last executing test programs: 6.930496433s ago: executing program 0 (id=1394): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4087, 0xff7}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f00000022c0)=""/120, 0x78}], 0x3}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.38251936s ago: executing program 2 (id=1397): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x10db}, 0x4047f40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x20, 0x3, 0x4, 0x9, 0xdb936dc0cf90192e, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) 5.81973402s ago: executing program 0 (id=1399): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x19, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x74200}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xa, 0x7, 0xfffffffffffffff0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x7}, @jmp={0x5, 0x1, 0x7, 0x5, 0x2, 0x8}], &(0x7f0000000340)='syzkaller\x00', 0x80000001, 0xcc, &(0x7f00000006c0)=""/204, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x5, 0x3, 0xb, 0x4}], 0x10, 0x80000001}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xfe00000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xba}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x8050) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r3, 0x7, 0x0, 0xff, &(0x7f00000007c0)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a59c, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x1, @perf_config_ext={0x0, 0x11}, 0x2, 0x4, 0x3, 0x1, 0x81, 0x5, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 5.780616428s ago: executing program 2 (id=1400): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.780022638s ago: executing program 1 (id=1401): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x50) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001400)={r2, 0x0, &(0x7f0000001480)=""/53}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001100)={&(0x7f0000000f00)="792430b008799f0a7687478df6252a9683d044a843d0001bc06f0c1c59857ab553f959f26c1848e779b864f4d1c3d27a3c8a373f323383d33b105b1a270b86734f4fac6e0e773acc", &(0x7f0000000f80)=""/1, &(0x7f0000000fc0)="9d73db17836754edca4b9751e30131175ced4cb5bfaa6eee6f186929faa80685f5c7d73a104b8b0de265994fba577027cb78e32a23a439ac5ab05be5cbdc67b3cb97239a23e1efbddee2d441ebd5db6633b3e15567", &(0x7f0000001040)="b72b0e459f664bdea0c699790dec69c4504c80de5bc19e2d407a6fefef1ec9c37971c22374f4e35fac82727fb30fcf7a36650f4d4cbc9806fd49fa80a63297f08f0187e537729910a156b71510183bb267926af02b7999f562e36c303d3925aba6bb57581bbfec81ef74ebc78f92a2b292699ff079ca5d4cf84b29fed5ea75e7df049f7f0c4d64eb9537f4df1969721864017df25493362e445e443a3f96fc066d7b8170c2ed006b2845be736a766608", 0x6, 0x1, 0x4}, 0x38) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$unix(r2, &(0x7f0000002840)={&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000011c0)="e38aed5a97bfd6b25bade891a64e640e8fd11e1172991c81c5c01e269bf5232007210055f7d31ac1f54e96f8c23a5f5dc3cfda1d20e9ee51b8ed867ddee0a0c51c9f6ac7d41ba94e", 0x48}, {&(0x7f0000001240)="9664722d7737e556be5279fab1252ae69fb65e9a354dec92f95b1b81cee7d40abe1cd100eaca35dac3a69e2ae31915b69785988b2ead4109bfe930eda7937d240c73ead65a30ee082f3872f634aeb2b210b0df5059a706bf506b582b54adaf3268b33f2dd3ab42aa084f5d470e27cebebdb70e39ad5dc74de976736e7899253675661e308da7be5c8616cb731ff83793518e882d076efeabe91cf049b4b3682bbb8fb498472fbdcbebca8dd43bcd57961c6bda22b77f2ed20ea0", 0xba}, {&(0x7f0000001300)="75c60d929f3ac7b4c6d06305f64a9371f471617eacaf9f6123f8e28f5027a8", 0x1f}, {&(0x7f0000001340)="55e229c592f244c45d946edb306b53044f6b2eda41357eadc4da9805e54c9d49e10b2b1275ad1893b8fc9a154e165c52cc26054b051002ba8d09dc9bb0223c1c4e6666365a91904560b15ba6d116298f9e49f37bf4989609d6aafa113ca46bc436094e306f3ec7477c808adc9af483ca4116a46915734c5a82eacb624c42e82494207de28d839cbed0ca61b924b6178633706f2884b3072ae479308687f2c1eaf34f0b577a4db9e2d3b663be648798d09089ac7ce0", 0xb5}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="372e424a5e6e420f068ca0f2549a29b0a1dd3bc54b911bc2f3b2d4c7c105638ac7340e978f3094a4c1", 0x29}], 0x6, 0x0, 0x0, 0x48000}, 0x40041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e95d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a956773a90a0f4e62d86d00000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4fa34274ab1ee31cc0cc461605390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b9988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bc32052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb77000000c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520526f21de11c56d59f35d367632952a93466ae595c6aacda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5100000000100000007a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b8382000000006936b7e4746e92dea6c5d1d33d84d96b3572de50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3819b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe7f445fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b723853bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1bae210baf3551b8dea8879e13859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a378700000000000000000000000000631ffc86fe0c8124536afbfc6300ee2c00000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a8693055e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e3570000000000000000009afb8e2221e1959e7421ac6d99c6902c0c73edb2e19eda0306aee0264f0dbe06b7848f9dda251fc662e1f65e96c80baf18e52beb9b606134b58474efcf1a11f2c06839ddba8a98ded151f45254007a0863b39547aed5baadafb7fc222ff9d12dd941460416cc6b987ec77329928d99e3d0ce03d16feb27bea30b7acf895e1bfedcb1d45754435aaf642ea992"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) 5.694997834s ago: executing program 3 (id=1403): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4049c0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macvtap0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce"], 0xfdef) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x81}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) recvmsg$unix(r7, &(0x7f0000000a40)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000780)=""/79, 0x4f}, {&(0x7f0000000800)=""/64, 0x40}, {&(0x7f0000000840)=""/131, 0x83}], 0x3, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40010042) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 5.517019569s ago: executing program 2 (id=1404): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x2, 0xbb, 0x6, 0x0, 0x0, 0x3, 0x2204, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x4}, 0x1, 0x4, 0x7, 0x3, 0x2, 0xaaa, 0x8000, 0x0, 0x1000, 0x0, 0xb1ba}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000002c0)=r2, 0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={r4, 0x0, 0x0}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a156437", 0x1a}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10}, 0x0, &(0x7f00000003c0)=r11}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4.770887776s ago: executing program 1 (id=1405): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e00)='memory.events.local\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000a80)={0x1, 0x80, 0x6, 0x4, 0x6, 0x9, 0x0, 0x2, 0x21, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x69, 0x5}, 0x800, 0x3, 0x5, 0x4, 0x100, 0x1ff, 0x54, 0x0, 0x6}, r2, 0xe, r0, 0x2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000001100)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001140)="700d8ff6176496a36f2f9bb9f7969047dbf85736cc12dff052154a924242acd6236910bb30ba58faa6423c65a52fe8ee8243c407a327f3336be0d42ca9f0d5ed3c08745230ee8f3b482a0bc4ff7dd3bcabdcc73363b4429c7a5b187a4453f9a3e6f6c45787e1bc0da979093abebbc6a0f27f57498038be8aa9f1c04b9491f3a77945075f0b7fad66e6c933503b830c947566bb09b553aa1e1d36e1e72f263bb5a9d85b4ce6e6438d8aebdb8f3d4dc80377100b89fc525885c5adc04a2c91dd5971d23eaa9d6df84b6463ae230d9ae99838a056ddaa0ae8fdf688314f4d47d88716bc5fbc88a16329f97963cc2e4c16b92cbfa72604ec95f7", 0xf8}, {&(0x7f0000001240)="7c7aa7ff999348130cdf53f84286aac9da0dddf393b361384bc8d4498633c1aa532eb582d9015f5ea03694a622717a5782", 0x31}, {&(0x7f0000001280)="9128b5d518d52ab7dc52fa793cf30c54985bc508e0ee86ca69f823c6a01ac592523ccf79e1bda37493fdea859e939c962498e501b88a6671c70571d16cd993fc47c0ba004d36bda045d3411cbfa9a34f06ee6697e122e3f86990dd47c795f2acd20a2a6dffccae456181a42887bbe9f03288c825a458ab1a", 0x78}, {&(0x7f0000001300)="9ff298d762730b7b0801635b21e64b4b00380caac2c84c2f71c4d3b2033cbea09c0fba255ed03614bf93251e0c724c4716e64682df61b558dad9086123147b30fd162d4f63d102fed555d89073b8", 0x4e}, {&(0x7f0000001380)="0328abc129788408523c27ddb8bf8e64f1e15318ca93996f684850", 0x1b}, {&(0x7f00000013c0)="8093f5e446c060a156fcee5430d12626c3a119465d988b05b497f00ef52460d0662aa8fe13b29686a8bf3d334e67c405d59ac3471dde2312071a4fc490143901717ea2a563bd035fccc691455447e3c399a37c3524e4711cf01bcdcb6957c4dd4f0314af866a1fb0d07531078eb846870fa6c2ee9292d24ab36e3a081516634a640af0", 0x83}], 0x6, &(0x7f0000001040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x98}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10060) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000600000001000000fd57000000000000", @ANYRES32=r1, @ANYBLOB="0100000000100000000000000000000000000000cf76dee386235f0a366fd1c8f3cf2cc687821d6477e2ad5cb39b0442d2833a9fb1ed179380f7404c730cea02dec54494801c7fa7200cae026f92ce935f516dba14fb", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000040000000200"/28], 0x50) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)}, 0x10040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r1, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000040000000700"/20, @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000005d5d0000050000000500"/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(0xffffffffffffffff) 4.538398621s ago: executing program 0 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x2, 0x10, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) close(r6) sendmsg$inet(r4, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x101}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x6f) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0", 0xbc}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r1}, 0x18) 4.535694501s ago: executing program 3 (id=1407): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x391, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x4000040) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000), 0xff7b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200000000000003"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xe, &(0x7f0000000640)=@raw=[@alu={0x7, 0x1, 0x7, 0x3, 0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x1, 0x7, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x7, 0xc, 0xf, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x6, 0x9, 0x8, 0x8, 0x97eb154c6bf9315e}], 0x0, 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) 3.247549853s ago: executing program 0 (id=1408): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x3c}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800e2ddffffbe0741279c81fff8ffffff34c80b47b28f300cc5", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018250000", @ANYRES32=r0, @ANYBLOB="00000000bf0d0000184b0000f8ffffff00000000000000009500000000000000852000000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x101, 0x79, &(0x7f0000000800)=""/121, 0x40f00, 0x20, '\x00', r5, @fallback=0x1f, r6, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0x2, 0xafd}, 0x10, 0x0, r3, 0x6, 0x0, &(0x7f0000000a00)=[{0x4, 0x1, 0x6, 0x5}, {0x0, 0x3, 0xf, 0x9}, {0x4, 0x1, 0x7, 0x5}, {0x2, 0x5, 0xd, 0x7}, {0x0, 0x1, 0x40000, 0x7}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0xffffff80}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2000c884) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0bf3ff00ff0300001600000022bf000071f9217068c1e731d1d76a867458d85fe25175901aa2803587832e4e2586b5864b59bfe939700f9f57df6a80cb32c51f98399d96b6417707533324f1a91f9a9d946600"/96, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a000180256400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x6, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r11, 0x58, &(0x7f0000000340)}, 0x10) 3.246941564s ago: executing program 1 (id=1409): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x10db}, 0x4047f40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x20, 0x3, 0x4, 0x9, 0xdb936dc0cf90192e, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) 3.126642228s ago: executing program 3 (id=1410): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4087, 0xff7}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f00000022c0)=""/120, 0x78}], 0x3}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.14411803s ago: executing program 1 (id=1411): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x10db}, 0x4047f40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x20, 0x3, 0x4, 0x9, 0xdb936dc0cf90192e, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) 1.999995538s ago: executing program 3 (id=1412): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x100, 0x80}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x20040000) recvmsg$kcm(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x38e38e3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000001850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc) 1.397498636s ago: executing program 0 (id=1413): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r4, 0x0, 0xb0, 0x1000, &(0x7f0000000380)="db56539d9e812f839bc74b999d09794de9062a2c1cbdf42f83f4b92a9babd886c990b10d7e4965108d5c25d117b788548e6db3bac34f54dc284316c54c9b9064798c12f6847e1917b66fe8ef4f8fd6e9d8df2fcef1b8fc33d53c94cebfaf6b79eeffb5635db5825142ed230ecfb82ad3b887d6b04c332bad7c4c3ffcccae794bb50236cfda4fa061399507bf90f8c4699275773b88ff05680d87154f918cfba5b74565e661e43d9ed48e96d91ecf6a6f", &(0x7f0000001980)=""/4096, 0x7f, 0x0, 0x73, 0x0, &(0x7f0000003080)="035337b893c0d77a40f572badf266dae17cada513ab6dc4adb933d7d7c8c54373180c670be7c344074ce97843cf54d5cc60f6325e47fb715f9998312c18cb21e0967f0917318611ef870c54f8fc66fc1ceb2a7894f6fcfcfff450586118c5a6b53e72899b29bb7952c6c9d93fb5c7d7a1ddf31", &(0x7f0000002a00), 0x2, 0x0, 0xd}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002cc0)={r6, 0x58, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f00)={&(0x7f0000002d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x6, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x38, 0x4}, @enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0xa, 0x7ff}, {0xc, 0x2}, {0x7, 0x9}, {0xf, 0xac73}, {0xf, 0x70}, {0xc, 0x9b}, {0x10, 0x5}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @union={0x8, 0x5, 0x0, 0x5, 0x1, 0x8, [{0x0, 0x1, 0x4}, {0x2, 0x3, 0x7fff}, {0x10, 0x2, 0x1}, {0xa, 0x1, 0x9}, {0xc, 0x0, 0xffff}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x71}, @typedef={0xa}]}, {0x0, [0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000002e40)=""/153, 0x11e, 0x99, 0x0, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002fc0)={0x18, 0x15, &(0x7f0000002b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfa9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002bc0)='syzkaller\x00', 0x1, 0x28, &(0x7f0000002c00)=""/40, 0x40f00, 0x0, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002f40)={0x2, 0x5, 0x22b2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002f80)=[{0x1, 0x4, 0xd, 0x2}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./cgroup/file0\x00', 0x0, 0x4010, r9}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20009, 0x2, @perf_bp={0x0, 0x13}, 0x18001, 0x0, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) recvmsg(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/121, 0x79}], 0x7}, 0x10040) close(0xffffffffffffffff) 937.371016ms ago: executing program 2 (id=1414): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x0, 0x2, 0x74, 0x0, 0x7, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x2, @perf_config_ext={0x8000, 0x3}, 0x4101, 0xc, 0x3, 0x8, 0x8, 0x47, 0x4, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bb"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f00000006c0)}, 0x20) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x5, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xe}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, &(0x7f00000022c0)="ce", &(0x7f00000003c0)=""/76}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000180)="a187925f88a7e47a5d6e680c10c54340c97b371bbcfcd433f50e8da18e142006184ba2b801fd2b5960a51e31fbfc985f41e89e1d0c215ecab391314e0a9e93c5b67ec22ef6495dffb12a8d9e3ead8a0fc7b977564fc2c84db39a8bf08048ee9c7789d18eab9e22db1785141fbfdf9d230e0f04f96736aab40ae0eac29dd7adec4e012ba1c62751ca69bbeaf52c559bba78ecc3194070c30fdc60d9e581e887b1ae86fd25facd19c2839759551fac301351c5efcbd23e7d6edba385cfd57cbc685e5a5efb81b002c360376d30a6d4", &(0x7f0000000280)=""/62}, 0x20) 902.171483ms ago: executing program 1 (id=1415): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x19, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x74200}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0xa, 0x7, 0xfffffffffffffff0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x7}, @jmp={0x5, 0x1, 0x7, 0x5, 0x2, 0x8}], &(0x7f0000000340)='syzkaller\x00', 0x80000001, 0xcc, &(0x7f00000006c0)=""/204, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x5, 0x3, 0xb, 0x4}], 0x10, 0x80000001}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xfe00000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xba}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x8050) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r3, 0x7, 0x0, 0xff, &(0x7f00000007c0)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a59c, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x1, @perf_config_ext={0x0, 0x11}, 0x2, 0x4, 0x3, 0x1, 0x81, 0x5, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 769.620409ms ago: executing program 3 (id=1416): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x9, 0x80114, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0x20000ca, 0x0, 0x0, 0x3ff, 0x3ff, 0x2, 0x0, 0xffffffff, 0x0, 0x6c6}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000002980), 0x12) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000eef70000007947b68eda9da22d29be97d2aaff9fca22871d3b1a332f99a31bffaf01e164c9c5eef295b49b14637127d9321e121effe9fd7f4c2fe29e1a0c19d05f1cd60324357aba86e249c63b2196a7ab570a58ac61d10356728de104da4c55bb09fbb754d0a994f8d9f39640f5294edc4b305398dd7a645f899a6fa073c0e954b8a4271416794287c2a0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c81b416288097b14"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0xc, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x34, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ff00000000000000e26500001835000004000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ac0e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB='\n'], &(0x7f00000005c0)='syzkaller\x00', 0x80000000, 0x57, &(0x7f0000000600)=""/87, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x5, 0xffffa2e7, 0x2}, 0x10, r11, r10, 0x0, &(0x7f0000000900)=[r2, r2, r12, r2, r9, r9], 0x0, 0x10, 0x7}, 0x94) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r13], 0x12) 530.015316ms ago: executing program 2 (id=1417): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x3, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r1 = socket$kcm(0x29, 0xf, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0xa, 0x3, 0x73) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0xa, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff82, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x10040) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @local, 0x8}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="be3f80018be6e6843e36dbbe23bdf38d31b756d7cd8ced828ef21047b1f19e058976e80c30e7253211596593a25cec146fbe2b11f15caf9b5d6c199024d559b22b4d91ae4aea51c4f6c56f1d8c6a6ea3a4ce0034ba595d0b8d3eaa04c837ffabe05636a1bc57d83fb9c60283c540b14fa49e6e0acec5b69e3566c929920f831deb563a19c999d5af583a16657ffd037a0f12a8c22436cbbb7a89efebbdb3625498d5de120f01", 0xa6}], 0x1, &(0x7f0000000240)=[{0x40, 0x108, 0xfffffff7, "1bf00904ae0ce4320931873fa87cca4cc81005f323010d99759ab8dd2616a1136dad36f8f245cb76e3fd62"}, {0x58, 0x113, 0x7, "c5783c69d7167ce42ecf8731ff76308b8b957102ca77771f6507c8d69d66ea76086baab78dfea6f16f54a8e1a9185c68fc9888793d60cee85527d723953fce45ddd54eab6dd8f7ee"}, {0xd8, 0x10d, 0xfffffff7, "7c147579153c11cf09a1fa4f41b9a88a1a344adb73dcdda5d756b49f45e8b42b604b6aa4d2530dbf459729e6242027a4b078d7bd4a9f77e7876afb4d589edee29dc97d7b4957a966f67609c944bf861b7a41dcddcf028fdca4551a84f0bc6763aaf5589cdc9a21079e62ff7d05047624fbfed4c4860fa8e55a004b1662973cb97c792f90401f54e3122a8730ea2edbb313d1634aa4a3c7631dc4f21f0b4b344a0552109d825a22deca47ff2fac885173a200ff4fb8520138d1cae75d502c85b851c0e770e6f5"}, {0x90, 0x109, 0x4, "3264c9bf7e6c6c1820558e26cee11cbdfbf079d5ce5837fa58520f56aa17ca6a51ec685971cf4e65bc1806233e49562c1ee79c799422fc7dc9eb93c60033cf14c464c0b32fd21524ba82eb53e3fe4b719976da091af4de688bbedaf3d521a6d8e953d99c5c282adb4c3219b7d83468d9954f7d603432aca7cfad9d"}, {0xb0, 0x10c, 0xfffffffe, "c3a51167365d50aaf0d4f4072b60b1d9c7f51a11495fd9f4ce1899fd6bdccedb60fb6e8dbbaf083f5cfbaab51abcb1653c334005dc651a02f92dc9d32eaf2923a9c8c9bc96b3576ec296ee4ea1debd91fcf2744b5922b0b34808cc1fb02b1d4715950279b99b730e26045497249765113a0902d8c3c7dcef4c3b5a9b785221c275088d370c0a040dadbaa4723b49b834292548b228dc7a9158b3ce"}, {0xa0, 0x114, 0x75, "ad68b44b23f92068f80200a74ee8b785bf04356380a763aa2d7d401b1e5195a4d1de3bdce019369becc1206c615c4fa802fe971ccb796e9cc012a41a43ef6daa20164922c1f184004d708b015f95ad8313466e476ce6ad5fefbae4f2ef5e4784af95b403f22a4b43723cbdf55221dee86ade3baf67e40805882f7c9460f9fe8a3a4039bd6c50799b13738ae193"}, {0xa8, 0x111, 0x2, "a439cf388099a3ba48b8cb77a8122bd7151f99b3920d7c1dced2b09f74be5130bb61e617776407c1855ba9a1a5a8b9d132bbaa1413077d2fbf6e0dfbc8dba7cd7cbf1185206570008058697ccb9bbacc3533ecfd397765e8bd17de1005481503add6f91b4554fe5c2780e4685050fa0f4e36eba7bef689ede92fad67030476fa583ac3ea5ef77b6e6fd67feba549764ee9"}, {0x70, 0x3a, 0xccd, "4d854fbb4150473b42780ca4f3786dea24b168f41221fbc55bb9d8fb0c7ea2939140e9bd6676ae40a8ebdaa1fae2e7dc8fe32b29da4daaf2222d5b4813566732c43f70fdf42711d8506c4f81e1b945c95bc27191460a6f6a81a0d6"}, {0x58, 0x102, 0x9, "8c42bac816bce9083593ed27023974e66d452756d63b8642a964e3879472d8c5aa1ac86bcdc8bfa6a4a79f1e020a82570029c0c3e1b55474439e118587ad92b718a2cfb7856f"}, {0x108, 0x6, 0x6, "528afccb8b037a85324ffa4ae3efdffcb6bad02bbd5680aecd5fa627d295aac96e679f76af107088b187017b175663ccee207792fcfc103402ff279bdb0b9344c6c222bf585ebc12da861e9b98105eb3433d4c4cf563be91db1a37a406ba78e18a036f18bd0a6557c118595a915610835c23973ae86740af58a29cb4fa39ecbd0dc597f72eaadfd75e638f403a11a86af66cfc88c7ff3a84f03681695f2c321e61896d27f96f4d19fd85bf38f7828436604e5ed82bc0ecbcb0dbc69e95c7c57347ecd7674b29035750a27a9b87f1f358d95ca36fdb85d13a459b8e2eca07af96bafd3ba75338a6fb560c8ba8248a3afeec61"}], 0x5c8}, 0x4000050) 264.484938ms ago: executing program 3 (id=1418): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x391, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x4000040) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000), 0xff7b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200000000000003"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xe, &(0x7f0000000640)=@raw=[@alu={0x7, 0x1, 0x7, 0x3, 0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x1, 0x7, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x7, 0xc, 0xf, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x6, 0x9, 0x8, 0x8, 0x97eb154c6bf9315e}], 0x0, 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) 56.275669ms ago: executing program 1 (id=1419): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x97, 0x1, 0x7, 0x6, 0x0, 0xfc0c, 0x100, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000080), 0x7}, 0x44, 0x5, 0x0, 0x9, 0x1e37, 0xb3, 0xfff8, 0x0, 0x4}, 0x0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfbfffffffffffffb, r2, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000020000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x11, &(0x7f0000000cc0)=""/4096, 0x41100, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a800160020000140017c0000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[], 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x17, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb2f1}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xa, 0x0, 0x2, 0x8, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x0, 0xb, 0xc, 0xc}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x9c, &(0x7f00000006c0)=""/156, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x9, 0x6f, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r4], &(0x7f0000000900)=[{0x1, 0x1, 0xa, 0x7}, {0x5, 0x3, 0xa, 0x7}, {0x2, 0x2, 0x1, 0x7}, {0x3, 0x2, 0x0, 0x5}, {0x2, 0x2, 0x2, 0xc}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r11) 55.452629ms ago: executing program 2 (id=1420): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f9, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x8100, 0x9, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1421): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4087, 0xff7}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f00000022c0)=""/120, 0x78}], 0x3}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. [ 72.093038][ T5764] cgroup: Unknown subsys name 'net' [ 72.229288][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.951851][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.520298][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.527319][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.551445][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.559719][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.567728][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.575182][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.575231][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.582884][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.591676][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.597701][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.604525][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.612883][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.618265][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.625625][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.634118][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.639742][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.646468][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.661373][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.669712][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.679602][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.687250][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.695836][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.703660][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.711102][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.155960][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.192096][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 76.250810][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.300149][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.390870][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.398634][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.406196][ T5778] bridge_slave_0: entered allmulticast mode [ 76.413206][ T5778] bridge_slave_0: entered promiscuous mode [ 76.452153][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.459314][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.466784][ T5778] bridge_slave_1: entered allmulticast mode [ 76.473809][ T5778] bridge_slave_1: entered promiscuous mode [ 76.481067][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.491272][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.499004][ T5780] bridge_slave_0: entered allmulticast mode [ 76.506286][ T5780] bridge_slave_0: entered promiscuous mode [ 76.515398][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.522644][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.529832][ T5780] bridge_slave_1: entered allmulticast mode [ 76.536761][ T5780] bridge_slave_1: entered promiscuous mode [ 76.637928][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.645268][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.652745][ T5779] bridge_slave_0: entered allmulticast mode [ 76.659567][ T5779] bridge_slave_0: entered promiscuous mode [ 76.666980][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.674307][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.681485][ T5777] bridge_slave_0: entered allmulticast mode [ 76.690897][ T5777] bridge_slave_0: entered promiscuous mode [ 76.702683][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.715649][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.727773][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.737444][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.745706][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.753318][ T5779] bridge_slave_1: entered allmulticast mode [ 76.760330][ T5779] bridge_slave_1: entered promiscuous mode [ 76.767632][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.775410][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.782855][ T5777] bridge_slave_1: entered allmulticast mode [ 76.790139][ T5777] bridge_slave_1: entered promiscuous mode [ 76.819976][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.870624][ T5780] team0: Port device team_slave_0 added [ 76.899786][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.911354][ T5780] team0: Port device team_slave_1 added [ 76.923036][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.935478][ T5778] team0: Port device team_slave_0 added [ 76.946534][ T5778] team0: Port device team_slave_1 added [ 76.954798][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.988953][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.040936][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.048798][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.077393][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.102329][ T5777] team0: Port device team_slave_0 added [ 77.128181][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.135331][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.161634][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.173485][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.180533][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.206760][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.221114][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.228421][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.254783][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.268178][ T5777] team0: Port device team_slave_1 added [ 77.278683][ T5779] team0: Port device team_slave_0 added [ 77.293654][ T5779] team0: Port device team_slave_1 added [ 77.338473][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.345955][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.372604][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.396505][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.403534][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.429770][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.454095][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.461066][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.487757][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.509627][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.516674][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.543177][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.581904][ T5780] hsr_slave_0: entered promiscuous mode [ 77.588719][ T5780] hsr_slave_1: entered promiscuous mode [ 77.612912][ T5778] hsr_slave_0: entered promiscuous mode [ 77.619435][ T5778] hsr_slave_1: entered promiscuous mode [ 77.626437][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.634967][ T5778] Cannot create hsr debugfs directory [ 77.692152][ T5788] Bluetooth: hci2: command tx timeout [ 77.715194][ T5779] hsr_slave_0: entered promiscuous mode [ 77.721499][ T5779] hsr_slave_1: entered promiscuous mode [ 77.728034][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.735711][ T5779] Cannot create hsr debugfs directory [ 77.762239][ T5788] Bluetooth: hci1: command tx timeout [ 77.767867][ T5788] Bluetooth: hci0: command tx timeout [ 77.774181][ T5088] Bluetooth: hci3: command tx timeout [ 77.816472][ T5777] hsr_slave_0: entered promiscuous mode [ 77.823381][ T5777] hsr_slave_1: entered promiscuous mode [ 77.829591][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.838303][ T5777] Cannot create hsr debugfs directory [ 78.193295][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.206695][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.217822][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.229620][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.304504][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.341708][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.364173][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.375647][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.442172][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.461259][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.474980][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.535997][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.563628][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.573952][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.585065][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.597202][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.610128][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.682647][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.701523][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.708929][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.747627][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.754972][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.815886][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.899860][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.917146][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.924354][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.966065][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.973279][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.056077][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.093923][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.149256][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.180964][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.188193][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.208955][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.233182][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.240346][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.292028][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.299189][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.313527][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.320796][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.378613][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.570080][ T5778] veth0_vlan: entered promiscuous mode [ 79.619214][ T5778] veth1_vlan: entered promiscuous mode [ 79.649874][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.737771][ T5778] veth0_macvtap: entered promiscuous mode [ 79.764994][ T5788] Bluetooth: hci2: command tx timeout [ 79.785370][ T5778] veth1_macvtap: entered promiscuous mode [ 79.810404][ T5779] veth0_vlan: entered promiscuous mode [ 79.837686][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.845782][ T5088] Bluetooth: hci3: command tx timeout [ 79.851324][ T5788] Bluetooth: hci0: command tx timeout [ 79.856841][ T5088] Bluetooth: hci1: command tx timeout [ 79.880383][ T5779] veth1_vlan: entered promiscuous mode [ 79.907795][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.937128][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.952289][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.961230][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.970359][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.029934][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.069924][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.171064][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177015][ T5779] veth0_macvtap: entered promiscuous mode [ 80.181928][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.219874][ T5779] veth1_macvtap: entered promiscuous mode [ 80.231273][ T5780] veth0_vlan: entered promiscuous mode [ 80.282102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290617][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.296568][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.310615][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.323597][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.347362][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.358474][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.370623][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.382539][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.391418][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.401014][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.418713][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.444599][ T5780] veth1_vlan: entered promiscuous mode [ 80.491418][ T5777] veth0_vlan: entered promiscuous mode [ 80.518055][ T5777] veth1_vlan: entered promiscuous mode [ 80.600461][ T5780] veth0_macvtap: entered promiscuous mode [ 80.639991][ T5780] veth1_macvtap: entered promiscuous mode [ 80.659780][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.676203][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.701927][ C1] hrtimer: interrupt took 115847 ns [ 80.857066][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.878957][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.897416][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.908664][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.923679][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.937502][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.951870][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.976855][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.008625][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.023644][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.083981][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.102289][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.125524][ T5777] veth0_macvtap: entered promiscuous mode [ 81.211125][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.254106][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.267544][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276675][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.313749][ T5777] veth1_macvtap: entered promiscuous mode [ 81.369053][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.388608][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.398661][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.409674][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.419974][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.436756][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.459461][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.476752][ T5842] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.524852][ T5842] team0: Port device team_slave_0 removed [ 81.548526][ T5842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 81.574220][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.589253][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.599383][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.612188][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.622231][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.641975][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.662817][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.685459][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.706945][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.728171][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.745985][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.841970][ T5088] Bluetooth: hci2: command tx timeout [ 81.921786][ T5088] Bluetooth: hci0: command tx timeout [ 81.927395][ T5088] Bluetooth: hci1: command tx timeout [ 81.932812][ T5788] Bluetooth: hci3: command tx timeout [ 81.998349][ T5848] Zero length message leads to an empty skb [ 82.088737][ T5850] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.105429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.113569][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.305534][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.339362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.349108][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.371377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.424837][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.445042][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.487173][ T5850] netlink: 'syz.2.6': attribute type 22 has an invalid length. [ 82.926666][ T5856] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 83.172283][ T5863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'. [ 83.331019][ T5856] hsr_slave_1 (unregistering): left promiscuous mode [ 83.922016][ T5088] Bluetooth: hci2: command tx timeout [ 84.003130][ T5088] Bluetooth: hci1: command tx timeout [ 84.008630][ T5088] Bluetooth: hci3: command tx timeout [ 84.014901][ T5088] Bluetooth: hci0: command tx timeout [ 84.151158][ T5863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'. [ 84.266805][ T5856] syz.1.2 (5856) used greatest stack depth: 20872 bytes left [ 84.309088][ T5869] netlink: 'syz.3.9': attribute type 27 has an invalid length. [ 84.327796][ T5869] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9'. [ 84.352827][ T5869] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.548112][ T5872] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.560688][ T5876] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.713898][ T5876] hsr_slave_0: left promiscuous mode [ 84.743628][ T5876] hsr_slave_1: left promiscuous mode [ 84.797965][ T5880] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.822728][ T5869] syz.3.9 (5869) used greatest stack depth: 20776 bytes left [ 84.871295][ T5880] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.883047][ T5881] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.227503][ T5884] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.257747][ T5888] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 85.340474][ T5893] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 85.362153][ T5893] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 85.589279][ T5893] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.655335][ T5893] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 85.709731][ T5893] netlink: 'syz.0.17': attribute type 29 has an invalid length. [ 85.814820][ T5902] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 86.091170][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 86.111320][ T5905] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 86.168527][ T5905] team0: Port device netdevsim0 added [ 86.241101][ T5908] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 86.542786][ T5908] team0: Port device netdevsim0 removed [ 86.709887][ T5908] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 87.035056][ T5908] syz.3.19 (5908) used greatest stack depth: 19880 bytes left [ 87.101515][ T5905] syz.3.19 (5905) used greatest stack depth: 19560 bytes left [ 89.219880][ T5934] netlink: 'syz.3.27': attribute type 3 has an invalid length. [ 89.242749][ T5934] __nla_validate_parse: 1 callbacks suppressed [ 89.242812][ T5934] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.27'. [ 89.539254][ T5932] : port 1(ip6gretap0) entered blocking state [ 89.556467][ T5932] : port 1(ip6gretap0) entered disabled state [ 89.605978][ T5932] ip6gretap0: entered allmulticast mode [ 89.644983][ T5932] ip6gretap0: entered promiscuous mode [ 89.722770][ T5935] ip6gretap0: left allmulticast mode [ 89.731767][ T5935] ip6gretap0: left promiscuous mode [ 89.738408][ T5935] : port 1(ip6gretap0) entered disabled state [ 92.299160][ T28] cfg80211: failed to load regulatory.db [ 92.781266][ T5953] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 92.870631][ T5953] team0: Port device wlan1 added [ 95.130775][ T6001] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 95.620253][ T6008] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 95.688809][ T6001] team0: Port device wlan1 added [ 96.714708][ T6008] netlink: 'syz.2.48': attribute type 29 has an invalid length. [ 96.750739][ T6001] syz.3.47 (6001) used greatest stack depth: 19416 bytes left [ 97.041211][ T6027] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 97.148185][ T6027] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.53'. [ 97.167533][ T6023] netlink: 'syz.0.52': attribute type 10 has an invalid length. [ 97.495677][ T6037] : port 1(ip6gretap0) entered blocking state [ 97.511876][ T6037] : port 1(ip6gretap0) entered disabled state [ 97.520955][ T6037] ip6gretap0: entered allmulticast mode [ 97.539257][ T6037] ip6gretap0: entered promiscuous mode [ 97.575973][ T6038] ip6gretap0: left allmulticast mode [ 97.582143][ T6038] ip6gretap0: left promiscuous mode [ 97.590133][ T6038] : port 1(ip6gretap0) entered disabled state [ 98.683332][ T6057] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 98.787065][ T6057] team0: Port device wlan1 added [ 98.867032][ T6061] netlink: 'syz.0.62': attribute type 29 has an invalid length. [ 98.957343][ T6061] netlink: 'syz.0.62': attribute type 29 has an invalid length. [ 98.967853][ T6063] netlink: 'syz.0.62': attribute type 29 has an invalid length. [ 99.007982][ T6061] netlink: 'syz.0.62': attribute type 29 has an invalid length. [ 100.217550][ T6071] validate_nla: 1 callbacks suppressed [ 100.217570][ T6071] netlink: 'syz.3.64': attribute type 10 has an invalid length. [ 100.523335][ T6080] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 101.494687][ T6096] : port 1(ip6gretap0) entered blocking state [ 101.497826][ T6092] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 101.543339][ T6096] : port 1(ip6gretap0) entered disabled state [ 101.551077][ T6096] ip6gretap0: entered allmulticast mode [ 101.558557][ T6096] ip6gretap0: entered promiscuous mode [ 101.575053][ T6092] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 101.612991][ T6098] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 101.644216][ T6097] ip6gretap0: left allmulticast mode [ 101.682005][ T6097] ip6gretap0: left promiscuous mode [ 101.687516][ T6097] : port 1(ip6gretap0) entered disabled state [ 101.766779][ T6100] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 101.847737][ T6092] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 101.940004][ T6103] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 102.532855][ T6103] syz.2.73 (6103) used greatest stack depth: 19368 bytes left [ 104.596717][ T6133] netlink: 'syz.3.82': attribute type 10 has an invalid length. [ 104.927277][ T6138] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 105.175131][ T6138] team0: Port device netdevsim0 added [ 105.221362][ T6141] team0: Port device netdevsim0 removed [ 105.259083][ T6141] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.285144][ T6145] validate_nla: 2 callbacks suppressed [ 105.285167][ T6145] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 105.327509][ T6145] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 105.363576][ T6145] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 105.856445][ T6157] netlink: 'syz.3.90': attribute type 10 has an invalid length. [ 106.153143][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 106.297953][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 106.329744][ T6157] team0 (unregistering): Port device wlan1 removed [ 107.781920][ T6183] netlink: 'syz.2.96': attribute type 10 has an invalid length. [ 107.789768][ T6175] netlink: 'syz.0.103': attribute type 10 has an invalid length. [ 107.859104][ T6175] team0 (unregistering): Port device team_slave_0 removed [ 107.882984][ T6175] team0 (unregistering): Port device team_slave_1 removed [ 107.908185][ T6175] team0 (unregistering): Port device wlan1 removed [ 108.235600][ T6192] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 108.279434][ T6192] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 108.830718][ T6192] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 109.157146][ T6192] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 109.582495][ T6196] team0: Port device netdevsim0 added [ 109.632710][ T6196] syz.1.102 (6196) used greatest stack depth: 17896 bytes left [ 109.653272][ T6198] team0: Port device netdevsim0 removed [ 109.674528][ T6198] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.759124][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.104'. [ 113.040123][ T6214] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.106'. [ 113.294290][ T6218] netlink: 830 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.379959][ T6219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.390986][ T6218] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.946087][ T6227] validate_nla: 2 callbacks suppressed [ 114.946105][ T6227] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 115.241862][ T6237] netlink: 14 bytes leftover after parsing attributes in process `syz.3.114'. [ 115.360365][ T6237] hsr_slave_0: left promiscuous mode [ 115.401110][ T6237] hsr_slave_1: left promiscuous mode [ 115.474837][ T6242] netlink: 'syz.1.116': attribute type 27 has an invalid length. [ 115.491764][ T6242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.116'. [ 115.523342][ T6242] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.704870][ T6245] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 115.856114][ T6246] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 115.875024][ T6246] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.010188][ T6257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'. [ 116.060028][ T6257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'. [ 116.108777][ T6252] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.119'. [ 116.145220][ T6261] netlink: 830 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.161096][ T6257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'. [ 116.230157][ T6262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.120'. [ 116.282898][ T6264] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.302866][ T6261] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.121'. [ 117.124902][ T6277] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 118.037402][ T6283] hsr_slave_0: left promiscuous mode [ 118.327845][ T6288] netlink: 'syz.0.130': attribute type 27 has an invalid length. [ 118.336801][ T6288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.761642][ T6298] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 118.883782][ T6300] netlink: 'syz.1.131': attribute type 22 has an invalid length. [ 119.376947][ T6307] netlink: 'syz.0.141': attribute type 27 has an invalid length. [ 119.392373][ T6307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.317026][ T6326] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 120.546120][ T6338] __nla_validate_parse: 5 callbacks suppressed [ 120.546185][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 120.651517][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 120.710746][ T6346] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 120.776082][ T6345] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.143'. [ 120.906533][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 121.023322][ T6347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 121.082494][ T6350] netlink: 'syz.0.143': attribute type 22 has an invalid length. [ 121.127992][ T6345] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 121.515633][ T6353] netlink: 'syz.2.146': attribute type 27 has an invalid length. [ 121.539528][ T6353] netlink: 152 bytes leftover after parsing attributes in process `syz.2.146'. [ 121.567331][ T6353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.736284][ T6357] netlink: 144 bytes leftover after parsing attributes in process `syz.3.147'. [ 121.763046][ T6357] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 122.089830][ T6362] netlink: 'syz.0.148': attribute type 39 has an invalid length. [ 122.298203][ T6366] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 122.480528][ T6362] hsr_slave_1 (unregistering): left promiscuous mode [ 123.040932][ T6380] netlink: 'syz.1.155': attribute type 10 has an invalid length. [ 124.102285][ T6399] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.161'. [ 124.269504][ T6412] netlink: 'syz.3.161': attribute type 22 has an invalid length. [ 124.347144][ T6399] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 124.468898][ T6418] netlink: 144 bytes leftover after parsing attributes in process `syz.0.166'. [ 124.493347][ T6418] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 125.093570][ T6426] netlink: 'syz.3.167': attribute type 39 has an invalid length. [ 126.069590][ T6441] netlink: 'syz.1.169': attribute type 10 has an invalid length. [ 126.078285][ T6440] bridge_slave_1: left allmulticast mode [ 126.084914][ T6440] bridge_slave_1: left promiscuous mode [ 126.092352][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.109940][ T6440] bridge_slave_0: left allmulticast mode [ 126.117312][ T6440] bridge_slave_0: left promiscuous mode [ 126.129308][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.317310][ T6451] syzkaller0: entered promiscuous mode [ 126.324080][ T6451] syzkaller0: entered allmulticast mode [ 128.472113][ T6484] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 128.779180][ T6488] Illegal XDP return value 4294967262 on prog (id 176) dev N/A, expect packet loss! [ 128.975477][ T6497] netlink: 'syz.2.189': attribute type 39 has an invalid length. [ 129.007866][ T6498] FAULT_INJECTION: forcing a failure. [ 129.007866][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.021157][ T6498] CPU: 0 PID: 6498 Comm: syz.3.190 Not tainted syzkaller #0 [ 129.028492][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.038595][ T6498] Call Trace: [ 129.041918][ T6498] [ 129.044884][ T6498] dump_stack_lvl+0x18c/0x250 [ 129.049610][ T6498] ? show_regs_print_info+0x20/0x20 [ 129.054862][ T6498] ? load_image+0x420/0x420 [ 129.059412][ T6498] ? __might_fault+0xaa/0x120 [ 129.064230][ T6498] ? __lock_acquire+0x7d80/0x7d80 [ 129.069302][ T6498] should_fail_ex+0x394/0x4c0 [ 129.074029][ T6498] _copy_from_user+0x2f/0xe0 [ 129.078666][ T6498] __sys_bpf+0x23e/0x890 [ 129.082962][ T6498] ? bpf_link_show_fdinfo+0x560/0x560 [ 129.088394][ T6498] ? lock_chain_count+0x20/0x20 [ 129.093300][ T6498] __x64_sys_bpf+0x7c/0x90 [ 129.097773][ T6498] do_syscall_64+0x55/0xb0 [ 129.102258][ T6498] ? clear_bhb_loop+0x40/0x90 [ 129.106998][ T6498] ? clear_bhb_loop+0x40/0x90 [ 129.111699][ T6498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.117636][ T6498] RIP: 0033:0x7f7ac819e159 [ 129.122076][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.141734][ T6498] RSP: 002b:00007f7ac8fd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.150230][ T6498] RAX: ffffffffffffffda RBX: 00007f7ac8426180 RCX: 00007f7ac819e159 [ 129.158259][ T6498] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 129.166267][ T6498] RBP: 00007f7ac8fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 129.174262][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.182289][ T6498] R13: 00007f7ac8426218 R14: 00007f7ac8426180 R15: 00007ffe5a85fcf8 [ 129.190580][ T6498] [ 129.378283][ T6502] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.192'. [ 129.655061][ T6509] netlink: 'syz.2.195': attribute type 8 has an invalid length. [ 129.683776][ T6509] netlink: 156 bytes leftover after parsing attributes in process `syz.2.195'. [ 129.874171][ T6511] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 129.898775][ T6511] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 130.283375][ T6519] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 131.534068][ T6546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.219783][ T6558] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 132.327633][ T6567] FAULT_INJECTION: forcing a failure. [ 132.327633][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 132.354229][ T6567] CPU: 1 PID: 6567 Comm: syz.1.216 Not tainted syzkaller #0 [ 132.361601][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.371797][ T6567] Call Trace: [ 132.375099][ T6567] [ 132.378047][ T6567] dump_stack_lvl+0x18c/0x250 [ 132.382791][ T6567] ? show_regs_print_info+0x20/0x20 [ 132.388015][ T6567] ? load_image+0x420/0x420 [ 132.392541][ T6567] ? __might_sleep+0xe0/0xe0 [ 132.397151][ T6567] ? __lock_acquire+0x7d80/0x7d80 [ 132.402195][ T6567] should_fail_ex+0x394/0x4c0 [ 132.406898][ T6567] should_failslab+0x9/0x20 [ 132.411417][ T6567] slab_pre_alloc_hook+0x59/0x300 [ 132.416471][ T6567] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 132.422204][ T6567] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 132.427932][ T6567] __kmem_cache_alloc_node+0x53/0x250 [ 132.433330][ T6567] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 132.439103][ T6567] __kmalloc+0xa7/0x240 [ 132.443313][ T6567] tomoyo_realpath_from_path+0xe6/0x5c0 [ 132.448898][ T6567] ? tomoyo_domain+0xd6/0x120 [ 132.453769][ T6567] tomoyo_path_number_perm+0x248/0x5e0 [ 132.459280][ T6567] ? tomoyo_path_number_perm+0x217/0x5e0 [ 132.464944][ T6567] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 132.470420][ T6567] ? trace_call_bpf+0xc3/0x6c0 [ 132.475196][ T6567] ? trace_call_bpf+0xc3/0x6c0 [ 132.479968][ T6567] ? trace_call_bpf+0x5e9/0x6c0 [ 132.484853][ T6567] ? __fget_files+0x28/0x460 [ 132.489469][ T6567] security_file_ioctl+0x70/0xa0 [ 132.494430][ T6567] __se_sys_ioctl+0x48/0x170 [ 132.499041][ T6567] do_syscall_64+0x55/0xb0 [ 132.503488][ T6567] ? clear_bhb_loop+0x40/0x90 [ 132.508177][ T6567] ? clear_bhb_loop+0x40/0x90 [ 132.512872][ T6567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.518777][ T6567] RIP: 0033:0x7f644299e159 [ 132.523206][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.542823][ T6567] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.551338][ T6567] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 132.559331][ T6567] RDX: 0000200000000980 RSI: 0000000000008914 RDI: 0000000000000003 [ 132.567312][ T6567] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.575294][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.583298][ T6567] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 132.591295][ T6567] [ 132.616649][ T6567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.683039][ T6569] netlink: 'syz.3.217': attribute type 17 has an invalid length. [ 132.690849][ T6569] netlink: 148 bytes leftover after parsing attributes in process `syz.3.217'. [ 132.976125][ T6575] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 133.002052][ T6575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.219'. [ 133.027595][ T6575] hsr0: entered promiscuous mode [ 133.075944][ T6575] bridge0: port 3(hsr0) entered blocking state [ 133.113073][ T6575] bridge0: port 3(hsr0) entered disabled state [ 133.139777][ T6575] hsr0: entered allmulticast mode [ 133.164699][ T6575] hsr_slave_0: entered allmulticast mode [ 133.207872][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214886][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371212][ T6575] bridge0: port 3(hsr0) entered blocking state [ 133.382594][ T6575] bridge0: port 3(hsr0) entered forwarding state [ 134.270835][ T6607] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 134.485406][ T6619] netlink: 'syz.0.235': attribute type 3 has an invalid length. [ 134.493811][ T6619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.235'. [ 134.761292][ T6625] FAULT_INJECTION: forcing a failure. [ 134.761292][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.776117][ T6625] CPU: 1 PID: 6625 Comm: syz.0.236 Not tainted syzkaller #0 [ 134.783650][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.793732][ T6625] Call Trace: [ 134.797027][ T6625] [ 134.799976][ T6625] dump_stack_lvl+0x18c/0x250 [ 134.804714][ T6625] ? show_regs_print_info+0x20/0x20 [ 134.809937][ T6625] ? load_image+0x420/0x420 [ 134.814459][ T6625] ? __might_fault+0xaa/0x120 [ 134.819145][ T6625] ? __lock_acquire+0x7d80/0x7d80 [ 134.824213][ T6625] ? __virt_addr_valid+0x10c/0x380 [ 134.829342][ T6625] should_fail_ex+0x394/0x4c0 [ 134.834040][ T6625] _copy_to_user+0x2f/0xa0 [ 134.838566][ T6625] bpf_verifier_vlog+0x4e6/0x840 [ 134.843532][ T6625] __btf_verifier_log+0xe3/0x140 [ 134.848490][ T6625] ? btf_check_sec_info+0x350/0x350 [ 134.853794][ T6625] ? __lock_acquire+0x7d80/0x7d80 [ 134.858833][ T6625] ? __virt_addr_valid+0x10c/0x380 [ 134.863957][ T6625] ? btf_parse_hdr+0x1f0/0x700 [ 134.868764][ T6625] btf_parse_hdr+0x2cc/0x700 [ 134.873370][ T6625] btf_new_fd+0x397/0x9e0 [ 134.877750][ T6625] ? bpf_btf_show_fdinfo+0x80/0x80 [ 134.882881][ T6625] ? capable+0x88/0xe0 [ 134.886967][ T6625] __sys_bpf+0x670/0x890 [ 134.891230][ T6625] ? bpf_link_show_fdinfo+0x560/0x560 [ 134.896623][ T6625] ? lock_chain_count+0x20/0x20 [ 134.901491][ T6625] __x64_sys_bpf+0x7c/0x90 [ 134.906010][ T6625] do_syscall_64+0x55/0xb0 [ 134.910444][ T6625] ? clear_bhb_loop+0x40/0x90 [ 134.915227][ T6625] ? clear_bhb_loop+0x40/0x90 [ 134.919922][ T6625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.925832][ T6625] RIP: 0033:0x7fb8afd9e159 [ 134.930285][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.950186][ T6625] RSP: 002b:00007fb8b0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.958637][ T6625] RAX: ffffffffffffffda RBX: 00007fb8b0025fa0 RCX: 00007fb8afd9e159 [ 134.966636][ T6625] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 134.974885][ T6625] RBP: 00007fb8b0c92090 R08: 0000000000000000 R09: 0000000000000000 [ 134.982958][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.990942][ T6625] R13: 00007fb8b0026038 R14: 00007fb8b0025fa0 R15: 00007ffca40955f8 [ 134.999119][ T6625] [ 137.220202][ T6658] netlink: 'syz.3.247': attribute type 21 has an invalid length. [ 137.246316][ T6658] netlink: 11866 bytes leftover after parsing attributes in process `syz.3.247'. [ 138.315611][ T6682] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 138.462219][ T6687] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 138.765327][ T6693] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 139.914646][ T6715] netlink: 164 bytes leftover after parsing attributes in process `syz.0.268'. [ 140.864173][ T6728] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 141.212894][ T6735] sit0: entered allmulticast mode [ 141.565030][ T6745] FAULT_INJECTION: forcing a failure. [ 141.565030][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 141.576353][ T6743] FAULT_INJECTION: forcing a failure. [ 141.576353][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 141.609901][ T6743] CPU: 1 PID: 6743 Comm: syz.2.275 Not tainted syzkaller #0 [ 141.617279][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.627373][ T6743] Call Trace: [ 141.630665][ T6743] [ 141.633609][ T6743] dump_stack_lvl+0x18c/0x250 [ 141.638338][ T6743] ? sctp_sendmsg+0x1519/0x27b0 [ 141.643237][ T6743] ? ___sys_sendmsg+0x2a6/0x360 [ 141.648277][ T6743] ? show_regs_print_info+0x20/0x20 [ 141.653495][ T6743] ? load_image+0x420/0x420 [ 141.658034][ T6743] should_fail_ex+0x394/0x4c0 [ 141.662735][ T6743] should_failslab+0x9/0x20 [ 141.667271][ T6743] slab_pre_alloc_hook+0x59/0x300 [ 141.672317][ T6743] ? sctp_add_bind_addr+0x8c/0x360 [ 141.677449][ T6743] __kmem_cache_alloc_node+0x53/0x250 [ 141.682841][ T6743] ? sctp_add_bind_addr+0x8c/0x360 [ 141.687971][ T6743] kmalloc_trace+0x2a/0xe0 [ 141.692411][ T6743] sctp_add_bind_addr+0x8c/0x360 [ 141.697377][ T6743] sctp_copy_local_addr_list+0x31b/0x4e0 [ 141.703310][ T6743] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 141.709074][ T6743] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 141.715174][ T6743] ? sctp_v4_is_any+0x35/0x60 [ 141.720055][ T6743] ? sctp_copy_one_addr+0x8c/0x350 [ 141.725196][ T6743] sctp_bind_addr_copy+0xb3/0x3c0 [ 141.730343][ T6743] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 141.736706][ T6743] sctp_connect_new_asoc+0x2f9/0x6a0 [ 141.742109][ T6743] ? __sctp_connect+0xd80/0xd80 [ 141.746985][ T6743] ? bpf_lsm_sctp_assoc_request+0x10/0x10 [ 141.752725][ T6743] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.758289][ T6743] ? security_sctp_bind_connect+0x89/0xb0 [ 141.764041][ T6743] sctp_sendmsg+0x1519/0x27b0 [ 141.768752][ T6743] ? sctp_getsockopt+0xb60/0xb60 [ 141.773711][ T6743] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.779880][ T6743] ? lockdep_hardirqs_on+0x98/0x150 [ 141.785121][ T6743] ? sock_rps_record_flow+0x19/0x3f0 [ 141.790445][ T6743] ? inet_sendmsg+0xce/0x2a0 [ 141.795060][ T6743] ? inet_send_prepare+0x250/0x250 [ 141.800207][ T6743] ____sys_sendmsg+0x61b/0x980 [ 141.805038][ T6743] ? __asan_memset+0x22/0x40 [ 141.809664][ T6743] ? __sys_sendmsg_sock+0x30/0x30 [ 141.814714][ T6743] ? __import_iovec+0x5f2/0x850 [ 141.819606][ T6743] ? import_iovec+0x73/0xa0 [ 141.824146][ T6743] ___sys_sendmsg+0x2a6/0x360 [ 141.828841][ T6743] ? get_pid_task+0x20/0x1e0 [ 141.833623][ T6743] ? __sys_sendmsg+0x2b0/0x2b0 [ 141.838426][ T6743] ? __lock_acquire+0x7d80/0x7d80 [ 141.843532][ T6743] __se_sys_sendmsg+0x1d0/0x2c0 [ 141.848403][ T6743] ? __x64_sys_sendmsg+0x80/0x80 [ 141.853378][ T6743] ? syscall_enter_from_user_mode+0x2e/0x80 [ 141.859293][ T6743] do_syscall_64+0x55/0xb0 [ 141.863726][ T6743] ? clear_bhb_loop+0x40/0x90 [ 141.868421][ T6743] ? clear_bhb_loop+0x40/0x90 [ 141.873115][ T6743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.879022][ T6743] RIP: 0033:0x7ffa6f59e159 [ 141.883466][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.903096][ T6743] RSP: 002b:00007ffa70516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.911528][ T6743] RAX: ffffffffffffffda RBX: 00007ffa6f825fa0 RCX: 00007ffa6f59e159 [ 141.919536][ T6743] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000007 [ 141.927606][ T6743] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 141.935590][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.943574][ T6743] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 141.951583][ T6743] [ 141.961770][ T6745] CPU: 0 PID: 6745 Comm: syz.1.277 Not tainted syzkaller #0 [ 141.969132][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.979208][ T6745] Call Trace: [ 141.982506][ T6745] [ 141.985458][ T6745] dump_stack_lvl+0x18c/0x250 [ 141.990158][ T6745] ? sctp_sendmsg+0x1519/0x27b0 [ 141.995033][ T6745] ? ___sys_sendmsg+0x2a6/0x360 [ 141.999898][ T6745] ? show_regs_print_info+0x20/0x20 [ 142.005125][ T6745] ? load_image+0x420/0x420 [ 142.009659][ T6745] should_fail_ex+0x394/0x4c0 [ 142.014364][ T6745] should_failslab+0x9/0x20 [ 142.018891][ T6745] slab_pre_alloc_hook+0x59/0x300 [ 142.024034][ T6745] ? sctp_add_bind_addr+0x8c/0x360 [ 142.029165][ T6745] __kmem_cache_alloc_node+0x53/0x250 [ 142.034561][ T6745] ? sctp_add_bind_addr+0x8c/0x360 [ 142.039686][ T6745] kmalloc_trace+0x2a/0xe0 [ 142.044124][ T6745] sctp_add_bind_addr+0x8c/0x360 [ 142.049085][ T6745] sctp_copy_local_addr_list+0x31b/0x4e0 [ 142.054782][ T6745] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 142.060542][ T6745] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 142.066649][ T6745] ? sctp_v6_is_any+0x64/0x70 [ 142.071349][ T6745] ? sctp_copy_one_addr+0x8c/0x350 [ 142.076486][ T6745] sctp_bind_addr_copy+0xb3/0x3c0 [ 142.081540][ T6745] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 142.088068][ T6745] sctp_connect_new_asoc+0x2f9/0x6a0 [ 142.093377][ T6745] ? __sctp_connect+0xd80/0xd80 [ 142.098236][ T6745] ? __local_bh_enable_ip+0x13a/0x1c0 [ 142.103656][ T6745] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 142.109224][ T6745] ? security_sctp_bind_connect+0x89/0xb0 [ 142.114961][ T6745] sctp_sendmsg+0x1519/0x27b0 [ 142.119866][ T6745] ? sctp_getsockopt+0xb60/0xb60 [ 142.124830][ T6745] ? aa_af_perm+0x330/0x330 [ 142.129356][ T6745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 142.135809][ T6745] ? sock_rps_record_flow+0x19/0x3f0 [ 142.141115][ T6745] ? inet_sendmsg+0xce/0x2a0 [ 142.145720][ T6745] ? inet_send_prepare+0x250/0x250 [ 142.150844][ T6745] ____sys_sendmsg+0x61b/0x980 [ 142.155655][ T6745] ? __asan_memset+0x22/0x40 [ 142.160278][ T6745] ? __sys_sendmsg_sock+0x30/0x30 [ 142.165321][ T6745] ? __import_iovec+0x5f2/0x850 [ 142.170317][ T6745] ? import_iovec+0x73/0xa0 [ 142.175073][ T6745] ___sys_sendmsg+0x2a6/0x360 [ 142.179839][ T6745] ? get_pid_task+0x20/0x1e0 [ 142.184473][ T6745] ? __sys_sendmsg+0x2b0/0x2b0 [ 142.189296][ T6745] ? __lock_acquire+0x7d80/0x7d80 [ 142.194361][ T6745] __se_sys_sendmsg+0x1d0/0x2c0 [ 142.199232][ T6745] ? __x64_sys_sendmsg+0x80/0x80 [ 142.204218][ T6745] ? lockdep_hardirqs_on+0x98/0x150 [ 142.209954][ T6745] do_syscall_64+0x55/0xb0 [ 142.214390][ T6745] ? clear_bhb_loop+0x40/0x90 [ 142.219084][ T6745] ? clear_bhb_loop+0x40/0x90 [ 142.223778][ T6745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.229688][ T6745] RIP: 0033:0x7f644299e159 [ 142.234122][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.253779][ T6745] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.262219][ T6745] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 142.270224][ T6745] RDX: 0000000000000080 RSI: 0000200000002500 RDI: 0000000000000003 [ 142.278212][ T6745] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.286196][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.294177][ T6745] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 142.302177][ T6745] [ 142.434988][ T6743] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 142.443229][ T6743] netlink: 2 bytes leftover after parsing attributes in process `syz.2.275'. [ 142.633886][ T6755] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.278'. [ 143.058459][ T6766] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 144.905114][ T6782] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 144.916728][ T6782] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.941675][ T6782] netlink: 5 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.963397][ T6786] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.289'. [ 145.103026][ T6782] netlink: 'syz.2.288': attribute type 4 has an invalid length. [ 145.576984][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 145.643049][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 145.701299][ T6800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.293'. [ 145.776798][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 145.846928][ T6800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.445059][ T6811] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 146.540262][ T6817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.548954][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 146.558426][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 146.566174][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 146.681045][ T6817] netlink: 'syz.1.296': attribute type 21 has an invalid length. [ 147.917031][ T6888] IPv6: pim6reg1: Disabled Multicast RS [ 148.488672][ T6898] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 149.299327][ T6915] netlink: 'syz.3.314': attribute type 10 has an invalid length. [ 149.337150][ T6915] netlink: 2 bytes leftover after parsing attributes in process `syz.3.314'. [ 150.859160][ T6932] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 151.284814][ T6956] netlink: 'syz.0.325': attribute type 21 has an invalid length. [ 151.668155][ T6961] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 153.916856][ T7002] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 154.081326][ T7010] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.342'. [ 155.208280][ T7030] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.350'. [ 155.669709][ T7045] FAULT_INJECTION: forcing a failure. [ 155.669709][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.774131][ T7045] CPU: 1 PID: 7045 Comm: syz.1.354 Not tainted syzkaller #0 [ 155.781600][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.791827][ T7045] Call Trace: [ 155.795158][ T7045] [ 155.798127][ T7045] dump_stack_lvl+0x18c/0x250 [ 155.800599][ T7038] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 155.802851][ T7045] ? show_regs_print_info+0x20/0x20 [ 155.802883][ T7045] ? load_image+0x420/0x420 [ 155.802909][ T7045] ? __might_fault+0xaa/0x120 [ 155.802931][ T7045] ? __lock_acquire+0x7d80/0x7d80 [ 155.802954][ T7045] ? __virt_addr_valid+0x10c/0x380 [ 155.802983][ T7045] should_fail_ex+0x394/0x4c0 [ 155.803016][ T7045] _copy_from_user+0x2f/0xe0 [ 155.803048][ T7045] generic_map_update_batch+0x53e/0x800 [ 155.803082][ T7045] ? rcu_read_unlock+0xa0/0xa0 [ 155.803106][ T7045] ? __fdget+0x180/0x210 [ 155.860075][ T7045] ? rcu_read_unlock+0xa0/0xa0 [ 155.865309][ T7045] bpf_map_do_batch+0x3f2/0x600 [ 155.870322][ T7045] ? bpf_lsm_key_free+0x10/0x10 [ 155.875220][ T7045] __sys_bpf+0x381/0x890 [ 155.879504][ T7045] ? bpf_link_show_fdinfo+0x560/0x560 [ 155.884903][ T7045] ? lock_chain_count+0x20/0x20 [ 155.889784][ T7045] __x64_sys_bpf+0x7c/0x90 [ 155.894221][ T7045] do_syscall_64+0x55/0xb0 [ 155.898742][ T7045] ? clear_bhb_loop+0x40/0x90 [ 155.903626][ T7045] ? clear_bhb_loop+0x40/0x90 [ 155.908331][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.914331][ T7045] RIP: 0033:0x7f644299e159 [ 155.918762][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.938559][ T7045] RSP: 002b:00007f6440bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.946996][ T7045] RAX: ffffffffffffffda RBX: 00007f6442c26090 RCX: 00007f644299e159 [ 155.955064][ T7045] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 155.963063][ T7045] RBP: 00007f6440bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.971068][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.979049][ T7045] R13: 00007f6442c26128 R14: 00007f6442c26090 R15: 00007ffddf256528 [ 155.987049][ T7045] [ 158.390482][ T7095] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 159.555186][ T7106] FAULT_INJECTION: forcing a failure. [ 159.555186][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 159.600697][ T7106] CPU: 1 PID: 7106 Comm: syz.1.369 Not tainted syzkaller #0 [ 159.608534][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.619684][ T7106] Call Trace: [ 159.623018][ T7106] [ 159.626268][ T7106] dump_stack_lvl+0x18c/0x250 [ 159.631261][ T7106] ? show_regs_print_info+0x20/0x20 [ 159.636609][ T7106] ? load_image+0x420/0x420 [ 159.641175][ T7106] ? __lock_acquire+0x7d80/0x7d80 [ 159.646517][ T7106] ? rcu_is_watching+0x15/0xb0 [ 159.651334][ T7106] ? __alloc_pages+0x276/0x460 [ 159.656306][ T7106] should_fail_ex+0x394/0x4c0 [ 159.661021][ T7106] should_failslab+0x9/0x20 [ 159.668300][ T7106] slab_pre_alloc_hook+0x59/0x300 [ 159.673507][ T7106] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 159.679449][ T7106] __kmem_cache_alloc_node+0x53/0x250 [ 159.684870][ T7106] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 159.690790][ T7106] kmalloc_trace+0x2a/0xe0 [ 159.695246][ T7106] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 159.701277][ T7106] ? sctp_stream_interleave_init+0x55/0x90 [ 159.707196][ T7106] sctp_association_new+0x15be/0x25b0 [ 159.712682][ T7106] sctp_connect_new_asoc+0x2de/0x6a0 [ 159.718040][ T7106] ? __sctp_connect+0xd80/0xd80 [ 159.722934][ T7106] ? __local_bh_enable_ip+0x13a/0x1c0 [ 159.728446][ T7106] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 159.734102][ T7106] ? security_sctp_bind_connect+0x89/0xb0 [ 159.739855][ T7106] sctp_sendmsg+0x1519/0x27b0 [ 159.744835][ T7106] ? sctp_getsockopt+0xb60/0xb60 [ 159.749890][ T7106] ? aa_af_perm+0x330/0x330 [ 159.754418][ T7106] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 159.760860][ T7106] ? sock_rps_record_flow+0x19/0x3f0 [ 159.766163][ T7106] ? inet_sendmsg+0xce/0x2a0 [ 159.770766][ T7106] ? inet_send_prepare+0x250/0x250 [ 159.775895][ T7106] ____sys_sendmsg+0x61b/0x980 [ 159.780773][ T7106] ? __asan_memset+0x22/0x40 [ 159.785393][ T7106] ? __sys_sendmsg_sock+0x30/0x30 [ 159.790432][ T7106] ? __import_iovec+0x5f2/0x850 [ 159.795310][ T7106] ? import_iovec+0x73/0xa0 [ 159.799841][ T7106] ___sys_sendmsg+0x2a6/0x360 [ 159.804541][ T7106] ? __sys_sendmsg+0x2b0/0x2b0 [ 159.809346][ T7106] ? trace_call_bpf+0xc3/0x6c0 [ 159.814177][ T7106] __se_sys_sendmsg+0x1d0/0x2c0 [ 159.819048][ T7106] ? perf_trace_preemptirq_template+0x269/0x330 [ 159.825327][ T7106] ? __x64_sys_sendmsg+0x80/0x80 [ 159.830295][ T7106] ? lockdep_hardirqs_on+0x98/0x150 [ 159.835509][ T7106] do_syscall_64+0x55/0xb0 [ 159.839954][ T7106] ? clear_bhb_loop+0x40/0x90 [ 159.844647][ T7106] ? clear_bhb_loop+0x40/0x90 [ 159.849354][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.855263][ T7106] RIP: 0033:0x7f644299e159 [ 159.859694][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.879407][ T7106] RSP: 002b:00007f6440bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.887834][ T7106] RAX: ffffffffffffffda RBX: 00007f6442c26090 RCX: 00007f644299e159 [ 159.895905][ T7106] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 159.904070][ T7106] RBP: 00007f6440bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 159.912057][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.920134][ T7106] R13: 00007f6442c26128 R14: 00007f6442c26090 R15: 00007ffddf256528 [ 159.928133][ T7106] [ 160.813563][ T7102] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.368'. [ 160.830946][ T7102] bridge_slave_1: entered promiscuous mode [ 160.849656][ T7113] netlink: 188 bytes leftover after parsing attributes in process `syz.1.371'. [ 161.482703][ T7124] netlink: 'syz.1.373': attribute type 3 has an invalid length. [ 161.604364][ T7119] netlink: 830 bytes leftover after parsing attributes in process `syz.1.373'. [ 161.764660][ T7124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.373'. [ 162.495643][ T7134] FAULT_INJECTION: forcing a failure. [ 162.495643][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.551979][ T7134] CPU: 0 PID: 7134 Comm: syz.2.376 Not tainted syzkaller #0 [ 162.559353][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.569456][ T7134] Call Trace: [ 162.572785][ T7134] [ 162.575752][ T7134] dump_stack_lvl+0x18c/0x250 [ 162.580481][ T7134] ? show_regs_print_info+0x20/0x20 [ 162.585742][ T7134] ? load_image+0x420/0x420 [ 162.590300][ T7134] ? __might_fault+0xaa/0x120 [ 162.595110][ T7134] ? __lock_acquire+0x7d80/0x7d80 [ 162.600296][ T7134] should_fail_ex+0x394/0x4c0 [ 162.605117][ T7134] _copy_from_user+0x2f/0xe0 [ 162.609761][ T7134] kstrtouint_from_user+0xde/0x170 [ 162.614923][ T7134] ? kstrtol_from_user+0x190/0x190 [ 162.618619][ T7137] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 162.620078][ T7134] proc_fail_nth_write+0x8f/0x250 [ 162.620140][ T7134] ? proc_fail_nth_read+0x260/0x260 [ 162.620175][ T7134] ? proc_fail_nth_read+0x260/0x260 [ 162.643397][ T7134] vfs_write+0x299/0x9a0 [ 162.647704][ T7134] ? file_end_write+0x250/0x250 [ 162.652667][ T7134] ? __fget_files+0x28/0x460 [ 162.657391][ T7134] ? __fget_files+0x3fc/0x460 [ 162.662193][ T7134] ? __fdget_pos+0x2a3/0x330 [ 162.666798][ T7134] ? ksys_write+0x74/0x260 [ 162.671234][ T7134] ksys_write+0x151/0x260 [ 162.675607][ T7134] ? __ia32_sys_read+0x90/0x90 [ 162.680395][ T7134] ? lockdep_hardirqs_on+0x98/0x150 [ 162.685634][ T7134] do_syscall_64+0x55/0xb0 [ 162.690068][ T7134] ? clear_bhb_loop+0x40/0x90 [ 162.694759][ T7134] ? clear_bhb_loop+0x40/0x90 [ 162.699453][ T7134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.705362][ T7134] RIP: 0033:0x7ffa6f55e98e [ 162.709789][ T7134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.729585][ T7134] RSP: 002b:00007ffa70515fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.738018][ T7134] RAX: ffffffffffffffda RBX: 00007ffa705166c0 RCX: 00007ffa6f55e98e [ 162.746032][ T7134] RDX: 0000000000000001 RSI: 00007ffa705160a0 RDI: 0000000000000005 [ 162.754017][ T7134] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 162.762010][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.769998][ T7134] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 162.777994][ T7134] [ 163.355883][ T7152] veth1_macvtap: left promiscuous mode [ 163.364937][ T7152] macsec0: entered allmulticast mode [ 163.630552][ T7160] FAULT_INJECTION: forcing a failure. [ 163.630552][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 163.664422][ T7160] CPU: 0 PID: 7160 Comm: syz.0.385 Not tainted syzkaller #0 [ 163.671806][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.681896][ T7160] Call Trace: [ 163.685213][ T7160] [ 163.688173][ T7160] dump_stack_lvl+0x18c/0x250 [ 163.692901][ T7160] ? show_regs_print_info+0x20/0x20 [ 163.698152][ T7160] ? load_image+0x420/0x420 [ 163.702710][ T7160] ? __lock_acquire+0x7d80/0x7d80 [ 163.707878][ T7160] should_fail_ex+0x394/0x4c0 [ 163.712602][ T7160] should_failslab+0x9/0x20 [ 163.717154][ T7160] slab_pre_alloc_hook+0x59/0x300 [ 163.722227][ T7160] ? security_sk_alloc+0x4b/0x130 [ 163.727299][ T7160] ? security_sk_alloc+0x4b/0x130 [ 163.732368][ T7160] __kmem_cache_alloc_node+0x53/0x250 [ 163.737803][ T7160] ? security_sk_alloc+0x4b/0x130 [ 163.742887][ T7160] __kmalloc+0xa7/0x240 [ 163.747093][ T7160] ? sk_prot_alloc+0xe7/0x210 [ 163.751823][ T7160] security_sk_alloc+0x4b/0x130 [ 163.756816][ T7160] sk_prot_alloc+0x101/0x210 [ 163.761439][ T7160] ? sk_alloc+0x24/0x350 [ 163.765718][ T7160] sk_alloc+0x3a/0x350 [ 163.769821][ T7160] ? bpf_ctx_init+0x154/0x190 [ 163.774543][ T7160] bpf_prog_test_run_skb+0x371/0x18f0 [ 163.779959][ T7160] ? __fget_files+0x28/0x460 [ 163.784590][ T7160] ? __fget_files+0x3fc/0x460 [ 163.789337][ T7160] ? cpu_online+0x60/0x60 [ 163.793722][ T7160] bpf_prog_test_run+0x31f/0x390 [ 163.798711][ T7160] __sys_bpf+0x49d/0x890 [ 163.803011][ T7160] ? bpf_link_show_fdinfo+0x560/0x560 [ 163.808456][ T7160] ? lock_chain_count+0x20/0x20 [ 163.813372][ T7160] __x64_sys_bpf+0x7c/0x90 [ 163.817838][ T7160] do_syscall_64+0x55/0xb0 [ 163.822297][ T7160] ? clear_bhb_loop+0x40/0x90 [ 163.827028][ T7160] ? clear_bhb_loop+0x40/0x90 [ 163.831759][ T7160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.837702][ T7160] RIP: 0033:0x7fb8afd9e159 [ 163.842196][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.861842][ T7160] RSP: 002b:00007fb8b0c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.870312][ T7160] RAX: ffffffffffffffda RBX: 00007fb8b0026090 RCX: 00007fb8afd9e159 [ 163.878408][ T7160] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 163.886502][ T7160] RBP: 00007fb8b0c71090 R08: 0000000000000000 R09: 0000000000000000 [ 163.894513][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.902525][ T7160] R13: 00007fb8b0026128 R14: 00007fb8b0026090 R15: 00007ffca40955f8 [ 163.910559][ T7160] [ 164.555101][ T7183] netlink: 10 bytes leftover after parsing attributes in process `syz.2.393'. [ 164.762418][ T7185] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 165.876700][ T7188] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.394'. [ 165.886235][ T7188] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 166.822361][ T7229] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 167.116619][ T7233] netlink: 'syz.0.407': attribute type 3 has an invalid length. [ 167.129426][ T7233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.407'. [ 168.227665][ T7256] netlink: 'syz.3.415': attribute type 21 has an invalid length. [ 168.260521][ T7256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.415'. [ 168.498433][ T7265] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 168.763108][ T7270] netlink: 152 bytes leftover after parsing attributes in process `syz.0.419'. [ 168.814008][ T7270] bond0: (slave bond_slave_0): Releasing backup interface [ 168.875934][ T7270] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 169.029491][ T7283] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 169.061727][ T7283] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.422'. [ 169.468016][ T7293] netlink: 14 bytes leftover after parsing attributes in process `syz.3.427'. [ 169.846410][ T7293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.908083][ T7293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.960136][ T7293] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 170.001815][ T7293] bond0 (unregistering): Released all slaves [ 170.102375][ T7296] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 171.804528][ T7331] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 172.579274][ T7352] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.446'. [ 173.103632][ T7368] netlink: 6 bytes leftover after parsing attributes in process `syz.0.451'. [ 173.169301][ T7364] FAULT_INJECTION: forcing a failure. [ 173.169301][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 173.222026][ T7364] CPU: 0 PID: 7364 Comm: syz.3.450 Not tainted syzkaller #0 [ 173.229420][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.239608][ T7364] Call Trace: [ 173.242937][ T7364] [ 173.245916][ T7364] dump_stack_lvl+0x18c/0x250 [ 173.250737][ T7364] ? show_regs_print_info+0x20/0x20 [ 173.255986][ T7364] ? load_image+0x420/0x420 [ 173.260541][ T7364] ? __might_sleep+0xe0/0xe0 [ 173.265194][ T7364] ? __lock_acquire+0x7d80/0x7d80 [ 173.270371][ T7364] should_fail_ex+0x394/0x4c0 [ 173.275186][ T7364] should_failslab+0x9/0x20 [ 173.279704][ T7364] slab_pre_alloc_hook+0x59/0x300 [ 173.284799][ T7364] ? __get_vm_area_node+0x125/0x370 [ 173.290060][ T7364] __kmem_cache_alloc_node+0x53/0x250 [ 173.295521][ T7364] ? __get_vm_area_node+0x125/0x370 [ 173.300771][ T7364] kmalloc_node_trace+0x26/0xe0 [ 173.305671][ T7364] __get_vm_area_node+0x125/0x370 [ 173.310749][ T7364] __vmalloc_node_range+0x36f/0x1320 [ 173.316084][ T7364] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 173.321691][ T7364] ? irqentry_enter+0x37/0x50 [ 173.326422][ T7364] ? aa_get_newest_label+0xfd/0x5c0 [ 173.331662][ T7364] ? free_vm_area+0x50/0x50 [ 173.336215][ T7364] ? end_current_label_crit_section+0x170/0x170 [ 173.342517][ T7364] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 173.348115][ T7364] __vmalloc+0x7a/0x90 [ 173.352241][ T7364] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 173.357841][ T7364] bpf_prog_alloc_no_stats+0x46/0x430 [ 173.363270][ T7364] bpf_prog_alloc+0x3d/0x1a0 [ 173.367919][ T7364] bpf_prog_load+0x6b2/0x1610 [ 173.372756][ T7364] ? map_freeze+0x420/0x420 [ 173.377325][ T7364] ? __might_fault+0xaa/0x120 [ 173.382144][ T7364] ? __lock_acquire+0x7d80/0x7d80 [ 173.387227][ T7364] ? __might_fault+0xaa/0x120 [ 173.391958][ T7364] ? __might_fault+0xc6/0x120 [ 173.396687][ T7364] ? __might_fault+0xaa/0x120 [ 173.401437][ T7364] ? bpf_lsm_bpf+0x9/0x10 [ 173.405868][ T7364] ? security_bpf+0x7e/0xa0 [ 173.410442][ T7364] __sys_bpf+0x5ba/0x890 [ 173.414747][ T7364] ? bpf_link_show_fdinfo+0x560/0x560 [ 173.420184][ T7364] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.426413][ T7364] __x64_sys_bpf+0x7c/0x90 [ 173.430884][ T7364] do_syscall_64+0x55/0xb0 [ 173.435347][ T7364] ? clear_bhb_loop+0x40/0x90 [ 173.440270][ T7364] ? clear_bhb_loop+0x40/0x90 [ 173.445100][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.451055][ T7364] RIP: 0033:0x7f7ac819e159 [ 173.455611][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.476242][ T7364] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.484717][ T7364] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 173.492742][ T7364] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 173.500848][ T7364] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.508878][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.516904][ T7364] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 173.524959][ T7364] [ 173.575207][ T7364] syz.3.450: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 173.609768][ T7364] CPU: 0 PID: 7364 Comm: syz.3.450 Not tainted syzkaller #0 [ 173.610060][ T7372] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 173.617279][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.617297][ T7364] Call Trace: [ 173.617307][ T7364] [ 173.617316][ T7364] dump_stack_lvl+0x18c/0x250 [ 173.617352][ T7364] ? show_regs_print_info+0x20/0x20 [ 173.617377][ T7364] ? load_image+0x420/0x420 [ 173.617403][ T7364] ? __rcu_read_unlock+0x7c/0xd0 [ 173.617421][ T7364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 173.617445][ T7364] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 173.617472][ T7364] warn_alloc+0x246/0x340 [ 173.617492][ T7364] ? __get_vm_area_node+0x125/0x370 [ 173.617523][ T7364] ? zone_watermark_ok_safe+0x230/0x230 [ 173.617543][ T7364] ? rcu_is_watching+0x15/0xb0 [ 173.617576][ T7364] ? __get_vm_area_node+0x356/0x370 [ 173.617612][ T7364] __vmalloc_node_range+0x394/0x1320 [ 173.617657][ T7364] ? irqentry_enter+0x37/0x50 [ 173.617686][ T7364] ? aa_get_newest_label+0xfd/0x5c0 [ 173.617707][ T7364] ? free_vm_area+0x50/0x50 [ 173.617727][ T7364] ? end_current_label_crit_section+0x170/0x170 [ 173.617755][ T7364] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 173.617774][ T7364] __vmalloc+0x7a/0x90 [ 173.617795][ T7364] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 173.617818][ T7364] bpf_prog_alloc_no_stats+0x46/0x430 [ 173.617845][ T7364] bpf_prog_alloc+0x3d/0x1a0 [ 173.617871][ T7364] bpf_prog_load+0x6b2/0x1610 [ 173.617909][ T7364] ? map_freeze+0x420/0x420 [ 173.617938][ T7364] ? __might_fault+0xaa/0x120 [ 173.617960][ T7364] ? __lock_acquire+0x7d80/0x7d80 [ 173.617988][ T7364] ? __might_fault+0xaa/0x120 [ 173.618009][ T7364] ? __might_fault+0xc6/0x120 [ 173.618027][ T7364] ? __might_fault+0xaa/0x120 [ 173.618047][ T7364] ? bpf_lsm_bpf+0x9/0x10 [ 173.618072][ T7364] ? security_bpf+0x7e/0xa0 [ 173.618098][ T7364] __sys_bpf+0x5ba/0x890 [ 173.618123][ T7364] ? bpf_link_show_fdinfo+0x560/0x560 [ 173.618160][ T7364] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.618212][ T7364] __x64_sys_bpf+0x7c/0x90 [ 173.618235][ T7364] do_syscall_64+0x55/0xb0 [ 173.618258][ T7364] ? clear_bhb_loop+0x40/0x90 [ 173.618282][ T7364] ? clear_bhb_loop+0x40/0x90 [ 173.618309][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.618334][ T7364] RIP: 0033:0x7f7ac819e159 [ 173.618354][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.618370][ T7364] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.618394][ T7364] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 173.618409][ T7364] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 173.618422][ T7364] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.618435][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.618446][ T7364] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 173.618480][ T7364] [ 173.621209][ T7364] Mem-Info: [ 173.733209][ T7364] active_anon:9055 inactive_anon:0 isolated_anon:0 [ 173.733209][ T7364] active_file:4161 inactive_file:39989 isolated_file:0 [ 173.733209][ T7364] unevictable:768 dirty:133 writeback:0 [ 173.733209][ T7364] slab_reclaimable:10240 slab_unreclaimable:91303 [ 173.733209][ T7364] mapped:24414 shmem:1361 pagetables:512 [ 173.733209][ T7364] sec_pagetables:0 bounce:0 [ 173.733209][ T7364] kernel_misc_reclaimable:0 [ 173.733209][ T7364] free:1350120 free_pcp:13022 free_cma:0 [ 173.733620][ T7364] Node 0 active_anon:36220kB inactive_anon:0kB active_file:16644kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97656kB dirty:532kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no [ 173.734234][ T7364] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 173.735460][ T7364] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.738685][ T7364] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 173.742314][ T7364] Node 0 DMA32 free:1494920kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36180kB inactive_anon:0kB active_file:16644kB inactive_file:158932kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:32876kB local_pcp:17980kB free_cma:0kB [ 173.742482][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 173.745736][ T7364] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.747204][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 173.771191][ T7364] Node 1 Normal free:3890192kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19208kB local_pcp:11016kB free_cma:0kB [ 173.772728][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 173.779854][ T7364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.801354][ T7364] Node 0 DMA32: 122*4kB (UM) 294*8kB (UM) 607*16kB (UME) 116*32kB (UM) 74*64kB (UME) 39*128kB (UME) 12*256kB (UM) 3*512kB (UME) 2*1024kB (UM) 2*2048kB (ME) 356*4096kB (UM) = 1494920kB [ 173.801722][ T7364] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 173.803856][ T7364] Node 1 Normal: 270*4kB (UME) 57*8kB (UME) 37*16kB (UME) 46*32kB (UME) 14*64kB (UM) 7*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890192kB [ 173.809048][ T7364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.809071][ T7364] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.809092][ T7364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.809112][ T7364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.809133][ T7364] 45511 total pagecache pages [ 173.809147][ T7364] 0 pages in swap cache [ 173.809158][ T7364] Free swap = 124996kB [ 173.809171][ T7364] Total swap = 124996kB [ 173.809184][ T7364] 2097051 pages RAM [ 173.809197][ T7364] 0 pages HighMem/MovableOnly [ 173.809208][ T7364] 416965 pages reserved [ 173.809228][ T7364] 0 pages cma reserved [ 175.037247][ T7382] netlink: 'syz.2.456': attribute type 3 has an invalid length. [ 175.066710][ T7382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.456'. [ 177.913543][ T7403] FAULT_INJECTION: forcing a failure. [ 177.913543][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 177.958659][ T7403] CPU: 1 PID: 7403 Comm: syz.3.464 Not tainted syzkaller #0 [ 177.966111][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.976463][ T7403] Call Trace: [ 177.979768][ T7403] [ 177.982726][ T7403] dump_stack_lvl+0x18c/0x250 [ 177.987450][ T7403] ? sctp_sendmsg+0x1519/0x27b0 [ 177.992343][ T7403] ? ___sys_sendmsg+0x2a6/0x360 [ 177.997238][ T7403] ? show_regs_print_info+0x20/0x20 [ 178.002521][ T7403] ? load_image+0x420/0x420 [ 178.007081][ T7403] should_fail_ex+0x394/0x4c0 [ 178.011812][ T7403] should_failslab+0x9/0x20 [ 178.016356][ T7403] slab_pre_alloc_hook+0x59/0x300 [ 178.021530][ T7403] ? sctp_add_bind_addr+0x8c/0x360 [ 178.026928][ T7403] __kmem_cache_alloc_node+0x53/0x250 [ 178.032442][ T7403] ? sctp_add_bind_addr+0x8c/0x360 [ 178.037681][ T7403] kmalloc_trace+0x2a/0xe0 [ 178.042144][ T7403] sctp_add_bind_addr+0x8c/0x360 [ 178.047134][ T7403] sctp_copy_local_addr_list+0x31b/0x4e0 [ 178.052832][ T7403] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 178.058708][ T7403] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 178.064823][ T7403] ? sctp_v4_is_any+0x35/0x60 [ 178.069650][ T7403] ? sctp_copy_one_addr+0x8c/0x350 [ 178.074813][ T7403] sctp_bind_addr_copy+0xb3/0x3c0 [ 178.079891][ T7403] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 178.086280][ T7403] sctp_connect_new_asoc+0x2f9/0x6a0 [ 178.091616][ T7403] ? __sctp_connect+0xd80/0xd80 [ 178.096498][ T7403] ? __local_bh_enable_ip+0x13a/0x1c0 [ 178.102009][ T7403] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 178.107618][ T7403] ? security_sctp_bind_connect+0x89/0xb0 [ 178.113380][ T7403] sctp_sendmsg+0x1519/0x27b0 [ 178.118112][ T7403] ? sctp_getsockopt+0xb60/0xb60 [ 178.123085][ T7403] ? aa_af_perm+0x330/0x330 [ 178.127783][ T7403] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 178.134212][ T7403] ? sock_rps_record_flow+0x19/0x3f0 [ 178.139601][ T7403] ? inet_sendmsg+0xce/0x2a0 [ 178.144297][ T7403] ? inet_send_prepare+0x250/0x250 [ 178.149422][ T7403] ____sys_sendmsg+0x61b/0x980 [ 178.154211][ T7403] ? __asan_memset+0x22/0x40 [ 178.158818][ T7403] ? __sys_sendmsg_sock+0x30/0x30 [ 178.163983][ T7403] ? __import_iovec+0x5f2/0x850 [ 178.169094][ T7403] ? import_iovec+0x73/0xa0 [ 178.173634][ T7403] ___sys_sendmsg+0x2a6/0x360 [ 178.178528][ T7403] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.183327][ T7403] ? trace_call_bpf+0xc3/0x6c0 [ 178.188129][ T7403] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.193002][ T7403] ? perf_trace_preemptirq_template+0x269/0x330 [ 178.199272][ T7403] ? __x64_sys_sendmsg+0x80/0x80 [ 178.204238][ T7403] ? lockdep_hardirqs_on+0x98/0x150 [ 178.209452][ T7403] do_syscall_64+0x55/0xb0 [ 178.214059][ T7403] ? clear_bhb_loop+0x40/0x90 [ 178.218753][ T7403] ? clear_bhb_loop+0x40/0x90 [ 178.223534][ T7403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.229439][ T7403] RIP: 0033:0x7f7ac819e159 [ 178.233866][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.253574][ T7403] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.262091][ T7403] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 178.270073][ T7403] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 178.278074][ T7403] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.286098][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.294114][ T7403] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 178.302116][ T7403] [ 178.611411][ T7409] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 179.044818][ T5088] Bluetooth: hci1: unexpected event 0x18 length: 15 < 23 [ 179.583847][ T7425] netlink: 'syz.1.473': attribute type 3 has an invalid length. [ 179.599652][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 180.462202][ T7446] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 180.682109][ T7456] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.482'. [ 181.939264][ T7490] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 182.289157][ T7496] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.495'. [ 182.867464][ T7507] tap0: tun_chr_ioctl cmd 1074025676 [ 182.873150][ T7507] tap0: owner set to 776 [ 183.350024][ T7520] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 184.223091][ T7539] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.512'. [ 184.283042][ T7539] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 185.106679][ T7551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.115267][ T7551] IPv6: NLM_F_CREATE should be set when creating new route [ 185.125311][ T7551] IPv6: NLM_F_CREATE should be set when creating new route [ 185.134300][ T7551] IPv6: NLM_F_CREATE should be set when creating new route [ 187.788417][ T7561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.110565][ T7578] netlink: 'syz.3.521': attribute type 10 has an invalid length. [ 188.470595][ T7583] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 188.936001][ T7596] raw_sendmsg: syz.2.529 forgot to set AF_INET. Fix it! [ 190.302255][ T7612] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 191.362508][ T7641] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 192.096944][ T7654] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.145273][ T7656] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.551'. [ 193.162267][ T7681] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 193.191343][ T7677] netlink: 'syz.1.559': attribute type 3 has an invalid length. [ 193.238161][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.559'. [ 193.282965][ T7677] netlink: 108 bytes leftover after parsing attributes in process `syz.1.559'. [ 193.403168][ T7687] netlink: 'syz.0.561': attribute type 46 has an invalid length. [ 193.421776][ T7690] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 193.442509][ T7690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.562'. [ 193.452299][ T7691] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 193.470512][ T7691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.562'. [ 193.525246][ T7690] sit0: entered allmulticast mode [ 194.651738][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658180][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.936568][ T7714] netlink: 10 bytes leftover after parsing attributes in process `syz.1.570'. [ 195.073042][ T7717] netlink: 'syz.2.571': attribute type 10 has an invalid length. [ 195.204954][ T7723] FAULT_INJECTION: forcing a failure. [ 195.204954][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 195.228535][ T7723] CPU: 0 PID: 7723 Comm: syz.3.573 Not tainted syzkaller #0 [ 195.235883][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.245978][ T7723] Call Trace: [ 195.249290][ T7723] [ 195.252238][ T7723] dump_stack_lvl+0x18c/0x250 [ 195.256945][ T7723] ? show_regs_print_info+0x20/0x20 [ 195.262163][ T7723] ? load_image+0x420/0x420 [ 195.266703][ T7723] should_fail_ex+0x394/0x4c0 [ 195.271757][ T7723] should_failslab+0x9/0x20 [ 195.276618][ T7723] slab_pre_alloc_hook+0x59/0x300 [ 195.281678][ T7723] kmem_cache_alloc+0x5a/0x2c0 [ 195.286567][ T7723] ? dst_alloc+0x105/0x170 [ 195.291020][ T7723] dst_alloc+0x105/0x170 [ 195.295289][ T7723] rt_dst_clone+0x58/0x680 [ 195.299811][ T7723] ip_mc_finish_output+0xea/0x260 [ 195.304856][ T7723] ? skb_clone+0x21f/0x370 [ 195.309399][ T7723] ip_mc_output+0x254/0x570 [ 195.313952][ T7723] ip_send_skb+0x12f/0x1d0 [ 195.318409][ T7723] raw_sendmsg+0x15de/0x1ba0 [ 195.323047][ T7723] ? compat_raw_ioctl+0x70/0x70 [ 195.327927][ T7723] ? aa_sk_perm+0x83c/0x970 [ 195.332640][ T7723] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 195.339161][ T7723] ? aa_sock_msg_perm+0x94/0x150 [ 195.344209][ T7723] ? sock_rps_record_flow+0x19/0x3f0 [ 195.349531][ T7723] ? inet_sendmsg+0x7e/0x2a0 [ 195.354219][ T7723] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.359526][ T7723] ? inet_send_prepare+0x250/0x250 [ 195.364679][ T7723] ____sys_sendmsg+0x61b/0x980 [ 195.369591][ T7723] ? __sys_sendmsg_sock+0x30/0x30 [ 195.374643][ T7723] ? __import_iovec+0x3fa/0x850 [ 195.379524][ T7723] ? import_iovec+0x73/0xa0 [ 195.384050][ T7723] ___sys_sendmsg+0x2a6/0x360 [ 195.388928][ T7723] ? __sys_sendmsg+0x2b0/0x2b0 [ 195.393774][ T7723] ? __lock_acquire+0x7d80/0x7d80 [ 195.398986][ T7723] __se_sys_sendmsg+0x1d0/0x2c0 [ 195.403977][ T7723] ? __x64_sys_sendmsg+0x80/0x80 [ 195.408957][ T7723] ? lockdep_hardirqs_on+0x98/0x150 [ 195.414176][ T7723] do_syscall_64+0x55/0xb0 [ 195.418614][ T7723] ? clear_bhb_loop+0x40/0x90 [ 195.423309][ T7723] ? clear_bhb_loop+0x40/0x90 [ 195.428006][ T7723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.433926][ T7723] RIP: 0033:0x7f7ac819e159 [ 195.438366][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.458079][ T7723] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.466511][ T7723] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 195.474689][ T7723] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 195.482675][ T7723] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 195.490664][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.498652][ T7723] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 195.506653][ T7723] [ 196.444840][ T7724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.636610][ T7735] FAULT_INJECTION: forcing a failure. [ 196.636610][ T7735] name failslab, interval 1, probability 0, space 0, times 0 [ 196.656710][ T7735] CPU: 0 PID: 7735 Comm: syz.1.578 Not tainted syzkaller #0 [ 196.664080][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.674367][ T7735] Call Trace: [ 196.675837][ T7738] netlink: 128 bytes leftover after parsing attributes in process `syz.0.577'. [ 196.677692][ T7735] [ 196.677703][ T7735] dump_stack_lvl+0x18c/0x250 [ 196.694401][ T7735] ? show_regs_print_info+0x20/0x20 [ 196.699734][ T7735] ? load_image+0x420/0x420 [ 196.704347][ T7735] ? __might_sleep+0xe0/0xe0 [ 196.708961][ T7735] ? __lock_acquire+0x7d80/0x7d80 [ 196.714009][ T7735] should_fail_ex+0x394/0x4c0 [ 196.718708][ T7735] should_failslab+0x9/0x20 [ 196.723230][ T7735] slab_pre_alloc_hook+0x59/0x300 [ 196.728275][ T7735] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 196.734104][ T7735] kmem_cache_alloc+0x5a/0x2c0 [ 196.738888][ T7735] ? getname_flags+0xbb/0x500 [ 196.743584][ T7735] getname_flags+0xbb/0x500 [ 196.748102][ T7735] do_sys_openat2+0xda/0x1d0 [ 196.752706][ T7735] ? do_sys_open+0xe0/0xe0 [ 196.757140][ T7735] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.763315][ T7735] __x64_sys_openat+0x139/0x160 [ 196.768180][ T7735] do_syscall_64+0x55/0xb0 [ 196.772610][ T7735] ? clear_bhb_loop+0x40/0x90 [ 196.777310][ T7735] ? clear_bhb_loop+0x40/0x90 [ 196.782001][ T7735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.787997][ T7735] RIP: 0033:0x7f644295e98e [ 196.792425][ T7735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.812045][ T7735] RSP: 002b:00007f6440bf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.820472][ T7735] RAX: ffffffffffffffda RBX: 00007f6440bf66c0 RCX: 00007f644295e98e [ 196.828453][ T7735] RDX: 0000000000000000 RSI: 00007f6440bf5f90 RDI: ffffffffffffff9c [ 196.836609][ T7735] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.844600][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.852580][ T7735] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 196.860574][ T7735] [ 196.865843][ T7738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.842872][ T7756] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 201.925667][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 201.931825][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 201.935211][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 201.937895][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 203.198592][ T7794] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 203.242238][ T7794] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.594'. [ 203.400438][ T7808] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 203.800470][ T7814] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.598'. [ 204.154998][ T7821] FAULT_INJECTION: forcing a failure. [ 204.154998][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.211773][ T7821] CPU: 0 PID: 7821 Comm: syz.1.599 Not tainted syzkaller #0 [ 204.219182][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.229295][ T7821] Call Trace: [ 204.232611][ T7821] [ 204.235575][ T7821] dump_stack_lvl+0x18c/0x250 [ 204.240304][ T7821] ? show_regs_print_info+0x20/0x20 [ 204.245543][ T7821] ? load_image+0x420/0x420 [ 204.250088][ T7821] ? __might_fault+0xaa/0x120 [ 204.254806][ T7821] ? __lock_acquire+0x7d80/0x7d80 [ 204.259900][ T7821] should_fail_ex+0x394/0x4c0 [ 204.264647][ T7821] _copy_from_iter+0x1cd/0x1290 [ 204.269558][ T7821] ? rcu_is_watching+0x15/0xb0 [ 204.274386][ T7821] ? copyout_mc+0x70/0x70 [ 204.278777][ T7821] ? __virt_addr_valid+0x10c/0x380 [ 204.283945][ T7821] ? __virt_addr_valid+0x10c/0x380 [ 204.289102][ T7821] ? __virt_addr_valid+0x10c/0x380 [ 204.294263][ T7821] ? __check_object_size+0x4fc/0xa40 [ 204.299595][ T7821] netlink_sendmsg+0x76b/0xbf0 [ 204.304425][ T7821] ? netlink_getsockopt+0x590/0x590 [ 204.309689][ T7821] ? apparmor_socket_sendmsg+0x8e/0x330 [ 204.315376][ T7821] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.320720][ T7821] ? security_socket_sendmsg+0x80/0xa0 [ 204.326224][ T7821] ? netlink_getsockopt+0x590/0x590 [ 204.331468][ T7821] ____sys_sendmsg+0x61b/0x980 [ 204.336299][ T7821] ? __asan_memset+0x22/0x40 [ 204.340938][ T7821] ? __sys_sendmsg_sock+0x30/0x30 [ 204.346023][ T7821] ? __import_iovec+0x5f2/0x850 [ 204.350935][ T7821] ? import_iovec+0x73/0xa0 [ 204.355580][ T7821] ___sys_sendmsg+0x2a6/0x360 [ 204.360321][ T7821] ? __sys_sendmsg+0x2b0/0x2b0 [ 204.365243][ T7821] ? trace_call_bpf+0xc3/0x6c0 [ 204.370079][ T7821] __se_sys_sendmsg+0x1d0/0x2c0 [ 204.374975][ T7821] ? perf_trace_preemptirq_template+0x269/0x330 [ 204.381366][ T7821] ? __x64_sys_sendmsg+0x80/0x80 [ 204.386382][ T7821] ? lockdep_hardirqs_on+0x98/0x150 [ 204.391829][ T7821] do_syscall_64+0x55/0xb0 [ 204.396303][ T7821] ? clear_bhb_loop+0x40/0x90 [ 204.401027][ T7821] ? clear_bhb_loop+0x40/0x90 [ 204.405754][ T7821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.411702][ T7821] RIP: 0033:0x7f644299e159 [ 204.416161][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.436162][ T7821] RSP: 002b:00007f6440bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.444625][ T7821] RAX: ffffffffffffffda RBX: 00007f6442c26090 RCX: 00007f644299e159 [ 204.452616][ T7821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000017 [ 204.460603][ T7821] RBP: 00007f6440bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.468705][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.476692][ T7821] R13: 00007f6442c26128 R14: 00007f6442c26090 R15: 00007ffddf256528 [ 204.484784][ T7821] [ 204.870898][ T7843] FAULT_INJECTION: forcing a failure. [ 204.870898][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.894109][ T7843] CPU: 1 PID: 7843 Comm: syz.2.607 Not tainted syzkaller #0 [ 204.901486][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.911606][ T7843] Call Trace: [ 204.914927][ T7843] [ 204.917911][ T7843] dump_stack_lvl+0x18c/0x250 [ 204.922655][ T7843] ? show_regs_print_info+0x20/0x20 [ 204.927912][ T7843] ? load_image+0x420/0x420 [ 204.932684][ T7843] ? __might_fault+0xaa/0x120 [ 204.937405][ T7843] ? __lock_acquire+0x7d80/0x7d80 [ 204.942487][ T7843] should_fail_ex+0x394/0x4c0 [ 204.947232][ T7843] _copy_from_user+0x2f/0xe0 [ 204.951878][ T7843] ___sys_recvmsg+0x174/0x590 [ 204.956638][ T7843] ? __sys_recvmsg+0x2a0/0x2a0 [ 204.961430][ T7843] ? ksys_write+0x1d2/0x260 [ 204.965973][ T7843] ? __fget_files+0x3fc/0x460 [ 204.970694][ T7843] __x64_sys_recvmsg+0x21e/0x2f0 [ 204.975653][ T7843] ? perf_trace_preemptirq_template+0x269/0x330 [ 204.982023][ T7843] ? ___sys_recvmsg+0x590/0x590 [ 204.986926][ T7843] ? lockdep_hardirqs_on+0x98/0x150 [ 204.992234][ T7843] do_syscall_64+0x55/0xb0 [ 204.996668][ T7843] ? clear_bhb_loop+0x40/0x90 [ 205.001363][ T7843] ? clear_bhb_loop+0x40/0x90 [ 205.006063][ T7843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.011981][ T7843] RIP: 0033:0x7ffa6f59e159 [ 205.016505][ T7843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.036675][ T7843] RSP: 002b:00007ffa70516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 205.045121][ T7843] RAX: ffffffffffffffda RBX: 00007ffa6f825fa0 RCX: 00007ffa6f59e159 [ 205.053118][ T7843] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000004 [ 205.061189][ T7843] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 205.069175][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.077158][ T7843] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 205.085155][ T7843] [ 205.268968][ T7840] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 206.328452][ T7863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.611'. [ 206.876414][ T7871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.616'. [ 207.051051][ T7880] FAULT_INJECTION: forcing a failure. [ 207.051051][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 207.066967][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 207.079171][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 207.082196][ T7880] CPU: 1 PID: 7880 Comm: syz.0.619 Not tainted syzkaller #0 [ 207.095670][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.100045][ T7874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 207.106008][ T7880] Call Trace: [ 207.106026][ T7880] [ 207.106035][ T7880] dump_stack_lvl+0x18c/0x250 [ 207.106071][ T7880] ? show_regs_print_info+0x20/0x20 [ 207.131799][ T7880] ? load_image+0x420/0x420 [ 207.136372][ T7880] ? __might_sleep+0xe0/0xe0 [ 207.141204][ T7880] ? __lock_acquire+0x7d80/0x7d80 [ 207.146300][ T7880] should_fail_ex+0x394/0x4c0 [ 207.152293][ T7880] should_failslab+0x9/0x20 [ 207.156906][ T7880] slab_pre_alloc_hook+0x59/0x300 [ 207.162171][ T7880] ? subflow_ulp_init+0x95/0x530 [ 207.163982][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 207.167308][ T7880] __kmem_cache_alloc_node+0x53/0x250 [ 207.167344][ T7880] ? tcp_set_ulp+0xb1/0x5f0 [ 207.187146][ T7880] ? subflow_ulp_init+0x95/0x530 [ 207.192921][ T7880] kmalloc_trace+0x2a/0xe0 [ 207.197411][ T7880] subflow_ulp_init+0x95/0x530 [ 207.202679][ T7880] ? tcp_set_ulp+0xb1/0x5f0 [ 207.209225][ T7880] tcp_set_ulp+0x536/0x5f0 [ 207.214607][ T7880] mptcp_subflow_create_socket+0x61d/0xad0 [ 207.220569][ T7880] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 207.226546][ T7880] ? lock_chain_count+0x20/0x20 [ 207.231516][ T7880] __mptcp_nmpc_sk+0x157/0x720 [ 207.236310][ T7880] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 207.243111][ T7880] mptcp_setsockopt+0xf79/0x3370 [ 207.248074][ T7880] ? __fget_files+0x28/0x460 [ 207.252691][ T7880] ? pm_nl_exit_net+0x230/0x230 [ 207.257562][ T7880] ? aa_af_perm+0x330/0x330 [ 207.262091][ T7880] ? __fget_files+0x28/0x460 [ 207.266716][ T7880] ? aa_sock_opt_perm+0x74/0x100 [ 207.271692][ T7880] ? sock_common_setsockopt+0x36/0xc0 [ 207.277103][ T7880] ? sock_common_recvmsg+0x190/0x190 [ 207.282525][ T7880] do_sock_setsockopt+0x175/0x1a0 [ 207.287601][ T7880] ? __fdget+0x180/0x210 [ 207.291915][ T7880] __x64_sys_setsockopt+0x182/0x200 [ 207.297418][ T7880] do_syscall_64+0x55/0xb0 [ 207.301873][ T7880] ? clear_bhb_loop+0x40/0x90 [ 207.306568][ T7880] ? clear_bhb_loop+0x40/0x90 [ 207.311261][ T7880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.317429][ T7880] RIP: 0033:0x7fb8afd9e159 [ 207.321962][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.341587][ T7880] RSP: 002b:00007fb8b0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.350109][ T7880] RAX: ffffffffffffffda RBX: 00007fb8b0025fa0 RCX: 00007fb8afd9e159 [ 207.358096][ T7880] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 207.366163][ T7880] RBP: 00007fb8b0c92090 R08: 0000000000000004 R09: 0000000000000000 [ 207.375469][ T7880] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 207.383648][ T7880] R13: 00007fb8b0026038 R14: 00007fb8b0025fa0 R15: 00007ffca40955f8 [ 207.391649][ T7880] [ 207.509393][ T7883] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 207.674066][ T7890] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.620'. [ 207.717911][ T7891] netlink: 196 bytes leftover after parsing attributes in process `syz.0.622'. [ 208.833193][ T7911] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 208.886292][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.075588][ T7915] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 209.165249][ T7915] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.627'. [ 209.191800][ T7915] netlink: 9 bytes leftover after parsing attributes in process `syz.2.627'. [ 212.089708][ T7931] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 212.618443][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 212.636856][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 212.664729][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 212.786360][ T7942] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 212.798646][ T7942] team0: Device bridge0 is up. Set it down before adding it as a team port [ 214.712065][ T7967] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 214.719971][ T7967] netlink: 2 bytes leftover after parsing attributes in process `syz.1.644'. [ 215.429619][ T7983] netlink: 'syz.2.645': attribute type 10 has an invalid length. [ 219.329621][ T8002] FAULT_INJECTION: forcing a failure. [ 219.329621][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 219.407441][ T8002] CPU: 1 PID: 8002 Comm: syz.0.654 Not tainted syzkaller #0 [ 219.414830][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.425547][ T8002] Call Trace: [ 219.428859][ T8002] [ 219.431838][ T8002] dump_stack_lvl+0x18c/0x250 [ 219.436580][ T8002] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.442788][ T8002] ? show_regs_print_info+0x20/0x20 [ 219.448050][ T8002] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.454295][ T8002] should_fail_ex+0x394/0x4c0 [ 219.459027][ T8002] should_failslab+0x9/0x20 [ 219.463587][ T8002] slab_pre_alloc_hook+0x59/0x300 [ 219.468665][ T8002] ? security_sk_alloc+0x4b/0x130 [ 219.473747][ T8002] ? security_sk_alloc+0x4b/0x130 [ 219.478833][ T8002] __kmem_cache_alloc_node+0x53/0x250 [ 219.484267][ T8002] ? security_sk_alloc+0x4b/0x130 [ 219.489335][ T8002] __kmalloc+0xa7/0x240 [ 219.493543][ T8002] security_sk_alloc+0x4b/0x130 [ 219.498457][ T8002] sk_prot_alloc+0x101/0x210 [ 219.503110][ T8002] sk_alloc+0x3a/0x350 [ 219.507240][ T8002] tipc_sk_create+0x178/0x2920 [ 219.512060][ T8002] ? perf_trace_preemptirq_template+0x269/0x330 [ 219.518365][ T8002] ? rcu_read_unlock+0x8c/0xa0 [ 219.523179][ T8002] ? __lock_acquire+0x7d80/0x7d80 [ 219.528233][ T8002] ? msg_importance+0x140/0x140 [ 219.533120][ T8002] __sock_create+0x49e/0x940 [ 219.537911][ T8002] __sys_socketpair+0x1c1/0x550 [ 219.542788][ T8002] __x64_sys_socketpair+0x9b/0xb0 [ 219.547829][ T8002] do_syscall_64+0x55/0xb0 [ 219.552270][ T8002] ? clear_bhb_loop+0x40/0x90 [ 219.557235][ T8002] ? clear_bhb_loop+0x40/0x90 [ 219.561936][ T8002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.567846][ T8002] RIP: 0033:0x7fb8afd9e159 [ 219.572454][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.592270][ T8002] RSP: 002b:00007fb8b0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 219.600737][ T8002] RAX: ffffffffffffffda RBX: 00007fb8b0025fa0 RCX: 00007fb8afd9e159 [ 219.608812][ T8002] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 219.616808][ T8002] RBP: 00007fb8b0c92090 R08: 0000000000000000 R09: 0000000000000000 [ 219.624854][ T8002] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 219.632889][ T8002] R13: 00007fb8b0026038 R14: 00007fb8b0025fa0 R15: 00007ffca40955f8 [ 219.640980][ T8002] [ 219.738716][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.656'. [ 219.751258][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.656'. [ 219.766098][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.656'. [ 219.796305][ T8009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.656'. [ 221.555214][ T8028] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 222.537336][ T8037] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 224.590285][ T8071] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 225.043187][ T8084] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.678'. [ 225.495043][ T8090] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 225.622578][ T8093] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 226.251386][ T8107] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 226.359552][ T8106] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 227.520580][ T8120] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 228.897172][ T8134] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.687'. [ 228.904247][ T8133] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 229.072783][ T8134] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 233.050575][ T8156] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 233.998355][ T8178] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 234.097259][ T8181] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 234.124101][ T8177] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 235.439061][ T8201] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 236.238997][ T8221] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 237.236287][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.632366][ T8241] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 239.416033][ T8267] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 239.461902][ T8267] netlink: 2 bytes leftover after parsing attributes in process `syz.3.714'. [ 240.129250][ T8281] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 240.244063][ T8281] team0: Port device geneve1 added [ 240.739629][ T8295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.961849][ T8302] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 241.058132][ T8303] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 242.166051][ T8321] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 242.321694][ T8321] netlink: 2 bytes leftover after parsing attributes in process `syz.2.728'. [ 246.734885][ T8367] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.734'. [ 246.799274][ T8367] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 246.980185][ T8377] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 250.312419][ T8419] netlink: 'syz.2.751': attribute type 21 has an invalid length. [ 251.355611][ T8424] netlink: 196 bytes leftover after parsing attributes in process `syz.2.752'. [ 251.634005][ T8427] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.753'. [ 251.704889][ T8430] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.754'. [ 252.308791][ T8448] netlink: 'syz.1.759': attribute type 10 has an invalid length. [ 252.542144][ T8440] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.758'. [ 252.617541][ T8456] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 252.627020][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.763'. [ 252.678002][ T8456] caif0: entered promiscuous mode [ 252.702757][ T8456] caif0: entered allmulticast mode [ 252.725842][ T8456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.096303][ T8458] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 253.123274][ T8458] netlink: 55 bytes leftover after parsing attributes in process `syz.3.764'. [ 253.314085][ T8458] IPv6: Can't replace route, no match found [ 253.864211][ T8472] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.769'. [ 254.642627][ T8476] syzkaller0: entered promiscuous mode [ 254.663228][ T8476] syzkaller0: entered allmulticast mode [ 254.724018][ T8483] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 256.084717][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091145][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.182159][ T8494] netlink: 'syz.2.775': attribute type 40 has an invalid length. [ 257.213785][ T8490] netlink: 'syz.2.775': attribute type 40 has an invalid length. [ 257.510812][ T8498] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.774'. [ 257.711354][ T8501] netlink: 'syz.1.776': attribute type 10 has an invalid length. [ 257.729968][ T8501] netlink: 2 bytes leftover after parsing attributes in process `syz.1.776'. [ 257.952228][ T8506] netlink: 128 bytes leftover after parsing attributes in process `syz.2.778'. [ 258.039355][ T8506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.120061][ T8493] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.782'. [ 258.161354][ T8493] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 258.202334][ T8493] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 258.456762][ T8518] FAULT_INJECTION: forcing a failure. [ 258.456762][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 258.470334][ T8518] CPU: 0 PID: 8518 Comm: syz.0.781 Not tainted syzkaller #0 [ 258.477688][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.487887][ T8518] Call Trace: [ 258.491206][ T8518] [ 258.494168][ T8518] dump_stack_lvl+0x18c/0x250 [ 258.498872][ T8518] ? sctp_sendmsg+0x1519/0x27b0 [ 258.503753][ T8518] ? ___sys_sendmsg+0x2a6/0x360 [ 258.508631][ T8518] ? show_regs_print_info+0x20/0x20 [ 258.513854][ T8518] ? load_image+0x420/0x420 [ 258.518399][ T8518] should_fail_ex+0x394/0x4c0 [ 258.523114][ T8518] should_failslab+0x9/0x20 [ 258.527643][ T8518] slab_pre_alloc_hook+0x59/0x300 [ 258.532725][ T8518] ? sctp_add_bind_addr+0x8c/0x360 [ 258.537918][ T8518] __kmem_cache_alloc_node+0x53/0x250 [ 258.543350][ T8518] ? sctp_add_bind_addr+0x8c/0x360 [ 258.548586][ T8518] kmalloc_trace+0x2a/0xe0 [ 258.553048][ T8518] sctp_add_bind_addr+0x8c/0x360 [ 258.558025][ T8518] sctp_copy_local_addr_list+0x31b/0x4e0 [ 258.563689][ T8518] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 258.569432][ T8518] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 258.575538][ T8518] ? sctp_v4_is_any+0x35/0x60 [ 258.580323][ T8518] ? sctp_copy_one_addr+0x8c/0x350 [ 258.585464][ T8518] sctp_bind_addr_copy+0xb3/0x3c0 [ 258.590512][ T8518] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 258.596869][ T8518] sctp_connect_new_asoc+0x2f9/0x6a0 [ 258.602185][ T8518] ? __sctp_connect+0xd80/0xd80 [ 258.607052][ T8518] ? __local_bh_enable_ip+0x13a/0x1c0 [ 258.612457][ T8518] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 258.618027][ T8518] ? security_sctp_bind_connect+0x89/0xb0 [ 258.623772][ T8518] sctp_sendmsg+0x1519/0x27b0 [ 258.628500][ T8518] ? sctp_getsockopt+0xb60/0xb60 [ 258.633499][ T8518] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.639857][ T8518] ? lockdep_hardirqs_on+0x98/0x150 [ 258.645212][ T8518] ? inet_sendmsg+0xc7/0x2a0 [ 258.649826][ T8518] ? inet_sendmsg+0xce/0x2a0 [ 258.654440][ T8518] ? inet_send_prepare+0x250/0x250 [ 258.659584][ T8518] ____sys_sendmsg+0x61b/0x980 [ 258.664402][ T8518] ? __asan_memset+0x22/0x40 [ 258.669023][ T8518] ? __sys_sendmsg_sock+0x30/0x30 [ 258.674083][ T8518] ? __import_iovec+0x5f2/0x850 [ 258.678979][ T8518] ? import_iovec+0x73/0xa0 [ 258.683515][ T8518] ___sys_sendmsg+0x2a6/0x360 [ 258.688314][ T8518] ? __sys_sendmsg+0x2b0/0x2b0 [ 258.693178][ T8518] __se_sys_sendmsg+0x1d0/0x2c0 [ 258.698086][ T8518] ? __x64_sys_sendmsg+0x80/0x80 [ 258.703074][ T8518] ? lockdep_hardirqs_on+0x98/0x150 [ 258.708299][ T8518] do_syscall_64+0x55/0xb0 [ 258.712914][ T8518] ? clear_bhb_loop+0x40/0x90 [ 258.717638][ T8518] ? clear_bhb_loop+0x40/0x90 [ 258.722345][ T8518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.728357][ T8518] RIP: 0033:0x7fb8afd9e159 [ 258.732796][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.752422][ T8518] RSP: 002b:00007fb8b0c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.760858][ T8518] RAX: ffffffffffffffda RBX: 00007fb8b0025fa0 RCX: 00007fb8afd9e159 [ 258.768846][ T8518] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000007 [ 258.776840][ T8518] RBP: 00007fb8b0c92090 R08: 0000000000000000 R09: 0000000000000000 [ 258.784831][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.792816][ T8518] R13: 00007fb8b0026038 R14: 00007fb8b0025fa0 R15: 00007ffca40955f8 [ 258.800827][ T8518] [ 258.889955][ T8518] netlink: 'syz.0.781': attribute type 10 has an invalid length. [ 258.899785][ T8518] netlink: 2 bytes leftover after parsing attributes in process `syz.0.781'. [ 259.150364][ T8533] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 259.173184][ T8533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 259.188176][ T8533] bridge0: port 3(dummy0) entered blocking state [ 259.195278][ T8533] bridge0: port 3(dummy0) entered disabled state [ 259.218787][ T8533] dummy0: entered allmulticast mode [ 259.227505][ T8533] dummy0: entered promiscuous mode [ 259.238000][ T8533] bridge0: port 3(dummy0) entered blocking state [ 259.244736][ T8533] bridge0: port 3(dummy0) entered forwarding state [ 259.258253][ T8528] netlink: 164 bytes leftover after parsing attributes in process `syz.3.787'. [ 259.517641][ T8534] netlink: 164 bytes leftover after parsing attributes in process `syz.3.787'. [ 259.575060][ T8552] FAULT_INJECTION: forcing a failure. [ 259.575060][ T8552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.589168][ T8552] CPU: 0 PID: 8552 Comm: syz.2.794 Not tainted syzkaller #0 [ 259.596595][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.606699][ T8552] Call Trace: [ 259.610052][ T8552] [ 259.613120][ T8552] dump_stack_lvl+0x18c/0x250 [ 259.617846][ T8552] ? show_regs_print_info+0x20/0x20 [ 259.623100][ T8552] ? load_image+0x420/0x420 [ 259.627667][ T8552] ? __might_fault+0xaa/0x120 [ 259.632380][ T8552] ? __lock_acquire+0x7d80/0x7d80 [ 259.637418][ T8552] ? __virt_addr_valid+0x10c/0x380 [ 259.642648][ T8552] should_fail_ex+0x394/0x4c0 [ 259.647394][ T8552] _copy_from_user+0x2f/0xe0 [ 259.652038][ T8552] generic_map_update_batch+0x58c/0x800 [ 259.657658][ T8552] ? rcu_read_unlock+0xa0/0xa0 [ 259.662479][ T8552] ? __fdget+0x180/0x210 [ 259.666807][ T8552] ? rcu_read_unlock+0xa0/0xa0 [ 259.671619][ T8552] bpf_map_do_batch+0x3f2/0x600 [ 259.676604][ T8552] ? bpf_lsm_key_free+0x10/0x10 [ 259.681504][ T8552] __sys_bpf+0x381/0x890 [ 259.685777][ T8552] ? bpf_link_show_fdinfo+0x560/0x560 [ 259.691179][ T8552] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.697452][ T8552] __x64_sys_bpf+0x7c/0x90 [ 259.701891][ T8552] do_syscall_64+0x55/0xb0 [ 259.706327][ T8552] ? clear_bhb_loop+0x40/0x90 [ 259.711022][ T8552] ? clear_bhb_loop+0x40/0x90 [ 259.715724][ T8552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.721634][ T8552] RIP: 0033:0x7ffa6f59e159 [ 259.726073][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.745716][ T8552] RSP: 002b:00007ffa70516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.754147][ T8552] RAX: ffffffffffffffda RBX: 00007ffa6f825fa0 RCX: 00007ffa6f59e159 [ 259.762130][ T8552] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 259.770155][ T8552] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 259.778136][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.786126][ T8552] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 259.794145][ T8552] [ 261.216421][ T8583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 261.327942][ T8586] netlink: 'syz.0.806': attribute type 21 has an invalid length. [ 261.338157][ T8586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'. [ 261.361915][ T8586] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 261.484616][ T8589] netlink: 'syz.0.806': attribute type 21 has an invalid length. [ 261.520700][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'. [ 261.547197][ T8589] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 261.927442][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.076475][ T8596] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 262.104790][ T8596] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 262.287149][ T8613] FAULT_INJECTION: forcing a failure. [ 262.287149][ T8613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.319209][ T8613] CPU: 1 PID: 8613 Comm: syz.0.816 Not tainted syzkaller #0 [ 262.326619][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.336729][ T8613] Call Trace: [ 262.340077][ T8613] [ 262.343056][ T8613] dump_stack_lvl+0x18c/0x250 [ 262.347888][ T8613] ? show_regs_print_info+0x20/0x20 [ 262.353149][ T8613] ? load_image+0x420/0x420 [ 262.357697][ T8613] ? __might_fault+0xaa/0x120 [ 262.362424][ T8613] ? __lock_acquire+0x7d80/0x7d80 [ 262.367501][ T8613] should_fail_ex+0x394/0x4c0 [ 262.372289][ T8613] _copy_from_user+0x2f/0xe0 [ 262.376923][ T8613] ___sys_recvmsg+0x174/0x590 [ 262.381664][ T8613] ? __sys_recvmsg+0x2a0/0x2a0 [ 262.386475][ T8613] ? ksys_write+0x1d2/0x260 [ 262.391027][ T8613] ? __fget_files+0x3fc/0x460 [ 262.395766][ T8613] __x64_sys_recvmsg+0x21e/0x2f0 [ 262.400759][ T8613] ? ___sys_recvmsg+0x590/0x590 [ 262.405669][ T8613] ? lockdep_hardirqs_on+0x98/0x150 [ 262.410912][ T8613] do_syscall_64+0x55/0xb0 [ 262.415370][ T8613] ? clear_bhb_loop+0x40/0x90 [ 262.420099][ T8613] ? clear_bhb_loop+0x40/0x90 [ 262.424821][ T8613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.430834][ T8613] RIP: 0033:0x7fb8afd9e159 [ 262.435282][ T8613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.455555][ T8613] RSP: 002b:00007fb8b0c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 262.464104][ T8613] RAX: ffffffffffffffda RBX: 00007fb8b0026090 RCX: 00007fb8afd9e159 [ 262.472102][ T8613] RDX: 0000000000000040 RSI: 0000200000000800 RDI: 0000000000000006 [ 262.480212][ T8613] RBP: 00007fb8b0c71090 R08: 0000000000000000 R09: 0000000000000000 [ 262.488214][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.496206][ T8613] R13: 00007fb8b0026128 R14: 00007fb8b0026090 R15: 00007ffca40955f8 [ 262.504224][ T8613] [ 263.304364][ T8642] __nla_validate_parse: 2 callbacks suppressed [ 263.304388][ T8642] netlink: 128 bytes leftover after parsing attributes in process `syz.3.823'. [ 263.339958][ T8642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.855963][ T8646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.827'. [ 263.894508][ T8646] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 263.940741][ T8646] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 264.179440][ T8660] netlink: 'syz.3.831': attribute type 3 has an invalid length. [ 264.187588][ T8660] netlink: 'syz.3.831': attribute type 275 has an invalid length. [ 264.199826][ T8660] netlink: 164 bytes leftover after parsing attributes in process `syz.3.831'. [ 266.079866][ T8682] netlink: 128 bytes leftover after parsing attributes in process `syz.2.841'. [ 266.298931][ T8682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.105830][ T8726] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.855'. [ 267.118261][ T8728] netlink: 'syz.1.854': attribute type 33 has an invalid length. [ 267.153571][ T8728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.854'. [ 267.368777][ T8732] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.856'. [ 268.045735][ T8748] netlink: 128 bytes leftover after parsing attributes in process `syz.1.859'. [ 268.137461][ T8748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.540778][ T8763] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.869'. [ 268.676202][ T8766] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.868'. [ 269.456851][ T8780] netlink: 'syz.3.873': attribute type 3 has an invalid length. [ 269.465857][ T8780] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.873'. [ 269.938164][ T8797] netlink: 14 bytes leftover after parsing attributes in process `syz.3.879'. [ 269.997194][ T8803] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.881'. [ 270.287241][ T8813] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.885'. [ 270.715343][ T8821] netlink: 'syz.2.887': attribute type 3 has an invalid length. [ 270.756034][ T8821] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.887'. [ 271.464198][ T8839] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.895'. [ 272.468997][ T8866] sit0: entered promiscuous mode [ 272.664647][ T8872] netlink: 'syz.3.905': attribute type 12 has an invalid length. [ 272.696380][ T8872] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.905'. [ 273.206101][ T8889] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.908'. [ 274.065511][ T8917] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.914'. [ 274.078268][ T5088] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 274.113276][ T8917] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 275.955587][ T8963] netlink: 'syz.0.928': attribute type 3 has an invalid length. [ 275.991654][ T8963] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.928'. [ 276.139456][ T8968] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.932'. [ 276.779778][ T8989] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.939'. [ 277.926859][ T9012] sit0: entered allmulticast mode [ 278.345968][ T9021] netlink: 830 bytes leftover after parsing attributes in process `syz.0.950'. [ 278.452560][ T9022] netlink: 'syz.2.949': attribute type 10 has an invalid length. [ 278.465746][ T9022] netlink: 55 bytes leftover after parsing attributes in process `syz.2.949'. [ 279.826926][ T9057] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 279.926650][ T9057] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.863671][ T9111] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 281.902891][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.914384][ T9111] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 281.929949][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.808529][ T9159] syzkaller0: entered promiscuous mode [ 284.817564][ T9159] syzkaller0: entered allmulticast mode [ 286.955004][ T9179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.964477][ T9179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.974179][ T9179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.983254][ T9179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.562317][ T9229] syzkaller0: entered promiscuous mode [ 288.568773][ T9229] syzkaller0: entered allmulticast mode [ 289.025917][ T9246] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1020'. [ 290.574586][ T9272] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1030'. [ 290.601977][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 290.662779][ T9277] netlink: 'syz.0.1032': attribute type 33 has an invalid length. [ 290.699307][ T9277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1032'. [ 290.722575][ T9278] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1033'. [ 290.734046][ T9277] `: renamed from ip6tnl0 (while UP) [ 290.770718][ T9277] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 290.895825][ T9277] netlink: 155304 bytes leftover after parsing attributes in process `syz.0.1032'. [ 292.304839][ T9300] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1036'. [ 292.341663][ T9300] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 295.925322][ T9334] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1047'. [ 297.900324][ T9376] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1059'. [ 297.906773][ T9372] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1058'. [ 297.984400][ T9372] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 297.997935][ T9372] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1058'. [ 298.134010][ T9378] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1060'. [ 298.145013][ T9380] FAULT_INJECTION: forcing a failure. [ 298.145013][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 298.166997][ T9380] CPU: 1 PID: 9380 Comm: syz.0.1060 Not tainted syzkaller #0 [ 298.174434][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.184584][ T9380] Call Trace: [ 298.187866][ T9380] [ 298.190811][ T9380] dump_stack_lvl+0x18c/0x250 [ 298.195501][ T9380] ? show_regs_print_info+0x20/0x20 [ 298.200715][ T9380] ? load_image+0x420/0x420 [ 298.205239][ T9380] ? __might_sleep+0xe0/0xe0 [ 298.209828][ T9380] ? __lock_acquire+0x7d80/0x7d80 [ 298.214963][ T9380] should_fail_ex+0x394/0x4c0 [ 298.219670][ T9380] should_failslab+0x9/0x20 [ 298.224203][ T9380] slab_pre_alloc_hook+0x59/0x300 [ 298.229320][ T9380] ? __lock_acquire+0x7d80/0x7d80 [ 298.234400][ T9380] kmem_cache_alloc_node+0x5e/0x310 [ 298.239746][ T9380] ? __alloc_skb+0x103/0x2c0 [ 298.244620][ T9380] __alloc_skb+0x103/0x2c0 [ 298.249051][ T9380] netlink_sendmsg+0x66a/0xbf0 [ 298.253927][ T9380] ? netlink_getsockopt+0x590/0x590 [ 298.259411][ T9380] ? apparmor_socket_sendmsg+0x8e/0x330 [ 298.264965][ T9380] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.270257][ T9380] ? security_socket_sendmsg+0x80/0xa0 [ 298.275739][ T9380] ? netlink_getsockopt+0x590/0x590 [ 298.280990][ T9380] ____sys_sendmsg+0x61b/0x980 [ 298.285851][ T9380] ? __asan_memset+0x22/0x40 [ 298.290567][ T9380] ? __sys_sendmsg_sock+0x30/0x30 [ 298.295652][ T9380] ? __import_iovec+0x5f2/0x850 [ 298.300528][ T9380] ? import_iovec+0x73/0xa0 [ 298.305048][ T9380] ___sys_sendmsg+0x2a6/0x360 [ 298.309912][ T9380] ? get_pid_task+0x20/0x1e0 [ 298.314703][ T9380] ? __sys_sendmsg+0x2b0/0x2b0 [ 298.319553][ T9380] ? __lock_acquire+0x7d80/0x7d80 [ 298.324639][ T9380] __se_sys_sendmsg+0x1d0/0x2c0 [ 298.329525][ T9380] ? __x64_sys_sendmsg+0x80/0x80 [ 298.334490][ T9380] ? lockdep_hardirqs_on+0x98/0x150 [ 298.339705][ T9380] do_syscall_64+0x55/0xb0 [ 298.344139][ T9380] ? clear_bhb_loop+0x40/0x90 [ 298.348820][ T9380] ? clear_bhb_loop+0x40/0x90 [ 298.353501][ T9380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.359411][ T9380] RIP: 0033:0x7fb8afd9e159 [ 298.363845][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.383654][ T9380] RSP: 002b:00007fb8b0c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.392096][ T9380] RAX: ffffffffffffffda RBX: 00007fb8b0026090 RCX: 00007fb8afd9e159 [ 298.400122][ T9380] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000000b [ 298.408243][ T9380] RBP: 00007fb8b0c71090 R08: 0000000000000000 R09: 0000000000000000 [ 298.416235][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.424237][ T9380] R13: 00007fb8b0026128 R14: 00007fb8b0026090 R15: 00007ffca40955f8 [ 298.432282][ T9380] [ 298.473327][ T9382] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1061'. [ 298.646273][ T9388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1062'. [ 299.026506][ T9396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1065'. [ 300.731917][ T9421] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 300.822428][ T9420] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1073'. [ 302.790148][ T9453] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1083'. [ 303.589095][ T9458] netlink: 'syz.2.1085': attribute type 30 has an invalid length. [ 303.623400][ T9458] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 304.126409][ T9476] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1095'. [ 305.449480][ T9493] netlink: 'syz.0.1093': attribute type 27 has an invalid length. [ 305.488110][ T9493] netlink: 'syz.0.1093': attribute type 3 has an invalid length. [ 305.505925][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1093'. [ 305.662115][ T9495] FAULT_INJECTION: forcing a failure. [ 305.662115][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.741960][ T9495] CPU: 1 PID: 9495 Comm: syz.1.1097 Not tainted syzkaller #0 [ 305.749471][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.759595][ T9495] Call Trace: [ 305.762940][ T9495] [ 305.765925][ T9495] dump_stack_lvl+0x18c/0x250 [ 305.770691][ T9495] ? show_regs_print_info+0x20/0x20 [ 305.775970][ T9495] ? load_image+0x420/0x420 [ 305.780551][ T9495] ? __might_fault+0xaa/0x120 [ 305.785299][ T9495] ? __lock_acquire+0x7d80/0x7d80 [ 305.790409][ T9495] should_fail_ex+0x394/0x4c0 [ 305.795262][ T9495] _copy_from_user+0x2f/0xe0 [ 305.799926][ T9495] ___sys_sendmsg+0x1c7/0x360 [ 305.804706][ T9495] ? __sys_sendmsg+0x2b0/0x2b0 [ 305.809632][ T9495] ? __lock_acquire+0x7d80/0x7d80 [ 305.814920][ T9495] __se_sys_sendmsg+0x1d0/0x2c0 [ 305.819849][ T9495] ? __x64_sys_sendmsg+0x80/0x80 [ 305.824915][ T9495] ? lockdep_hardirqs_on+0x98/0x150 [ 305.830190][ T9495] do_syscall_64+0x55/0xb0 [ 305.834671][ T9495] ? clear_bhb_loop+0x40/0x90 [ 305.839412][ T9495] ? clear_bhb_loop+0x40/0x90 [ 305.844164][ T9495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.850211][ T9495] RIP: 0033:0x7f644299e159 [ 305.854698][ T9495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.874370][ T9495] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.882866][ T9495] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 305.890983][ T9495] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 305.899021][ T9495] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.907054][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.915122][ T9495] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 305.923211][ T9495] [ 307.764539][ T9523] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 310.249841][ T9579] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1124'. [ 312.877988][ T9618] FAULT_INJECTION: forcing a failure. [ 312.877988][ T9618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.956982][ T9618] CPU: 0 PID: 9618 Comm: syz.3.1134 Not tainted syzkaller #0 [ 312.964452][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 312.974565][ T9618] Call Trace: [ 312.977892][ T9618] [ 312.980866][ T9618] dump_stack_lvl+0x18c/0x250 [ 312.985610][ T9618] ? show_regs_print_info+0x20/0x20 [ 312.990864][ T9618] ? load_image+0x420/0x420 [ 312.995422][ T9618] ? __lock_acquire+0x7d80/0x7d80 [ 313.000590][ T9618] ? snprintf+0xe9/0x140 [ 313.004932][ T9618] should_fail_ex+0x394/0x4c0 [ 313.009687][ T9618] _copy_to_user+0x2f/0xa0 [ 313.014164][ T9618] simple_read_from_buffer+0xe7/0x150 [ 313.019627][ T9618] proc_fail_nth_read+0x1e8/0x260 [ 313.024729][ T9618] ? proc_fault_inject_write+0x360/0x360 [ 313.030454][ T9618] ? fsnotify_perm+0x271/0x5e0 [ 313.035290][ T9618] ? proc_fault_inject_write+0x360/0x360 [ 313.041016][ T9618] vfs_read+0x298/0x990 [ 313.045256][ T9618] ? kernel_read+0x1e0/0x1e0 [ 313.050007][ T9618] ? __fget_files+0x28/0x460 [ 313.054659][ T9618] ? __fget_files+0x3fc/0x460 [ 313.059415][ T9618] ? __fdget_pos+0x2a3/0x330 [ 313.064066][ T9618] ? ksys_read+0x74/0x260 [ 313.068470][ T9618] ksys_read+0x151/0x260 [ 313.072793][ T9618] ? vfs_write+0x9a0/0x9a0 [ 313.077272][ T9618] ? lockdep_hardirqs_on+0x98/0x150 [ 313.082528][ T9618] do_syscall_64+0x55/0xb0 [ 313.087081][ T9618] ? clear_bhb_loop+0x40/0x90 [ 313.091810][ T9618] ? clear_bhb_loop+0x40/0x90 [ 313.096533][ T9618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.102509][ T9618] RIP: 0033:0x7f7ac815e98e [ 313.106974][ T9618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.126709][ T9618] RSP: 002b:00007f7ac9019fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.135174][ T9618] RAX: ffffffffffffffda RBX: 00007f7ac901a6c0 RCX: 00007f7ac815e98e [ 313.143187][ T9618] RDX: 000000000000000f RSI: 00007f7ac901a0a0 RDI: 0000000000000007 [ 313.151197][ T9618] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 313.159559][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.167566][ T9618] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 313.175615][ T9618] [ 316.345565][ T9661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.453716][ T9691] FAULT_INJECTION: forcing a failure. [ 317.453716][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 317.474467][ T9691] CPU: 0 PID: 9691 Comm: syz.3.1156 Not tainted syzkaller #0 [ 317.481937][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.492019][ T9691] Call Trace: [ 317.495311][ T9691] [ 317.498254][ T9691] dump_stack_lvl+0x18c/0x250 [ 317.502956][ T9691] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.509130][ T9691] ? show_regs_print_info+0x20/0x20 [ 317.514348][ T9691] ? load_image+0x420/0x420 [ 317.518877][ T9691] should_fail_ex+0x394/0x4c0 [ 317.523587][ T9691] should_failslab+0x9/0x20 [ 317.528132][ T9691] slab_pre_alloc_hook+0x59/0x300 [ 317.533195][ T9691] kmem_cache_alloc+0x5a/0x2c0 [ 317.537978][ T9691] ? security_inode_alloc+0x34/0x110 [ 317.543296][ T9691] security_inode_alloc+0x34/0x110 [ 317.548433][ T9691] inode_init_always+0x914/0xc90 [ 317.553482][ T9691] new_inode_pseudo+0x95/0x1d0 [ 317.558264][ T9691] __sock_create+0x12d/0x940 [ 317.562890][ T9691] ? __might_fault+0xaa/0x120 [ 317.567609][ T9691] ? __might_fault+0xc6/0x120 [ 317.572301][ T9691] __sys_socketpair+0x1c1/0x550 [ 317.577204][ T9691] __x64_sys_socketpair+0x9b/0xb0 [ 317.582247][ T9691] do_syscall_64+0x55/0xb0 [ 317.586680][ T9691] ? clear_bhb_loop+0x40/0x90 [ 317.591396][ T9691] ? clear_bhb_loop+0x40/0x90 [ 317.596097][ T9691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.602028][ T9691] RIP: 0033:0x7f7ac819e159 [ 317.606465][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.626173][ T9691] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 317.634607][ T9691] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 317.642593][ T9691] RDX: 0000000000000014 RSI: 0000000000000005 RDI: 000000000000000b [ 317.650594][ T9691] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 317.658577][ T9691] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 317.666576][ T9691] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 317.674577][ T9691] [ 317.688617][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.695166][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.708110][ T9691] socket: no more sockets [ 318.637009][ T9714] netlink: 'syz.2.1162': attribute type 3 has an invalid length. [ 318.681868][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1162'. [ 319.552879][ T9728] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1167'. [ 319.881219][ T9740] FAULT_INJECTION: forcing a failure. [ 319.881219][ T9740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.911603][ T9740] CPU: 1 PID: 9740 Comm: syz.1.1171 Not tainted syzkaller #0 [ 319.919071][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 319.929169][ T9740] Call Trace: [ 319.932489][ T9740] [ 319.935456][ T9740] dump_stack_lvl+0x18c/0x250 [ 319.940187][ T9740] ? show_regs_print_info+0x20/0x20 [ 319.945434][ T9740] ? load_image+0x420/0x420 [ 319.949984][ T9740] ? __lock_acquire+0x7d80/0x7d80 [ 319.955051][ T9740] should_fail_ex+0x394/0x4c0 [ 319.959779][ T9740] _copy_from_user+0x2f/0xe0 [ 319.964413][ T9740] __copy_msghdr+0x388/0x560 [ 319.969050][ T9740] ___sys_sendmsg+0x214/0x360 [ 319.973827][ T9740] ? get_pid_task+0x20/0x1e0 [ 319.978459][ T9740] ? __sys_sendmsg+0x2b0/0x2b0 [ 319.983259][ T9740] ? __lock_acquire+0x7d80/0x7d80 [ 319.988314][ T9740] __se_sys_sendmsg+0x1d0/0x2c0 [ 319.993179][ T9740] ? __x64_sys_sendmsg+0x80/0x80 [ 319.998142][ T9740] ? lockdep_hardirqs_on+0x98/0x150 [ 320.003361][ T9740] do_syscall_64+0x55/0xb0 [ 320.007796][ T9740] ? clear_bhb_loop+0x40/0x90 [ 320.012585][ T9740] ? clear_bhb_loop+0x40/0x90 [ 320.017285][ T9740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.023197][ T9740] RIP: 0033:0x7f644299e159 [ 320.027655][ T9740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.047273][ T9740] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.055701][ T9740] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 320.063684][ T9740] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 320.071667][ T9740] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.079660][ T9740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.087746][ T9740] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 320.095740][ T9740] [ 320.753919][ T9761] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 321.516119][ T9778] netlink: 'syz.2.1182': attribute type 29 has an invalid length. [ 321.544116][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 321.576138][ T9778] netlink: 'syz.2.1182': attribute type 29 has an invalid length. [ 321.598390][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 321.638928][ T9785] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 322.796150][ T9797] FAULT_INJECTION: forcing a failure. [ 322.796150][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.842679][ T9797] CPU: 0 PID: 9797 Comm: syz.1.1189 Not tainted syzkaller #0 [ 322.850160][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.860261][ T9797] Call Trace: [ 322.863577][ T9797] [ 322.866543][ T9797] dump_stack_lvl+0x18c/0x250 [ 322.871269][ T9797] ? show_regs_print_info+0x20/0x20 [ 322.874337][ T9800] delete_channel: no stack [ 322.876499][ T9797] ? load_image+0x420/0x420 [ 322.876531][ T9797] ? __might_fault+0xaa/0x120 [ 322.890379][ T9797] ? __lock_acquire+0x7d80/0x7d80 [ 322.892456][ T9800] delete_channel: no stack [ 322.895456][ T9797] ? unix_ioctl+0x259/0x6b0 [ 322.895492][ T9797] should_fail_ex+0x394/0x4c0 [ 322.895525][ T9797] _copy_from_user+0x2f/0xe0 [ 322.895551][ T9797] sock_do_ioctl+0x190/0x310 [ 322.895582][ T9797] ? sock_show_fdinfo+0xb0/0xb0 [ 322.895622][ T9797] sock_ioctl+0x5be/0x7e0 [ 322.895651][ T9797] ? sock_poll+0x3e0/0x3e0 [ 322.895687][ T9797] ? bpf_lsm_file_ioctl+0x9/0x10 [ 322.895709][ T9797] ? security_file_ioctl+0x80/0xa0 [ 322.895734][ T9797] ? sock_poll+0x3e0/0x3e0 [ 322.895759][ T9797] __se_sys_ioctl+0xfd/0x170 [ 322.895789][ T9797] do_syscall_64+0x55/0xb0 [ 322.934972][ T9800] FAULT_INJECTION: forcing a failure. [ 322.934972][ T9800] name failslab, interval 1, probability 0, space 0, times 0 [ 322.937370][ T9797] ? clear_bhb_loop+0x40/0x90 [ 322.937406][ T9797] ? clear_bhb_loop+0x40/0x90 [ 322.937434][ T9797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.937459][ T9797] RIP: 0033:0x7f644299e159 [ 322.937478][ T9797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.937496][ T9797] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.937519][ T9797] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 323.024907][ T9797] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000004 [ 323.032930][ T9797] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.040943][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.049139][ T9797] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 323.057170][ T9797] [ 323.060235][ T9800] CPU: 1 PID: 9800 Comm: syz.2.1191 Not tainted syzkaller #0 [ 323.067665][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.077770][ T9800] Call Trace: [ 323.081098][ T9800] [ 323.084063][ T9800] dump_stack_lvl+0x18c/0x250 [ 323.088801][ T9800] ? show_regs_print_info+0x20/0x20 [ 323.094050][ T9800] ? load_image+0x420/0x420 [ 323.098618][ T9800] ? lockdep_hardirqs_on+0x98/0x150 [ 323.103863][ T9800] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.110077][ T9800] should_fail_ex+0x394/0x4c0 [ 323.114813][ T9800] should_failslab+0x9/0x20 [ 323.119375][ T9800] slab_pre_alloc_hook+0x59/0x300 [ 323.124460][ T9800] kmem_cache_alloc+0x5a/0x2c0 [ 323.129248][ T9800] ? skb_clone+0x1eb/0x370 [ 323.133690][ T9800] skb_clone+0x1eb/0x370 [ 323.137964][ T9800] __netlink_deliver_tap+0x411/0x7f0 [ 323.143282][ T9800] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.148502][ T9800] netlink_deliver_tap+0x19c/0x1b0 [ 323.153631][ T9800] netlink_dump+0x95b/0xec0 [ 323.158157][ T9800] ? netlink_lookup+0x200/0x200 [ 323.163034][ T9800] ? __asan_memset+0x22/0x40 [ 323.167643][ T9800] ? genl_start+0x491/0x6c0 [ 323.172169][ T9800] __netlink_dump_start+0x57c/0x7a0 [ 323.177392][ T9800] genl_family_rcv_msg_dumpit+0x214/0x310 [ 323.183142][ T9800] ? genl_rcv_msg+0x7a0/0x7a0 [ 323.187832][ T9800] ? genl_get_cmd+0x693/0x930 [ 323.192526][ T9800] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.198711][ T9800] ? genl_family_rcv_msg_doit+0x310/0x310 [ 323.204476][ T9800] ? genl_start+0x6c0/0x6c0 [ 323.209088][ T9800] ? genl_dumpit+0x1a0/0x1a0 [ 323.213710][ T9800] ? radix_tree_lookup+0xd0/0x280 [ 323.218758][ T9800] genl_rcv_msg+0x5de/0x7a0 [ 323.223282][ T9800] ? genl_bind+0x360/0x360 [ 323.227712][ T9800] ? tipc_nl_node_reset_link_stats+0x770/0x770 [ 323.233896][ T9800] netlink_rcv_skb+0x235/0x4c0 [ 323.238698][ T9800] ? genl_bind+0x360/0x360 [ 323.243149][ T9800] ? netlink_ack+0x1160/0x1160 [ 323.247955][ T9800] ? __lock_acquire+0x7d80/0x7d80 [ 323.253012][ T9800] ? down_read+0x1ac/0x2e0 [ 323.257478][ T9800] genl_rcv+0x28/0x40 [ 323.261477][ T9800] netlink_unicast+0x7b1/0x930 [ 323.266304][ T9800] netlink_sendmsg+0x8d0/0xbf0 [ 323.271091][ T9800] ? netlink_getsockopt+0x590/0x590 [ 323.276312][ T9800] ? apparmor_socket_sendmsg+0x8e/0x330 [ 323.281883][ T9800] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 323.287182][ T9800] ? security_socket_sendmsg+0x80/0xa0 [ 323.292653][ T9800] ? netlink_getsockopt+0x590/0x590 [ 323.297867][ T9800] ____sys_sendmsg+0x61b/0x980 [ 323.302652][ T9800] ? __asan_memset+0x22/0x40 [ 323.307262][ T9800] ? __sys_sendmsg_sock+0x30/0x30 [ 323.312298][ T9800] ? __import_iovec+0x5f2/0x850 [ 323.317179][ T9800] ? import_iovec+0x73/0xa0 [ 323.321699][ T9800] ___sys_sendmsg+0x2a6/0x360 [ 323.326394][ T9800] ? __sys_sendmsg+0x2b0/0x2b0 [ 323.331217][ T9800] __se_sys_sendmsg+0x1d0/0x2c0 [ 323.336087][ T9800] ? __x64_sys_sendmsg+0x80/0x80 [ 323.341054][ T9800] ? syscall_enter_from_user_mode+0x2e/0x80 [ 323.346959][ T9800] do_syscall_64+0x55/0xb0 [ 323.351386][ T9800] ? clear_bhb_loop+0x40/0x90 [ 323.356081][ T9800] ? clear_bhb_loop+0x40/0x90 [ 323.360777][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.366733][ T9800] RIP: 0033:0x7ffa6f59e159 [ 323.371172][ T9800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.390798][ T9800] RSP: 002b:00007ffa70516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.399241][ T9800] RAX: ffffffffffffffda RBX: 00007ffa6f825fa0 RCX: 00007ffa6f59e159 [ 323.407237][ T9800] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 323.415219][ T9800] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 323.423202][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.431185][ T9800] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 323.439273][ T9800] [ 324.378542][ T9822] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1196'. [ 325.040063][ T9827] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1207'. [ 325.311984][ T9835] netlink: 'syz.2.1201': attribute type 9 has an invalid length. [ 325.342863][ T9835] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1201'. [ 325.852506][ T9837] netlink: 'syz.2.1201': attribute type 9 has an invalid length. [ 325.885303][ T9837] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1201'. [ 326.498310][ T9851] netlink: 'syz.2.1205': attribute type 10 has an invalid length. [ 326.894545][ T9863] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1212'. [ 326.903674][ T9861] netlink: 'syz.0.1211': attribute type 29 has an invalid length. [ 326.951839][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 327.005290][ T9861] netlink: 'syz.0.1211': attribute type 29 has an invalid length. [ 327.047675][ T9866] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 327.082043][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 327.176233][ T9866] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 327.199482][ T9868] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 327.423145][ T9859] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 327.495897][ T9866] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 329.082423][ T9894] syz_tun: entered promiscuous mode [ 329.192356][ T9897] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1222'. [ 329.217873][ T9901] FAULT_INJECTION: forcing a failure. [ 329.217873][ T9901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.285915][ T9894] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 329.291791][ T9901] CPU: 0 PID: 9901 Comm: syz.1.1221 Not tainted syzkaller #0 [ 329.302139][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.312238][ T9901] Call Trace: [ 329.315644][ T9901] [ 329.318612][ T9901] dump_stack_lvl+0x18c/0x250 [ 329.323352][ T9901] ? show_regs_print_info+0x20/0x20 [ 329.328619][ T9901] ? load_image+0x420/0x420 [ 329.333169][ T9901] ? __might_fault+0xaa/0x120 [ 329.337888][ T9901] ? __lock_acquire+0x7d80/0x7d80 [ 329.342970][ T9901] should_fail_ex+0x394/0x4c0 [ 329.347698][ T9901] _copy_from_user+0x2f/0xe0 [ 329.352340][ T9901] ___sys_sendmsg+0x1c7/0x360 [ 329.357098][ T9901] ? get_pid_task+0x20/0x1e0 [ 329.361747][ T9901] ? __sys_sendmsg+0x2b0/0x2b0 [ 329.366589][ T9901] ? __lock_acquire+0x7d80/0x7d80 [ 329.371687][ T9901] __se_sys_sendmsg+0x1d0/0x2c0 [ 329.376592][ T9901] ? __x64_sys_sendmsg+0x80/0x80 [ 329.381592][ T9901] ? lockdep_hardirqs_on+0x98/0x150 [ 329.386833][ T9901] do_syscall_64+0x55/0xb0 [ 329.391293][ T9901] ? clear_bhb_loop+0x40/0x90 [ 329.396010][ T9901] ? clear_bhb_loop+0x40/0x90 [ 329.400712][ T9901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.406633][ T9901] RIP: 0033:0x7f644299e159 [ 329.411066][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.430681][ T9901] RSP: 002b:00007f6440bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.439115][ T9901] RAX: ffffffffffffffda RBX: 00007f6442c26180 RCX: 00007f644299e159 [ 329.447190][ T9901] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 329.455179][ T9901] RBP: 00007f6440bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 329.463158][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.471137][ T9901] R13: 00007f6442c26218 R14: 00007f6442c26180 R15: 00007ffddf256528 [ 329.479138][ T9901] [ 329.484319][ T9902] syz_tun: entered promiscuous mode [ 330.684982][ T9915] validate_nla: 3 callbacks suppressed [ 330.685005][ T9915] netlink: 'syz.1.1228': attribute type 9 has an invalid length. [ 330.792070][ T9915] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1228'. [ 330.962152][ T9917] netlink: 'syz.1.1228': attribute type 9 has an invalid length. [ 331.025995][ T9917] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1228'. [ 331.776870][ T9936] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1233'. [ 332.314495][ T9947] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1245'. [ 333.486831][ T9978] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 333.553657][ T9978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 333.664959][ T9981] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1249'. [ 333.675468][ T9978] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 333.721867][ T9978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 336.048857][T10013] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1261'. [ 336.624340][T10030] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1275'. [ 338.726876][T10051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1273'. [ 338.772238][T10054] netlink: 'syz.3.1274': attribute type 3 has an invalid length. [ 338.780059][T10054] netlink: 'syz.3.1274': attribute type 5 has an invalid length. [ 338.976204][T10060] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1278'. [ 340.074959][T10089] netlink: 'syz.2.1288': attribute type 46 has an invalid length. [ 340.643611][T10099] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1292'. [ 341.122571][T10108] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1295'. [ 341.960806][T10121] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 342.001202][T10121] team0: Port device hsr_slave_0 added [ 342.758768][T10142] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1305'. [ 344.642798][ T5817] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 344.888920][T10159] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1309'. [ 345.470529][T10164] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 345.626317][T10164] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 345.769000][T10166] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1312'. [ 345.789624][T10167] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 345.863792][T10168] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 345.902175][T10171] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 346.315190][T10177] netlink: 'syz.3.1313': attribute type 29 has an invalid length. [ 346.349482][T10178] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1315'. [ 346.528363][T10181] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1316'. [ 346.780016][T10177] netlink: 'syz.3.1313': attribute type 29 has an invalid length. [ 346.830517][T10179] netlink: 'syz.3.1313': attribute type 29 has an invalid length. [ 346.848733][T10182] netlink: 'syz.3.1313': attribute type 29 has an invalid length. [ 346.860178][T10185] netlink: 'syz.3.1313': attribute type 29 has an invalid length. Stopping sshd: stopped /usr/sbin/sshd (pid 5535) OK Stopping crond: [ 347.751241][T10208] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1323'. [ 347.797542][T10208] openvswitch: netlink: Flow get message rejected, Key attribute missing. stopped /usr/sbin/crond (pid 5518) OK [ 348.450714][T10224] veth0: entered allmulticast mode Stopping dhcpcd... [ 348.500158][T10226] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1330'. [ 348.618731][T10232] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1332'. stopped /sbin/dhcpcd (pid 5438) Stopping network: [ 349.261416][T10255] FAULT_INJECTION: forcing a failure. [ 349.261416][T10255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.319712][T10255] CPU: 0 PID: 10255 Comm: syz.1.1338 Not tainted syzkaller #0 [ 349.327255][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.337327][T10255] Call Trace: [ 349.340619][T10255] [ 349.343564][T10255] dump_stack_lvl+0x18c/0x250 [ 349.348299][T10255] ? show_regs_print_info+0x20/0x20 [ 349.353561][T10255] ? load_image+0x420/0x420 [ 349.358086][T10255] ? __might_fault+0xaa/0x120 [ 349.362775][T10255] ? __lock_acquire+0x7d80/0x7d80 [ 349.367833][T10255] should_fail_ex+0x394/0x4c0 [ 349.372534][T10255] _copy_from_user+0x2f/0xe0 [ 349.377141][T10255] ___sys_sendmsg+0x1c7/0x360 [ 349.381837][T10255] ? get_pid_task+0x20/0x1e0 [ 349.386449][T10255] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.391245][T10255] ? __lock_acquire+0x7d80/0x7d80 [ 349.396306][T10255] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.401183][T10255] ? __x64_sys_sendmsg+0x80/0x80 [ 349.406166][T10255] ? lockdep_hardirqs_on+0x98/0x150 [ 349.411408][T10255] do_syscall_64+0x55/0xb0 [ 349.415851][T10255] ? clear_bhb_loop+0x40/0x90 [ 349.420545][T10255] ? clear_bhb_loop+0x40/0x90 [ 349.425249][T10255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.431156][T10255] RIP: 0033:0x7f644299e159 [ 349.435588][T10255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.455297][T10255] RSP: 002b:00007f6440bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.463727][T10255] RAX: ffffffffffffffda RBX: 00007f6442c25fa0 RCX: 00007f644299e159 [ 349.471723][T10255] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 349.479709][T10255] RBP: 00007f6440bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.487690][T10255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.495682][T10255] R13: 00007f6442c26038 R14: 00007f6442c25fa0 R15: 00007ffddf256528 [ 349.503708][T10255] [ 349.716975][T10264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1339'. [ 349.784369][T10268] sit0: entered promiscuous mode [ 350.517274][T10293] validate_nla: 11 callbacks suppressed [ 350.517294][T10293] netlink: 'syz.0.1344': attribute type 21 has an invalid length. [ 350.537897][T10290] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1345'. OK [ 351.026803][T10308] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 351.086820][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.147274][T10308] team0: Port device batadv0 added Stopping iptables: [ 351.270777][T10317] netlink: 'syz.0.1349': attribute type 29 has an invalid length. [ 351.297688][T10317] netlink: 'syz.0.1349': attribute type 29 has an invalid length. [ 351.364805][T10319] netlink: 'syz.0.1349': attribute type 29 has an invalid length. [ 351.396585][T10317] netlink: 'syz.0.1349': attribute type 29 has an invalid length. OK Stopping system message bus: [ 351.747264][T10333] netlink: 'syz.0.1353': attribute type 10 has an invalid length. [ 351.754615][T10335] netlink: 'syz.2.1352': attribute type 29 has an invalid length. [ 351.927776][T10335] netlink: 'syz.2.1352': attribute type 29 has an invalid length. [ 351.960453][T10336] netlink: 'syz.2.1352': attribute type 29 has an invalid length. done [ 352.572427][T10353] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1358'. [ 352.577893][T10348] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1356'. [ 353.604838][T10373] delete_channel: no stack [ 354.258569][T10387] FAULT_INJECTION: forcing a failure. [ 354.258569][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 354.318557][T10387] CPU: 1 PID: 10387 Comm: syz.2.1369 Not tainted syzkaller #0 [ 354.326124][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.336232][T10387] Call Trace: [ 354.339545][T10387] [ 354.342506][T10387] dump_stack_lvl+0x18c/0x250 [ 354.347233][T10387] ? show_regs_print_info+0x20/0x20 [ 354.352619][T10387] ? load_image+0x420/0x420 [ 354.357241][T10387] ? __might_sleep+0xe0/0xe0 [ 354.361892][T10387] ? __lock_acquire+0x7d80/0x7d80 [ 354.366973][T10387] should_fail_ex+0x394/0x4c0 [ 354.371739][T10387] should_failslab+0x9/0x20 [ 354.376304][T10387] slab_pre_alloc_hook+0x59/0x300 [ 354.381384][T10387] ? kvmalloc_node+0x70/0x180 [ 354.386124][T10387] ? kvmalloc_node+0x70/0x180 [ 354.390940][T10387] __kmem_cache_alloc_node+0x53/0x250 [ 354.396382][T10387] ? kvmalloc_node+0x70/0x180 [ 354.401119][T10387] __kmalloc_node+0xa6/0x240 [ 354.405788][T10387] kvmalloc_node+0x70/0x180 [ 354.410360][T10387] page_pool_create+0x1eb/0x5c0 [ 354.415284][T10387] bpf_test_run_xdp_live+0x203/0x1b30 [ 354.420728][T10387] ? trace_call_bpf+0x5e9/0x6c0 [ 354.425638][T10387] ? 0xffffffffa00044c0 [ 354.429837][T10387] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 354.435769][T10387] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.441972][T10387] ? xdp_convert_md_to_buff+0x330/0x330 [ 354.447541][T10387] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 354.453394][T10387] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.459598][T10387] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 354.465915][T10387] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 354.471409][T10387] ? __lock_acquire+0x7d80/0x7d80 [ 354.476468][T10387] ? dev_put+0x80/0x80 [ 354.480571][T10387] ? dev_put+0x80/0x80 [ 354.484748][T10387] bpf_prog_test_run+0x31f/0x390 [ 354.489711][T10387] __sys_bpf+0x49d/0x890 [ 354.493971][T10387] ? bpf_link_show_fdinfo+0x560/0x560 [ 354.499365][T10387] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.505556][T10387] __x64_sys_bpf+0x7c/0x90 [ 354.509987][T10387] do_syscall_64+0x55/0xb0 [ 354.514425][T10387] ? clear_bhb_loop+0x40/0x90 [ 354.519148][T10387] ? clear_bhb_loop+0x40/0x90 [ 354.523861][T10387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.529792][T10387] RIP: 0033:0x7ffa6f59e159 [ 354.534225][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.554631][T10387] RSP: 002b:00007ffa70516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.563080][T10387] RAX: ffffffffffffffda RBX: 00007ffa6f825fa0 RCX: 00007ffa6f59e159 [ 354.571347][T10387] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 354.579701][T10387] RBP: 00007ffa70516090 R08: 0000000000000000 R09: 0000000000000000 [ 354.587688][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.595669][T10387] R13: 00007ffa6f826038 R14: 00007ffa6f825fa0 R15: 00007fff66650548 [ 354.603669][T10387] [ 354.783754][T10387] page_pool_create() gave up with errno -12 [ 355.414760][T10397] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1371'. Stopping klogd: OK Stopping acpid: [ 356.457696][T10427] validate_nla: 12 callbacks suppressed [ 356.457717][T10427] netlink: 'syz.3.1379': attribute type 4 has an invalid length. [ 356.531712][T10427] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1379'. [ 356.970266][T10438] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 357.002032][T10438] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 357.046633][T10439] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 357.058803][T10438] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 357.257230][T10449] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1384'. OK Stopping syslogd: stopped /sbin/syslogd (pid 5125) OK [ 360.083243][T10480] FAULT_INJECTION: forcing a failure. [ 360.083243][T10480] name fail_usercopy, interval 1, probability 0, space 0, times 0 umount: can't remount debugfs re[ 360.124110][T10480] CPU: 0 PID: 10480 Comm: syz.3.1395 Not tainted syzkaller #0 [ 360.132029][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.142138][T10480] Call Trace: [ 360.145449][T10480] [ 360.148409][T10480] dump_stack_lvl+0x18c/0x250 [ 360.153169][T10480] ? show_regs_print_info+0x20/0x20 [ 360.158412][T10480] ? load_image+0x420/0x420 [ 360.162958][T10480] ? __might_fault+0xaa/0x120 [ 360.167673][T10480] ? __lock_acquire+0x7d80/0x7d80 [ 360.172749][T10480] should_fail_ex+0x394/0x4c0 [ 360.177475][T10480] _copy_from_user+0x2f/0xe0 [ 360.182111][T10480] ___sys_sendmsg+0x1c7/0x360 [ 360.186844][T10480] ? __sys_sendmsg+0x2b0/0x2b0 [ 360.191672][T10480] ? __lock_acquire+0x7d80/0x7d80 [ 360.196763][T10480] __se_sys_sendmsg+0x1d0/0x2c0 [ 360.201655][T10480] ? __x64_sys_sendmsg+0x80/0x80 [ 360.206650][T10480] ? lockdep_hardirqs_on+0x98/0x150 [ 360.211900][T10480] do_syscall_64+0x55/0xb0 [ 360.216366][T10480] ? clear_bhb_loop+0x40/0x90 [ 360.221083][T10480] ? clear_bhb_loop+0x40/0x90 [ 360.225793][T10480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.231748][T10480] RIP: 0033:0x7f7ac819e159 [ 360.236207][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.255902][T10480] RSP: 002b:00007f7ac901a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.264362][T10480] RAX: ffffffffffffffda RBX: 00007f7ac8425fa0 RCX: 00007f7ac819e159 [ 360.272390][T10480] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 360.280393][T10480] RBP: 00007f7ac901a090 R08: 0000000000000000 R09: 0000000000000000 [ 360.288395][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.296398][T10480] R13: 00007f7ac8426038 R14: 00007f7ac8425fa0 R15: 00007ffe5a85fcf8 [ 360.304421][T10480] ad-only [ 360.531369][T10491] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1396'. [ 360.700640][T10495] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 360.717872][T10493] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1397'. [ 360.741796][T10495] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1398'. [ 362.688491][T10520] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1405'. [ 363.372112][T10515] netlink: 'syz.1.1405': attribute type 29 has an invalid length. [ 363.415606][T10515] netlink: 'syz.1.1405': attribute type 29 has an invalid length. [ 364.153807][T10530] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1409'. [ 364.157082][T10529] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1408'. [ 364.222817][T10529] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 364.485211][T10529] netlink: 'syz.0.1408': attribute type 2 has an invalid length. [ 364.987737][T10540] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1411'. [ 365.942234][T10546] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 366.435210][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.471091][T10546] bridge_slave_1: left allmulticast mode [ 366.477988][T10546] bridge_slave_1: left promiscuous mode [ 366.554769][T10558] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 366.562565][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.713739][T10546] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.179 closed by remote host. [ 368.273221][ T5777] bond0: (slave syz_tun): Releasing backup interface Sent SIGKILL to all processes Requesting system poweroff [ 368.329843][ T3464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.439323][ T3464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.525895][ T3464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.585978][ T3464] bond0: (slave netdevsim0): Releasing backup interface [ 368.595833][ T3464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.339048][T10573] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 369.352703][T10573] ACPI: PM: Preparing to enter system sleep state S5 [ 369.362860][T10573] kvm: exiting hardware virtualization [ 369.368581][T10573] reboot: Power down serialport: VM disconnected.