sleep+0xe0/0xe0 [ 578.413941][T12902] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.418968][T12902] should_fail_ex+0x394/0x4c0 [ 578.423651][T12902] should_failslab+0x9/0x20 [ 578.428149][T12902] slab_pre_alloc_hook+0x59/0x300 [ 578.433169][T12902] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.438193][T12902] kmem_cache_alloc_node+0x5e/0x320 [ 578.443393][T12902] ? __alloc_skb+0x103/0x2c0 [ 578.447984][T12902] __alloc_skb+0x103/0x2c0 [ 578.452398][T12902] netlink_sendmsg+0x66a/0xbf0 [ 578.457165][T12902] ? netlink_getsockopt+0x590/0x590 [ 578.462358][T12902] ? apparmor_socket_sendmsg+0x8e/0x330 [ 578.467933][T12902] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 578.473222][T12902] ? security_socket_sendmsg+0x80/0xa0 [ 578.478684][T12902] ? netlink_getsockopt+0x590/0x590 [ 578.483883][T12902] ____sys_sendmsg+0x61b/0x980 [ 578.488724][T12902] ? __asan_memset+0x22/0x40 [ 578.493359][T12902] ? __sys_sendmsg_sock+0x30/0x30 [ 578.498391][T12902] ? __import_iovec+0x5f2/0x850 [ 578.503263][T12902] ? import_iovec+0x73/0xa0 [ 578.507808][T12902] ___sys_sendmsg+0x2a6/0x360 [ 578.512493][T12902] ? get_pid_task+0x20/0x1e0 [ 578.517093][T12902] ? __sys_sendmsg+0x2b0/0x2b0 [ 578.521880][T12902] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.526942][T12902] __se_sys_sendmsg+0x1d0/0x2c0 [ 578.531792][T12902] ? __x64_sys_sendmsg+0x80/0x80 [ 578.536747][T12902] ? lockdep_hardirqs_on+0x98/0x150 [ 578.541950][T12902] do_syscall_64+0x55/0xb0 [ 578.546392][T12902] ? clear_bhb_loop+0x40/0x90 [ 578.551068][T12902] ? clear_bhb_loop+0x40/0x90 [ 578.555747][T12902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.561644][T12902] RIP: 0033:0x7f2f6939f559 [ 578.566077][T12902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.585728][T12902] RSP: 002b:00007f2f6a2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.594150][T12902] RAX: ffffffffffffffda RBX: 00007f2f69625fa0 RCX: 00007f2f6939f559 [ 578.602125][T12902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 578.610095][T12902] RBP: 00007f2f6a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 578.618088][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.626053][T12902] R13: 00007f2f69626038 R14: 00007f2f69625fa0 R15: 00007ffdad7154c8 [ 578.634147][T12902] [ 579.240525][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.251744][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.260397][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.270499][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.301426][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 579.312204][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.325560][T12918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2376'. [ 579.356889][T12918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2376'. [ 579.675770][ T3899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.735249][T12911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2376'. [ 579.759329][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2376'. [ 579.781357][T12915] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.861269][ T3899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.108651][ T3899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.216592][ T3899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.661818][T12947] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 580.677950][T12947] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 580.700966][T12915] chnl_net:caif_netlink_parms(): no params data found [ 581.119880][T12955] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2395'. [ 581.436843][ T5791] Bluetooth: hci3: command tx timeout [ 581.443946][T12964] netlink: 'syz.1.2389': attribute type 10 has an invalid length. [ 581.452462][T12964] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2389'. [ 581.551944][T12955] rxe_eth0 speed is unknown, defaulting to 1000 [ 581.581256][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.588715][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.601734][T12915] bridge_slave_0: entered allmulticast mode [ 581.611000][T12915] bridge_slave_0: entered promiscuous mode [ 581.741248][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.761335][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.783589][T12915] bridge_slave_1: entered allmulticast mode [ 581.804707][T12915] bridge_slave_1: entered promiscuous mode [ 582.136918][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.263493][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.413122][T12915] team0: Port device team_slave_0 added [ 582.427323][T12915] team0: Port device team_slave_1 added [ 582.563054][ T3899] [ 582.565403][ T3899] ====================================================== [ 582.572433][ T3899] WARNING: possible circular locking dependency detected [ 582.579444][ T3899] syzkaller #0 Not tainted [ 582.583839][ T3899] ------------------------------------------------------ [ 582.590867][ T3899] kworker/u4:8/3899 is trying to acquire lock: [ 582.597002][ T3899] ffff88807aec4dc0 (team->team_lock_key#2){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 582.606934][ T3899] [ 582.606934][ T3899] but task is already holding lock: [ 582.614290][ T3899] ffff8880302a0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 582.624709][ T3899] [ 582.624709][ T3899] which lock already depends on the new lock. [ 582.624709][ T3899] [ 582.635098][ T3899] [ 582.635098][ T3899] the existing dependency chain (in reverse order) is: [ 582.644095][ T3899] [ 582.644095][ T3899] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 582.651815][ T3899] __mutex_lock+0x135/0xce0 [ 582.656835][ T3899] ieee80211_open+0x144/0x200 [ 582.662130][ T3899] __dev_open+0x2cb/0x430 [ 582.666981][ T3899] dev_open+0xab/0x190 [ 582.671568][ T3899] team_add_slave+0x703/0x28a0 [ 582.676856][ T3899] do_setlink+0xda4/0x3f00 [ 582.681783][ T3899] rtnl_newlink+0x1848/0x2170 [ 582.686967][ T3899] rtnetlink_rcv_msg+0x843/0xf90 [ 582.692415][ T3899] netlink_rcv_skb+0x235/0x4c0 [ 582.697775][ T3899] netlink_unicast+0x856/0x9e0 [ 582.703050][ T3899] netlink_sendmsg+0x8d0/0xbf0 [ 582.708319][ T3899] ____sys_sendmsg+0x61b/0x980 [ 582.713675][ T3899] ___sys_sendmsg+0x2a6/0x360 [ 582.718855][ T3899] __se_sys_sendmsg+0x1d0/0x2c0 [ 582.724212][ T3899] do_syscall_64+0x55/0xb0 [ 582.729137][ T3899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.735554][ T3899] [ 582.735554][ T3899] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 582.743713][ T3899] __lock_acquire+0x3a07/0x7eb0 [ 582.749076][ T3899] lock_acquire+0x19e/0x420 [ 582.754086][ T3899] __mutex_lock+0x135/0xce0 [ 582.759103][ T3899] team_device_event+0x295/0xc50 [ 582.764550][ T3899] notifier_call_chain+0x18f/0x380 [ 582.770173][ T3899] unregister_netdevice_many_notify+0x1037/0x1910 [ 582.777095][ T3899] unregister_netdevice_queue+0x2e9/0x330 [ 582.783321][ T3899] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 582.789521][ T3899] ieee80211_remove_interfaces+0x4b3/0x690 [ 582.795845][ T3899] ieee80211_unregister_hw+0x5d/0x2a0 [ 582.801734][ T3899] mac80211_hwsim_del_radio+0x289/0x480 [ 582.807804][ T3899] hwsim_exit_net+0x58d/0x650 [ 582.812993][ T3899] cleanup_net+0x6f7/0xb00 [ 582.817914][ T3899] process_scheduled_works+0xa60/0x1600 [ 582.823967][ T3899] worker_thread+0xa5e/0xfe0 [ 582.829066][ T3899] kthread+0x2fa/0x390 [ 582.833642][ T3899] ret_from_fork+0x48/0x80 [ 582.838568][ T3899] ret_from_fork_asm+0x11/0x20 [ 582.843870][ T3899] [ 582.843870][ T3899] other info that might help us debug this: [ 582.843870][ T3899] [ 582.854078][ T3899] Possible unsafe locking scenario: [ 582.854078][ T3899] [ 582.861686][ T3899] CPU0 CPU1 [ 582.867036][ T3899] ---- ---- [ 582.872386][ T3899] lock(&rdev->wiphy.mtx); [ 582.876880][ T3899] lock(team->team_lock_key#2); [ 582.884326][ T3899] lock(&rdev->wiphy.mtx); [ 582.891333][ T3899] lock(team->team_lock_key#2); [ 582.896262][ T3899] [ 582.896262][ T3899] *** DEADLOCK *** [ 582.896262][ T3899] [ 582.904475][ T3899] 5 locks held by kworker/u4:8/3899: [ 582.909741][ T3899] #0: ffff888140049138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.920609][ T3899] #1: ffffc9000d8d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.931121][ T3899] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 582.940505][ T3899] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 582.950324][ T3899] #4: ffff8880302a0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 582.961100][ T3899] [ 582.961100][ T3899] stack backtrace: [ 582.966972][ T3899] CPU: 0 PID: 3899 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 582.974513][ T3899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 582.984571][ T3899] Workqueue: netns cleanup_net [ 582.989337][ T3899] Call Trace: [ 582.992601][ T3899] [ 582.995521][ T3899] dump_stack_lvl+0x18c/0x250 [ 583.000192][ T3899] ? load_image+0x420/0x420 [ 583.004685][ T3899] ? show_regs_print_info+0x20/0x20 [ 583.009874][ T3899] ? print_circular_bug+0x12b/0x1a0 [ 583.015073][ T3899] check_noncircular+0x2fc/0x400 [ 583.020003][ T3899] ? print_deadlock_bug+0x5d0/0x5d0 [ 583.025186][ T3899] ? lockdep_lock+0xf5/0x230 [ 583.029776][ T3899] ? _find_first_zero_bit+0xd6/0x100 [ 583.035070][ T3899] __lock_acquire+0x3a07/0x7eb0 [ 583.039958][ T3899] ? verify_lock_unused+0x140/0x140 [ 583.045161][ T3899] ? verify_lock_unused+0x140/0x140 [ 583.050376][ T3899] ? __up_read+0x2b8/0x6b0 [ 583.054798][ T3899] lock_acquire+0x19e/0x420 [ 583.059298][ T3899] ? team_device_event+0x295/0xc50 [ 583.064402][ T3899] ? __might_sleep+0xe0/0xe0 [ 583.069016][ T3899] ? read_lock_is_recursive+0x20/0x20 [ 583.074381][ T3899] ? xsk_notifier+0x210/0x220 [ 583.079129][ T3899] __mutex_lock+0x135/0xce0 [ 583.083620][ T3899] ? team_device_event+0x295/0xc50 [ 583.088718][ T3899] ? __mutex_lock+0x30d/0xce0 [ 583.093382][ T3899] ? bond_netdev_event+0xeb/0xef0 [ 583.098399][ T3899] ? team_device_event+0x295/0xc50 [ 583.103510][ T3899] ? mutex_lock_nested+0x20/0x20 [ 583.108442][ T3899] team_device_event+0x295/0xc50 [ 583.113370][ T3899] notifier_call_chain+0x18f/0x380 [ 583.118479][ T3899] unregister_netdevice_many_notify+0x1037/0x1910 [ 583.124897][ T3899] ? unregister_netdevice_many+0x20/0x20 [ 583.130542][ T3899] ? kernfs_remove_by_name_ns+0x117/0x150 [ 583.136250][ T3899] ? __lock_acquire+0x7eb0/0x7eb0 [ 583.141267][ T3899] unregister_netdevice_queue+0x2e9/0x330 [ 583.146982][ T3899] ? list_netdevice+0x730/0x730 [ 583.151823][ T3899] ? kernfs_remove_by_name_ns+0x117/0x150 [ 583.157537][ T3899] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 583.163187][ T3899] ieee80211_remove_interfaces+0x4b3/0x690 [ 583.169005][ T3899] ? ieee80211_do_stop+0x2030/0x2030 [ 583.174289][ T3899] ? rcu_is_watching+0x15/0xb0 [ 583.179056][ T3899] ieee80211_unregister_hw+0x5d/0x2a0 [ 583.184425][ T3899] mac80211_hwsim_del_radio+0x289/0x480 [ 583.189970][ T3899] ? rhashtable_remove_fast+0xc00/0xc00 [ 583.195516][ T3899] hwsim_exit_net+0x58d/0x650 [ 583.200214][ T3899] ? hwsim_init_net+0x90/0x90 [ 583.204887][ T3899] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 583.210762][ T3899] cleanup_net+0x6f7/0xb00 [ 583.215187][ T3899] ? ops_free_list+0x3b0/0x3b0 [ 583.219938][ T3899] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.225157][ T3899] ? process_scheduled_works+0x975/0x1600 [ 583.230868][ T3899] ? process_scheduled_works+0x975/0x1600 [ 583.236589][ T3899] process_scheduled_works+0xa60/0x1600 [ 583.242135][ T3899] ? worker_attach_to_pool+0x370/0x370 [ 583.247587][ T3899] ? assign_work+0x3cc/0x5d0 [ 583.252172][ T3899] worker_thread+0xa5e/0xfe0 [ 583.256758][ T3899] ? _raw_spin_unlock+0x40/0x40 [ 583.261598][ T3899] ? __kthread_parkme+0x71/0x1c0 [ 583.266526][ T3899] kthread+0x2fa/0x390 [ 583.270583][ T3899] ? pr_cont_work+0x550/0x550 [ 583.275256][ T3899] ? kthread_blkcg+0xd0/0xd0 [ 583.279837][ T3899] ret_from_fork+0x48/0x80 [ 583.284243][ T3899] ? kthread_blkcg+0xd0/0xd0 [ 583.288844][ T3899] ret_from_fork_asm+0x11/0x20 [ 583.293603][ T3899] [ 583.302212][ T3899] team0: Port device wlan1 removed [ 583.331363][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.343867][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.375446][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.387873][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.394938][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.421794][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.446399][T12991] netlink: 'syz.3.2394': attribute type 10 has an invalid length. [ 583.461836][T12991] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2394'. [ 583.488994][T12991] bond0: entered promiscuous mode [ 583.494260][T12991] bond_slave_0: entered promiscuous mode [ 583.506974][T12991] bond_slave_1: entered promiscuous mode [ 583.517669][ T5791] Bluetooth: hci3: command tx timeout [ 583.535171][T12991] bridge0: port 3(bond0) entered blocking state [ 583.543566][T12991] bridge0: port 3(bond0) entered disabled state [ 583.551360][T12991] bond0: entered allmulticast mode [ 583.556545][T12991] bond_slave_0: entered allmulticast mode [ 583.564424][T12991] bond_slave_1: entered allmulticast mode [ 583.575453][T12991] bridge0: port 3(bond0) entered blocking state [ 583.582041][T12991] bridge0: port 3(bond0) entered forwarding state [ 583.786150][T12915] hsr_slave_0: entered promiscuous mode [ 583.847175][T12915] hsr_slave_1: entered promiscuous mode [ 583.879392][T12915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.898726][T12915] Cannot create hsr debugfs directory [ 583.958832][ T3899] hsr_slave_0: left promiscuous mode [ 583.965633][ T3899] bridge_slave_1: left allmulticast mode [ 583.987023][ T3899] bridge_slave_1: left promiscuous mode [ 583.992775][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.008831][ T3899] bridge_slave_0: left allmulticast mode [ 584.014507][ T3899] bridge_slave_0: left promiscuous mode [ 584.026920][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.050576][ T3899] veth1_macvtap: left promiscuous mode [ 584.056135][ T3899] veth0_macvtap: left promiscuous mode [ 584.075152][ T3899] veth1_vlan: left promiscuous mode [ 584.081660][ T3899] veth0_vlan: left promiscuous mode [ 584.320759][ T3899] team0 (unregistering): Port device team_slave_1 removed [ 584.349601][ T3899] team0 (unregistering): Port device team_slave_0 removed [ 584.383438][ T3899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.420724][ T3899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.576750][ T3899] team0 (unregistering): Port device dummy0 removed [ 584.614790][ T3899] bond0 (unregistering): (slave team0): Releasing backup interface [ 584.638273][ T3899] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 584.647615][ T3899] bond0 (unregistering): Released all slaves [ 585.254390][T12915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.266641][T12915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.280372][T12915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.293195][T12915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.369516][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.390234][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.402999][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.410174][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.436364][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.443530][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.596717][ T5791] Bluetooth: hci3: command tx timeout [ 585.620114][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.662668][T12915] veth0_vlan: entered promiscuous mode [ 585.679351][T12915] veth1_vlan: entered promiscuous mode [ 585.710047][T12915] veth0_macvtap: entered promiscuous mode [ 585.720978][T12915] veth1_macvtap: entered promiscuous mode [ 585.740733][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.753792][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.769221][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.780105][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.792163][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.806324][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.817907][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.829382][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.841047][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.855052][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.871427][T12915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.880440][T12915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.890592][T12915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.900744][T12915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.935431][T12915] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 585.966182][T11799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.971825][T12915] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 585.982038][T11799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.006378][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.016516][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.677165][ T5791] Bluetooth: hci3: command tx timeout