last executing test programs: 4.663370422s ago: executing program 3 (id=756): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x700, 0x0, 0x0, 0x2}, 0x48) 4.617773063s ago: executing program 0 (id=757): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ecff0901000000000000fea6980d7f2fd47fcf00000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000040)="7cd5df230f6451", 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x8e}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ecff0901000000000000fea6980d7f2fd47fcf00000000000000"], 0x40) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000040)="7cd5df230f6451", 0x0, 0x4}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000800)=[{0x1c}, {0x28, 0x0, 0x1, 0xefff}, {0xb1, 0x0, 0xba, 0x8007}, {0x16, 0xfc, 0x5, 0xff}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) 4.54614779s ago: executing program 3 (id=758): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x18, 0x5, 0xa, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 4.235199913s ago: executing program 0 (id=759): r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x4}, 0xa00, 0x10004, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x22000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000100ffff0080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair(0xf, 0x800, 0x6, 0x0) socketpair(0x1d, 0x3, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/272], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x2f, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x7, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000240)="1400000033000b2f1bdc0f13b67e58c316920fd2", 0x14}], 0x1}, 0x448d0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r8}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 4.234844743s ago: executing program 1 (id=760): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x10a90d, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x250a, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 4.227049535s ago: executing program 3 (id=761): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000001240)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) 4.059089494s ago: executing program 1 (id=762): r0 = socket$kcm(0x11, 0x7, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, &(0x7f0000000000)=r1, 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x102000}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x41, 0x0, 0x8f00) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a000000080050cca76938a0d6dc8248", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r1, &(0x7f0000000480)="756d7c69df151b17b597d4f0013f26c12c7a1e0bc8a02043c31df74276ccd4fd35f647cd78aeb86d32ed0e0709818eeb6c94efc3bcc38c391d32cf301838afd29e49f88dc95887b7ede153bf932d9c470e2d62f0d286d3ae4e4e9972dc931ae0f517f02942031b8220ee8439deb2eff1219e81127683e6f2f5ca983ee1ebe073e2e54f2911fb569b327900d20e8872f0db3bfd1a541cd58244cbdc85912c4a14b19b14fec3671145b73231885869b3c30cf7f63a61254f928868e31be62e0bd25ca2a5cfe649356e85ee4e23fec5030ccbb01eb41fb751b36ddd60b3e84178cd7a787b6fc17cbab98ce0279047bc72a6a77742d62d34d9", &(0x7f0000000640)=""/104}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, r9, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1ff) 3.895157512s ago: executing program 3 (id=764): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x8000000, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 3.870609798s ago: executing program 0 (id=765): r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x4}, 0xa00, 0x10004, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x22000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000100ffff0080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair(0xf, 0x800, 0x6, 0x0) socketpair(0x1d, 0x3, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/272], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x2f, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x7, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000240)="1400000033000b2f1bdc0f13b67e58c316920fd2", 0x14}], 0x1}, 0x448d0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r8}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 3.530369058s ago: executing program 2 (id=767): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xc9, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f0000000780)}, 0x10) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="09855bcd19909ac064c28191d1edc03e1064f37c5b436e2f12c0709ad347dc373322d5fdbbe3a0fc1cd79118b08cd31fe4dbb79f557ece9a54c5bd6476db8b5519f47f1f71fec86ae8df666eb1a5b4bb37d7b006678f28c6a46a63c4f9588f81301dbaaa024b0d55d7343f57cba0581248e6d3a199b6b199f0359e3db3051a5f6b6eaefb849ab8352fc803b98365d15af646c3c699ca48483504a8c8127b421c016e97222f0ed7bf9a6031178b308ce0b27a1daee014d9d7a7dabeebb02bdcbbf58405606b52de87dac442633ef693a7ad093021d2ff3beb5e70e1ae", 0xdc}, {&(0x7f0000000140)="b3786906b03ed79460a55353dff8bf052d3e62b2b3686d41067eea9db1034e8aea9191469125eb6575c0c2d07a947c9bf0ecbdf5f5ec529d5478133c76dc32bc4c7df6f69456946dcd87dd9629914664a12fb058b52dde018f2e57a0c9957241d21295242a929ec60963caf160e4a723ce28e5f5ca61dd93185e863ef37a660bb713e0f90ce5683272224f1b0c4e12b3e1693568b386fef042d23a0bde0939fdaa2eab07d10f122cc78feb9a111f325d15119957860ee57542d16088230c0a868851", 0xc2}, {&(0x7f0000000240)="c739ba525d8ee9ffb51b4eafde538ee49b2a26317e93444a72db1c28d0999a283b5ae5a4bab337894bc4e256861452425fae3b58eed126a15fce3c2ca6976945006998853324b28729c9eb457ec80623ec841c9b9ce74c3150fc887610affa0c9d091dc694c697f62012859fe591c1bc47699ea8b35611dbfbca31f88de878bce124668504d623661b7b6fa87d92e092e69e13d9b3267ffeffd0fcf57ccef74ff38f3e78546bf217f8d0a47bba3787ce856176c33c3dc95a5d38832d5483b30f5afb9ef7dbdf1710e13ba51b1b065d55505497453392e9ee542b49e6043f32239727fa0c1a6453bb6add58e186e54a5c50deac808c4d4f10ecab", 0xfa}, {&(0x7f0000000340)="90b9c985d7505d2138ce", 0xa}, {&(0x7f0000000440)="c5be5f01226489f0005ebdc053e257449d7ecc98fe912fa880fd65beea0febcbed650fa33b34dfedf3d6da58f0ea8f66234dc43410d7dd18e46a21f18ba90630293373695e020f49b2ce89dcecc5036be5edb316eb3531c444b7fbcdffd762dddc3af12d5dda2177e0c4a053b24721fdce7b24eaf12c0e25f1796cf6ba4fd28f71de01be0a4bbb1d0fc5f6e584e628de2ee81184421e697affb92d060578bd04fe3b582e8160bc3495bd62f11cf56683bb350d00c9adb9ead637850db85dd6f8", 0xc0}, {&(0x7f0000000500)="4a789f62f84f160a1855f3439e872212129bb4e9be211e22cabc7b35b8cc79965df4600298b72964bb2de92eabaf6b76aa0fddfa16e8104a7ead33b7107aaf5cff5a1aa618efaee4602b49a0d478d89f590d07ccbb6323aed9cda2f40a2606b3354b858f1feb5338709cf449e8751c1016754b460bb482c17469101dec7c34e71cbb1fbc525ab6cbaa1598b48db97a4f7063253bc99c0f5d73dba2e1511bc44142fa865f57f5c34b3f1872b27e05acd48c569934061b9a78d7dcfe0c03535490762d51db497edf4b9398191e0fbc18756a030bb454a343e9a96dadaf1424adb017a72ea386159ca17938", 0xea}, {&(0x7f0000000600)="7b0eea523a1f69dafa2a83f9e83d08ec22a0c6cfbc101658938a8d96e8b42808f1b65963065ac4c97e54ec2e7f716fb24605b4f3a48153fd97d544a2c8bc4b32ae48478eace7", 0x46}], 0x7, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x4004895) 3.137259661s ago: executing program 1 (id=768): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffdf, 0x2}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18f5000007000000000000000180000091118d00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffffffd, 0xe12e, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1fc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x8000}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)={[{0x0, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}, {0x0, 'devices'}]}, 0x2b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.452476488s ago: executing program 0 (id=769): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0x2, 0x2, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3ff}, 0x40, 0xfff, 0x81, 0x2, 0x10001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x120000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffff0000000300000000000201a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c154bb444c6d291", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 1.163887835s ago: executing program 2 (id=770): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x10a90d, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x250a, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 1.117094117s ago: executing program 3 (id=771): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000004000000bb7f1ad04d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10faf3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, &(0x7f00000019c0)=""/173, 0x0, 0xad, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) close(r3) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) 991.248616ms ago: executing program 1 (id=772): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000c40), 0x4) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xb, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 986.597697ms ago: executing program 2 (id=773): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, 0x0, 0x4a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x805) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) 827.738075ms ago: executing program 2 (id=774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}]}) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x56) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) (fail_nth: 8) 619.198694ms ago: executing program 1 (id=775): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000780)='i', 0x1}], 0x1}, 0x54) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d002f847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 618.879004ms ago: executing program 2 (id=776): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x10a90d, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x250a, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 498.907222ms ago: executing program 0 (id=777): r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x4}, 0xa00, 0x10004, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x22000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000100ffff0080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair(0xf, 0x800, 0x6, 0x0) socketpair(0x1d, 0x3, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/272], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x2f, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x7, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r8}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 336.63493ms ago: executing program 2 (id=778): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x22, 0x3a0, 0x5, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r8, 0x0, 0x500}, 0x38) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB='<'], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES32=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'veth0_to_batadv\x00', @multicast}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 170.599609ms ago: executing program 1 (id=779): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x8000000, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 78.182501ms ago: executing program 0 (id=780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000040000000000000099aa000018150000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000040000000d0000000100e3ff7f8e000048f2366dc65c4daa0b70137c85eab2c7b3eafc5ede676f525a4b39e9f74d07b259243f5412bc96e86009da222ef2a7c10a49d442b96f4aa84a6b9942f2", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/25, @ANYRES64=r0], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\a\x00'/18, @ANYRES32, @ANYBLOB="03000000020000000500000000000000f03800000000000000"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000cca69d06f8f946cf10c03b2fb0800ec0ff27", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000007f840400f374000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000407e090001000100"], &(0x7f0000000640)='syzkaller\x00', 0xf, 0x90, &(0x7f0000000680)=""/144, 0x41100, 0x35, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x1, 0x5, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b40), &(0x7f0000000b80)=[{0x5, 0x1, 0x4, 0xc}], 0x10, 0x400}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pK \x00'}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800c86341be7e31f4699c4a2e"], 0x0, 0x26, 0x0, 0x4}, 0x28) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0x0, 0x0}, 0x10) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r9) close(r8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x20, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000ff552fba888400406e0000000000001d7a71afba044f59916a7091cedb617d7ccf2e0c93d40c2eb950a22dcb18a846308380ef82a04cdcb91fc8a74e20b6128965bd4ac3c9f594d1dfd8c2789de2769757458f8d90b0fdceb4f43149a4ccf821bdb3367c1f134fd314fc154a1f4238ee7b457373c4505935dfe6bb59"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000580)='z\ad^\xe2\xcf\x95\x8c\x9cN\a\xc6\xe9c/\x9fMq\xb2\xe7\x98\x9d\xae6\x81\xe9\xed=\f\x1e/b\x95\xff.HLm~\xa2\x0f 1 [ 76.380806][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.406635][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.414766][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.422531][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.430111][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.484892][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.493372][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.501499][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.510377][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.518421][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.525854][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.566087][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.574339][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.582898][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.592997][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.601852][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.609352][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.618229][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.626805][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.636530][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.647044][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.654414][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.662176][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.067300][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.080693][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.130600][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.211782][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 77.340754][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.349350][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.356794][ T5782] bridge_slave_0: entered allmulticast mode [ 77.363633][ T5782] bridge_slave_0: entered promiscuous mode [ 77.372706][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.379933][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.387370][ T5773] bridge_slave_0: entered allmulticast mode [ 77.394115][ T5773] bridge_slave_0: entered promiscuous mode [ 77.404666][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.411919][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.419401][ T5773] bridge_slave_1: entered allmulticast mode [ 77.426174][ T5773] bridge_slave_1: entered promiscuous mode [ 77.458158][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.465392][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.472672][ T5782] bridge_slave_1: entered allmulticast mode [ 77.479556][ T5782] bridge_slave_1: entered promiscuous mode [ 77.514760][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.522629][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.529853][ T5777] bridge_slave_0: entered allmulticast mode [ 77.536728][ T5777] bridge_slave_0: entered promiscuous mode [ 77.544341][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.551633][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.558938][ T5777] bridge_slave_1: entered allmulticast mode [ 77.565689][ T5777] bridge_slave_1: entered promiscuous mode [ 77.597848][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.608210][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.615338][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.623163][ T5784] bridge_slave_0: entered allmulticast mode [ 77.631330][ T5784] bridge_slave_0: entered promiscuous mode [ 77.640459][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.647876][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.655030][ T5784] bridge_slave_1: entered allmulticast mode [ 77.662026][ T5784] bridge_slave_1: entered promiscuous mode [ 77.691405][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.704686][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.717006][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.754684][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.768204][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.799561][ T5773] team0: Port device team_slave_0 added [ 77.817293][ T5782] team0: Port device team_slave_0 added [ 77.833556][ T5773] team0: Port device team_slave_1 added [ 77.842015][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.855051][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.865972][ T5782] team0: Port device team_slave_1 added [ 77.922745][ T5777] team0: Port device team_slave_0 added [ 77.930102][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.937444][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.963879][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.995755][ T5777] team0: Port device team_slave_1 added [ 78.011928][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.019239][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.045336][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.064129][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.071236][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.097598][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.111611][ T5784] team0: Port device team_slave_0 added [ 78.121150][ T5784] team0: Port device team_slave_1 added [ 78.151565][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.158906][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.185145][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.203624][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.212503][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.238917][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.272525][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.279616][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.305948][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.348544][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.355545][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.381747][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.395588][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.402808][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.428837][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.464499][ T5782] hsr_slave_0: entered promiscuous mode [ 78.471751][ T5782] hsr_slave_1: entered promiscuous mode [ 78.532743][ T5776] Bluetooth: hci0: command tx timeout [ 78.534377][ T5777] hsr_slave_0: entered promiscuous mode [ 78.544731][ T5777] hsr_slave_1: entered promiscuous mode [ 78.551835][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.559761][ T5777] Cannot create hsr debugfs directory [ 78.596521][ T5776] Bluetooth: hci1: command tx timeout [ 78.625608][ T5784] hsr_slave_0: entered promiscuous mode [ 78.632364][ T5784] hsr_slave_1: entered promiscuous mode [ 78.639037][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.646774][ T5784] Cannot create hsr debugfs directory [ 78.673709][ T5773] hsr_slave_0: entered promiscuous mode [ 78.679423][ T5776] Bluetooth: hci2: command tx timeout [ 78.685031][ T5776] Bluetooth: hci3: command tx timeout [ 78.691479][ T5773] hsr_slave_1: entered promiscuous mode [ 78.698567][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.706148][ T5773] Cannot create hsr debugfs directory [ 79.073141][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.091891][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.104155][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.114718][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.191212][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.214938][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.225129][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.243926][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.329982][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.348701][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.361261][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.371838][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.456017][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.475826][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.491844][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.509159][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.519296][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.569603][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.592782][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.600159][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.641401][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.648673][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.715202][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.793568][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.824033][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.841399][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.848613][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.881440][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.888642][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.915345][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.943580][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.973726][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.980936][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.004692][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.011895][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.069837][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.103920][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.111510][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.150308][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.157573][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.300069][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.482160][ T5782] veth0_vlan: entered promiscuous mode [ 80.521176][ T5782] veth1_vlan: entered promiscuous mode [ 80.581218][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.597363][ T5776] Bluetooth: hci0: command tx timeout [ 80.633055][ T5782] veth0_macvtap: entered promiscuous mode [ 80.674441][ T5782] veth1_macvtap: entered promiscuous mode [ 80.686698][ T5776] Bluetooth: hci1: command tx timeout [ 80.757163][ T5776] Bluetooth: hci3: command tx timeout [ 80.757505][ T51] Bluetooth: hci2: command tx timeout [ 80.780779][ T5777] veth0_vlan: entered promiscuous mode [ 80.807677][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.820790][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.833760][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.854391][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.864186][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877566][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.886634][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912065][ T5777] veth1_vlan: entered promiscuous mode [ 80.960190][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.073653][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.094008][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.104629][ T5777] veth0_macvtap: entered promiscuous mode [ 81.133992][ T5777] veth1_macvtap: entered promiscuous mode [ 81.143357][ T5773] veth0_vlan: entered promiscuous mode [ 81.186738][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.194630][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.195833][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.215685][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.228738][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.236147][ T5784] veth0_vlan: entered promiscuous mode [ 81.258949][ T5773] veth1_vlan: entered promiscuous mode [ 81.277470][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.295568][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.311929][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.332388][ T5784] veth1_vlan: entered promiscuous mode [ 81.360456][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373274][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382530][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.392031][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.489890][ T5773] veth0_macvtap: entered promiscuous mode [ 81.526065][ T5784] veth0_macvtap: entered promiscuous mode [ 81.545255][ T5773] veth1_macvtap: entered promiscuous mode [ 81.581871][ T5784] veth1_macvtap: entered promiscuous mode [ 81.629149][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.651545][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.661979][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.672800][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.685219][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.743589][ T5834] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 81.752489][ T5834] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.770667][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.779213][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.830364][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.837871][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.846705][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854198][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.874204][ T5834] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.899224][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.909967][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.921331][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.932833][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.944833][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.967548][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.978943][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.992177][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.004207][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.017657][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.030099][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.043827][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.062658][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.075742][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.084673][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.102054][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.106788][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.137959][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.152969][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.172203][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.182121][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.192724][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.204091][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.215088][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.226912][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.260710][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270138][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.283065][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.292025][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.296319][ C0] hrtimer: interrupt took 46170 ns [ 82.389401][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.407404][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.422295][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.428848][ T5837] netlink: 'syz.0.5': attribute type 10 has an invalid length. [ 82.442252][ T5837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5'. [ 82.447057][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.452992][ T5837] dummy0: entered promiscuous mode [ 82.470211][ T5837] dummy0: entered allmulticast mode [ 82.480250][ T5837] bridge0: port 3(dummy0) entered blocking state [ 82.488072][ T5837] bridge0: port 3(dummy0) entered disabled state [ 82.505247][ T5837] bridge0: port 3(dummy0) entered blocking state [ 82.511997][ T5837] bridge0: port 3(dummy0) entered forwarding state [ 82.604730][ T5839] syzkaller0: entered promiscuous mode [ 82.610547][ T5839] syzkaller0: entered allmulticast mode [ 82.676598][ T51] Bluetooth: hci0: command tx timeout [ 82.710800][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.720718][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.767060][ T51] Bluetooth: hci1: command tx timeout [ 82.835479][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.843564][ T51] Bluetooth: hci2: command tx timeout [ 82.846744][ T51] Bluetooth: hci3: command tx timeout [ 82.855385][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.890047][ T5842] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.959530][ T5841] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 82.973691][ T5841] netlink: 135040 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.329298][ T5844] Zero length message leads to an empty skb [ 84.769465][ T51] Bluetooth: hci0: command tx timeout [ 84.840603][ T51] Bluetooth: hci1: command tx timeout [ 84.919744][ T5776] Bluetooth: hci2: command tx timeout [ 84.923871][ T51] Bluetooth: hci3: command tx timeout [ 85.372294][ T5859] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 85.420631][ T5859] team0: Device wg1 is of different type [ 85.434708][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 85.456861][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.465078][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.777095][ T5870] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.968732][ T5870] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 86.282425][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 86.443906][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 86.800905][ T5878] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 86.808943][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.818541][ T5878] dummy0: entered promiscuous mode [ 86.823875][ T5878] dummy0: entered allmulticast mode [ 86.831360][ T5878] bridge0: port 3(dummy0) entered blocking state [ 86.840863][ T5878] bridge0: port 3(dummy0) entered disabled state [ 86.849761][ T5878] bridge0: port 3(dummy0) entered blocking state [ 86.856341][ T5878] bridge0: port 3(dummy0) entered forwarding state [ 86.951324][ T5880] syzkaller0: entered promiscuous mode [ 86.983443][ T5880] syzkaller0: entered allmulticast mode [ 91.653666][ T5888] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 91.661488][ T5888] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14'. [ 91.672226][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.680178][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.715572][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.722828][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.730444][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.737710][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.751120][ T5888] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.215402][ T174] cfg80211: failed to load regulatory.db [ 92.574609][ T5903] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 92.591195][ T5903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'. [ 92.612891][ T5903] dummy0: entered promiscuous mode [ 92.623889][ T5903] dummy0: entered allmulticast mode [ 92.648820][ T5903] bridge0: port 3(dummy0) entered blocking state [ 92.668446][ T5903] bridge0: port 3(dummy0) entered disabled state [ 92.801449][ T5903] bridge0: port 3(dummy0) entered blocking state [ 92.809186][ T5903] bridge0: port 3(dummy0) entered forwarding state [ 93.024140][ T5908] syzkaller0: entered promiscuous mode [ 93.036522][ T5908] syzkaller0: entered allmulticast mode [ 93.094074][ T5906] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 93.119303][ T5906] netlink: 2 bytes leftover after parsing attributes in process `syz.1.20'. [ 93.154103][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.168684][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.342060][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.350653][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.362272][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.371122][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.491925][ T5906] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.646904][ T5906] syz.1.20 (5906) used greatest stack depth: 19816 bytes left [ 93.790489][ T51] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 94.881221][ T5924] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 94.896233][ T5924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 95.024079][ T5920] syzkaller0: entered promiscuous mode [ 95.046337][ T5920] syzkaller0: entered allmulticast mode [ 95.800184][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 97.171615][ T5938] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 97.179624][ T5938] netlink: 2 bytes leftover after parsing attributes in process `syz.3.26'. [ 97.190592][ T5938] bridge0: port 3(dummy0) entered disabled state [ 97.197121][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.205105][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.228589][ T5938] bridge0: port 3(dummy0) entered blocking state [ 97.235141][ T5938] bridge0: port 3(dummy0) entered forwarding state [ 97.242046][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.249286][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.256857][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.264089][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.285034][ T5938] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 97.355540][ T5943] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 97.381283][ T5943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28'. [ 97.426433][ T5943] dummy0: entered promiscuous mode [ 97.452122][ T5943] dummy0: entered allmulticast mode [ 97.482736][ T5943] bridge0: port 3(dummy0) entered blocking state [ 97.497229][ T5943] bridge0: port 3(dummy0) entered disabled state [ 97.521641][ T5943] bridge0: port 3(dummy0) entered blocking state [ 97.528206][ T5943] bridge0: port 3(dummy0) entered forwarding state [ 98.340311][ T5966] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 98.350353][ T5966] netlink: 2 bytes leftover after parsing attributes in process `syz.1.32'. [ 98.365911][ T5966] bridge0: port 3(dummy0) entered disabled state [ 98.374912][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.384382][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.587139][ T5776] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 98.950266][ T5984] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 98.969311][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38'. [ 98.983654][ T5986] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 98.995216][ T5986] netlink: 2 bytes leftover after parsing attributes in process `syz.0.37'. [ 99.011143][ T5986] bridge0: port 3(dummy0) entered disabled state [ 99.020191][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.033357][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.131790][ T5984] bridge0: port 3(dummy0) entered disabled state [ 99.153556][ T5984] bridge_slave_1: left allmulticast mode [ 99.164159][ T5984] bridge_slave_1: left promiscuous mode [ 99.185609][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.325511][ T5984] bridge_slave_0: left allmulticast mode [ 99.336336][ T5984] bridge_slave_0: left promiscuous mode [ 99.358203][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.005364][ T5984] bond0: (slave bridge0): Releasing backup interface [ 100.105675][ T5990] syzkaller0: entered promiscuous mode [ 100.111275][ T5990] syzkaller0: entered allmulticast mode [ 100.204206][ T5999] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 100.212439][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41'. [ 100.596745][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 101.984932][ T5776] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 102.425990][ T6025] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 102.456727][ T6025] netlink: 2 bytes leftover after parsing attributes in process `syz.3.46'. [ 102.471311][ T6025] bridge0: port 3(dummy0) entered disabled state [ 102.480025][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.490691][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.009425][ T6039] netlink: 'syz.0.52': attribute type 10 has an invalid length. [ 103.026657][ T6039] netlink: 2 bytes leftover after parsing attributes in process `syz.0.52'. [ 103.081764][ T6041] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 103.091035][ T6041] netlink: 2 bytes leftover after parsing attributes in process `syz.3.51'. [ 103.537606][ T6048] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 104.044471][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 104.045932][ T51] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 104.052012][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 104.091331][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 104.192355][ T6049] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 104.201806][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 104.257258][ T6046] bridge0: port 3(dummy0) entered disabled state [ 106.229167][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 106.255049][ T6046] bridge_slave_1: left allmulticast mode [ 106.296870][ T6046] bridge_slave_1: left promiscuous mode [ 106.302721][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.313623][ T6046] bridge_slave_0: left allmulticast mode [ 106.324304][ T6046] bridge_slave_0: left promiscuous mode [ 106.338313][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.426779][ T6046] bond0: (slave bridge0): Releasing backup interface [ 106.504304][ T6054] syzkaller0: entered promiscuous mode [ 106.510860][ T6054] syzkaller0: entered allmulticast mode [ 111.468969][ T6065] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 111.478143][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 111.491772][ T6066] bridge0: port 3(dummy0) entered disabled state [ 111.502107][ T6066] bridge_slave_1: left allmulticast mode [ 111.509065][ T6066] bridge_slave_1: left promiscuous mode [ 111.514948][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.525757][ T6066] bridge_slave_0: left allmulticast mode [ 111.531686][ T6066] bridge_slave_0: left promiscuous mode [ 111.538672][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.604804][ T6066] bond0: (slave bridge0): Releasing backup interface [ 111.661516][ T6068] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 111.669327][ T6068] netlink: 2 bytes leftover after parsing attributes in process `syz.2.60'. [ 111.678793][ T6068] bridge0: port 3(dummy0) entered disabled state [ 111.685373][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.692673][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.743841][ T6089] netlink: 'syz.0.73': attribute type 10 has an invalid length. [ 112.753036][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'. [ 112.768687][ T6089] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 112.792146][ T6093] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 112.810956][ T6093] netlink: 2 bytes leftover after parsing attributes in process `syz.1.65'. [ 113.735015][ T6089] syzkaller0: entered promiscuous mode [ 113.806590][ T6089] syzkaller0: entered allmulticast mode [ 114.096408][ T6106] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 114.170137][ T6106] team0 (unregistering): Port device team_slave_0 removed [ 114.187141][ T6106] team0 (unregistering): Port device team_slave_1 removed [ 115.834685][ T6102] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 115.842533][ T6102] netlink: 2 bytes leftover after parsing attributes in process `syz.1.67'. [ 116.158619][ T6120] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 116.168242][ T6120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.72'. [ 116.185625][ T6120] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 116.384796][ T6120] syzkaller0: entered promiscuous mode [ 116.391147][ T6120] syzkaller0: entered allmulticast mode [ 118.371166][ T6138] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 118.379491][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 118.389004][ T6138] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 118.465734][ T6142] syzkaller0: entered promiscuous mode [ 118.471496][ T6142] syzkaller0: entered allmulticast mode [ 119.335943][ T6161] delete_channel: no stack [ 121.665400][ T6185] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 121.673454][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.91'. [ 121.785534][ T6185] syzkaller0: entered promiscuous mode [ 121.791475][ T6185] syzkaller0: entered allmulticast mode [ 122.031520][ T6188] FAULT_INJECTION: forcing a failure. [ 122.031520][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.054519][ T6188] CPU: 1 PID: 6188 Comm: syz.1.92 Not tainted syzkaller #0 [ 122.061787][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.071888][ T6188] Call Trace: [ 122.075185][ T6188] [ 122.078149][ T6188] dump_stack_lvl+0x18c/0x250 [ 122.082869][ T6188] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.089050][ T6188] ? show_regs_print_info+0x20/0x20 [ 122.094290][ T6188] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.100489][ T6188] should_fail_ex+0x394/0x4c0 [ 122.105190][ T6188] _copy_from_user+0x2f/0xe0 [ 122.109795][ T6188] bpf_ctx_init+0x127/0x190 [ 122.114313][ T6188] bpf_prog_test_run_skb+0x2c3/0x18f0 [ 122.119702][ T6188] ? __fget_files+0x28/0x460 [ 122.124312][ T6188] ? __fget_files+0x3fc/0x460 [ 122.129017][ T6188] ? cpu_online+0x60/0x60 [ 122.133360][ T6188] bpf_prog_test_run+0x31f/0x390 [ 122.138311][ T6188] __sys_bpf+0x49d/0x890 [ 122.142567][ T6188] ? read_tsc+0x9/0x20 [ 122.146652][ T6188] ? bpf_link_show_fdinfo+0x560/0x560 [ 122.152050][ T6188] ? lock_chain_count+0x20/0x20 [ 122.156908][ T6188] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 122.162902][ T6188] __x64_sys_bpf+0x7c/0x90 [ 122.167329][ T6188] do_syscall_64+0x55/0xb0 [ 122.171759][ T6188] ? clear_bhb_loop+0x40/0x90 [ 122.176445][ T6188] ? clear_bhb_loop+0x40/0x90 [ 122.181133][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.187035][ T6188] RIP: 0033:0x7f4039b9e159 [ 122.191461][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.211079][ T6188] RSP: 002b:00007f403a997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.219505][ T6188] RAX: ffffffffffffffda RBX: 00007f4039e25fa0 RCX: 00007f4039b9e159 [ 122.227507][ T6188] RDX: 000000000000003d RSI: 0000200000002c00 RDI: 000000000000000a [ 122.235485][ T6188] RBP: 00007f403a997090 R08: 0000000000000000 R09: 0000000000000000 [ 122.243461][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.251439][ T6188] R13: 00007f4039e26038 R14: 00007f4039e25fa0 R15: 00007ffc4f41edf8 [ 122.259433][ T6188] [ 124.696020][ T6224] netlink: set zone limit has 8 unknown bytes [ 124.768959][ T6222] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 124.793980][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'. [ 124.836095][ T6222] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 124.847123][ T6227] netlink: set zone limit has 8 unknown bytes [ 124.933931][ T6228] syzkaller0: entered promiscuous mode [ 124.945816][ T6228] syzkaller0: entered allmulticast mode [ 125.831714][ T6230] delete_channel: no stack [ 126.162782][ T6242] FAULT_INJECTION: forcing a failure. [ 126.162782][ T6242] name failslab, interval 1, probability 0, space 0, times 1 [ 126.208635][ T6242] CPU: 1 PID: 6242 Comm: syz.2.112 Not tainted syzkaller #0 [ 126.216006][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.226104][ T6242] Call Trace: [ 126.229413][ T6242] [ 126.232368][ T6242] dump_stack_lvl+0x18c/0x250 [ 126.237098][ T6242] ? show_regs_print_info+0x20/0x20 [ 126.242342][ T6242] ? load_image+0x420/0x420 [ 126.246873][ T6242] ? __might_sleep+0xe0/0xe0 [ 126.251466][ T6242] ? __lock_acquire+0x7d80/0x7d80 [ 126.256492][ T6242] should_fail_ex+0x394/0x4c0 [ 126.261189][ T6242] should_failslab+0x9/0x20 [ 126.265725][ T6242] slab_pre_alloc_hook+0x59/0x300 [ 126.270828][ T6242] ? __lock_acquire+0x7d80/0x7d80 [ 126.275881][ T6242] kmem_cache_alloc_node+0x5e/0x310 [ 126.281109][ T6242] ? __alloc_skb+0x103/0x2c0 [ 126.285724][ T6242] __alloc_skb+0x103/0x2c0 [ 126.290189][ T6242] netlink_sendmsg+0x66a/0xbf0 [ 126.294975][ T6242] ? netlink_getsockopt+0x590/0x590 [ 126.300193][ T6242] ? apparmor_socket_sendmsg+0x8e/0x330 [ 126.305761][ T6242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 126.311067][ T6242] ? security_socket_sendmsg+0x80/0xa0 [ 126.316539][ T6242] ? netlink_getsockopt+0x590/0x590 [ 126.321754][ T6242] ____sys_sendmsg+0x61b/0x980 [ 126.326539][ T6242] ? __asan_memset+0x22/0x40 [ 126.331146][ T6242] ? __sys_sendmsg_sock+0x30/0x30 [ 126.336180][ T6242] ? __import_iovec+0x5f2/0x850 [ 126.341053][ T6242] ? import_iovec+0x73/0xa0 [ 126.345573][ T6242] ___sys_sendmsg+0x2a6/0x360 [ 126.350263][ T6242] ? get_pid_task+0x20/0x1e0 [ 126.354872][ T6242] ? __sys_sendmsg+0x2b0/0x2b0 [ 126.359663][ T6242] ? __lock_acquire+0x7d80/0x7d80 [ 126.364720][ T6242] __se_sys_sendmsg+0x1d0/0x2c0 [ 126.369586][ T6242] ? __x64_sys_sendmsg+0x80/0x80 [ 126.374550][ T6242] ? lockdep_hardirqs_on+0x98/0x150 [ 126.379761][ T6242] do_syscall_64+0x55/0xb0 [ 126.384233][ T6242] ? clear_bhb_loop+0x40/0x90 [ 126.388930][ T6242] ? clear_bhb_loop+0x40/0x90 [ 126.393620][ T6242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.399530][ T6242] RIP: 0033:0x7f5949d9e159 [ 126.403959][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.423578][ T6242] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.432004][ T6242] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 126.439987][ T6242] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 126.447967][ T6242] RBP: 00007f594ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 126.455971][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.463964][ T6242] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 126.471969][ T6242] [ 127.703722][ T6245] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 127.711717][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 127.722932][ T6245] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.826362][ T6247] syzkaller0: entered promiscuous mode [ 127.832133][ T6247] syzkaller0: entered allmulticast mode [ 129.846117][ T6255] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 129.854049][ T6255] netlink: 'syz.2.115': attribute type 8 has an invalid length. [ 129.862234][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.115'. [ 129.874096][ T6259] FAULT_INJECTION: forcing a failure. [ 129.874096][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.906529][ T6259] CPU: 0 PID: 6259 Comm: syz.3.117 Not tainted syzkaller #0 [ 129.913886][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.923957][ T6259] Call Trace: [ 129.927257][ T6259] [ 129.930197][ T6259] dump_stack_lvl+0x18c/0x250 [ 129.934903][ T6259] ? show_regs_print_info+0x20/0x20 [ 129.940117][ T6259] ? load_image+0x420/0x420 [ 129.944639][ T6259] ? __might_fault+0xaa/0x120 [ 129.949328][ T6259] ? __lock_acquire+0x7d80/0x7d80 [ 129.954369][ T6259] should_fail_ex+0x394/0x4c0 [ 129.959073][ T6259] _copy_to_user+0x2f/0xa0 [ 129.963530][ T6259] ip_tunnel_siocdevprivate+0x162/0x1f0 [ 129.969116][ T6259] ? ip_tunnel_update+0xae0/0xae0 [ 129.974170][ T6259] ? __mutex_lock+0x919/0xc80 [ 129.978856][ T6259] ? __lock_acquire+0x7d80/0x7d80 [ 129.983897][ T6259] ? do_raw_spin_lock+0x11f/0x2b0 [ 129.988936][ T6259] ipip6_tunnel_siocdevprivate+0x362/0x16e0 [ 129.994847][ T6259] ? do_raw_spin_unlock+0x121/0x230 [ 130.000078][ T6259] ? sit_tunnel_xmit+0x2390/0x2390 [ 130.005205][ T6259] ? __mutex_lock+0x923/0xc80 [ 130.009902][ T6259] ? __mutex_lock+0x4d2/0xc80 [ 130.014591][ T6259] ? dev_ioctl+0x83c/0x1140 [ 130.019108][ T6259] ? mutex_lock_nested+0x20/0x20 [ 130.024055][ T6259] ? full_name_hash+0x92/0xe0 [ 130.028751][ T6259] ? dev_ifsioc+0x957/0xc40 [ 130.033266][ T6259] dev_ioctl+0x84c/0x1140 [ 130.037611][ T6259] sock_ioctl+0x74c/0x7e0 [ 130.041961][ T6259] ? sock_poll+0x3e0/0x3e0 [ 130.046410][ T6259] ? bpf_lsm_file_ioctl+0x9/0x10 [ 130.051370][ T6259] ? security_file_ioctl+0x80/0xa0 [ 130.056496][ T6259] ? sock_poll+0x3e0/0x3e0 [ 130.060923][ T6259] __se_sys_ioctl+0xfd/0x170 [ 130.065530][ T6259] do_syscall_64+0x55/0xb0 [ 130.069958][ T6259] ? clear_bhb_loop+0x40/0x90 [ 130.074651][ T6259] ? clear_bhb_loop+0x40/0x90 [ 130.079343][ T6259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.085251][ T6259] RIP: 0033:0x7ffb02f9e159 [ 130.089678][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.109294][ T6259] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.117724][ T6259] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 130.125707][ T6259] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 130.133686][ T6259] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.141667][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.149646][ T6259] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 130.157643][ T6259] [ 130.465840][ T6265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.119'. [ 130.508467][ T6265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.548487][ T6267] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.120'. [ 130.726461][ T6267] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 130.734807][ T6267] openvswitch: netlink: Message has 1 unknown bytes. [ 131.289230][ T6274] delete_channel: no stack [ 131.317132][ T6278] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 131.380623][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 131.494380][ T6278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 131.910618][ T6287] raw_sendmsg: syz.0.125 forgot to set AF_INET. Fix it! [ 132.021741][ T6276] syzkaller0: entered promiscuous mode [ 132.099491][ T6292] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 132.106142][ T6276] syzkaller0: entered allmulticast mode [ 132.211229][ T6287] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 132.287318][ T6287] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 132.307191][ T6287] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.125'. [ 133.164267][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.176077][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.234338][ T6291] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 134.242154][ T6291] netlink: 'syz.0.125': attribute type 4 has an invalid length. [ 134.250290][ T6291] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.125'. [ 134.724982][ T6314] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.132'. [ 134.749828][ T6314] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 134.766038][ T6314] openvswitch: netlink: Message has 1 unknown bytes. [ 135.061625][ T6334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.166118][ T6337] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.175740][ T6337] netlink: 'syz.2.141': attribute type 6 has an invalid length. [ 135.195192][ T6337] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.141'. [ 135.567981][ T6343] FAULT_INJECTION: forcing a failure. [ 135.567981][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 135.611886][ T6343] CPU: 0 PID: 6343 Comm: syz.1.143 Not tainted syzkaller #0 [ 135.619259][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.629351][ T6343] Call Trace: [ 135.632667][ T6343] [ 135.635634][ T6343] dump_stack_lvl+0x18c/0x250 [ 135.640365][ T6343] ? show_regs_print_info+0x20/0x20 [ 135.645618][ T6343] ? load_image+0x420/0x420 [ 135.650167][ T6343] ? __might_sleep+0xe0/0xe0 [ 135.654802][ T6343] ? __lock_acquire+0x7d80/0x7d80 [ 135.659874][ T6343] should_fail_ex+0x394/0x4c0 [ 135.664602][ T6343] should_failslab+0x9/0x20 [ 135.669153][ T6343] slab_pre_alloc_hook+0x59/0x300 [ 135.674227][ T6343] ? __get_vm_area_node+0x125/0x370 [ 135.679475][ T6343] __kmem_cache_alloc_node+0x53/0x250 [ 135.684901][ T6343] ? __get_vm_area_node+0x125/0x370 [ 135.690150][ T6343] kmalloc_node_trace+0x26/0xe0 [ 135.695054][ T6343] __get_vm_area_node+0x125/0x370 [ 135.700134][ T6343] __vmalloc_node_range+0x36f/0x1320 [ 135.705458][ T6343] ? netlink_sendmsg+0x602/0xbf0 [ 135.710438][ T6343] ? netlink_insert+0x1094/0x1390 [ 135.715515][ T6343] ? netlink_insert+0x2ba/0x1390 [ 135.720507][ T6343] ? free_vm_area+0x50/0x50 [ 135.725063][ T6343] ? netlink_sendmsg+0x602/0xbf0 [ 135.730042][ T6343] vmalloc+0x79/0x90 [ 135.733979][ T6343] ? netlink_sendmsg+0x602/0xbf0 [ 135.738959][ T6343] netlink_sendmsg+0x602/0xbf0 [ 135.743768][ T6343] ? netlink_getsockopt+0x590/0x590 [ 135.749012][ T6343] ? apparmor_socket_sendmsg+0x8e/0x330 [ 135.754604][ T6343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.759933][ T6343] ? security_socket_sendmsg+0x80/0xa0 [ 135.765431][ T6343] ? netlink_getsockopt+0x590/0x590 [ 135.770655][ T6343] ____sys_sendmsg+0x61b/0x980 [ 135.775446][ T6343] ? __asan_memset+0x22/0x40 [ 135.780059][ T6343] ? __sys_sendmsg_sock+0x30/0x30 [ 135.785099][ T6343] ? __import_iovec+0x5f2/0x850 [ 135.789972][ T6343] ? import_iovec+0x73/0xa0 [ 135.794491][ T6343] ___sys_sendmsg+0x2a6/0x360 [ 135.799179][ T6343] ? get_pid_task+0x20/0x1e0 [ 135.803785][ T6343] ? __sys_sendmsg+0x2b0/0x2b0 [ 135.808576][ T6343] ? __lock_acquire+0x7d80/0x7d80 [ 135.813633][ T6343] __se_sys_sendmsg+0x1d0/0x2c0 [ 135.818493][ T6343] ? perf_trace_preemptirq_template+0x269/0x330 [ 135.824748][ T6343] ? __x64_sys_sendmsg+0x80/0x80 [ 135.829711][ T6343] ? lockdep_hardirqs_on+0x98/0x150 [ 135.834922][ T6343] do_syscall_64+0x55/0xb0 [ 135.839353][ T6343] ? clear_bhb_loop+0x40/0x90 [ 135.844048][ T6343] ? clear_bhb_loop+0x40/0x90 [ 135.848741][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.854643][ T6343] RIP: 0033:0x7f4039b9e159 [ 135.859068][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.878686][ T6343] RSP: 002b:00007f403a997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.887112][ T6343] RAX: ffffffffffffffda RBX: 00007f4039e25fa0 RCX: 00007f4039b9e159 [ 135.895095][ T6343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 135.903073][ T6343] RBP: 00007f403a997090 R08: 0000000000000000 R09: 0000000000000000 [ 135.911055][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.919034][ T6343] R13: 00007f4039e26038 R14: 00007f4039e25fa0 R15: 00007ffc4f41edf8 [ 135.927027][ T6343] [ 135.955051][ T6345] netlink: 'syz.0.144': attribute type 3 has an invalid length. [ 135.970731][ T6345] netlink: 'syz.0.144': attribute type 6 has an invalid length. [ 135.986612][ T6345] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.144'. [ 135.992984][ T6343] syz.1.143: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 136.013933][ T6343] CPU: 1 PID: 6343 Comm: syz.1.143 Not tainted syzkaller #0 [ 136.021279][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.031376][ T6343] Call Trace: [ 136.034696][ T6343] [ 136.037665][ T6343] dump_stack_lvl+0x18c/0x250 [ 136.042398][ T6343] ? show_regs_print_info+0x20/0x20 [ 136.047642][ T6343] ? load_image+0x420/0x420 [ 136.052183][ T6343] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 136.058634][ T6343] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 136.065166][ T6343] warn_alloc+0x246/0x340 [ 136.069517][ T6343] ? __get_vm_area_node+0x125/0x370 [ 136.074748][ T6343] ? zone_watermark_ok_safe+0x230/0x230 [ 136.080294][ T6343] ? rcu_is_watching+0x15/0xb0 [ 136.085062][ T6343] ? __get_vm_area_node+0x356/0x370 [ 136.090264][ T6343] __vmalloc_node_range+0x394/0x1320 [ 136.095551][ T6343] ? netlink_insert+0x1094/0x1390 [ 136.100585][ T6343] ? netlink_insert+0x2ba/0x1390 [ 136.105545][ T6343] ? free_vm_area+0x50/0x50 [ 136.110067][ T6343] ? netlink_sendmsg+0x602/0xbf0 [ 136.115090][ T6343] vmalloc+0x79/0x90 [ 136.118998][ T6343] ? netlink_sendmsg+0x602/0xbf0 [ 136.123962][ T6343] netlink_sendmsg+0x602/0xbf0 [ 136.128732][ T6343] ? netlink_getsockopt+0x590/0x590 [ 136.133936][ T6343] ? apparmor_socket_sendmsg+0x8e/0x330 [ 136.139481][ T6343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.144766][ T6343] ? security_socket_sendmsg+0x80/0xa0 [ 136.150221][ T6343] ? netlink_getsockopt+0x590/0x590 [ 136.155420][ T6343] ____sys_sendmsg+0x61b/0x980 [ 136.160200][ T6343] ? __asan_memset+0x22/0x40 [ 136.164793][ T6343] ? __sys_sendmsg_sock+0x30/0x30 [ 136.169826][ T6343] ? __import_iovec+0x5f2/0x850 [ 136.174711][ T6343] ? import_iovec+0x73/0xa0 [ 136.179217][ T6343] ___sys_sendmsg+0x2a6/0x360 [ 136.183905][ T6343] ? get_pid_task+0x20/0x1e0 [ 136.188502][ T6343] ? __sys_sendmsg+0x2b0/0x2b0 [ 136.193279][ T6343] ? __lock_acquire+0x7d80/0x7d80 [ 136.198315][ T6343] __se_sys_sendmsg+0x1d0/0x2c0 [ 136.203164][ T6343] ? perf_trace_preemptirq_template+0x269/0x330 [ 136.209410][ T6343] ? __x64_sys_sendmsg+0x80/0x80 [ 136.214356][ T6343] ? lockdep_hardirqs_on+0x98/0x150 [ 136.219568][ T6343] do_syscall_64+0x55/0xb0 [ 136.224010][ T6343] ? clear_bhb_loop+0x40/0x90 [ 136.228688][ T6343] ? clear_bhb_loop+0x40/0x90 [ 136.233385][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.239287][ T6343] RIP: 0033:0x7f4039b9e159 [ 136.243712][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.263313][ T6343] RSP: 002b:00007f403a997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.271727][ T6343] RAX: ffffffffffffffda RBX: 00007f4039e25fa0 RCX: 00007f4039b9e159 [ 136.279698][ T6343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 136.287668][ T6343] RBP: 00007f403a997090 R08: 0000000000000000 R09: 0000000000000000 [ 136.295639][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.303603][ T6343] R13: 00007f4039e26038 R14: 00007f4039e25fa0 R15: 00007ffc4f41edf8 [ 136.311579][ T6343] [ 136.317217][ T6343] Mem-Info: [ 136.321046][ T6343] active_anon:5553 inactive_anon:0 isolated_anon:0 [ 136.321046][ T6343] active_file:1311 inactive_file:39971 isolated_file:0 [ 136.321046][ T6343] unevictable:768 dirty:343 writeback:0 [ 136.321046][ T6343] slab_reclaimable:9726 slab_unreclaimable:91612 [ 136.321046][ T6343] mapped:24379 shmem:1361 pagetables:578 [ 136.321046][ T6343] sec_pagetables:0 bounce:0 [ 136.321046][ T6343] kernel_misc_reclaimable:0 [ 136.321046][ T6343] free:1370643 free_pcp:6927 free_cma:0 [ 136.436890][ T6343] Node 0 active_anon:22112kB inactive_anon:0kB active_file:5244kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97416kB dirty:1368kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10416kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no [ 136.502670][ T6343] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 136.535385][ T6343] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.565348][ T6343] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 136.571525][ T6343] Node 0 DMA32 free:1569172kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22176kB inactive_anon:0kB active_file:5244kB inactive_file:158856kB unevictable:1536kB writepending:1368kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:11792kB local_pcp:2780kB free_cma:0kB [ 136.642035][ T6343] lowmem_reserve[]: 0 0 0 0 0 [ 136.648606][ T6343] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 136.681250][ T6343] lowmem_reserve[]: 0 0 0 0 0 [ 136.689267][ T6343] Node 1 Normal free:3897788kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:10336kB free_cma:0kB [ 136.729036][ T6343] lowmem_reserve[]: 0 0 0 0 0 [ 136.734332][ T6343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.752135][ T6343] Node 0 DMA32: 1511*4kB (UME) 829*8kB (UME) 609*16kB (UME) 246*32kB (UME) 222*64kB (UME) 35*128kB (UME) 8*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 368*4096kB (UME) = 1569620kB [ 136.778919][ T6343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 136.791232][ T6343] Node 1 Normal: 213*4kB (UM) 49*8kB (UME) 36*16kB (UME) 65*32kB (UME) 16*64kB (UE) 7*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897788kB [ 136.810672][ T6343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.822117][ T6343] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.838872][ T6343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.849111][ T6343] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.858489][ T6343] 42643 total pagecache pages [ 136.879838][ T6343] 0 pages in swap cache [ 136.884071][ T6343] Free swap = 124996kB [ 136.906095][ T6343] Total swap = 124996kB [ 136.910653][ T6343] 2097051 pages RAM [ 136.920876][ T6343] 0 pages HighMem/MovableOnly [ 136.925607][ T6343] 416965 pages reserved [ 136.931386][ T6343] 0 pages cma reserved [ 138.641470][ T6381] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.153'. [ 138.849657][ T6385] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 140.504991][ T6412] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.164'. [ 140.557991][ T6411] sit0: entered allmulticast mode [ 140.656392][ T6412] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 140.686611][ T6412] openvswitch: netlink: Message has 1 unknown bytes. [ 140.739711][ T6420] sit0: entered promiscuous mode [ 140.836971][ T6421] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.165'. [ 140.876778][ T6421] bridge_slave_1: default FDB implementation only supports local addresses [ 140.953803][ T6424] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 140.971897][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'. [ 141.029583][ T6425] bridge0: port 3(dummy0) entered disabled state [ 143.909352][ T6425] bridge_slave_1: left allmulticast mode [ 143.915081][ T6425] bridge_slave_1: left promiscuous mode [ 143.932596][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.945857][ T6425] bridge_slave_0: left allmulticast mode [ 143.951900][ T6425] bridge_slave_0: left promiscuous mode [ 143.960929][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.212041][ T6425] bond0: (slave bridge0): Releasing backup interface [ 147.317416][ T6424] syzkaller0: entered promiscuous mode [ 147.322969][ T6424] syzkaller0: entered allmulticast mode [ 147.975825][ T6458] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 147.999694][ T6458] netlink: 'syz.1.177': attribute type 3 has an invalid length. [ 148.025167][ T6458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.177'. [ 148.318643][ T6458] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 148.330912][ T6458] netlink: 159444 bytes leftover after parsing attributes in process `syz.1.177'. [ 149.586882][ T6459] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 149.594704][ T6459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.177'. [ 150.403600][ T6486] netlink: 'syz.0.184': attribute type 7 has an invalid length. [ 150.491169][ T6486] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.184'. [ 150.797539][ T6494] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 150.805352][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.187'. [ 151.035675][ T6498] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 151.056832][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'. [ 151.082758][ T6498] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 151.217205][ T6503] syzkaller0: entered promiscuous mode [ 151.236433][ T6503] syzkaller0: entered allmulticast mode [ 151.517995][ T6506] syzkaller0: entered promiscuous mode [ 151.523552][ T6506] syzkaller0: entered allmulticast mode [ 153.669405][ T6527] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.198'. [ 154.791398][ T6525] netlink: 'syz.2.198': attribute type 7 has an invalid length. [ 154.828842][ T6527] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 155.097367][ T6539] netlink: 'syz.3.201': attribute type 28 has an invalid length. [ 155.115511][ T6539] netlink: 'syz.3.201': attribute type 29 has an invalid length. [ 155.130742][ T6539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.201'. [ 155.252074][ T6545] FAULT_INJECTION: forcing a failure. [ 155.252074][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 155.267907][ T6545] CPU: 0 PID: 6545 Comm: syz.3.205 Not tainted syzkaller #0 [ 155.275245][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.285334][ T6545] Call Trace: [ 155.288647][ T6545] [ 155.291610][ T6545] dump_stack_lvl+0x18c/0x250 [ 155.296340][ T6545] ? show_regs_print_info+0x20/0x20 [ 155.301567][ T6545] ? load_image+0x420/0x420 [ 155.306085][ T6545] ? __might_sleep+0xe0/0xe0 [ 155.310690][ T6545] ? __lock_acquire+0x7d80/0x7d80 [ 155.315728][ T6545] should_fail_ex+0x394/0x4c0 [ 155.320428][ T6545] should_failslab+0x9/0x20 [ 155.324946][ T6545] slab_pre_alloc_hook+0x59/0x300 [ 155.329985][ T6545] ? lockdep_hardirqs_on+0x98/0x150 [ 155.335195][ T6545] kmem_cache_alloc_node+0x5e/0x310 [ 155.340405][ T6545] ? __alloc_skb+0x103/0x2c0 [ 155.345012][ T6545] __alloc_skb+0x103/0x2c0 [ 155.349442][ T6545] netlink_ack+0x377/0x1160 [ 155.353954][ T6545] ? __dev_queue_xmit+0x272/0x37e0 [ 155.359088][ T6545] ? netlink_dump+0xec0/0xec0 [ 155.363779][ T6545] ? ref_tracker_free+0x686/0x830 [ 155.368823][ T6545] netlink_rcv_skb+0x2b3/0x4c0 [ 155.373606][ T6545] ? rtnetlink_bind+0x80/0x80 [ 155.378327][ T6545] ? netlink_ack+0x1160/0x1160 [ 155.383142][ T6545] ? __lock_acquire+0x7d80/0x7d80 [ 155.388208][ T6545] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.393430][ T6545] netlink_unicast+0x7b1/0x930 [ 155.398216][ T6545] netlink_sendmsg+0x8d0/0xbf0 [ 155.403000][ T6545] ? netlink_getsockopt+0x590/0x590 [ 155.408212][ T6545] ? apparmor_socket_sendmsg+0x8e/0x330 [ 155.413770][ T6545] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.419068][ T6545] ? security_socket_sendmsg+0x80/0xa0 [ 155.424535][ T6545] ? netlink_getsockopt+0x590/0x590 [ 155.429751][ T6545] ____sys_sendmsg+0x61b/0x980 [ 155.434535][ T6545] ? __asan_memset+0x22/0x40 [ 155.439139][ T6545] ? __sys_sendmsg_sock+0x30/0x30 [ 155.444176][ T6545] ? __import_iovec+0x5f2/0x850 [ 155.449049][ T6545] ? import_iovec+0x73/0xa0 [ 155.453568][ T6545] ___sys_sendmsg+0x2a6/0x360 [ 155.458256][ T6545] ? get_pid_task+0x20/0x1e0 [ 155.462864][ T6545] ? __sys_sendmsg+0x2b0/0x2b0 [ 155.467667][ T6545] ? __lock_acquire+0x7d80/0x7d80 [ 155.472723][ T6545] __se_sys_sendmsg+0x1d0/0x2c0 [ 155.477589][ T6545] ? __x64_sys_sendmsg+0x80/0x80 [ 155.482554][ T6545] ? lockdep_hardirqs_on+0x98/0x150 [ 155.487762][ T6545] do_syscall_64+0x55/0xb0 [ 155.492190][ T6545] ? clear_bhb_loop+0x40/0x90 [ 155.496880][ T6545] ? clear_bhb_loop+0x40/0x90 [ 155.501569][ T6545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.507492][ T6545] RIP: 0033:0x7ffb02f9e159 [ 155.511925][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.531549][ T6545] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.539981][ T6545] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 155.547965][ T6545] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 155.555944][ T6545] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.563923][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.571903][ T6545] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 155.579901][ T6545] [ 156.306449][ T6559] netlink: 'syz.0.210': attribute type 39 has an invalid length. [ 156.364673][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.639096][ T6564] netlink: 'syz.1.211': attribute type 7 has an invalid length. [ 156.692503][ T51] Bluetooth: hci0: unexpected event 0x0b length: 151 > 11 [ 156.698674][ T6563] netlink: 'syz.0.213': attribute type 3 has an invalid length. [ 156.724034][ T6563] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 156.733862][ T6563] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 156.752194][ T6563] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 156.788229][ T6563] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.213'. [ 156.823820][ T6564] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.211'. [ 156.879652][ T6564] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 158.220229][ T6583] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 158.233884][ T6583] netlink: 119 bytes leftover after parsing attributes in process `syz.3.221'. [ 158.388572][ T6588] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 159.434330][ T6611] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.230'. [ 159.651569][ T6616] FAULT_INJECTION: forcing a failure. [ 159.651569][ T6616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.665643][ T6616] CPU: 1 PID: 6616 Comm: syz.2.231 Not tainted syzkaller #0 [ 159.672969][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.683060][ T6616] Call Trace: [ 159.686368][ T6616] [ 159.689326][ T6616] dump_stack_lvl+0x18c/0x250 [ 159.694051][ T6616] ? show_regs_print_info+0x20/0x20 [ 159.699293][ T6616] ? load_image+0x420/0x420 [ 159.703837][ T6616] ? __might_fault+0xaa/0x120 [ 159.708551][ T6616] ? __lock_acquire+0x7d80/0x7d80 [ 159.713611][ T6616] should_fail_ex+0x394/0x4c0 [ 159.718313][ T6616] _copy_from_iter+0x1cd/0x1290 [ 159.723179][ T6616] ? __might_fault+0xaa/0x120 [ 159.727876][ T6616] ? copyout_mc+0x70/0x70 [ 159.732224][ T6616] ? copyout_mc+0x70/0x70 [ 159.736564][ T6616] ? __virt_addr_valid+0x10c/0x380 [ 159.741688][ T6616] ? page_copy_sane+0x16a/0x270 [ 159.746555][ T6616] copy_page_from_iter+0x7b/0x100 [ 159.751599][ T6616] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 159.757424][ T6616] tun_get_user+0xc99/0x3d30 [ 159.762039][ T6616] ? aa_file_perm+0x3e3/0xee0 [ 159.766731][ T6616] ? rcu_read_unlock+0xa0/0xa0 [ 159.771513][ T6616] ? lockdep_hardirqs_on+0x98/0x150 [ 159.776722][ T6616] ? tun_get+0x1c/0x2e0 [ 159.780889][ T6616] ? __lock_acquire+0x7d80/0x7d80 [ 159.785931][ T6616] ? tun_get+0x1c/0x2e0 [ 159.790104][ T6616] tun_chr_write_iter+0x119/0x200 [ 159.795174][ T6616] vfs_write+0x474/0x9a0 [ 159.799438][ T6616] ? file_end_write+0x250/0x250 [ 159.804306][ T6616] ? __fget_files+0x3fc/0x460 [ 159.809003][ T6616] ? __fdget_pos+0x1d8/0x330 [ 159.813603][ T6616] ? ksys_write+0x74/0x260 [ 159.818037][ T6616] ksys_write+0x151/0x260 [ 159.822384][ T6616] ? __ia32_sys_read+0x90/0x90 [ 159.827166][ T6616] ? syscall_enter_from_user_mode+0x2e/0x80 [ 159.833072][ T6616] do_syscall_64+0x55/0xb0 [ 159.837502][ T6616] ? clear_bhb_loop+0x40/0x90 [ 159.842192][ T6616] ? clear_bhb_loop+0x40/0x90 [ 159.846887][ T6616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.852791][ T6616] RIP: 0033:0x7f5949d9e159 [ 159.857219][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.876835][ T6616] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.885260][ T6616] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 159.893243][ T6616] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 159.901225][ T6616] RBP: 00007f594ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 159.909204][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.917184][ T6616] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 159.925179][ T6616] [ 160.361250][ T6619] validate_nla: 1 callbacks suppressed [ 160.361304][ T6619] netlink: 'syz.2.232': attribute type 39 has an invalid length. [ 160.445041][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 160.882674][ T6630] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 160.915538][ T6634] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 160.927176][ T6634] netlink: 2 bytes leftover after parsing attributes in process `syz.3.237'. [ 160.999498][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 161.063502][ T6641] netlink: 'syz.2.239': attribute type 12 has an invalid length. [ 161.086471][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 161.116812][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.239'. [ 161.366230][ T6648] FAULT_INJECTION: forcing a failure. [ 161.366230][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 161.415607][ T6648] CPU: 0 PID: 6648 Comm: syz.3.242 Not tainted syzkaller #0 [ 161.422984][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.433082][ T6648] Call Trace: [ 161.436392][ T6648] [ 161.439338][ T6648] dump_stack_lvl+0x18c/0x250 [ 161.444039][ T6648] ? show_regs_print_info+0x20/0x20 [ 161.449252][ T6648] ? load_image+0x420/0x420 [ 161.453777][ T6648] should_fail_ex+0x394/0x4c0 [ 161.458499][ T6648] should_failslab+0x9/0x20 [ 161.463045][ T6648] slab_pre_alloc_hook+0x59/0x300 [ 161.468112][ T6648] kmem_cache_alloc+0x5a/0x2c0 [ 161.472923][ T6648] ? inet_frag_find+0x7ee/0x1c00 [ 161.477901][ T6648] inet_frag_find+0x7ee/0x1c00 [ 161.482697][ T6648] ? ip6frag_obj_hashfn+0x20/0x20 [ 161.487751][ T6648] ? __lock_acquire+0x7d80/0x7d80 [ 161.492792][ T6648] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 161.498099][ T6648] ? nf_frag_pernet+0x23/0x230 [ 161.502889][ T6648] nf_ct_frag6_gather+0x86c/0x2240 [ 161.508023][ T6648] ? __might_fault+0xaa/0x120 [ 161.512719][ T6648] ? nf_ct_frag6_gather+0x59f/0x2240 [ 161.518013][ T6648] ? ipv6_defrag+0x3a0/0x3a0 [ 161.522642][ T6648] ipv6_defrag+0x2a9/0x3a0 [ 161.527070][ T6648] ? defrag6_net_exit+0xb0/0xb0 [ 161.531932][ T6648] nf_hook_slow+0xbd/0x200 [ 161.536362][ T6648] ? rawv6_send_hdrinc+0xb76/0x1660 [ 161.541572][ T6648] rawv6_send_hdrinc+0x150e/0x1660 [ 161.546707][ T6648] ? txopt_get+0x3f0/0x3f0 [ 161.551156][ T6648] ? rawv6_push_pending_frames+0x930/0x930 [ 161.556976][ T6648] ? ip6_dst_hoplimit+0x96/0x350 [ 161.561924][ T6648] ? ip6_dst_hoplimit+0x96/0x350 [ 161.566878][ T6648] rawv6_sendmsg+0x128f/0x1740 [ 161.571666][ T6648] ? compat_rawv6_ioctl+0x70/0x70 [ 161.576726][ T6648] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 161.583151][ T6648] ? aa_sock_msg_perm+0x94/0x150 [ 161.588107][ T6648] ? inet_sendmsg+0x7e/0x2a0 [ 161.592710][ T6648] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 161.598011][ T6648] ? inet_send_prepare+0x250/0x250 [ 161.603135][ T6648] ____sys_sendmsg+0x61b/0x980 [ 161.607920][ T6648] ? __asan_memset+0x22/0x40 [ 161.612525][ T6648] ? __sys_sendmsg_sock+0x30/0x30 [ 161.617579][ T6648] ? __import_iovec+0x5f2/0x850 [ 161.622453][ T6648] ? import_iovec+0x73/0xa0 [ 161.626974][ T6648] ___sys_sendmsg+0x2a6/0x360 [ 161.631664][ T6648] ? get_pid_task+0x20/0x1e0 [ 161.636280][ T6648] ? __sys_sendmsg+0x2b0/0x2b0 [ 161.641085][ T6648] ? __lock_acquire+0x7d80/0x7d80 [ 161.646154][ T6648] __se_sys_sendmsg+0x1d0/0x2c0 [ 161.651020][ T6648] ? __x64_sys_sendmsg+0x80/0x80 [ 161.655987][ T6648] ? lockdep_hardirqs_on+0x98/0x150 [ 161.661202][ T6648] do_syscall_64+0x55/0xb0 [ 161.665635][ T6648] ? clear_bhb_loop+0x40/0x90 [ 161.670329][ T6648] ? clear_bhb_loop+0x40/0x90 [ 161.675026][ T6648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.680934][ T6648] RIP: 0033:0x7ffb02f9e159 [ 161.685360][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.704994][ T6648] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.713421][ T6648] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 161.721403][ T6648] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 161.729381][ T6648] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.737364][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.745359][ T6648] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 161.753360][ T6648] [ 161.997767][ T6658] veth0_vlan: mtu less than device minimum [ 162.053976][ T6658] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.244'. [ 162.741450][ T6661] syzkaller0: entered promiscuous mode [ 162.763716][ T6661] syzkaller0: entered allmulticast mode [ 162.797193][ T145] syzkaller0: tun_net_xmit 48 [ 162.818106][ T6673] FAULT_INJECTION: forcing a failure. [ 162.818106][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.863524][ T6673] CPU: 0 PID: 6673 Comm: syz.2.249 Not tainted syzkaller #0 [ 162.870919][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.881018][ T6673] Call Trace: [ 162.884328][ T6673] [ 162.887293][ T6673] dump_stack_lvl+0x18c/0x250 [ 162.892022][ T6673] ? show_regs_print_info+0x20/0x20 [ 162.897263][ T6673] ? load_image+0x420/0x420 [ 162.901782][ T6673] ? __might_fault+0xaa/0x120 [ 162.906479][ T6673] ? __lock_acquire+0x7d80/0x7d80 [ 162.911531][ T6673] ? __virt_addr_valid+0x10c/0x380 [ 162.916662][ T6673] should_fail_ex+0x394/0x4c0 [ 162.921358][ T6673] _copy_from_user+0x2f/0xe0 [ 162.925962][ T6673] generic_map_update_batch+0x58c/0x800 [ 162.931525][ T6673] ? rcu_read_unlock+0xa0/0xa0 [ 162.936313][ T6673] ? __fdget+0x180/0x210 [ 162.940582][ T6673] ? rcu_read_unlock+0xa0/0xa0 [ 162.945350][ T6673] bpf_map_do_batch+0x3f2/0x600 [ 162.950211][ T6673] ? bpf_lsm_key_free+0x10/0x10 [ 162.955078][ T6673] __sys_bpf+0x381/0x890 [ 162.959333][ T6673] ? bpf_link_show_fdinfo+0x560/0x560 [ 162.964729][ T6673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.970905][ T6673] __x64_sys_bpf+0x7c/0x90 [ 162.975336][ T6673] do_syscall_64+0x55/0xb0 [ 162.979765][ T6673] ? clear_bhb_loop+0x40/0x90 [ 162.984454][ T6673] ? clear_bhb_loop+0x40/0x90 [ 162.989150][ T6673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.995073][ T6673] RIP: 0033:0x7f5949d9e159 [ 162.999505][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.019131][ T6673] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.027561][ T6673] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 163.035539][ T6673] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 163.043518][ T6673] RBP: 00007f594ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 163.051496][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.059475][ T6673] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 163.067473][ T6673] [ 163.109241][ T6669] netlink: 'syz.1.247': attribute type 39 has an invalid length. [ 163.250889][ T6668] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 163.266532][ T6668] netlink: 2 bytes leftover after parsing attributes in process `syz.3.248'. [ 163.473281][ T6680] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 163.494164][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 164.993758][ T6680] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 165.001759][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 165.352847][ T6695] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 166.462205][ T6703] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 166.471580][ T6703] netlink: 2 bytes leftover after parsing attributes in process `syz.0.260'. [ 166.524307][ T6709] netlink: 'syz.2.262': attribute type 10 has an invalid length. [ 166.705221][ T6712] netlink: 'syz.1.263': attribute type 10 has an invalid length. [ 166.714769][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'. [ 166.744308][ T6712] netlink: 'syz.1.263': attribute type 10 has an invalid length. [ 166.756545][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'. [ 167.291307][ T6735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.387844][ T6735] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.270'. [ 167.964837][ T6753] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 167.972906][ T6753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 167.982585][ T6753] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 167.990770][ T6753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 168.075236][ T6755] netlink: 'syz.1.277': attribute type 2 has an invalid length. [ 168.096946][ T6755] netlink: 119 bytes leftover after parsing attributes in process `syz.1.277'. [ 168.204960][ T6760] netlink: 196 bytes leftover after parsing attributes in process `syz.3.279'. [ 169.108006][ T6768] netlink: 'syz.0.280': attribute type 2 has an invalid length. [ 169.157108][ T6768] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.280'. [ 169.430839][ T6775] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 170.278921][ T6807] netlink: 'syz.1.293': attribute type 3 has an invalid length. [ 170.311315][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.293'. [ 171.023034][ T6866] FAULT_INJECTION: forcing a failure. [ 171.023034][ T6866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.135737][ T6866] CPU: 0 PID: 6866 Comm: syz.3.295 Not tainted syzkaller #0 [ 171.143114][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.153218][ T6866] Call Trace: [ 171.156541][ T6866] [ 171.159504][ T6866] dump_stack_lvl+0x18c/0x250 [ 171.164416][ T6866] ? show_regs_print_info+0x20/0x20 [ 171.169666][ T6866] ? load_image+0x420/0x420 [ 171.174229][ T6866] ? __might_fault+0xaa/0x120 [ 171.178951][ T6866] ? __lock_acquire+0x7d80/0x7d80 [ 171.184024][ T6866] ? __virt_addr_valid+0x10c/0x380 [ 171.189194][ T6866] should_fail_ex+0x394/0x4c0 [ 171.193929][ T6866] _copy_from_user+0x2f/0xe0 [ 171.198568][ T6866] ____sys_sendmsg+0x329/0x980 [ 171.203385][ T6866] ? __sys_sendmsg_sock+0x30/0x30 [ 171.208448][ T6866] ? __import_iovec+0x3fa/0x850 [ 171.213351][ T6866] ? import_iovec+0x73/0xa0 [ 171.217898][ T6866] ___sys_sendmsg+0x2a6/0x360 [ 171.222640][ T6866] ? __sys_sendmsg+0x2b0/0x2b0 [ 171.227464][ T6866] ? __lock_acquire+0x7d80/0x7d80 [ 171.232557][ T6866] __se_sys_sendmsg+0x1d0/0x2c0 [ 171.237453][ T6866] ? __x64_sys_sendmsg+0x80/0x80 [ 171.242448][ T6866] ? lockdep_hardirqs_on+0x98/0x150 [ 171.247686][ T6866] do_syscall_64+0x55/0xb0 [ 171.252140][ T6866] ? clear_bhb_loop+0x40/0x90 [ 171.256863][ T6866] ? clear_bhb_loop+0x40/0x90 [ 171.261590][ T6866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.267527][ T6866] RIP: 0033:0x7ffb02f9e159 [ 171.271983][ T6866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.291631][ T6866] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.300097][ T6866] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 171.308121][ T6866] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 171.316135][ T6866] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.324149][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.332167][ T6866] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 171.340203][ T6866] [ 173.684564][ T6897] sctp: [Deprecated]: syz.3.301 (pid 6897) Use of int in maxseg socket option. [ 173.684564][ T6897] Use struct sctp_assoc_value instead [ 173.684660][ T6899] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 174.269820][ T6909] wg2: entered promiscuous mode [ 174.278508][ T6909] wg2: entered allmulticast mode [ 174.348669][ T6919] netlink: 'syz.2.308': attribute type 2 has an invalid length. [ 174.380615][ T6919] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.308'. [ 175.041394][ T6964] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.314'. [ 175.294960][ T6968] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.314'. [ 175.318771][ T6968] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 175.435699][ T6976] netlink: 10 bytes leftover after parsing attributes in process `syz.2.317'. [ 175.621856][ T6978] netlink: 703 bytes leftover after parsing attributes in process `syz.2.317'. [ 175.775119][ T6984] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 175.792717][ T6984] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.321'. [ 175.952107][ T6988] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 175.968187][ T6988] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.322'. [ 176.265280][ T7000] netlink: 227 bytes leftover after parsing attributes in process `syz.3.327'. [ 176.581187][ T6986] delete_channel: no stack [ 177.908182][ T7033] FAULT_INJECTION: forcing a failure. [ 177.908182][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.921462][ T7033] CPU: 1 PID: 7033 Comm: syz.2.342 Not tainted syzkaller #0 [ 177.928783][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.938867][ T7033] Call Trace: [ 177.942175][ T7033] [ 177.945132][ T7033] dump_stack_lvl+0x18c/0x250 [ 177.949857][ T7033] ? show_regs_print_info+0x20/0x20 [ 177.955102][ T7033] ? load_image+0x420/0x420 [ 177.959648][ T7033] ? __might_fault+0xaa/0x120 [ 177.964366][ T7033] ? __lock_acquire+0x7d80/0x7d80 [ 177.969443][ T7033] should_fail_ex+0x394/0x4c0 [ 177.974254][ T7033] _copy_from_user+0x2f/0xe0 [ 177.978886][ T7033] ___sys_sendmsg+0x1c7/0x360 [ 177.983608][ T7033] ? get_pid_task+0x20/0x1e0 [ 177.988244][ T7033] ? __sys_sendmsg+0x2b0/0x2b0 [ 177.993077][ T7033] ? __lock_acquire+0x7d80/0x7d80 [ 177.998167][ T7033] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.003068][ T7033] ? __x64_sys_sendmsg+0x80/0x80 [ 178.008051][ T7033] ? lockdep_hardirqs_on+0x98/0x150 [ 178.013275][ T7033] do_syscall_64+0x55/0xb0 [ 178.017705][ T7033] ? clear_bhb_loop+0x40/0x90 [ 178.022395][ T7033] ? clear_bhb_loop+0x40/0x90 [ 178.027092][ T7033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.032998][ T7033] RIP: 0033:0x7f5949d9e159 [ 178.037427][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.057046][ T7033] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.065479][ T7033] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 178.073460][ T7033] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 178.081438][ T7033] RBP: 00007f594ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 178.089423][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.097403][ T7033] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 178.105394][ T7033] [ 180.052443][ T7051] netlink: 'syz.3.350': attribute type 15 has an invalid length. [ 180.347565][ T7060] sctp: [Deprecated]: syz.0.349 (pid 7060) Use of int in maxseg socket option. [ 180.347565][ T7060] Use struct sctp_assoc_value instead [ 180.579220][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 180.607043][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 180.630972][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 180.652400][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 180.687990][ T7064] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 180.701643][ T7064] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 180.761332][ T7067] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 180.772798][ T7064] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 180.793471][ T7064] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 180.863866][ T7068] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 180.890294][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.354'. [ 180.917795][ T7068] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.353930][ T7066] syzkaller0: entered promiscuous mode [ 181.359842][ T7066] syzkaller0: entered allmulticast mode [ 181.375959][ T7073] netlink: 'syz.1.355': attribute type 39 has an invalid length. [ 181.433567][ T7073] hsr_slave_1 (unregistering): left promiscuous mode [ 181.567039][ T7077] netlink: 148 bytes leftover after parsing attributes in process `syz.0.356'. [ 181.597821][ T7078] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 181.615944][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.356'. [ 181.637123][ T7078] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 183.555984][ T7094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 183.571101][ T7096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.363'. [ 183.592547][ T7096] netlink: 6 bytes leftover after parsing attributes in process `syz.1.363'. [ 183.849741][ T7109] netlink: 'syz.3.366': attribute type 21 has an invalid length. [ 184.006832][ T7110] sctp: [Deprecated]: syz.2.364 (pid 7110) Use of int in maxseg socket option. [ 184.006832][ T7110] Use struct sctp_assoc_value instead [ 184.589364][ T7103] syz.1.365 (7103) used greatest stack depth: 19048 bytes left [ 185.818506][ T7138] validate_nla: 1 callbacks suppressed [ 185.818544][ T7138] netlink: 'syz.2.376': attribute type 10 has an invalid length. [ 185.892787][ T7138] __nla_validate_parse: 3 callbacks suppressed [ 185.892838][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'. [ 185.943378][ T7138] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 186.306879][ T7144] syzkaller0: entered promiscuous mode [ 186.317526][ T7144] syzkaller0: entered allmulticast mode [ 187.109812][ T7158] sctp: [Deprecated]: syz.1.381 (pid 7158) Use of int in maxseg socket option. [ 187.109812][ T7158] Use struct sctp_assoc_value instead [ 188.401891][ T7166] FAULT_INJECTION: forcing a failure. [ 188.401891][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.416409][ T7166] CPU: 1 PID: 7166 Comm: syz.1.384 Not tainted syzkaller #0 [ 188.423747][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.433806][ T7166] Call Trace: [ 188.437106][ T7166] [ 188.440040][ T7166] dump_stack_lvl+0x18c/0x250 [ 188.444727][ T7166] ? show_regs_print_info+0x20/0x20 [ 188.449956][ T7166] ? load_image+0x420/0x420 [ 188.454463][ T7166] ? __might_fault+0xaa/0x120 [ 188.459139][ T7166] ? __lock_acquire+0x7d80/0x7d80 [ 188.464175][ T7166] ? __virt_addr_valid+0x10c/0x380 [ 188.469290][ T7166] should_fail_ex+0x394/0x4c0 [ 188.473971][ T7166] _copy_from_user+0x2f/0xe0 [ 188.478563][ T7166] btf_new_fd+0x366/0x9e0 [ 188.482900][ T7166] ? bpf_btf_show_fdinfo+0x80/0x80 [ 188.488014][ T7166] ? capable+0x88/0xe0 [ 188.492086][ T7166] __sys_bpf+0x670/0x890 [ 188.496340][ T7166] ? bpf_link_show_fdinfo+0x560/0x560 [ 188.501745][ T7166] ? lock_chain_count+0x20/0x20 [ 188.506596][ T7166] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.512583][ T7166] __x64_sys_bpf+0x7c/0x90 [ 188.517000][ T7166] do_syscall_64+0x55/0xb0 [ 188.521418][ T7166] ? clear_bhb_loop+0x40/0x90 [ 188.526097][ T7166] ? clear_bhb_loop+0x40/0x90 [ 188.530780][ T7166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.536682][ T7166] RIP: 0033:0x7f4039b9e159 [ 188.541096][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.560703][ T7166] RSP: 002b:00007f403a997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.569116][ T7166] RAX: ffffffffffffffda RBX: 00007f4039e25fa0 RCX: 00007f4039b9e159 [ 188.577088][ T7166] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 188.585073][ T7166] RBP: 00007f403a997090 R08: 0000000000000000 R09: 0000000000000000 [ 188.593065][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.601066][ T7166] R13: 00007f4039e26038 R14: 00007f4039e25fa0 R15: 00007ffc4f41edf8 [ 188.609055][ T7166] [ 190.019015][ T7171] netlink: 152 bytes leftover after parsing attributes in process `syz.0.385'. [ 190.034768][ T7171] netlink: 6 bytes leftover after parsing attributes in process `syz.0.385'. [ 190.035634][ T7174] netlink: 'syz.2.387': attribute type 27 has an invalid length. [ 190.057536][ T7174] netlink: 164 bytes leftover after parsing attributes in process `syz.2.387'. [ 190.414735][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'. [ 190.538693][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'. [ 190.582964][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'. [ 190.602380][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'. [ 190.908796][ T7196] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 191.979579][ T7210] netlink: 152 bytes leftover after parsing attributes in process `syz.3.397'. [ 192.005582][ T7210] netlink: 6 bytes leftover after parsing attributes in process `syz.3.397'. [ 192.061073][ T7212] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.401'. [ 192.225799][ T7216] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.402'. [ 192.295287][ T7219] netlink: 'syz.1.402': attribute type 3 has an invalid length. [ 192.364842][ T7219] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.402'. [ 193.077982][ T7226] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.407'. [ 193.106590][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'. [ 193.118232][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'. [ 193.260350][ T7228] netlink: 'syz.1.408': attribute type 21 has an invalid length. [ 193.278230][ T7228] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.295460][ T7228] IPv6: Can't replace route, no match found [ 194.415354][ T7257] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 194.429767][ T7257] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 194.455021][ T7257] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 194.473739][ T7257] netlink: 'syz.0.416': attribute type 29 has an invalid length. [ 194.608293][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614693][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.403912][ T7290] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.412233][ T7290] netlink: 1 bytes leftover after parsing attributes in process `syz.0.421'. [ 195.738471][ T7300] FAULT_INJECTION: forcing a failure. [ 195.738471][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 195.766414][ T7300] CPU: 1 PID: 7300 Comm: syz.3.425 Not tainted syzkaller #0 [ 195.773810][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.783916][ T7300] Call Trace: [ 195.787244][ T7300] [ 195.790223][ T7300] dump_stack_lvl+0x18c/0x250 [ 195.794975][ T7300] ? show_regs_print_info+0x20/0x20 [ 195.800236][ T7300] ? load_image+0x420/0x420 [ 195.804846][ T7300] ? __might_sleep+0xe0/0xe0 [ 195.809499][ T7300] ? __lock_acquire+0x7d80/0x7d80 [ 195.814617][ T7300] ? lock_chain_count+0x20/0x20 [ 195.819540][ T7300] should_fail_ex+0x394/0x4c0 [ 195.824301][ T7300] should_failslab+0x9/0x20 [ 195.828855][ T7300] slab_pre_alloc_hook+0x59/0x300 [ 195.833937][ T7300] ? _raw_spin_unlock+0x40/0x40 [ 195.838834][ T7300] ? string+0x257/0x290 [ 195.843039][ T7300] ? __request_module+0x2d1/0x600 [ 195.848139][ T7300] __kmem_cache_alloc_node+0x53/0x250 [ 195.853582][ T7300] ? __request_module+0x2d1/0x600 [ 195.858663][ T7300] kmalloc_trace+0x2a/0xe0 [ 195.863165][ T7300] __request_module+0x2d1/0x600 [ 195.868096][ T7300] ? module_enforce_rwx_sections+0x150/0x150 [ 195.874157][ T7300] ? dev_load+0x21/0x1f0 [ 195.878493][ T7300] ? bpf_lsm_capable+0x9/0x10 [ 195.883246][ T7300] ? dev_load+0x21/0x1f0 [ 195.887542][ T7300] dev_load+0x18b/0x1f0 [ 195.891758][ T7300] dev_ioctl+0x837/0x1140 [ 195.896161][ T7300] sock_ioctl+0x74c/0x7e0 [ 195.900564][ T7300] ? sock_poll+0x3e0/0x3e0 [ 195.905087][ T7300] ? bpf_lsm_file_ioctl+0x9/0x10 [ 195.910078][ T7300] ? security_file_ioctl+0x80/0xa0 [ 195.915256][ T7300] ? sock_poll+0x3e0/0x3e0 [ 195.919737][ T7300] __se_sys_ioctl+0xfd/0x170 [ 195.924398][ T7300] do_syscall_64+0x55/0xb0 [ 195.928865][ T7300] ? clear_bhb_loop+0x40/0x90 [ 195.933589][ T7300] ? clear_bhb_loop+0x40/0x90 [ 195.938333][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.944279][ T7300] RIP: 0033:0x7ffb02f9e159 [ 195.948750][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.968408][ T7300] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.976894][ T7300] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 195.984914][ T7300] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 195.992930][ T7300] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.000949][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.008968][ T7300] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 196.017062][ T7300] [ 196.236955][ T7305] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 199.994860][ T7432] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 200.004575][ T7432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.487'. [ 200.021679][ T7432] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 200.518341][ T7432] syzkaller0: entered promiscuous mode [ 200.523944][ T7432] syzkaller0: entered allmulticast mode [ 200.608582][ T7448] netlink: 168 bytes leftover after parsing attributes in process `syz.1.494'. [ 201.810487][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 201.817917][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 201.824007][ T7468] Bluetooth: hci3: command 0x0406 tx timeout [ 201.826333][ T7430] Bluetooth: hci1: command 0x0406 tx timeout [ 202.842047][ T7484] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 202.866863][ T7484] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.504'. [ 203.294581][ T7494] netlink: 168 bytes leftover after parsing attributes in process `syz.2.507'. [ 203.426925][ T7492] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 203.447779][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 203.492780][ T7492] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 203.729429][ T7504] FAULT_INJECTION: forcing a failure. [ 203.729429][ T7504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.799611][ T7504] CPU: 0 PID: 7504 Comm: syz.2.510 Not tainted syzkaller #0 [ 203.806999][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.817105][ T7504] Call Trace: [ 203.820423][ T7504] [ 203.823398][ T7504] dump_stack_lvl+0x18c/0x250 [ 203.828136][ T7504] ? show_regs_print_info+0x20/0x20 [ 203.833384][ T7504] ? load_image+0x420/0x420 [ 203.837943][ T7504] ? __might_fault+0xaa/0x120 [ 203.842666][ T7504] ? __lock_acquire+0x7d80/0x7d80 [ 203.847733][ T7504] ? bpf_percpu_hash_update+0x2b/0x200 [ 203.853232][ T7504] ? __virt_addr_valid+0x10c/0x380 [ 203.858401][ T7504] should_fail_ex+0x394/0x4c0 [ 203.863143][ T7504] _copy_from_user+0x2f/0xe0 [ 203.867786][ T7504] generic_map_update_batch+0x53e/0x800 [ 203.873411][ T7504] ? rcu_read_unlock+0xa0/0xa0 [ 203.878231][ T7504] ? __fdget+0x180/0x210 [ 203.882539][ T7504] ? rcu_read_unlock+0xa0/0xa0 [ 203.887347][ T7504] bpf_map_do_batch+0x3f2/0x600 [ 203.892241][ T7504] ? bpf_lsm_key_free+0x10/0x10 [ 203.897149][ T7504] __sys_bpf+0x381/0x890 [ 203.901445][ T7504] ? bpf_link_show_fdinfo+0x560/0x560 [ 203.906912][ T7504] ? lock_chain_count+0x20/0x20 [ 203.911820][ T7504] __x64_sys_bpf+0x7c/0x90 [ 203.916269][ T7504] do_syscall_64+0x55/0xb0 [ 203.920710][ T7504] ? clear_bhb_loop+0x40/0x90 [ 203.925410][ T7504] ? clear_bhb_loop+0x40/0x90 [ 203.930111][ T7504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.936027][ T7504] RIP: 0033:0x7f5949d9e159 [ 203.940463][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.960095][ T7504] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.968535][ T7504] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 203.976527][ T7504] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 203.984520][ T7504] RBP: 00007f594ad27090 R08: 0000000000000000 R09: 0000000000000000 [ 203.992511][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.000506][ T7504] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 204.008535][ T7504] [ 204.333540][ T7492] syzkaller0: entered promiscuous mode [ 204.351403][ T7492] syzkaller0: entered allmulticast mode [ 206.308182][ T7517] C: renamed from team_slave_0 [ 206.327969][ T7517] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 206.335685][ T7517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.524'. [ 206.376365][ T7517] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.506902][ T7524] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.517'. [ 206.801013][ T7531] netlink: 'syz.1.528': attribute type 10 has an invalid length. [ 206.904892][ T7531] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 207.302751][ T7535] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.519'. [ 207.339855][ T7544] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 207.372583][ T7544] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.519'. [ 207.410607][ T7535] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 209.098229][ T7571] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 209.256054][ T7571] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 209.988704][ T7588] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.540'. [ 210.002211][ T7592] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 210.114487][ T7592] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.540'. [ 210.313036][ T7588] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 214.974291][ T7634] C: renamed from team_slave_0 [ 215.072565][ T7634] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 215.148830][ T7641] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 215.171666][ T7634] netlink: 152 bytes leftover after parsing attributes in process `syz.1.555'. [ 215.181509][ T7641] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.557'. [ 215.191117][ T7634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.468100][ T7649] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 215.487249][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.559'. [ 215.558983][ T7649] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 216.416581][ T7645] syzkaller0: entered promiscuous mode [ 216.422373][ T7645] syzkaller0: entered allmulticast mode [ 219.367152][ T7686] C: renamed from team_slave_0 [ 219.456808][ T7686] netlink: 'syz.3.572': attribute type 3 has an invalid length. [ 219.476542][ T7686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.572'. [ 219.550140][ T7686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.580262][ T7698] sit0: entered allmulticast mode [ 220.426365][ T7715] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 220.447066][ T7715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.583'. [ 220.463656][ T7715] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 220.487236][ T7720] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 220.525513][ T7720] syzkaller1: linktype set to 55 [ 220.708214][ T7715] syzkaller0: entered promiscuous mode [ 220.734440][ T7715] syzkaller0: entered allmulticast mode [ 220.761468][ T7720] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP) [ 222.788149][ T7736] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 222.813766][ T7736] team0: Device wg1 is of different type [ 223.343179][ T7761] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 224.392549][ T7768] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 224.407983][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'. [ 224.418928][ T7768] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 224.740997][ T7759] syzkaller0: entered promiscuous mode [ 224.778019][ T7759] syzkaller0: entered allmulticast mode [ 226.989566][ T7781] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 227.000544][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.603'. [ 227.010611][ T7781] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.061771][ T7790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.606'. [ 227.096420][ T7790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.253876][ T7788] syzkaller0: entered promiscuous mode [ 227.268572][ T7788] syzkaller0: entered allmulticast mode [ 232.043011][ T7806] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 232.049096][ T7806] syzkaller1: linktype set to 773 [ 232.061722][ T7807] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP) [ 232.069483][ T7818] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.613'. [ 232.091949][ T7821] netlink: 'syz.3.613': attribute type 39 has an invalid length. [ 232.248737][ T7822] netlink: 'syz.3.613': attribute type 39 has an invalid length. [ 232.581063][ T7833] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 232.589274][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.619'. [ 232.608065][ T7833] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.418791][ T7833] syzkaller0: entered promiscuous mode [ 233.432535][ T7833] syzkaller0: entered allmulticast mode [ 235.420077][ T7865] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 235.426106][ T7865] syzkaller1: linktype set to 773 [ 235.483436][ T7866] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP) [ 236.053293][ T7885] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 236.133097][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 236.168847][ T7885] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 236.406907][ T7888] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 236.561384][ T7889] syzkaller0: entered promiscuous mode [ 236.576686][ T7889] syzkaller0: entered allmulticast mode [ 238.276120][ T7897] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 238.284112][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.638'. [ 238.296049][ T7897] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 238.385440][ T7905] syzkaller0: entered promiscuous mode [ 238.391249][ T7905] syzkaller0: entered allmulticast mode [ 238.406672][ T7908] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 238.412849][ T7908] syzkaller1: linktype set to 773 [ 238.482141][ T7910] Q±6ã×\b‹¡Y­4��: renamed from lo (while UP) [ 238.635645][ T7918] delete_channel: no stack [ 240.387713][ T7915] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 240.402699][ T7915] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 240.429200][ T7926] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.648'. [ 240.454977][ T7927] netlink: 10 bytes leftover after parsing attributes in process `syz.0.648'. [ 240.471186][ T7928] netlink: 10 bytes leftover after parsing attributes in process `syz.0.648'. [ 240.772396][ T7938] FAULT_INJECTION: forcing a failure. [ 240.772396][ T7938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.821800][ T7938] CPU: 0 PID: 7938 Comm: syz.3.652 Not tainted syzkaller #0 [ 240.829178][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.839279][ T7938] Call Trace: [ 240.842594][ T7938] [ 240.845554][ T7938] dump_stack_lvl+0x18c/0x250 [ 240.850278][ T7938] ? show_regs_print_info+0x20/0x20 [ 240.855516][ T7938] ? load_image+0x420/0x420 [ 240.860061][ T7938] ? __lock_acquire+0x7d80/0x7d80 [ 240.865137][ T7938] should_fail_ex+0x394/0x4c0 [ 240.869871][ T7938] _copy_from_user+0x2f/0xe0 [ 240.874507][ T7938] __copy_msghdr+0x388/0x560 [ 240.879144][ T7938] ___sys_sendmsg+0x214/0x360 [ 240.883864][ T7938] ? get_pid_task+0x20/0x1e0 [ 240.888501][ T7938] ? __sys_sendmsg+0x2b0/0x2b0 [ 240.889082][ T7942] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.653'. [ 240.893308][ T7938] ? __lock_acquire+0x7d80/0x7d80 [ 240.907443][ T7938] __se_sys_sendmsg+0x1d0/0x2c0 [ 240.912342][ T7938] ? __x64_sys_sendmsg+0x80/0x80 [ 240.917333][ T7938] ? lockdep_hardirqs_on+0x98/0x150 [ 240.922575][ T7938] do_syscall_64+0x55/0xb0 [ 240.927030][ T7938] ? clear_bhb_loop+0x40/0x90 [ 240.931752][ T7938] ? clear_bhb_loop+0x40/0x90 [ 240.936475][ T7938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.942408][ T7938] RIP: 0033:0x7ffb02f9e159 [ 240.946858][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.966502][ T7938] RSP: 002b:00007ffb011f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.974972][ T7938] RAX: ffffffffffffffda RBX: 00007ffb03225fa0 RCX: 00007ffb02f9e159 [ 240.982979][ T7938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 240.990980][ T7938] RBP: 00007ffb011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.998995][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.006983][ T7938] R13: 00007ffb03226038 R14: 00007ffb03225fa0 R15: 00007ffdc8aa9ba8 [ 241.014994][ T7938] [ 241.204595][ T7940] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 241.213496][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 241.243275][ T7940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 241.395739][ T7940] syzkaller0: entered promiscuous mode [ 241.402759][ T7940] syzkaller0: entered allmulticast mode [ 241.419431][ T7954] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 241.428039][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.658'. [ 241.439755][ T7954] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 241.669596][ T7954] syzkaller0: entered promiscuous mode [ 241.675201][ T7954] syzkaller0: entered allmulticast mode [ 243.363813][ T7961] netlink: 'syz.3.660': attribute type 10 has an invalid length. [ 245.455635][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.670'. [ 245.480546][ T7989] netlink: 'syz.0.670': attribute type 33 has an invalid length. [ 245.493874][ T7989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.670'. [ 245.605326][ T7986] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 247.156965][ T23] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 248.794254][ T8021] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 249.898576][ T8048] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 250.163670][ T8052] netlink: 180 bytes leftover after parsing attributes in process `syz.2.691'. [ 250.391286][ T8057] netlink: 164 bytes leftover after parsing attributes in process `syz.1.693'. [ 250.914336][ T8070] delete_channel: no stack [ 251.145957][ T8081] FAULT_INJECTION: forcing a failure. [ 251.145957][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.201876][ T8081] CPU: 1 PID: 8081 Comm: syz.2.701 Not tainted syzkaller #0 [ 251.209285][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.219395][ T8081] Call Trace: [ 251.222725][ T8081] [ 251.225703][ T8081] dump_stack_lvl+0x18c/0x250 [ 251.230458][ T8081] ? show_regs_print_info+0x20/0x20 [ 251.235725][ T8081] ? load_image+0x420/0x420 [ 251.240250][ T8081] ? __might_fault+0xaa/0x120 [ 251.244957][ T8081] ? __lock_acquire+0x7d80/0x7d80 [ 251.250023][ T8081] ? __mutex_trylock_common+0x160/0x270 [ 251.255625][ T8081] should_fail_ex+0x394/0x4c0 [ 251.260369][ T8081] _copy_from_user+0x2f/0xe0 [ 251.265007][ T8081] do_tcp_setsockopt+0x58d/0x1c50 [ 251.270092][ T8081] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 251.275521][ T8081] ? smc_setsockopt+0x175/0xb00 [ 251.280425][ T8081] ? mutex_lock_nested+0x20/0x20 [ 251.285423][ T8081] ? aa_sk_perm+0x83c/0x970 [ 251.289962][ T8081] ? __fget_files+0x28/0x460 [ 251.294577][ T8081] ? sock_common_setsockopt+0x36/0xc0 [ 251.299985][ T8081] ? tcp_setsockopt+0x3d/0xe0 [ 251.304691][ T8081] ? tcp_enable_tx_delay+0x70/0x70 [ 251.309829][ T8081] ? sock_common_recvmsg+0x190/0x190 [ 251.315140][ T8081] smc_setsockopt+0x22d/0xb00 [ 251.319850][ T8081] ? smc_shutdown+0x9a0/0x9a0 [ 251.324565][ T8081] ? __fget_files+0x28/0x460 [ 251.329202][ T8081] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 251.334782][ T8081] ? security_socket_setsockopt+0x7e/0xa0 [ 251.340536][ T8081] ? smc_shutdown+0x9a0/0x9a0 [ 251.345254][ T8081] do_sock_setsockopt+0x175/0x1a0 [ 251.350329][ T8081] ? __fdget+0x180/0x210 [ 251.354603][ T8081] __x64_sys_setsockopt+0x182/0x200 [ 251.359839][ T8081] do_syscall_64+0x55/0xb0 [ 251.364305][ T8081] ? clear_bhb_loop+0x40/0x90 [ 251.369024][ T8081] ? clear_bhb_loop+0x40/0x90 [ 251.373733][ T8081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.379651][ T8081] RIP: 0033:0x7f5949d9e159 [ 251.384081][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.403698][ T8081] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 251.412144][ T8081] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 251.420130][ T8081] RDX: 000000000000001b RSI: 0000000000000006 RDI: 0000000000000005 [ 251.428111][ T8081] RBP: 00007f594ad27090 R08: 0000000000000004 R09: 0000000000000000 [ 251.436091][ T8081] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 251.444160][ T8081] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 251.452157][ T8081] [ 251.521434][ T8085] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 251.784382][ T8085] veth0_vlan: left promiscuous mode [ 251.822842][ T8085] veth0_vlan: entered promiscuous mode [ 251.885971][ T8085] team0: Device veth0_vlan failed to register rx_handler [ 252.244719][ T8085] syz.0.702 (8085) used greatest stack depth: 18344 bytes left [ 256.040392][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049869][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.386773][ T8137] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 258.552445][ T8194] netlink: 'syz.0.746': attribute type 5 has an invalid length. [ 258.628710][ T8196] netlink: 'syz.2.747': attribute type 13 has an invalid length. [ 258.666814][ T8196] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.747'. [ 258.718388][ T8198] FAULT_INJECTION: forcing a failure. [ 258.718388][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 258.744542][ T8198] CPU: 1 PID: 8198 Comm: syz.0.748 Not tainted syzkaller #0 [ 258.751904][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.762015][ T8198] Call Trace: [ 258.765327][ T8198] [ 258.768290][ T8198] dump_stack_lvl+0x18c/0x250 [ 258.773023][ T8198] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.779230][ T8198] ? show_regs_print_info+0x20/0x20 [ 258.784484][ T8198] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.790689][ T8198] ? dump_stack+0x9/0x20 [ 258.794993][ T8198] should_fail_ex+0x394/0x4c0 [ 258.799723][ T8198] should_failslab+0x9/0x20 [ 258.804266][ T8198] slab_pre_alloc_hook+0x59/0x300 [ 258.809335][ T8198] ? kvmalloc_node+0x70/0x180 [ 258.814054][ T8198] ? kvmalloc_node+0x70/0x180 [ 258.818770][ T8198] __kmem_cache_alloc_node+0x53/0x250 [ 258.824198][ T8198] ? kvmalloc_node+0x70/0x180 [ 258.828920][ T8198] __kmalloc_node+0xa6/0x240 [ 258.833565][ T8198] kvmalloc_node+0x70/0x180 [ 258.838122][ T8198] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 258.843549][ T8198] ? 0xffffffffa0004740 [ 258.847742][ T8198] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 258.853671][ T8198] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.859865][ T8198] ? xdp_convert_md_to_buff+0x330/0x330 [ 258.865493][ T8198] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 258.871782][ T8198] ? xdp_convert_md_to_buff+0x5b/0x330 [ 258.877265][ T8198] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 258.882701][ T8198] ? __lock_acquire+0x7d80/0x7d80 [ 258.887757][ T8198] ? dev_put+0x80/0x80 [ 258.891852][ T8198] ? dev_put+0x80/0x80 [ 258.896458][ T8198] bpf_prog_test_run+0x31f/0x390 [ 258.901428][ T8198] __sys_bpf+0x49d/0x890 [ 258.905684][ T8198] ? bpf_link_show_fdinfo+0x560/0x560 [ 258.911078][ T8198] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.917257][ T8198] __x64_sys_bpf+0x7c/0x90 [ 258.921684][ T8198] do_syscall_64+0x55/0xb0 [ 258.926116][ T8198] ? clear_bhb_loop+0x40/0x90 [ 258.930805][ T8198] ? clear_bhb_loop+0x40/0x90 [ 258.935501][ T8198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.941407][ T8198] RIP: 0033:0x7f6aa799e159 [ 258.945834][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.965456][ T8198] RSP: 002b:00007f6aa87d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.973885][ T8198] RAX: ffffffffffffffda RBX: 00007f6aa7c25fa0 RCX: 00007f6aa799e159 [ 258.981872][ T8198] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 258.989854][ T8198] RBP: 00007f6aa87d4090 R08: 0000000000000000 R09: 0000000000000000 [ 258.997834][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.005810][ T8198] R13: 00007f6aa7c26038 R14: 00007f6aa7c25fa0 R15: 00007ffc3c68bfa8 [ 259.013802][ T8198] [ 259.959819][ T8234] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 259.984555][ T8234] netlink: 2 bytes leftover after parsing attributes in process `syz.3.761'. [ 260.169857][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.763'. [ 260.373151][ T8247] netlink: 'syz.2.766': attribute type 10 has an invalid length. [ 260.582556][ T8239] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.762'. [ 260.645957][ T8239] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 260.696531][ T8239] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.762'. [ 262.777591][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.769'. [ 263.209745][ T8269] netlink: 'syz.1.772': attribute type 10 has an invalid length. [ 263.385465][ T8274] netlink: 'syz.3.771': attribute type 10 has an invalid length. [ 263.403836][ T8274] netlink: 2 bytes leftover after parsing attributes in process `syz.3.771'. [ 264.166950][ T8283] ================================================================== [ 264.175102][ T8283] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 264.182963][ T8283] Write of size 48 at addr ffff88801abb4d90 by task syz.2.778/8283 [ 264.190889][ T8283] [ 264.193241][ T8283] CPU: 0 PID: 8283 Comm: syz.2.778 Not tainted syzkaller #0 [ 264.200570][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.210664][ T8283] Call Trace: [ 264.213980][ T8283] [ 264.216966][ T8283] dump_stack_lvl+0x18c/0x250 [ 264.221693][ T8283] ? read_lock_is_recursive+0x20/0x20 [ 264.227119][ T8283] ? show_regs_print_info+0x20/0x20 [ 264.232367][ T8283] ? load_image+0x420/0x420 [ 264.236934][ T8283] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 264.242450][ T8283] ? __virt_addr_valid+0x10c/0x380 [ 264.247593][ T8283] ? __virt_addr_valid+0x10c/0x380 [ 264.252725][ T8283] ? __virt_addr_valid+0x10c/0x380 [ 264.257861][ T8283] print_report+0xa8/0x210 [ 264.262303][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 264.267440][ T8283] kasan_report+0x117/0x150 [ 264.271967][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 264.277105][ T8283] kasan_check_range+0x241/0x290 [ 264.282057][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 264.287182][ T8283] __asan_memcpy+0x40/0x70 [ 264.291623][ T8283] __bpf_get_stackid+0x6c7/0x900 [ 264.296579][ T8283] bpf_get_stackid_pe+0x343/0x410 [ 264.301621][ T8283] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 264.307092][ T8283] bpf_overflow_handler+0x1fc/0x510 [ 264.312307][ T8283] ? bpf_overflow_handler+0xde/0x510 [ 264.317609][ T8283] ? tp_perf_event_destroy+0x20/0x20 [ 264.322911][ T8283] ? verify_lock_unused+0x140/0x140 [ 264.328126][ T8283] ? __perf_event_account_interrupt+0x187/0x280 [ 264.334404][ T8283] __perf_event_overflow+0x461/0x660 [ 264.339709][ T8283] perf_swevent_overflow+0x274/0x340 [ 264.345010][ T8283] ? perf_event_switch_output+0x790/0x790 [ 264.350749][ T8283] ? rcu_is_watching+0x15/0xb0 [ 264.355527][ T8283] perf_swevent_event+0x45c/0x570 [ 264.360564][ T8283] ? perf_tp_event+0x1550/0x1550 [ 264.365525][ T8283] ___perf_sw_event+0x4ab/0x730 [ 264.370392][ T8283] ? ___perf_sw_event+0x19e/0x730 [ 264.375434][ T8283] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 264.381896][ T8283] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 264.387896][ T8283] ? lock_chain_count+0x20/0x20 [ 264.392762][ T8283] __perf_sw_event+0x139/0x270 [ 264.397541][ T8283] do_user_addr_fault+0x1242/0x12d0 [ 264.402762][ T8283] ? rcu_is_watching+0x15/0xb0 [ 264.407546][ T8283] exc_page_fault+0x64/0x100 [ 264.412145][ T8283] asm_exc_page_fault+0x26/0x30 [ 264.417010][ T8283] RIP: 0010:__put_user_4+0x11/0x20 [ 264.422135][ T8283] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 264.441753][ T8283] RSP: 0018:ffffc900041afe80 EFLAGS: 00050206 [ 264.447843][ T8283] RAX: 0000000000000009 RBX: 0000000000000000 RCX: 00002000000029c0 [ 264.455823][ T8283] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 264.463804][ T8283] RBP: 0000000000000009 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 264.471788][ T8283] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 0000000000000000 [ 264.479771][ T8283] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 264.487761][ T8283] __sys_socketpair+0xb8/0x550 [ 264.492543][ T8283] __x64_sys_socketpair+0x9b/0xb0 [ 264.497672][ T8283] do_syscall_64+0x55/0xb0 [ 264.502133][ T8283] ? clear_bhb_loop+0x40/0x90 [ 264.506839][ T8283] ? clear_bhb_loop+0x40/0x90 [ 264.511535][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.517448][ T8283] RIP: 0033:0x7f5949d9e159 [ 264.521878][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.541497][ T8283] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 264.549953][ T8283] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 264.557937][ T8283] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 264.565919][ T8283] RBP: 00007f5949e3506b R08: 0000000000000000 R09: 0000000000000000 [ 264.573916][ T8283] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 264.581897][ T8283] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 264.589889][ T8283] [ 264.592915][ T8283] [ 264.595245][ T8283] Allocated by task 8283: [ 264.599573][ T8283] kasan_set_track+0x4e/0x70 [ 264.604179][ T8283] __kasan_kmalloc+0x8f/0xa0 [ 264.608783][ T8283] __kmalloc_node+0xb6/0x240 [ 264.613388][ T8283] bpf_map_area_alloc+0x5e/0x110 [ 264.618346][ T8283] prealloc_elems_and_freelist+0x86/0x1c0 [ 264.624075][ T8283] stack_map_alloc+0x32b/0x4b0 [ 264.628849][ T8283] map_create+0x877/0x12f0 [ 264.633274][ T8283] __sys_bpf+0x651/0x890 [ 264.637525][ T8283] __x64_sys_bpf+0x7c/0x90 [ 264.641947][ T8283] do_syscall_64+0x55/0xb0 [ 264.646374][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.652285][ T8283] [ 264.654616][ T8283] Last potentially related work creation: [ 264.660334][ T8283] kasan_save_stack+0x3e/0x60 [ 264.665021][ T8283] __kasan_record_aux_stack+0xaf/0xc0 [ 264.670401][ T8283] call_rcu+0x153/0x900 [ 264.674573][ T8283] __nf_register_net_hook+0x787/0x910 [ 264.679958][ T8283] nf_register_net_hook+0xb2/0x190 [ 264.685085][ T8283] nf_register_net_hooks+0x44/0x1b0 [ 264.690298][ T8283] nf_ct_netns_do_get+0x213/0x5c0 [ 264.695331][ T8283] nf_ct_netns_inet_get+0x3b/0x150 [ 264.700462][ T8283] nf_conncount_init+0x127/0x380 [ 264.705412][ T8283] ovs_ct_init+0x264/0x430 [ 264.709844][ T8283] ovs_init_net+0x1e6/0x250 [ 264.714363][ T8283] ops_init+0x391/0x640 [ 264.718526][ T8283] setup_net+0x3b6/0xa20 [ 264.722776][ T8283] copy_net_ns+0x361/0x530 [ 264.727202][ T8283] create_new_namespaces+0x3ce/0x700 [ 264.732497][ T8283] unshare_nsproxy_namespaces+0x11a/0x160 [ 264.738224][ T8283] ksys_unshare+0x4fa/0x8f0 [ 264.742734][ T8283] __x64_sys_unshare+0x38/0x40 [ 264.747512][ T8283] do_syscall_64+0x55/0xb0 [ 264.751939][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.757846][ T8283] [ 264.760173][ T8283] The buggy address belongs to the object at ffff88801abb4d80 [ 264.760173][ T8283] which belongs to the cache kmalloc-cg-64 of size 64 [ 264.774318][ T8283] The buggy address is located 16 bytes inside of [ 264.774318][ T8283] allocated 40-byte region [ffff88801abb4d80, ffff88801abb4da8) [ 264.788295][ T8283] [ 264.790623][ T8283] The buggy address belongs to the physical page: [ 264.797038][ T8283] page:ffffea00006aed00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1abb4 [ 264.807199][ T8283] memcg:ffff8880788b8201 [ 264.811448][ T8283] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 264.819347][ T8283] page_type: 0xffffffff() [ 264.823684][ T8283] raw: 00fff00000000800 ffff888017c4da00 ffffea0001e292c0 0000000000000003 [ 264.832276][ T8283] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880788b8201 [ 264.840859][ T8283] page dumped because: kasan: bad access detected [ 264.847275][ T8283] page_owner tracks the page as allocated [ 264.852993][ T8283] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 6127187460, free_ts 0 [ 264.869583][ T8283] post_alloc_hook+0x1c1/0x200 [ 264.874362][ T8283] get_page_from_freelist+0x2181/0x22a0 [ 264.879916][ T8283] __alloc_pages+0x1f0/0x460 [ 264.884545][ T8283] alloc_page_interleave+0x24/0x1e0 [ 264.889778][ T8283] alloc_slab_page+0x5d/0x180 [ 264.894476][ T8283] new_slab+0x87/0x2d0 [ 264.898560][ T8283] ___slab_alloc+0xc5c/0x12f0 [ 264.903247][ T8283] __kmem_cache_alloc_node+0x11f/0x250 [ 264.908736][ T8283] __kmalloc_node+0xa6/0x240 [ 264.913342][ T8283] kvmalloc_node+0x70/0x180 [ 264.917859][ T8283] nf_hook_entries_grow+0x27c/0x710 [ 264.923069][ T8283] __nf_register_net_hook+0x2c9/0x910 [ 264.928457][ T8283] nf_register_net_hook+0xb2/0x190 [ 264.933584][ T8283] nf_register_net_hooks+0x44/0x1b0 [ 264.938797][ T8283] ops_init+0x391/0x640 [ 264.942965][ T8283] register_pernet_operations+0x2a7/0x610 [ 264.948694][ T8283] page_owner free stack trace missing [ 264.954067][ T8283] [ 264.956404][ T8283] Memory state around the buggy address: [ 264.962041][ T8283] ffff88801abb4c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 264.970107][ T8283] ffff88801abb4d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 264.978173][ T8283] >ffff88801abb4d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 264.986245][ T8283] ^ [ 264.991624][ T8283] ffff88801abb4e00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 264.999692][ T8283] ffff88801abb4e80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 265.007754][ T8283] ================================================================== [ 265.015819][ T8283] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 265.023015][ T8283] CPU: 0 PID: 8283 Comm: syz.2.778 Not tainted syzkaller #0 [ 265.030305][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.040374][ T8283] Call Trace: [ 265.043663][ T8283] [ 265.046600][ T8283] dump_stack_lvl+0x18c/0x250 [ 265.051294][ T8283] ? show_regs_print_info+0x20/0x20 [ 265.056503][ T8283] ? load_image+0x420/0x420 [ 265.061025][ T8283] panic+0x2ca/0x720 [ 265.064927][ T8283] ? __lock_acquire+0x7d80/0x7d80 [ 265.069966][ T8283] ? bpf_jit_dump+0xd0/0xd0 [ 265.074478][ T8283] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 265.080381][ T8283] ? _raw_spin_unlock+0x40/0x40 [ 265.085251][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 265.090379][ T8283] check_panic_on_warn+0x84/0xa0 [ 265.095335][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 265.100461][ T8283] end_report+0x6f/0x130 [ 265.104723][ T8283] kasan_report+0x128/0x150 [ 265.109238][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 265.114362][ T8283] kasan_check_range+0x241/0x290 [ 265.119313][ T8283] ? __bpf_get_stackid+0x6c7/0x900 [ 265.124437][ T8283] __asan_memcpy+0x40/0x70 [ 265.128868][ T8283] __bpf_get_stackid+0x6c7/0x900 [ 265.133825][ T8283] bpf_get_stackid_pe+0x343/0x410 [ 265.138872][ T8283] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 265.144342][ T8283] bpf_overflow_handler+0x1fc/0x510 [ 265.149559][ T8283] ? bpf_overflow_handler+0xde/0x510 [ 265.154859][ T8283] ? tp_perf_event_destroy+0x20/0x20 [ 265.160162][ T8283] ? verify_lock_unused+0x140/0x140 [ 265.165371][ T8283] ? __perf_event_account_interrupt+0x187/0x280 [ 265.171625][ T8283] __perf_event_overflow+0x461/0x660 [ 265.176950][ T8283] perf_swevent_overflow+0x274/0x340 [ 265.182270][ T8283] ? perf_event_switch_output+0x790/0x790 [ 265.188004][ T8283] ? rcu_is_watching+0x15/0xb0 [ 265.192782][ T8283] perf_swevent_event+0x45c/0x570 [ 265.197817][ T8283] ? perf_tp_event+0x1550/0x1550 [ 265.202788][ T8283] ___perf_sw_event+0x4ab/0x730 [ 265.207669][ T8283] ? ___perf_sw_event+0x19e/0x730 [ 265.212714][ T8283] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 265.219176][ T8283] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 265.225173][ T8283] ? lock_chain_count+0x20/0x20 [ 265.230037][ T8283] __perf_sw_event+0x139/0x270 [ 265.234817][ T8283] do_user_addr_fault+0x1242/0x12d0 [ 265.240034][ T8283] ? rcu_is_watching+0x15/0xb0 [ 265.244814][ T8283] exc_page_fault+0x64/0x100 [ 265.249418][ T8283] asm_exc_page_fault+0x26/0x30 [ 265.254290][ T8283] RIP: 0010:__put_user_4+0x11/0x20 [ 265.259408][ T8283] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 265.279030][ T8283] RSP: 0018:ffffc900041afe80 EFLAGS: 00050206 [ 265.285106][ T8283] RAX: 0000000000000009 RBX: 0000000000000000 RCX: 00002000000029c0 [ 265.293107][ T8283] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 265.301091][ T8283] RBP: 0000000000000009 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 265.309077][ T8283] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 0000000000000000 [ 265.317057][ T8283] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 265.327146][ T8283] __sys_socketpair+0xb8/0x550 [ 265.331937][ T8283] __x64_sys_socketpair+0x9b/0xb0 [ 265.336976][ T8283] do_syscall_64+0x55/0xb0 [ 265.341415][ T8283] ? clear_bhb_loop+0x40/0x90 [ 265.346133][ T8283] ? clear_bhb_loop+0x40/0x90 [ 265.350847][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.356765][ T8283] RIP: 0033:0x7f5949d9e159 [ 265.361192][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.380833][ T8283] RSP: 002b:00007f594ad27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 265.389258][ T8283] RAX: ffffffffffffffda RBX: 00007f594a025fa0 RCX: 00007f5949d9e159 [ 265.397239][ T8283] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 265.405220][ T8283] RBP: 00007f5949e3506b R08: 0000000000000000 R09: 0000000000000000 [ 265.413198][ T8283] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 265.421191][ T8283] R13: 00007f594a026038 R14: 00007f594a025fa0 R15: 00007ffe324a99c8 [ 265.429179][ T8283] [ 265.432328][ T8283] Kernel Offset: disabled [ 265.436649][ T8283] Rebooting in 86400 seconds..