last executing test programs: 18.10187342s ago: executing program 1 (id=2071): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048841) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d20000"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x84, 0x8}], 0x10}, 0x4045) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532315ad340eb", 0x27}, {&(0x7f00000007c0)="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", 0x774}], 0x3}, 0x400c0c8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_tracing={0x1a, 0x2e, &(0x7f0000001d40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x39}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001ec0)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001f40)={0x1, 0x0, 0x80000000}, 0x10, 0x1909a, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001f80)=[{0x4, 0x3, 0xd, 0x9}, {0x2, 0x5, 0xf}, {0x1, 0x3, 0xb, 0x7}, {0x1, 0x1, 0xc, 0x3}, {0x3, 0x4, 0xf, 0x9}], 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880) sendmsg(r5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af80501000000bfa200000000000007020000f8ffffffb70300000800820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r5, r2, 0x22, 0x2b, r3, @void, @void, @void, @value=r9, r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0x58, &(0x7f0000002100)}, 0x10) 16.892228802s ago: executing program 1 (id=2073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18a10d278d81452257000085000000972139c43477a629192210ec3d0000170000000000000000007ff785af"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r2, 0x29, 0x4, 0x0, 0xf000000) 16.708879977s ago: executing program 1 (id=2076): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x400454dc, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) (async) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00\x00'], 0x48) (async) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r5, 0x4004743c, 0xf0ff1f00000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) (async) r9 = gettid() perf_event_open(&(0x7f0000000b40)={0x3, 0x80, 0xff, 0x83, 0x4, 0xa, 0x0, 0xc0, 0x20, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x5}, 0x80, 0xfffffffffffffff9, 0x2, 0x4, 0xffffffff, 0x701, 0x5, 0x0, 0x1fc, 0x0, 0x7}, r9, 0xa, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@cgroup=r2, r7, 0x34, 0x2001, r4, @value=r3}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) (async) write$cgroup_subtree(r3, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.494350167s ago: executing program 0 (id=2117): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x499, 0xd8, &(0x7f0000000480)=""/216, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x570d, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x1, 0x5, 0x8, 0xb}, {0x2, 0x1, 0x10, 0x5}, {0x5, 0x3, 0x8, 0xc}], 0x10, 0xe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x31, &(0x7f0000000180)=""/49, 0x41000, 0xe, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x1, 0x8, 0x9}, 0x10, r0, r1, 0x6, &(0x7f0000000880)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3], &(0x7f00000008c0)=[{0x4, 0x5, 0x0, 0x1}, {0x2, 0x2, 0xd, 0x2}, {0x3, 0x1, 0x10, 0x2}, {0x3, 0x2, 0x7, 0xc}, {0x0, 0x5, 0xe}, {0x5, 0x4, 0x2, 0xb}], 0x10, 0x5}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x17, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r11}, 0x38) 6.244087174s ago: executing program 0 (id=2118): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x200000000000000a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b1e87dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r2) write$cgroup_devices(r0, &(0x7f0000000340)={'c', ' *:* ', 'r\x00'}, 0x8) (async) write$cgroup_devices(r0, &(0x7f0000000340)={'c', ' *:* ', 'r\x00'}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.116846244s ago: executing program 0 (id=2120): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/4096, 0xff2}, {&(0x7f0000000240)=""/175, 0xa6}, {&(0x7f0000000000)=""/49, 0x26}, {&(0x7f0000000f40)=""/126, 0x7e}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x10000, 0x5c, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) 3.518112557s ago: executing program 0 (id=2126): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) 3.114486428s ago: executing program 0 (id=2127): getpid() r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7c, &(0x7f0000000000)=r8, 0x8) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x33eb) 2.937744462s ago: executing program 3 (id=2129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e"], 0x18}, 0xc) 2.742895217s ago: executing program 3 (id=2131): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x499, 0xd8, &(0x7f0000000480)=""/216, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x570d, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x1, 0x5, 0x8, 0xb}, {0x2, 0x1, 0x10, 0x5}, {0x5, 0x3, 0x8, 0xc}], 0x10, 0xe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x31, &(0x7f0000000180)=""/49, 0x41000, 0xe, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x1, 0x8, 0x9}, 0x10, 0x0, r1, 0x5, &(0x7f0000000880)=[r2, r3, 0xffffffffffffffff, 0x1, r4], &(0x7f00000008c0)=[{0x2, 0x2, 0xd, 0x2}, {0x3, 0x1, 0x10, 0x2}, {0x3, 0x2, 0x7, 0xc}, {0x0, 0x5, 0xe}, {0x5, 0x4, 0x2, 0xb}], 0x10, 0x5}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x17, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r12}, 0x38) 2.129323294s ago: executing program 3 (id=2133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18a10d278d81452257000085000000972139c43477a629192210ec3d0000170000000000000000007ff785af"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r4}) setsockopt$sock_attach_bpf(r2, 0x29, 0x4, 0x0, 0xf000000) 1.815883282s ago: executing program 3 (id=2134): socket$kcm(0x2, 0x200000000000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) 1.758125393s ago: executing program 2 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x4000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.621315247s ago: executing program 2 (id=2136): r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x90d, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x4005, 0x35, 0x43a1bd78, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040), 0x5d) socketpair(0x23, 0x800, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x1ef, 0x0, &(0x7f0000000b40)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4}, 0xb) 1.5276589s ago: executing program 1 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000079100e000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x1ca}], 0x1232}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x200040d0}, 0x4004) sendmsg$tipc(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8004) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x64b, 0x400, 0x7, 0x9e, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa6}, [@ldst={0x0, 0x3, 0x4, 0x8, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x5f, &(0x7f0000000200)=""/95, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r8, r9], &(0x7f0000000380)=[{0x3, 0x5, 0x0, 0x7}, {0x1, 0x2, 0x4, 0x1}, {0x5, 0x4, 0x8, 0x3}, {0x2, 0x5, 0x7}, {0x3, 0x3, 0x2, 0x2}, {0x5, 0x5, 0x7, 0x5}, {0x0, 0x3, 0x3, 0xb}], 0x10, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) 1.432840232s ago: executing program 0 (id=2137): getpid() r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, r3, 0x2, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x7c, &(0x7f0000000000)=r9, 0x8) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x33eb) 1.431291142s ago: executing program 2 (id=2138): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x2000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {0x0}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x5}, 0x20) write$cgroup_subtree(r7, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r5, 0x12) r9 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000ff1f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000140081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x2000000) 889.882466ms ago: executing program 2 (id=2139): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x12}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}], 0x10}, 0x880) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) close(r1) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x3, 0x0, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 790.608429ms ago: executing program 3 (id=2140): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x499, 0xd8, &(0x7f0000000480)=""/216, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0x570d, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x1, 0x5, 0x8, 0xb}, {0x2, 0x1, 0x10, 0x5}, {0x5, 0x3, 0x8, 0xc}], 0x10, 0xe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x31, &(0x7f0000000180)=""/49, 0x41000, 0xe, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x1, 0x8, 0x9}, 0x10, 0x0, r1, 0x5, &(0x7f0000000880)=[r2, r3, 0xffffffffffffffff, 0x1, r4], &(0x7f00000008c0)=[{0x2, 0x2, 0xd, 0x2}, {0x3, 0x1, 0x10, 0x2}, {0x3, 0x2, 0x7, 0xc}, {0x0, 0x5, 0xe}, {0x5, 0x4, 0x2, 0xb}], 0x10, 0x5}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x17, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0x1000, r12}, 0x38) 639.392593ms ago: executing program 2 (id=2141): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x160) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="1400000016000f24fc60fde97e152cbf501b0000bd09d5c802", 0x14}, {&(0x7f0000000300)="f16175c9"}, {&(0x7f0000000380)="1863911db3e597ba52973ee68e206404971e280878ffcd578e6cad8159bce387c00c75043217dcac154411606c58dbbf7e3700506e6f5fc888b6481e3de3c140b65d0c80288bfa3777e33d009e2e99b415a9e80896d6acd5d463a1a27edbc9815375f9fffb294b06277b12430eee7431896777eb70c4cfff7c16"}], 0x1, 0x0, 0x43, 0x1400}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) 609.150544ms ago: executing program 1 (id=2142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18a10d278d81452257000085000000972139c43477a629192210ec3d0000170000000000000000007ff785af"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r4}) setsockopt$sock_attach_bpf(r2, 0x29, 0x4, 0x0, 0xf000000) 225.451864ms ago: executing program 1 (id=2143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x3, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r8, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={r9, r6}) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 95.088388ms ago: executing program 3 (id=2144): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@struct={0xb, 0x6, 0x0, 0x4, 0x0, 0x7, [{0xc, 0x2, 0xe}, {0x8, 0x5, 0xfffffff9}, {0xf, 0xfffffffe, 0x2}, {0xd, 0x3, 0x10001}, {0x1, 0x2}, {0x2, 0x2, 0x6}]}, @volatile={0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000340)=""/19, 0x86, 0x13}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff33}, 0xffffffffffffffa8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) r2 = gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa1c4, 0x32, 0x43a1bd72, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x184b}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="19c800200000dee08f00fb00000000d03362f1012ba753ac3b307c13a333d436793c30affa6a95b49474063f9b64549ebd76745b7f768f431723ebb0d05c34ba704cd5d858efb70a0305", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x34, 0x8}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000f785000000610000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000000ac0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x10049014) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x4979, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x4000, 0x0, 0x4, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x80005}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="d3705e09919641d2cc1501aa50f8639bcdeaf7932c6f2e98538fb5baa7b8dd99e2e2eb02bf2e4d5157237e34bc2ff988b9fcea5d991eaafb2397e2af8fa0e3b5fcfdff8909584f54fb7f7b16f93271ce743d", 0x52}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x4044}, 0x8841) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x28, &(0x7f0000000040), 0x4) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="5346f7f875528ef24043c68e04180a33", 0x10}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') kernel console output (not intermixed with test programs): [ 245.453425][ T8644] Use struct sctp_sack_info instead [ 245.576201][ T8650] netlink: 'syz.0.1129': attribute type 10 has an invalid length. [ 246.653524][ T8661] netlink: 'syz.3.1134': attribute type 10 has an invalid length. [ 246.891690][ T8648] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1130'. [ 246.910690][ T8648] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 248.011663][ T8677] netlink: 'syz.3.1141': attribute type 10 has an invalid length. [ 248.407289][ T8681] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1139'. [ 248.472931][ T8681] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 248.720548][ T8689] sctp: [Deprecated]: syz.1.1145 (pid 8689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.720548][ T8689] Use struct sctp_sack_info instead [ 249.997035][ T8703] netlink: 'syz.1.1151': attribute type 3 has an invalid length. [ 250.050832][ T8703] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1151'. [ 250.158176][ T8700] delete_channel: no stack [ 250.380336][ T8714] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1147'. [ 250.389686][ T8714] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 251.355651][ T8729] sctp: [Deprecated]: syz.2.1156 (pid 8729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.355651][ T8729] Use struct sctp_sack_info instead [ 251.382158][ T8728] syzkaller0: entered promiscuous mode [ 252.826976][ T8749] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 253.532667][ T8723] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1165'. [ 253.543354][ T8723] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 253.704391][ T8744] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1166'. [ 253.737274][ T8744] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 253.782541][ T8761] sctp: [Deprecated]: syz.3.1170 (pid 8761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.782541][ T8761] Use struct sctp_sack_info instead [ 254.021436][ T8769] netlink: 'syz.3.1174': attribute type 3 has an invalid length. [ 254.029363][ T8769] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1174'. [ 254.127013][ T8768] delete_channel: no stack [ 254.146402][ T8774] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 254.546190][ T8781] netlink: 'syz.3.1179': attribute type 10 has an invalid length. [ 254.696086][ T8785] sctp: [Deprecated]: syz.2.1181 (pid 8785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.696086][ T8785] Use struct sctp_sack_info instead [ 254.851625][ T8790] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 254.871927][ T8790] team0: Device nlmon0 is of different type [ 255.770773][ T8801] netlink: 'syz.1.1189': attribute type 10 has an invalid length. [ 255.967633][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974105][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.215023][ T8803] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 256.264341][ T8803] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1190'. [ 256.348206][ T8802] delete_channel: no stack [ 256.670328][ T8810] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 256.687388][ T8812] sctp: [Deprecated]: syz.1.1193 (pid 8812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.687388][ T8812] Use struct sctp_sack_info instead [ 256.858513][ T8808] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1186'. [ 256.946973][ T8808] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 257.130024][ T8820] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 257.140065][ T8820] team0: Device nlmon0 is of different type [ 257.157443][ T8818] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 257.891263][ T8834] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1180'. [ 257.939901][ T8834] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 258.212086][ T8841] netlink: 'syz.3.1202': attribute type 3 has an invalid length. [ 258.230511][ T8841] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1202'. [ 258.293664][ T8840] delete_channel: no stack [ 258.301762][ T8843] syzkaller0: entered promiscuous mode [ 258.540426][ T8848] sctp: [Deprecated]: syz.1.1203 (pid 8848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.540426][ T8848] Use struct sctp_sack_info instead [ 258.723874][ T8851] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 258.748168][ T8851] team0: Device nlmon0 is of different type [ 259.027811][ T8857] netlink: 'syz.0.1208': attribute type 10 has an invalid length. [ 259.125048][ T8860] netlink: 'syz.3.1210': attribute type 3 has an invalid length. [ 259.139975][ T8860] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1210'. [ 259.354744][ T8867] netlink: 'syz.0.1214': attribute type 3 has an invalid length. [ 259.366209][ T8867] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1214'. [ 259.402774][ T8858] delete_channel: no stack [ 259.426265][ T8866] delete_channel: no stack [ 259.574131][ T8870] sctp: [Deprecated]: syz.3.1217 (pid 8870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.574131][ T8870] Use struct sctp_sack_info instead [ 259.880190][ T8883] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 259.894605][ T8883] team0: Device nlmon0 is of different type [ 260.046804][ T8871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1216'. [ 260.069716][ T8871] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 260.500918][ T8891] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 260.698197][ T8896] netlink: 'syz.0.1225': attribute type 3 has an invalid length. [ 260.707040][ T8896] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1225'. [ 260.826367][ T8895] delete_channel: no stack [ 260.898928][ T8899] sctp: [Deprecated]: syz.1.1226 (pid 8899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.898928][ T8899] Use struct sctp_sack_info instead [ 261.123414][ T8903] netlink: 'syz.0.1228': attribute type 3 has an invalid length. [ 261.132880][ T8903] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1228'. [ 261.188327][ T8902] delete_channel: no stack [ 261.375097][ T8910] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1229'. [ 261.404561][ T8910] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 262.259653][ T8930] netlink: 'syz.1.1236': attribute type 3 has an invalid length. [ 262.277862][ T8930] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1236'. [ 262.407473][ T8929] delete_channel: no stack [ 262.481796][ T8933] sctp: [Deprecated]: syz.2.1237 (pid 8933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.481796][ T8933] Use struct sctp_sack_info instead [ 262.618811][ T8935] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1232'. [ 262.748901][ T8935] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 263.156360][ T8941] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1239'. [ 263.176251][ T8941] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 263.344156][ T8955] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 263.493672][ T8957] syzkaller0: entered promiscuous mode [ 264.132284][ T8964] sctp: [Deprecated]: syz.3.1247 (pid 8964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.132284][ T8964] Use struct sctp_sack_info instead [ 264.235742][ T8971] netlink: 'syz.2.1246': attribute type 3 has an invalid length. [ 264.245905][ T8971] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1246'. [ 264.366708][ T8965] delete_channel: no stack [ 264.678052][ T8918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1233'. [ 265.061488][ T8918] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 266.120921][ T8984] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1249'. [ 266.350146][ T8984] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 266.447119][ T8991] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 266.602315][ T8981] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1251'. [ 266.612446][ T8981] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 267.456468][ T9001] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 267.474385][ T9002] sctp: [Deprecated]: syz.1.1257 (pid 9002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.474385][ T9002] Use struct sctp_sack_info instead [ 267.498873][ T9001] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1258'. [ 267.591128][ T9000] delete_channel: no stack [ 268.052720][ T9007] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1256'. [ 268.188696][ T9007] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 268.505878][ T9020] netlink: 'syz.0.1264': attribute type 10 has an invalid length. [ 268.881669][ T9017] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1263'. [ 268.891352][ T9017] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 270.179004][ T9042] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 270.187893][ T9042] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1270'. [ 270.254664][ T9041] delete_channel: no stack [ 270.396326][ T9043] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1266'. [ 270.458200][ T9043] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 271.395770][ T9063] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 271.911569][ T9058] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1276'. [ 271.936398][ T9058] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 272.441647][ T9077] netlink: 'syz.2.1282': attribute type 3 has an invalid length. [ 272.449570][ T9077] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1282'. [ 272.535635][ T9076] delete_channel: no stack [ 272.574450][ T9082] FAULT_INJECTION: forcing a failure. [ 272.574450][ T9082] name failslab, interval 1, probability 0, space 0, times 1 [ 272.599874][ T9082] CPU: 1 PID: 9082 Comm: syz.1.1284 Not tainted syzkaller #0 [ 272.607326][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.617422][ T9082] Call Trace: [ 272.620701][ T9082] [ 272.623627][ T9082] dump_stack_lvl+0x18c/0x250 [ 272.628439][ T9082] ? show_regs_print_info+0x20/0x20 [ 272.633654][ T9082] ? load_image+0x420/0x420 [ 272.638211][ T9082] ? __might_sleep+0xe0/0xe0 [ 272.642940][ T9082] ? __lock_acquire+0x7d80/0x7d80 [ 272.647995][ T9082] should_fail_ex+0x394/0x4c0 [ 272.652702][ T9082] should_failslab+0x9/0x20 [ 272.657222][ T9082] slab_pre_alloc_hook+0x59/0x300 [ 272.662280][ T9082] ? __request_module+0x2ed/0x600 [ 272.667303][ T9082] ? __request_module+0x2ed/0x600 [ 272.672323][ T9082] __kmem_cache_alloc_node+0x53/0x250 [ 272.677712][ T9082] ? __request_module+0x2ed/0x600 [ 272.682731][ T9082] __kmalloc_node_track_caller+0xa4/0x230 [ 272.688470][ T9082] kstrdup+0x3b/0x80 [ 272.692365][ T9082] __request_module+0x2ed/0x600 [ 272.697217][ T9082] ? end_current_label_crit_section+0x170/0x170 [ 272.703515][ T9082] ? module_enforce_rwx_sections+0x150/0x150 [ 272.709507][ T9082] ? apparmor_capable+0x137/0x1a0 [ 272.714540][ T9082] ? capable+0x88/0xe0 [ 272.718609][ T9082] ? dev_load+0x21/0x1f0 [ 272.722975][ T9082] devinet_ioctl+0x127/0x1d70 [ 272.727685][ T9082] ? __might_fault+0xc6/0x120 [ 272.732445][ T9082] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 272.737561][ T9082] ? _copy_from_user+0xa5/0xe0 [ 272.742327][ T9082] ? get_user_ifreq+0x12b/0x180 [ 272.747241][ T9082] inet_ioctl+0x42b/0x560 [ 272.751577][ T9082] ? tomoyo_path_number_perm+0x217/0x5e0 [ 272.757209][ T9082] ? inet_shutdown+0x370/0x370 [ 272.761975][ T9082] ? slab_free_freelist_hook+0x130/0x1a0 [ 272.767604][ T9082] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 272.773233][ T9082] ? __kmem_cache_free+0xba/0x1f0 [ 272.778266][ T9082] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 272.783728][ T9082] ? packet_ioctl+0x280/0x350 [ 272.788493][ T9082] sock_do_ioctl+0xfc/0x310 [ 272.793001][ T9082] ? sock_show_fdinfo+0xb0/0xb0 [ 272.797860][ T9082] sock_ioctl+0x5be/0x7e0 [ 272.802189][ T9082] ? sock_poll+0x3e0/0x3e0 [ 272.806608][ T9082] ? bpf_lsm_file_ioctl+0x9/0x10 [ 272.811563][ T9082] ? security_file_ioctl+0x80/0xa0 [ 272.816684][ T9082] ? sock_poll+0x3e0/0x3e0 [ 272.821208][ T9082] __se_sys_ioctl+0xfd/0x170 [ 272.825815][ T9082] do_syscall_64+0x55/0xb0 [ 272.830230][ T9082] ? clear_bhb_loop+0x40/0x90 [ 272.834979][ T9082] ? clear_bhb_loop+0x40/0x90 [ 272.839649][ T9082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.845547][ T9082] RIP: 0033:0x7f605d59e159 [ 272.849961][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.869568][ T9082] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.877982][ T9082] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 272.885948][ T9082] RDX: 0000200000000440 RSI: 000000000000891a RDI: 0000000000000003 [ 272.893915][ T9082] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.901904][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.909872][ T9082] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 272.917850][ T9082] [ 273.210118][ T9091] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 274.133715][ T9105] netlink: 'syz.3.1294': attribute type 3 has an invalid length. [ 274.172833][ T9105] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1294'. [ 274.231716][ T9104] delete_channel: no stack [ 274.260606][ T9108] Zero length message leads to an empty skb [ 274.761401][ T9112] FAULT_INJECTION: forcing a failure. [ 274.761401][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 274.775219][ T9112] CPU: 1 PID: 9112 Comm: syz.3.1296 Not tainted syzkaller #0 [ 274.782623][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.792692][ T9112] Call Trace: [ 274.795969][ T9112] [ 274.798893][ T9112] dump_stack_lvl+0x18c/0x250 [ 274.803575][ T9112] ? show_regs_print_info+0x20/0x20 [ 274.808774][ T9112] ? load_image+0x420/0x420 [ 274.813276][ T9112] ? __might_sleep+0xe0/0xe0 [ 274.817865][ T9112] ? __lock_acquire+0x7d80/0x7d80 [ 274.822890][ T9112] should_fail_ex+0x394/0x4c0 [ 274.827602][ T9112] should_failslab+0x9/0x20 [ 274.832106][ T9112] slab_pre_alloc_hook+0x59/0x300 [ 274.837135][ T9112] kmem_cache_alloc_node+0x5e/0x310 [ 274.842344][ T9112] ? __alloc_skb+0x103/0x2c0 [ 274.846936][ T9112] __alloc_skb+0x103/0x2c0 [ 274.851349][ T9112] alloc_skb_with_frags+0xcd/0x7a0 [ 274.856490][ T9112] sock_alloc_send_pskb+0x883/0x9a0 [ 274.861704][ T9112] ? sock_kzfree_s+0x50/0x50 [ 274.866305][ T9112] tun_get_user+0xa2e/0x3d70 [ 274.870939][ T9112] ? lock_chain_count+0x20/0x20 [ 274.875786][ T9112] ? rcu_read_unlock+0xa0/0xa0 [ 274.880556][ T9112] ? tun_get+0x1c/0x2e0 [ 274.884704][ T9112] ? __lock_acquire+0x7d80/0x7d80 [ 274.889728][ T9112] ? lock_is_held_type+0x13e/0x190 [ 274.894927][ T9112] ? tun_get+0x1c/0x2e0 [ 274.899084][ T9112] tun_chr_write_iter+0x119/0x200 [ 274.904106][ T9112] vfs_write+0x474/0x9a0 [ 274.908352][ T9112] ? file_end_write+0x250/0x250 [ 274.913219][ T9112] ? __fget_files+0x3fc/0x460 [ 274.917899][ T9112] ? __fdget_pos+0x1d8/0x330 [ 274.922483][ T9112] ? ksys_write+0x74/0x260 [ 274.926914][ T9112] ksys_write+0x151/0x260 [ 274.931243][ T9112] ? __ia32_sys_read+0x90/0x90 [ 274.936009][ T9112] ? lockdep_hardirqs_on+0x98/0x150 [ 274.941209][ T9112] do_syscall_64+0x55/0xb0 [ 274.945619][ T9112] ? clear_bhb_loop+0x40/0x90 [ 274.950293][ T9112] ? clear_bhb_loop+0x40/0x90 [ 274.954965][ T9112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.960852][ T9112] RIP: 0033:0x7f726ab9e159 [ 274.965259][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.984863][ T9112] RSP: 002b:00007f726ba41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.993278][ T9112] RAX: ffffffffffffffda RBX: 00007f726ae25fa0 RCX: 00007f726ab9e159 [ 275.001247][ T9112] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 275.009209][ T9112] RBP: 00007f726ba41090 R08: 0000000000000000 R09: 0000000000000000 [ 275.017177][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.025143][ T9112] R13: 00007f726ae26038 R14: 00007f726ae25fa0 R15: 00007fff8a7fbc38 [ 275.033122][ T9112] [ 275.109517][ T9113] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1290'. [ 275.144798][ T9113] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 275.560444][ T9120] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 276.525596][ T9138] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 276.599960][ T9138] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1304'. [ 276.701322][ T9137] delete_channel: no stack [ 277.846025][ T9153] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1308'. [ 277.960184][ T9153] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 278.375719][ T9159] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 278.641072][ T9166] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 279.087030][ T9172] netlink: 'syz.1.1316': attribute type 3 has an invalid length. [ 279.132841][ T9172] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1316'. [ 279.355919][ T9171] delete_channel: no stack [ 280.844028][ T9187] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 281.952833][ T9210] netlink: 'syz.2.1329': attribute type 39 has an invalid length. [ 282.262609][ T9216] netlink: 'syz.0.1330': attribute type 28 has an invalid length. [ 282.423317][ T9220] netlink: 'syz.3.1334': attribute type 10 has an invalid length. [ 282.469893][ T9216] netlink: 'syz.0.1330': attribute type 29 has an invalid length. [ 282.540229][ T9216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.261953][ T9232] FAULT_INJECTION: forcing a failure. [ 283.261953][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 283.296153][ T9232] CPU: 1 PID: 9232 Comm: syz.1.1339 Not tainted syzkaller #0 [ 283.303936][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.314015][ T9232] Call Trace: [ 283.317310][ T9232] [ 283.320250][ T9232] dump_stack_lvl+0x18c/0x250 [ 283.324950][ T9232] ? show_regs_print_info+0x20/0x20 [ 283.330159][ T9232] ? load_image+0x420/0x420 [ 283.334680][ T9232] ? __might_sleep+0xe0/0xe0 [ 283.339290][ T9232] ? __lock_acquire+0x7d80/0x7d80 [ 283.344337][ T9232] should_fail_ex+0x394/0x4c0 [ 283.349053][ T9232] should_failslab+0x9/0x20 [ 283.353577][ T9232] slab_pre_alloc_hook+0x59/0x300 [ 283.358623][ T9232] ? __lock_acquire+0x7d80/0x7d80 [ 283.363671][ T9232] kmem_cache_alloc_node+0x5e/0x310 [ 283.368897][ T9232] ? __alloc_skb+0x103/0x2c0 [ 283.373522][ T9232] __alloc_skb+0x103/0x2c0 [ 283.377961][ T9232] netlink_sendmsg+0x66a/0xbf0 [ 283.382847][ T9232] ? netlink_getsockopt+0x590/0x590 [ 283.388151][ T9232] ? apparmor_socket_sendmsg+0x8e/0x330 [ 283.393716][ T9232] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.399113][ T9232] ? security_socket_sendmsg+0x80/0xa0 [ 283.404597][ T9232] ? netlink_getsockopt+0x590/0x590 [ 283.409814][ T9232] ____sys_sendmsg+0x61b/0x980 [ 283.414613][ T9232] ? __asan_memset+0x22/0x40 [ 283.419231][ T9232] ? __sys_sendmsg_sock+0x30/0x30 [ 283.424281][ T9232] ? __import_iovec+0x5f2/0x850 [ 283.429160][ T9232] ? import_iovec+0x73/0xa0 [ 283.433681][ T9232] ___sys_sendmsg+0x2a6/0x360 [ 283.438377][ T9232] ? get_pid_task+0x20/0x1e0 [ 283.442997][ T9232] ? __sys_sendmsg+0x2b0/0x2b0 [ 283.447843][ T9232] ? __lock_acquire+0x7d80/0x7d80 [ 283.452922][ T9232] __se_sys_sendmsg+0x1d0/0x2c0 [ 283.457810][ T9232] ? __x64_sys_sendmsg+0x80/0x80 [ 283.462782][ T9232] ? lockdep_hardirqs_on+0x98/0x150 [ 283.468011][ T9232] do_syscall_64+0x55/0xb0 [ 283.472447][ T9232] ? clear_bhb_loop+0x40/0x90 [ 283.477287][ T9232] ? clear_bhb_loop+0x40/0x90 [ 283.482004][ T9232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.487916][ T9232] RIP: 0033:0x7f605d59e159 [ 283.492382][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.512017][ T9232] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.520467][ T9232] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 283.528457][ T9232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 283.536442][ T9232] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.544431][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.552424][ T9232] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 283.560436][ T9232] [ 284.423302][ T9249] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 284.557225][ T9253] netlink: 'syz.2.1346': attribute type 4 has an invalid length. [ 284.587111][ T9255] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 284.603107][ T9255] team0: Device nlmon0 is of different type [ 286.501657][ T9268] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1348'. [ 286.511801][ T9268] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 287.269313][ T9278] netlink: 'syz.3.1354': attribute type 10 has an invalid length. [ 287.670695][ T9282] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 287.701799][ T9282] team0: Device nlmon0 is of different type [ 288.057397][ T9292] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1360'. [ 288.728861][ T9301] netlink: 'syz.1.1364': attribute type 10 has an invalid length. [ 288.980511][ T9307] netlink: 'syz.1.1367': attribute type 10 has an invalid length. [ 288.995251][ T9309] netlink: 'syz.2.1368': attribute type 3 has an invalid length. [ 289.013515][ T9309] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1368'. [ 289.019482][ T9307] team0: Device nlmon0 is of different type [ 289.066302][ T9308] delete_channel: no stack [ 289.915281][ T9321] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1372'. [ 290.356447][ T9330] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 290.993993][ T9338] netlink: 'syz.1.1379': attribute type 3 has an invalid length. [ 291.042938][ T9338] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1379'. [ 291.155829][ T9337] delete_channel: no stack [ 291.499081][ T9316] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1369'. [ 291.532499][ T9316] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 291.886647][ T9357] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1385'. [ 291.983113][ T9361] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 292.677814][ T9371] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 292.819418][ T9371] team0 (unregistering): Port device team_slave_0 removed [ 292.871744][ T9371] team0 (unregistering): Port device team_slave_1 removed [ 292.917950][ T9371] team0 (unregistering): Port device geneve1 removed [ 293.310931][ T9386] netlink: 'syz.1.1398': attribute type 10 has an invalid length. [ 293.355417][ T9388] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1395'. [ 293.365454][ T9388] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 293.509168][ T9393] FAULT_INJECTION: forcing a failure. [ 293.509168][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 293.549946][ T9393] CPU: 1 PID: 9393 Comm: syz.1.1401 Not tainted syzkaller #0 [ 293.557382][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.567558][ T9393] Call Trace: [ 293.570857][ T9393] [ 293.573809][ T9393] dump_stack_lvl+0x18c/0x250 [ 293.578518][ T9393] ? show_regs_print_info+0x20/0x20 [ 293.583755][ T9393] ? load_image+0x420/0x420 [ 293.588289][ T9393] ? __might_fault+0xaa/0x120 [ 293.592989][ T9393] ? __lock_acquire+0x7d80/0x7d80 [ 293.598040][ T9393] should_fail_ex+0x394/0x4c0 [ 293.602753][ T9393] _copy_from_user+0x2f/0xe0 [ 293.607372][ T9393] __sys_bpf+0x23e/0x890 [ 293.611733][ T9393] ? bpf_link_show_fdinfo+0x390/0x390 [ 293.617136][ T9393] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.623301][ T9393] __x64_sys_bpf+0x7c/0x90 [ 293.627717][ T9393] do_syscall_64+0x55/0xb0 [ 293.632155][ T9393] ? clear_bhb_loop+0x40/0x90 [ 293.636841][ T9393] ? clear_bhb_loop+0x40/0x90 [ 293.641528][ T9393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.647416][ T9393] RIP: 0033:0x7f605d59e159 [ 293.651831][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.671434][ T9393] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.679845][ T9393] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 293.687815][ T9393] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 293.695801][ T9393] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.703781][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.711763][ T9393] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 293.719833][ T9393] [ 294.369892][ T9405] netlink: 'syz.2.1405': attribute type 29 has an invalid length. [ 295.190226][ T9405] netlink: 'syz.2.1405': attribute type 29 has an invalid length. [ 295.326874][ T9420] netlink: 'syz.1.1409': attribute type 10 has an invalid length. [ 296.441748][ T9428] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1412'. [ 296.541812][ T9422] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1410'. [ 296.664966][ T9422] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 297.381082][ T9442] netlink: 'syz.3.1417': attribute type 2 has an invalid length. [ 297.391423][ T9442] netlink: 'syz.3.1417': attribute type 8 has an invalid length. [ 297.430998][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1417'. [ 297.521888][ T9442] netlink: 'syz.3.1417': attribute type 2 has an invalid length. [ 297.578597][ T9453] netlink: 'syz.1.1419': attribute type 3 has an invalid length. [ 297.591182][ T9442] netlink: 'syz.3.1417': attribute type 8 has an invalid length. [ 297.599414][ T9453] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1419'. [ 297.609626][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1417'. [ 297.643485][ T9451] delete_channel: no stack [ 297.720682][ T9444] veth1_macvtap: left promiscuous mode [ 297.759985][ T9447] veth1_macvtap: entered promiscuous mode [ 297.856865][ T9447] macsec0: entered promiscuous mode [ 297.890222][ T9447] macsec0: entered allmulticast mode [ 297.895591][ T9447] veth1_macvtap: entered allmulticast mode [ 297.968679][ T9462] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 300.149873][ T9491] netlink: 'syz.1.1429': attribute type 3 has an invalid length. [ 300.158682][ T9491] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1429'. [ 300.225831][ T9490] delete_channel: no stack [ 300.329507][ T9500] sctp: [Deprecated]: syz.0.1431 (pid 9500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.329507][ T9500] Use struct sctp_sack_info instead [ 300.494721][ T9494] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1423'. [ 300.525491][ T9494] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 300.886967][ T5787] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 302.863289][ T9535] sctp: [Deprecated]: syz.2.1440 (pid 9535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.863289][ T9535] Use struct sctp_sack_info instead [ 302.878471][ T9539] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 302.888234][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1443'. [ 302.906213][ T9538] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 302.916440][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 303.239518][ T9548] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 303.382813][ T9545] netlink: 'syz.0.1441': attribute type 3 has an invalid length. [ 303.486617][ T9545] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1441'. [ 303.766515][ T9541] delete_channel: no stack [ 304.509508][ T9565] syzkaller0: entered promiscuous mode [ 304.545392][ T9570] netlink: 'syz.2.1451': attribute type 3 has an invalid length. [ 304.553762][ T9570] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1451'. [ 304.665520][ T9569] delete_channel: no stack [ 304.837367][ T9573] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.205226][ T9578] sctp: [Deprecated]: syz.2.1453 (pid 9578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.205226][ T9578] Use struct sctp_sack_info instead [ 305.244155][ T9573] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.280786][ T9572] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.293131][ T9574] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.368540][ T9575] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.442944][ T9583] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 305.450054][ T9560] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1448'. [ 305.470746][ T9560] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 305.486192][ T9573] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 305.850999][ T5777] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 305.859998][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 305.869558][ T5777] CPU: 0 PID: 5777 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 305.877154][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.887244][ T5777] Workqueue: hci2 hci_rx_work [ 305.892094][ T5777] Call Trace: [ 305.895399][ T5777] [ 305.898351][ T5777] dump_stack_lvl+0x18c/0x250 [ 305.903069][ T5777] ? show_regs_print_info+0x20/0x20 [ 305.908319][ T5777] ? load_image+0x420/0x420 [ 305.912869][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 305.918051][ T5777] ? __lock_acquire+0x7d80/0x7d80 [ 305.923108][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 305.927820][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 305.933059][ T5777] kobject_add_internal+0x617/0xc90 [ 305.938325][ T5777] kobject_add+0x164/0x240 [ 305.942799][ T5777] ? kobject_init+0x1d0/0x1d0 [ 305.947549][ T5777] ? get_device_parent+0x366/0x390 [ 305.952729][ T5777] device_add+0x3fa/0xc40 [ 305.957096][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 305.962173][ T5777] le_conn_complete_evt+0xe9f/0x1480 [ 305.967500][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 305.973791][ T5777] ? bt_info+0x180/0x180 [ 305.978072][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 305.983838][ T5777] ? mutex_unlock+0x10/0x10 [ 305.988382][ T5777] ? skb_pull_data+0xf0/0x1f0 [ 305.993094][ T5777] hci_le_enh_conn_complete_evt+0x189/0x460 [ 305.999030][ T5777] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 306.005488][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 306.011602][ T5777] hci_event_packet+0x7b4/0x1280 [ 306.016585][ T5777] ? __lock_acquire+0x7d80/0x7d80 [ 306.021645][ T5777] ? lock_chain_count+0x20/0x20 [ 306.026522][ T5777] ? bis_list+0x290/0x290 [ 306.030894][ T5777] ? kcov_remote_start+0x513/0x810 [ 306.036075][ T5777] ? lockdep_hardirqs_on+0x98/0x150 [ 306.041318][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 306.046552][ T5777] hci_rx_work+0x43a/0xd60 [ 306.051013][ T5777] ? process_scheduled_works+0x975/0x1600 [ 306.056784][ T5777] process_scheduled_works+0xa60/0x1600 [ 306.062401][ T5777] ? worker_attach_to_pool+0x370/0x370 [ 306.067904][ T5777] ? assign_work+0x3cc/0x5d0 [ 306.072532][ T5777] worker_thread+0xa5e/0xfe0 [ 306.077173][ T5777] ? _raw_spin_unlock+0x40/0x40 [ 306.082047][ T5777] ? __kthread_parkme+0x71/0x1c0 [ 306.087033][ T5777] kthread+0x2fa/0x390 [ 306.091133][ T5777] ? pr_cont_work+0x550/0x550 [ 306.095847][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 306.100463][ T5777] ret_from_fork+0x48/0x80 [ 306.104935][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 306.109562][ T5777] ret_from_fork_asm+0x11/0x20 [ 306.114419][ T5777] [ 306.119824][ T5777] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.134045][ T5777] Bluetooth: hci2: failed to register connection device [ 306.242505][ T9595] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1457'. [ 306.267370][ T9594] delete_channel: no stack [ 306.324525][ T9599] sctp: [Deprecated]: syz.3.1462 (pid 9599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.324525][ T9599] Use struct sctp_sack_info instead [ 306.468835][ T9604] syzkaller0: entered promiscuous mode [ 306.534282][ T9606] team0: Device nlmon0 is of different type [ 306.823285][ T9613] FAULT_INJECTION: forcing a failure. [ 306.823285][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 306.847239][ T9613] CPU: 1 PID: 9613 Comm: syz.2.1466 Not tainted syzkaller #0 [ 306.854680][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.864760][ T9613] Call Trace: [ 306.868049][ T9613] [ 306.870997][ T9613] dump_stack_lvl+0x18c/0x250 [ 306.875711][ T9613] ? show_regs_print_info+0x20/0x20 [ 306.880945][ T9613] ? load_image+0x420/0x420 [ 306.885537][ T9613] ? __might_sleep+0xe0/0xe0 [ 306.890165][ T9613] ? __lock_acquire+0x7d80/0x7d80 [ 306.895228][ T9613] should_fail_ex+0x394/0x4c0 [ 306.899942][ T9613] should_failslab+0x9/0x20 [ 306.904481][ T9613] slab_pre_alloc_hook+0x59/0x300 [ 306.909540][ T9613] ? call_usermodehelper_setup+0x8e/0x260 [ 306.915292][ T9613] __kmem_cache_alloc_node+0x53/0x250 [ 306.920728][ T9613] ? call_usermodehelper_setup+0x8e/0x260 [ 306.926517][ T9613] kmalloc_trace+0x2a/0xe0 [ 306.930987][ T9613] call_usermodehelper_setup+0x8e/0x260 [ 306.936564][ T9613] ? __request_module+0x600/0x600 [ 306.941626][ T9613] __request_module+0x3bb/0x600 [ 306.946509][ T9613] ? end_current_label_crit_section+0x170/0x170 [ 306.952776][ T9613] ? module_enforce_rwx_sections+0x150/0x150 [ 306.958781][ T9613] ? apparmor_capable+0x137/0x1a0 [ 306.963834][ T9613] ? capable+0x88/0xe0 [ 306.967923][ T9613] ? dev_load+0x21/0x1f0 [ 306.972190][ T9613] devinet_ioctl+0x127/0x1d70 [ 306.976895][ T9613] ? __might_fault+0xc6/0x120 [ 306.981598][ T9613] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 306.986737][ T9613] ? _copy_from_user+0xa5/0xe0 [ 306.991520][ T9613] ? get_user_ifreq+0x12b/0x180 [ 306.996394][ T9613] inet_ioctl+0x42b/0x560 [ 307.000743][ T9613] ? tomoyo_path_number_perm+0x217/0x5e0 [ 307.006395][ T9613] ? inet_shutdown+0x370/0x370 [ 307.011220][ T9613] ? slab_free_freelist_hook+0x130/0x1a0 [ 307.016869][ T9613] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 307.022524][ T9613] ? __kmem_cache_free+0xba/0x1f0 [ 307.027584][ T9613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 307.033096][ T9613] ? packet_ioctl+0x280/0x350 [ 307.037795][ T9613] sock_do_ioctl+0xfc/0x310 [ 307.042326][ T9613] ? sock_show_fdinfo+0xb0/0xb0 [ 307.047210][ T9613] sock_ioctl+0x5be/0x7e0 [ 307.051561][ T9613] ? sock_poll+0x3e0/0x3e0 [ 307.056010][ T9613] ? bpf_lsm_file_ioctl+0x9/0x10 [ 307.060969][ T9613] ? security_file_ioctl+0x80/0xa0 [ 307.066111][ T9613] ? sock_poll+0x3e0/0x3e0 [ 307.070554][ T9613] __se_sys_ioctl+0xfd/0x170 [ 307.075249][ T9613] do_syscall_64+0x55/0xb0 [ 307.079717][ T9613] ? clear_bhb_loop+0x40/0x90 [ 307.084433][ T9613] ? clear_bhb_loop+0x40/0x90 [ 307.089116][ T9613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.095011][ T9613] RIP: 0033:0x7f9888f9e159 [ 307.099421][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.119034][ T9613] RSP: 002b:00007f9889ea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.127450][ T9613] RAX: ffffffffffffffda RBX: 00007f9889225fa0 RCX: 00007f9888f9e159 [ 307.135419][ T9613] RDX: 0000200000000440 RSI: 000000000000891a RDI: 0000000000000004 [ 307.143389][ T9613] RBP: 00007f9889ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 307.151371][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.159365][ T9613] R13: 00007f9889226038 R14: 00007f9889225fa0 R15: 00007ffce6dbef38 [ 307.167369][ T9613] [ 308.151392][ T9630] sctp: [Deprecated]: syz.1.1471 (pid 9630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.151392][ T9630] Use struct sctp_sack_info instead [ 308.194997][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 308.465794][ T9636] validate_nla: 2 callbacks suppressed [ 308.465837][ T9636] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 308.558303][ T9636] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1472'. [ 308.558413][ T9616] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1467'. [ 308.578951][ T9616] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 308.613580][ T9635] delete_channel: no stack [ 308.703951][ T9649] netlink: 'syz.1.1476': attribute type 10 has an invalid length. [ 308.724085][ T9649] team0: Device nlmon0 is of different type [ 308.972093][ T9663] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 308.984101][ T5777] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 308.993638][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 309.004294][ T5777] CPU: 0 PID: 5777 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 309.011878][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.021940][ T5777] Workqueue: hci1 hci_rx_work [ 309.026635][ T5777] Call Trace: [ 309.029911][ T5777] [ 309.032838][ T5777] dump_stack_lvl+0x18c/0x250 [ 309.037523][ T5777] ? show_regs_print_info+0x20/0x20 [ 309.042722][ T5777] ? load_image+0x420/0x420 [ 309.047232][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 309.052347][ T5777] ? __lock_acquire+0x7d80/0x7d80 [ 309.057376][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 309.062055][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 309.067269][ T5777] kobject_add_internal+0x617/0xc90 [ 309.072482][ T5777] kobject_add+0x164/0x240 [ 309.076937][ T5777] ? kobject_init+0x1d0/0x1d0 [ 309.081650][ T5777] ? get_device_parent+0x366/0x390 [ 309.086782][ T5777] device_add+0x3fa/0xc40 [ 309.091124][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 309.096070][ T5777] le_conn_complete_evt+0xe9f/0x1480 [ 309.101368][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 309.107650][ T5777] ? bt_info+0x180/0x180 [ 309.111897][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 309.117539][ T5777] ? mutex_unlock+0x10/0x10 [ 309.122084][ T5777] ? skb_pull_data+0xf0/0x1f0 [ 309.126766][ T5777] hci_le_enh_conn_complete_evt+0x189/0x460 [ 309.132662][ T5777] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 309.139077][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 309.145148][ T5777] hci_event_packet+0x7b4/0x1280 [ 309.150093][ T5777] ? __lock_acquire+0x7d80/0x7d80 [ 309.155118][ T5777] ? lock_chain_count+0x20/0x20 [ 309.159970][ T5777] ? bis_list+0x290/0x290 [ 309.164302][ T5777] ? kcov_remote_start+0x513/0x810 [ 309.169417][ T5777] ? lockdep_hardirqs_on+0x98/0x150 [ 309.174645][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 309.179845][ T5777] hci_rx_work+0x43a/0xd60 [ 309.184266][ T5777] ? process_scheduled_works+0x975/0x1600 [ 309.189990][ T5777] process_scheduled_works+0xa60/0x1600 [ 309.195562][ T5777] ? worker_attach_to_pool+0x370/0x370 [ 309.201031][ T5777] ? assign_work+0x3cc/0x5d0 [ 309.205631][ T5777] worker_thread+0xa5e/0xfe0 [ 309.210235][ T5777] ? _raw_spin_unlock+0x40/0x40 [ 309.215088][ T5777] ? __kthread_parkme+0x71/0x1c0 [ 309.220030][ T5777] kthread+0x2fa/0x390 [ 309.224097][ T5777] ? pr_cont_work+0x550/0x550 [ 309.228775][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 309.233372][ T5777] ret_from_fork+0x48/0x80 [ 309.237795][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 309.242379][ T5777] ret_from_fork_asm+0x11/0x20 [ 309.247155][ T5777] [ 309.259749][ T5777] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.262080][ T9663] team0: Device nlmon0 is of different type [ 309.274084][ T5777] Bluetooth: hci1: failed to register connection device [ 309.869288][ T9671] sctp: [Deprecated]: syz.3.1482 (pid 9671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.869288][ T9671] Use struct sctp_sack_info instead [ 310.166665][ T9679] netlink: 'syz.3.1485': attribute type 3 has an invalid length. [ 310.193738][ T9679] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1485'. [ 310.282071][ T9676] delete_channel: no stack [ 310.781985][ T9686] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 310.821978][ T9686] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 310.842526][ T9687] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 310.869077][ T9686] netlink: 'syz.3.1491': attribute type 1 has an invalid length. [ 310.878998][ T9686] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1491'. [ 311.314316][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 311.448401][ T9690] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1486'. [ 311.486033][ T9694] netlink: 'syz.2.1492': attribute type 10 has an invalid length. [ 311.495654][ T9690] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 311.543011][ T9697] sctp: [Deprecated]: syz.0.1493 (pid 9697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.543011][ T9697] Use struct sctp_sack_info instead [ 311.776648][ T9702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1496'. [ 311.925759][ T9708] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 312.025216][ T9711] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1499'. [ 312.094085][ T9710] delete_channel: no stack [ 312.124351][ T9713] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1500'. [ 312.180619][ T9713] __sock_release: fasync list not empty! [ 312.368053][ T9717] team0: Device nlmon0 is of different type [ 312.397280][ T9719] sctp: [Deprecated]: syz.2.1503 (pid 9719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.397280][ T9719] Use struct sctp_sack_info instead [ 314.173164][ T9731] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1505'. [ 314.304819][ T9733] FAULT_INJECTION: forcing a failure. [ 314.304819][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.322635][ T9733] CPU: 0 PID: 9733 Comm: syz.1.1508 Not tainted syzkaller #0 [ 314.330071][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.339853][ T9731] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 314.340133][ T9733] Call Trace: [ 314.351540][ T9733] [ 314.354590][ T9733] dump_stack_lvl+0x18c/0x250 [ 314.359312][ T9733] ? show_regs_print_info+0x20/0x20 [ 314.364551][ T9733] ? load_image+0x420/0x420 [ 314.369095][ T9733] ? __lock_acquire+0x7d80/0x7d80 [ 314.374157][ T9733] ? snprintf+0xe9/0x140 [ 314.378484][ T9733] should_fail_ex+0x394/0x4c0 [ 314.383215][ T9733] _copy_to_user+0x2f/0xa0 [ 314.387645][ T9733] simple_read_from_buffer+0xe7/0x150 [ 314.393034][ T9733] proc_fail_nth_read+0x1e8/0x260 [ 314.398073][ T9733] ? proc_fault_inject_write+0x360/0x360 [ 314.403720][ T9733] ? fsnotify_perm+0x271/0x5e0 [ 314.408497][ T9733] ? proc_fault_inject_write+0x360/0x360 [ 314.414317][ T9733] vfs_read+0x298/0x990 [ 314.418496][ T9733] ? kernel_read+0x1e0/0x1e0 [ 314.423095][ T9733] ? __fget_files+0x28/0x460 [ 314.427699][ T9733] ? __fget_files+0x3fc/0x460 [ 314.432401][ T9733] ? __fdget_pos+0x2a3/0x330 [ 314.436996][ T9733] ? ksys_read+0x74/0x260 [ 314.441340][ T9733] ksys_read+0x151/0x260 [ 314.445595][ T9733] ? vfs_write+0x9a0/0x9a0 [ 314.450043][ T9733] ? syscall_enter_from_user_mode+0x2e/0x80 [ 314.455992][ T9733] do_syscall_64+0x55/0xb0 [ 314.460432][ T9733] ? clear_bhb_loop+0x40/0x90 [ 314.465209][ T9733] ? clear_bhb_loop+0x40/0x90 [ 314.469897][ T9733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.475818][ T9733] RIP: 0033:0x7f605d55e98e [ 314.480246][ T9733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.499866][ T9733] RSP: 002b:00007f605e4c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.508293][ T9733] RAX: ffffffffffffffda RBX: 00007f605e4c66c0 RCX: 00007f605d55e98e [ 314.516276][ T9733] RDX: 000000000000000f RSI: 00007f605e4c60a0 RDI: 0000000000000010 [ 314.524249][ T9733] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.532229][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.540206][ T9733] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 314.548213][ T9733] [ 314.728128][ T9725] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1504'. [ 314.753632][ T9738] validate_nla: 3 callbacks suppressed [ 314.753700][ T9738] netlink: 'syz.3.1510': attribute type 3 has an invalid length. [ 314.759863][ T9725] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 314.769885][ T9738] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1510'. [ 314.820566][ T9741] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 314.876061][ T9737] delete_channel: no stack [ 314.970328][ T9745] sctp: [Deprecated]: syz.1.1512 (pid 9745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.970328][ T9745] Use struct sctp_sack_info instead [ 315.064886][ T9748] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 315.091413][ T9748] team0: Device nlmon0 is of different type [ 315.197576][ T9752] netlink: 'syz.0.1513': attribute type 16 has an invalid length. [ 315.217831][ T9752] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1513'. [ 315.269840][ T9750] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 315.277947][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'. [ 315.293386][ T9750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.447060][ T9752] __sock_release: fasync list not empty! [ 316.569074][ T9768] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 316.814451][ T9769] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 316.822730][ T9769] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1521'. [ 316.857597][ T9767] delete_channel: no stack [ 316.912088][ T9760] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1518'. [ 316.922525][ T9776] sctp: [Deprecated]: syz.2.1523 (pid 9776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.922525][ T9776] Use struct sctp_sack_info instead [ 316.941144][ T9760] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 317.416072][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422669][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.471197][ T9783] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 317.481661][ T9783] team0: Device nlmon0 is of different type [ 318.013874][ T9794] netlink: 'syz.3.1533': attribute type 3 has an invalid length. [ 318.061299][ T9794] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1533'. [ 318.145700][ T9793] delete_channel: no stack [ 318.150605][ T9798] netlink: 'syz.2.1534': attribute type 16 has an invalid length. [ 318.178987][ T9798] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1534'. [ 318.198672][ T9801] sctp: [Deprecated]: syz.1.1535 (pid 9801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.198672][ T9801] Use struct sctp_sack_info instead [ 318.247077][ T9798] __sock_release: fasync list not empty! [ 318.852820][ T9816] team0: Device nlmon0 is of different type [ 318.988480][ T9823] sctp: [Deprecated]: syz.3.1544 (pid 9823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.988480][ T9823] Use struct sctp_sack_info instead [ 319.037560][ T9825] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1545'. [ 319.122257][ T9824] delete_channel: no stack [ 319.197854][ T9828] __sock_release: fasync list not empty! [ 319.809879][ T9842] FAULT_INJECTION: forcing a failure. [ 319.809879][ T9842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.828303][ T9842] CPU: 1 PID: 9842 Comm: syz.2.1551 Not tainted syzkaller #0 [ 319.835738][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.845830][ T9842] Call Trace: [ 319.849150][ T9842] [ 319.852103][ T9842] dump_stack_lvl+0x18c/0x250 [ 319.856815][ T9842] ? show_regs_print_info+0x20/0x20 [ 319.862044][ T9842] ? load_image+0x420/0x420 [ 319.866579][ T9842] ? __might_fault+0xaa/0x120 [ 319.871296][ T9842] ? __lock_acquire+0x7d80/0x7d80 [ 319.876354][ T9842] should_fail_ex+0x394/0x4c0 [ 319.881083][ T9842] _copy_from_user+0x2f/0xe0 [ 319.885709][ T9842] ___sys_sendmsg+0x1c7/0x360 [ 319.890428][ T9842] ? get_pid_task+0x20/0x1e0 [ 319.895060][ T9842] ? __sys_sendmsg+0x2b0/0x2b0 [ 319.899866][ T9842] ? __lock_acquire+0x7d80/0x7d80 [ 319.904944][ T9842] __se_sys_sendmsg+0x1d0/0x2c0 [ 319.909828][ T9842] ? __x64_sys_sendmsg+0x80/0x80 [ 319.914830][ T9842] ? lockdep_hardirqs_on+0x98/0x150 [ 319.920061][ T9842] do_syscall_64+0x55/0xb0 [ 319.924483][ T9842] ? clear_bhb_loop+0x40/0x90 [ 319.929152][ T9842] ? clear_bhb_loop+0x40/0x90 [ 319.933405][ T9846] validate_nla: 4 callbacks suppressed [ 319.933447][ T9846] netlink: 'syz.3.1552': attribute type 25 has an invalid length. [ 319.933824][ T9842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.933854][ T9842] RIP: 0033:0x7f9888f9e159 [ 319.933872][ T9842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.939838][ T9846] __nla_validate_parse: 1 callbacks suppressed [ 319.939880][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 319.947203][ T9842] RSP: 002b:00007f9889ea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.947230][ T9842] RAX: ffffffffffffffda RBX: 00007f9889225fa0 RCX: 00007f9888f9e159 [ 319.947243][ T9842] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 319.947255][ T9842] RBP: 00007f9889ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 319.947266][ T9842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.947277][ T9842] R13: 00007f9889226038 R14: 00007f9889225fa0 R15: 00007ffce6dbef38 [ 320.040474][ T9842] [ 320.050726][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.067183][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.101235][ T9852] sctp: [Deprecated]: syz.2.1554 (pid 9852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.101235][ T9852] Use struct sctp_sack_info instead [ 320.147949][ T9846] bridge0: entered allmulticast mode [ 320.220415][ T9854] netlink: 'syz.2.1555': attribute type 3 has an invalid length. [ 320.228857][ T9854] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1555'. [ 320.278248][ T9850] bridge_slave_1: left allmulticast mode [ 320.296070][ T9850] bridge_slave_1: left promiscuous mode [ 320.311344][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.322521][ T9850] bridge_slave_0: left allmulticast mode [ 320.328325][ T9850] bridge_slave_0: left promiscuous mode [ 320.334941][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.418557][ T9853] delete_channel: no stack [ 321.244325][ T9873] sctp: [Deprecated]: syz.1.1563 (pid 9873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.244325][ T9873] Use struct sctp_sack_info instead [ 321.774498][ T9884] netlink: 'syz.1.1568': attribute type 3 has an invalid length. [ 321.784449][ T9884] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1568'. [ 321.824656][ T9882] delete_channel: no stack [ 322.191698][ T9895] sctp: [Deprecated]: syz.3.1573 (pid 9895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.191698][ T9895] Use struct sctp_sack_info instead [ 322.801153][ T9909] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 322.897734][ T9911] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 322.911089][ T9911] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1579'. [ 322.969032][ T9910] delete_channel: no stack [ 324.192272][ T9938] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1588'. [ 324.335846][ T9938] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 324.604528][ T9946] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 325.278929][ T9963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1606'. [ 325.327881][ T9963] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 325.597105][ T9974] syzkaller0: entered promiscuous mode [ 326.112499][ T9979] netlink: 'syz.1.1605': attribute type 3 has an invalid length. [ 326.116011][ T9981] netlink: 'syz.3.1604': attribute type 10 has an invalid length. [ 326.124194][ T9979] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1605'. [ 326.182285][ T9978] delete_channel: no stack [ 327.194730][ T9996] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1607'. [ 327.237195][ T9996] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 327.308303][T10000] syzkaller0: entered promiscuous mode [ 328.074864][T10014] netlink: 'syz.3.1617': attribute type 10 has an invalid length. [ 329.083420][T10022] netlink: 'syz.3.1620': attribute type 3 has an invalid length. [ 329.113247][T10022] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1620'. [ 329.257436][T10020] delete_channel: no stack [ 329.292599][T10007] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1624'. [ 329.303804][T10007] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 330.591719][T10036] syzkaller0: entered promiscuous mode [ 330.743642][T10004] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1612'. [ 330.755179][T10004] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 330.788865][T10038] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1623'. [ 330.844702][T10038] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 332.003401][T10053] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1627'. [ 332.139404][T10053] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 332.262597][T10058] netlink: 'syz.0.1632': attribute type 3 has an invalid length. [ 332.274014][T10058] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1632'. [ 332.315994][T10056] delete_channel: no stack [ 333.963941][T10066] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1641'. [ 334.211271][T10066] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 334.783896][T10077] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1633'. [ 334.941902][T10077] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 335.599288][T10088] netlink: 'syz.3.1639': attribute type 10 has an invalid length. [ 335.610618][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1639'. [ 335.628167][T10088] team0: entered promiscuous mode [ 335.638543][T10088] team_slave_0: entered promiscuous mode [ 335.648171][T10088] team_slave_1: entered promiscuous mode [ 335.655595][T10088] geneve1: entered promiscuous mode [ 335.664741][T10088] team0: entered allmulticast mode [ 335.671626][T10088] team_slave_0: entered allmulticast mode [ 335.677459][T10088] team_slave_1: entered allmulticast mode [ 335.687117][T10088] geneve1: entered allmulticast mode [ 335.695600][T10088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.953932][T10090] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 335.963891][T10090] team0: Device nlmon0 is of different type [ 336.695829][T10098] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1636'. [ 336.708938][T10098] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 337.004738][T10112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1648'. [ 338.158660][T10108] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1647'. [ 338.168583][T10108] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 338.302500][T10130] netlink: 'syz.3.1653': attribute type 10 has an invalid length. [ 338.314827][T10130] nlmon0: entered promiscuous mode [ 338.329395][T10130] nlmon0: entered allmulticast mode [ 338.338494][T10130] team0: Device nlmon0 is of different type [ 338.963720][T10147] netlink: 'syz.2.1659': attribute type 10 has an invalid length. [ 339.214773][T10151] FAULT_INJECTION: forcing a failure. [ 339.214773][T10151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.337766][T10153] sctp: [Deprecated]: syz.2.1663 (pid 10153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.337766][T10153] Use struct sctp_sack_info instead [ 339.524361][T10151] CPU: 0 PID: 10151 Comm: syz.0.1661 Not tainted syzkaller #0 [ 339.531884][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.542041][T10151] Call Trace: [ 339.545332][T10151] [ 339.548311][T10151] dump_stack_lvl+0x18c/0x250 [ 339.553015][T10151] ? show_regs_print_info+0x20/0x20 [ 339.558231][T10151] ? load_image+0x420/0x420 [ 339.562750][T10151] ? __might_fault+0xaa/0x120 [ 339.567450][T10151] ? __lock_acquire+0x7d80/0x7d80 [ 339.572502][T10151] should_fail_ex+0x394/0x4c0 [ 339.577208][T10151] _copy_from_user+0x2f/0xe0 [ 339.581825][T10151] ___sys_recvmsg+0x174/0x590 [ 339.586528][T10151] ? __sys_recvmsg+0x2a0/0x2a0 [ 339.591309][T10151] ? __fget_files+0x28/0x460 [ 339.595970][T10151] ? __fget_files+0x3fc/0x460 [ 339.600702][T10151] __x64_sys_recvmsg+0x21e/0x2f0 [ 339.605661][T10151] ? ___sys_recvmsg+0x590/0x590 [ 339.610647][T10151] ? lockdep_hardirqs_on+0x98/0x150 [ 339.615888][T10151] do_syscall_64+0x55/0xb0 [ 339.620321][T10151] ? clear_bhb_loop+0x40/0x90 [ 339.625015][T10151] ? clear_bhb_loop+0x40/0x90 [ 339.629708][T10151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.635617][T10151] RIP: 0033:0x7f16a4d9e159 [ 339.640049][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.659677][T10151] RSP: 002b:00007f16a5bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 339.668120][T10151] RAX: ffffffffffffffda RBX: 00007f16a5025fa0 RCX: 00007f16a4d9e159 [ 339.676109][T10151] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 339.684105][T10151] RBP: 00007f16a5bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 339.692094][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.700080][T10151] R13: 00007f16a5026038 R14: 00007f16a5025fa0 R15: 00007ffd5f9592e8 [ 339.708113][T10151] [ 339.810411][T10159] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 339.936960][T10156] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1661'. [ 340.188293][T10160] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1660'. [ 340.239917][T10160] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 341.162333][T10175] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1666'. [ 341.177398][T10172] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1666'. [ 341.293282][T10174] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1665'. [ 341.365679][T10174] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 341.818067][T10196] sctp: [Deprecated]: syz.2.1672 (pid 10196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.818067][T10196] Use struct sctp_sack_info instead [ 342.005183][T10200] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1674'. [ 342.562122][T10209] netlink: 'syz.1.1678': attribute type 3 has an invalid length. [ 342.584655][T10209] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.1678'. [ 343.239039][T10216] netlink: 'syz.3.1681': attribute type 21 has an invalid length. [ 343.340155][T10220] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 343.348026][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1682'. [ 343.366100][T10204] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1676'. [ 343.385667][T10220] batman_adv: batadv0: Adding interface: vlan1 [ 343.392749][T10204] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 343.402390][T10220] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.419221][T10223] sctp: [Deprecated]: syz.1.1683 (pid 10223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.419221][T10223] Use struct sctp_sack_info instead [ 343.439895][T10220] batman_adv: batadv0: Interface activated: vlan1 [ 343.681846][T10231] netlink: 'syz.3.1687': attribute type 16 has an invalid length. [ 343.691992][T10231] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1687'. [ 343.951360][T10239] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 344.099088][T10241] sctp: [Deprecated]: syz.1.1692 (pid 10241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.099088][T10241] Use struct sctp_sack_info instead [ 344.321198][T10247] netlink: 'syz.1.1694': attribute type 21 has an invalid length. [ 344.961718][T10262] netlink: 'syz.3.1700': attribute type 10 has an invalid length. [ 345.737804][T10266] sctp: [Deprecated]: syz.0.1701 (pid 10266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.737804][T10266] Use struct sctp_sack_info instead [ 345.823215][T10272] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1697'. [ 345.984956][T10272] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 346.200379][T10280] netlink: 'syz.1.1707': attribute type 16 has an invalid length. [ 346.208255][T10280] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1707'. [ 346.492051][T10289] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 347.138524][T10300] netlink: 'syz.1.1722': attribute type 3 has an invalid length. [ 347.175922][T10300] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1722'. [ 347.216631][T10298] delete_channel: no stack [ 348.397443][T10312] netlink: 'syz.3.1718': attribute type 16 has an invalid length. [ 348.425937][T10312] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1718'. [ 348.744773][T10321] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 348.978185][T10306] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1716'. [ 349.018375][T10306] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 349.177445][T10329] FAULT_INJECTION: forcing a failure. [ 349.177445][T10329] name failslab, interval 1, probability 0, space 0, times 0 [ 349.192006][T10329] CPU: 1 PID: 10329 Comm: syz.1.1726 Not tainted syzkaller #0 [ 349.199494][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.209577][T10329] Call Trace: [ 349.212875][T10329] [ 349.215826][T10329] dump_stack_lvl+0x18c/0x250 [ 349.220529][T10329] ? show_regs_print_info+0x20/0x20 [ 349.225750][T10329] ? load_image+0x420/0x420 [ 349.230261][T10329] ? __might_sleep+0xe0/0xe0 [ 349.234854][T10329] ? __lock_acquire+0x7d80/0x7d80 [ 349.239882][T10329] should_fail_ex+0x394/0x4c0 [ 349.244603][T10329] should_failslab+0x9/0x20 [ 349.249122][T10329] slab_pre_alloc_hook+0x59/0x300 [ 349.254171][T10329] ? __lock_acquire+0x7d80/0x7d80 [ 349.259217][T10329] kmem_cache_alloc_node+0x5e/0x310 [ 349.264418][T10329] ? __alloc_skb+0x103/0x2c0 [ 349.269011][T10329] __alloc_skb+0x103/0x2c0 [ 349.273430][T10329] netlink_sendmsg+0x66a/0xbf0 [ 349.278196][T10329] ? aa_sock_msg_perm+0x94/0x150 [ 349.283133][T10329] ? netlink_getsockopt+0x590/0x590 [ 349.288334][T10329] ? apparmor_socket_sendmsg+0x8e/0x330 [ 349.293895][T10329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.299177][T10329] ? security_socket_sendmsg+0x80/0xa0 [ 349.304630][T10329] ? netlink_getsockopt+0x590/0x590 [ 349.309833][T10329] ____sys_sendmsg+0x61b/0x980 [ 349.314608][T10329] ? __asan_memset+0x22/0x40 [ 349.319336][T10329] ? __sys_sendmsg_sock+0x30/0x30 [ 349.324363][T10329] ? __import_iovec+0x5f2/0x850 [ 349.329221][T10329] ? import_iovec+0x73/0xa0 [ 349.333729][T10329] ___sys_sendmsg+0x2a6/0x360 [ 349.338404][T10329] ? get_pid_task+0x20/0x1e0 [ 349.342998][T10329] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.347772][T10329] ? __lock_acquire+0x7d80/0x7d80 [ 349.352810][T10329] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.357664][T10329] ? __x64_sys_sendmsg+0x80/0x80 [ 349.362609][T10329] ? lockdep_hardirqs_on+0x98/0x150 [ 349.367815][T10329] do_syscall_64+0x55/0xb0 [ 349.372229][T10329] ? clear_bhb_loop+0x40/0x90 [ 349.376902][T10329] ? clear_bhb_loop+0x40/0x90 [ 349.381576][T10329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.387476][T10329] RIP: 0033:0x7f605d59e159 [ 349.391890][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.411504][T10329] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.419929][T10329] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 349.427899][T10329] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000005 [ 349.435866][T10329] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.443834][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.451800][T10329] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 349.459788][T10329] [ 349.599424][T10334] sctp: [Deprecated]: syz.1.1727 (pid 10334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.599424][T10334] Use struct sctp_sack_info instead [ 350.103003][T10342] netlink: 'syz.2.1730': attribute type 16 has an invalid length. [ 350.140215][T10342] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1730'. [ 350.315724][T10348] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 350.330071][T10351] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 350.340191][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1735'. [ 350.352403][T10351] caif0: entered promiscuous mode [ 350.358088][T10351] caif0: entered allmulticast mode [ 350.364459][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.377226][T10354] sctp: [Deprecated]: syz.2.1736 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.377226][T10354] Use struct sctp_sack_info instead [ 350.900179][T10364] netlink: 'syz.1.1742': attribute type 16 has an invalid length. [ 350.908103][T10364] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1742'. [ 351.477980][T10376] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 351.534208][T10378] netlink: 'syz.1.1748': attribute type 10 has an invalid length. [ 351.559113][T10378] team0: Device nlmon0 is of different type [ 351.996361][T10356] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1738'. [ 352.025662][T10356] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 352.114916][T10392] netlink: 'syz.2.1752': attribute type 16 has an invalid length. [ 352.122875][T10392] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1752'. [ 352.438959][T10402] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 352.745140][T10410] team0: Device nlmon0 is of different type [ 353.323544][T10419] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1765'. [ 353.333791][T10419] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 353.875597][T10441] validate_nla: 3 callbacks suppressed [ 353.875615][T10441] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 353.953853][T10441] team0: Device nlmon0 is of different type [ 354.011247][T10445] sctp: [Deprecated]: syz.2.1775 (pid 10445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.011247][T10445] Use struct sctp_sack_info instead [ 354.087805][T10449] netlink: 279 bytes leftover after parsing attributes in process `syz.3.1776'. [ 354.122801][T10451] netlink: 'syz.2.1778': attribute type 10 has an invalid length. [ 354.225169][T10449] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1776'. [ 354.341544][T10455] FAULT_INJECTION: forcing a failure. [ 354.341544][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 354.355666][T10455] CPU: 1 PID: 10455 Comm: syz.1.1780 Not tainted syzkaller #0 [ 354.363174][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.373252][T10455] Call Trace: [ 354.376541][T10455] [ 354.379473][T10455] dump_stack_lvl+0x18c/0x250 [ 354.384155][T10455] ? show_regs_print_info+0x20/0x20 [ 354.389350][T10455] ? load_image+0x420/0x420 [ 354.393864][T10455] should_fail_ex+0x394/0x4c0 [ 354.398545][T10455] should_failslab+0x9/0x20 [ 354.403048][T10455] slab_pre_alloc_hook+0x59/0x300 [ 354.408070][T10455] ? nf_hook_slow+0x1b2/0x200 [ 354.412834][T10455] kmem_cache_alloc+0x5a/0x2c0 [ 354.417595][T10455] ? dst_alloc+0x105/0x170 [ 354.422063][T10455] dst_alloc+0x105/0x170 [ 354.426317][T10455] rt_dst_clone+0x58/0x680 [ 354.430871][T10455] ip_mc_finish_output+0xea/0x260 [ 354.435908][T10455] ? skb_clone+0x21f/0x370 [ 354.440321][T10455] ip_mc_output+0x254/0x570 [ 354.444824][T10455] ip_send_skb+0x12f/0x1d0 [ 354.449236][T10455] udp_send_skb+0xa7d/0x1440 [ 354.453852][T10455] udp_sendmsg+0x1b23/0x23d0 [ 354.458440][T10455] ? release_sock+0x2f/0x1c0 [ 354.463054][T10455] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 354.467900][T10455] ? udp_cmsg_send+0x350/0x350 [ 354.472669][T10455] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 354.478651][T10455] ? lock_chain_count+0x20/0x20 [ 354.483497][T10455] ? inet_sendmsg+0x10d/0x2a0 [ 354.488181][T10455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 354.493551][T10455] ? _local_bh_enable+0xa0/0xa0 [ 354.498395][T10455] ? inet_sendmsg+0x10d/0x2a0 [ 354.503070][T10455] ? inet_sendmsg+0x10d/0x2a0 [ 354.507745][T10455] ? inet_send_prepare+0x250/0x250 [ 354.512854][T10455] ____sys_sendmsg+0x61b/0x980 [ 354.517629][T10455] ? __asan_memset+0x22/0x40 [ 354.522217][T10455] ? __sys_sendmsg_sock+0x30/0x30 [ 354.527318][T10455] ? __import_iovec+0x3fa/0x850 [ 354.532176][T10455] ? import_iovec+0x73/0xa0 [ 354.536686][T10455] ___sys_sendmsg+0x2a6/0x360 [ 354.541359][T10455] ? __sys_sendmsg+0x2b0/0x2b0 [ 354.546206][T10455] ? ktime_get+0x7f/0x280 [ 354.550740][T10455] __se_sys_sendmsg+0x1d0/0x2c0 [ 354.555608][T10455] ? __x64_sys_sendmsg+0x80/0x80 [ 354.560557][T10455] ? lockdep_hardirqs_on+0x98/0x150 [ 354.565770][T10455] do_syscall_64+0x55/0xb0 [ 354.570187][T10455] ? clear_bhb_loop+0x40/0x90 [ 354.574879][T10455] ? clear_bhb_loop+0x40/0x90 [ 354.579553][T10455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.585442][T10455] RIP: 0033:0x7f605d59e159 [ 354.589855][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.609455][T10455] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.617865][T10455] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 354.625832][T10455] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000012 [ 354.633798][T10455] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.641775][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.649742][T10455] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 354.657750][T10455] [ 355.345696][T10469] sctp: [Deprecated]: syz.3.1786 (pid 10469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.345696][T10469] Use struct sctp_sack_info instead [ 355.470795][T10471] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 355.829557][T10476] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 356.089363][T10465] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1784'. [ 356.119653][T10465] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 356.346475][T10490] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1794'. [ 356.451337][T10490] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1794'. [ 356.577087][T10496] sctp: [Deprecated]: syz.1.1796 (pid 10496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.577087][T10496] Use struct sctp_sack_info instead [ 356.679544][T10498] netlink: 'syz.2.1797': attribute type 10 has an invalid length. [ 356.740824][T10502] FAULT_INJECTION: forcing a failure. [ 356.740824][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.795577][T10502] CPU: 1 PID: 10502 Comm: syz.3.1799 Not tainted syzkaller #0 [ 356.803107][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.813193][T10502] Call Trace: [ 356.816490][T10502] [ 356.819446][T10502] dump_stack_lvl+0x18c/0x250 [ 356.824164][T10502] ? show_regs_print_info+0x20/0x20 [ 356.829391][T10502] ? load_image+0x420/0x420 [ 356.833915][T10502] ? __lock_acquire+0x7d80/0x7d80 [ 356.838960][T10502] should_fail_ex+0x394/0x4c0 [ 356.843664][T10502] _copy_from_user+0x2f/0xe0 [ 356.848264][T10502] __copy_msghdr+0x388/0x560 [ 356.852861][T10502] ___sys_sendmsg+0x214/0x360 [ 356.857538][T10502] ? get_pid_task+0x20/0x1e0 [ 356.862155][T10502] ? __sys_sendmsg+0x2b0/0x2b0 [ 356.866936][T10502] ? __lock_acquire+0x7d80/0x7d80 [ 356.871979][T10502] __se_sys_sendmsg+0x1d0/0x2c0 [ 356.876926][T10502] ? __x64_sys_sendmsg+0x80/0x80 [ 356.881883][T10502] ? lockdep_hardirqs_on+0x98/0x150 [ 356.887094][T10502] do_syscall_64+0x55/0xb0 [ 356.891513][T10502] ? clear_bhb_loop+0x40/0x90 [ 356.896185][T10502] ? clear_bhb_loop+0x40/0x90 [ 356.900859][T10502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.906754][T10502] RIP: 0033:0x7f726ab9e159 [ 356.911167][T10502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.930777][T10502] RSP: 002b:00007f726ba41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.939361][T10502] RAX: ffffffffffffffda RBX: 00007f726ae25fa0 RCX: 00007f726ab9e159 [ 356.947333][T10502] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 356.955303][T10502] RBP: 00007f726ba41090 R08: 0000000000000000 R09: 0000000000000000 [ 356.963270][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.971256][T10502] R13: 00007f726ae26038 R14: 00007f726ae25fa0 R15: 00007fff8a7fbc38 [ 356.979236][T10502] [ 357.114685][T10514] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 357.125853][T10514] team0: Device nlmon0 is of different type [ 357.329396][T10519] netlink: 279 bytes leftover after parsing attributes in process `syz.1.1805'. [ 357.345678][T10518] sctp: [Deprecated]: syz.2.1806 (pid 10518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.345678][T10518] Use struct sctp_sack_info instead [ 357.429445][T10519] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1805'. [ 358.134376][T10527] netlink: 'syz.1.1810': attribute type 10 has an invalid length. [ 358.327469][T10530] netlink: 'syz.2.1811': attribute type 3 has an invalid length. [ 358.359301][T10530] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1811'. [ 358.511725][T10529] delete_channel: no stack [ 358.517586][T10532] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1803'. [ 358.533491][T10532] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 358.688077][T10542] sctp: [Deprecated]: syz.1.1815 (pid 10542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.688077][T10542] Use struct sctp_sack_info instead [ 358.737152][T10541] netlink: 'syz.2.1814': attribute type 10 has an invalid length. [ 359.006610][T10552] netlink: 'syz.1.1820': attribute type 10 has an invalid length. [ 359.214904][T10556] netlink: 'syz.0.1822': attribute type 3 has an invalid length. [ 359.223594][T10556] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1822'. [ 359.354526][T10562] sctp: [Deprecated]: syz.2.1826 (pid 10562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.354526][T10562] Use struct sctp_sack_info instead [ 359.466099][T10555] delete_channel: no stack [ 359.802294][T10570] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1824'. [ 359.843824][T10570] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 361.183351][T10584] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 361.198753][T10582] FAULT_INJECTION: forcing a failure. [ 361.198753][T10582] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 361.224791][T10582] CPU: 1 PID: 10582 Comm: syz.3.1831 Not tainted syzkaller #0 [ 361.232312][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.242388][T10582] Call Trace: [ 361.245697][T10582] [ 361.248642][T10582] dump_stack_lvl+0x18c/0x250 [ 361.253346][T10582] ? show_regs_print_info+0x20/0x20 [ 361.258563][T10582] ? load_image+0x420/0x420 [ 361.263089][T10582] ? __lock_acquire+0x7d80/0x7d80 [ 361.268166][T10582] ? mark_lock+0x94/0x320 [ 361.272521][T10582] should_fail_ex+0x394/0x4c0 [ 361.277209][T10582] prepare_alloc_pages+0x1e1/0x5b0 [ 361.282322][T10582] __alloc_pages+0x134/0x460 [ 361.286910][T10582] ? zone_statistics+0x170/0x170 [ 361.291846][T10582] ? do_wp_page+0x733/0x34d0 [ 361.296435][T10582] ? do_wp_page+0xf17/0x34d0 [ 361.301022][T10582] ? __lock_acquire+0x7d80/0x7d80 [ 361.306049][T10582] __folio_alloc+0x10/0x20 [ 361.310462][T10582] vma_alloc_folio+0x474/0x8f0 [ 361.315232][T10582] do_wp_page+0x118d/0x34d0 [ 361.319761][T10582] ? folio_put+0xd0/0xd0 [ 361.324024][T10582] ? do_raw_spin_lock+0x11f/0x2b0 [ 361.329080][T10582] ? __rwlock_init+0x150/0x150 [ 361.333865][T10582] handle_mm_fault+0x1306/0x4a50 [ 361.338810][T10582] ? handle_mm_fault+0xe6/0x4a50 [ 361.343758][T10582] ? numa_migrate_prep+0x350/0x350 [ 361.348898][T10582] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 361.354189][T10582] do_user_addr_fault+0x736/0x12d0 [ 361.359338][T10582] exc_page_fault+0x64/0x100 [ 361.363930][T10582] asm_exc_page_fault+0x26/0x30 [ 361.368867][T10582] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 361.374671][T10582] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 361.394367][T10582] RSP: 0018:ffffc900039ff498 EFLAGS: 00050206 [ 361.400431][T10582] RAX: ffffffff84316a01 RBX: 1ffff9200073ffc7 RCX: 0000000000004480 [ 361.408397][T10582] RDX: 0000000000000000 RSI: ffff888051a9bb80 RDI: 0000200000006000 [ 361.416374][T10582] RBP: ffffc900039ff5e8 R08: ffff888051a9ffff R09: 1ffff1100a353fff [ 361.424344][T10582] R10: dffffc0000000000 R11: ffffed100a354000 R12: ffff888051a98000 [ 361.432319][T10582] R13: 0000000000008000 R14: 0000000000008000 R15: ffffc900039ffe48 [ 361.440292][T10582] ? _copy_to_iter+0x151/0x1110 [ 361.445154][T10582] _copy_to_iter+0x24f/0x1110 [ 361.449836][T10582] ? __lock_acquire+0x7d80/0x7d80 [ 361.454867][T10582] ? __mutex_trylock_common+0x160/0x270 [ 361.460423][T10582] ? trace_raw_output_contention_end+0xd0/0xd0 [ 361.466693][T10582] ? iov_iter_init+0x1e0/0x1e0 [ 361.471466][T10582] ? __virt_addr_valid+0x10c/0x380 [ 361.476589][T10582] ? __check_object_size+0x4fc/0xa40 [ 361.481885][T10582] __skb_datagram_iter+0x2ff/0x780 [ 361.487003][T10582] ? skb_copy_datagram_iter+0x200/0x200 [ 361.492577][T10582] skb_copy_datagram_iter+0xb1/0x200 [ 361.497880][T10582] unix_stream_read_actor+0x6c/0xa0 [ 361.503111][T10582] unix_stream_read_generic+0xcf1/0x1ea0 [ 361.508764][T10582] ? unix_stream_read_actor+0xa0/0xa0 [ 361.514135][T10582] ? wake_bit_function+0x200/0x200 [ 361.519252][T10582] ? aa_sk_perm+0x83c/0x970 [ 361.523770][T10582] unix_stream_recvmsg+0x169/0x1c0 [ 361.528902][T10582] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 361.534193][T10582] ? __lock_acquire+0x1262/0x7d80 [ 361.539223][T10582] ? __unix_stream_recvmsg+0x150/0x150 [ 361.544684][T10582] ? aa_sock_msg_perm+0x94/0x150 [ 361.549719][T10582] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 361.555016][T10582] ? security_socket_recvmsg+0x89/0xb0 [ 361.560498][T10582] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 361.565804][T10582] ____sys_recvmsg+0x2bd/0x5d0 [ 361.570586][T10582] ? __sys_recvmsg_sock+0x50/0x50 [ 361.575625][T10582] ? import_iovec+0x73/0xa0 [ 361.580131][T10582] ___sys_recvmsg+0x214/0x590 [ 361.584811][T10582] ? __sys_recvmsg+0x2a0/0x2a0 [ 361.589580][T10582] ? ksys_write+0x1d2/0x260 [ 361.594090][T10582] ? __fget_files+0x3fc/0x460 [ 361.598782][T10582] __x64_sys_recvmsg+0x21e/0x2f0 [ 361.603718][T10582] ? perf_trace_preemptirq_template+0x269/0x330 [ 361.609966][T10582] ? ___sys_recvmsg+0x590/0x590 [ 361.614828][T10582] ? lockdep_hardirqs_on+0x98/0x150 [ 361.620029][T10582] do_syscall_64+0x55/0xb0 [ 361.624442][T10582] ? clear_bhb_loop+0x40/0x90 [ 361.629115][T10582] ? clear_bhb_loop+0x40/0x90 [ 361.633796][T10582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.639688][T10582] RIP: 0033:0x7f726ab9e159 [ 361.644102][T10582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.663712][T10582] RSP: 002b:00007f726ba41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 361.672122][T10582] RAX: ffffffffffffffda RBX: 00007f726ae25fa0 RCX: 00007f726ab9e159 [ 361.680089][T10582] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000006 [ 361.688064][T10582] RBP: 00007f726ba41090 R08: 0000000000000000 R09: 0000000000000000 [ 361.696026][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.703995][T10582] R13: 00007f726ae26038 R14: 00007f726ae25fa0 R15: 00007fff8a7fbc38 [ 361.711979][T10582] [ 361.844070][T10593] netlink: 'syz.1.1836': attribute type 39 has an invalid length. [ 362.009286][T10593] hsr_slave_1 (unregistering): left promiscuous mode [ 362.094306][T10595] netlink: 'syz.3.1837': attribute type 3 has an invalid length. [ 362.104838][T10595] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1837'. [ 362.205479][T10594] delete_channel: no stack [ 362.550638][T10604] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1840'. [ 362.585874][T10604] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1840'. [ 362.954249][T10599] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 363.153435][T10599] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1835'. [ 363.199602][T10599] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1835'. [ 363.544670][T10612] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1838'. [ 363.588704][T10612] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 363.724982][T10609] netlink: 'syz.3.1842': attribute type 10 has an invalid length. [ 363.734296][T10617] netlink: 'syz.1.1844': attribute type 10 has an invalid length. [ 363.823835][T10620] __sock_release: fasync list not empty! [ 363.917627][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.964151][T10617] team0: Port device bond0 added [ 364.058376][T10622] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 364.083181][T10622] team0: Device nlmon0 is of different type [ 364.318752][T10628] netlink: 'syz.0.1848': attribute type 3 has an invalid length. [ 364.336152][T10628] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1848'. [ 364.485517][T10633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1851'. [ 364.648006][T10639] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 365.132139][T10627] delete_channel: no stack [ 365.451100][T10642] __sock_release: fasync list not empty! [ 365.656497][T10647] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 365.739042][T10647] team0: Device nlmon0 is of different type [ 366.748342][T10649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1854'. [ 366.855395][T10649] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 366.994894][T10645] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1856'. [ 367.050480][T10645] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 367.457872][T10667] netlink: 'syz.0.1859': attribute type 39 has an invalid length. [ 367.499602][T10666] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1862'. [ 367.520951][T10666] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 367.538898][T10666] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.580686][T10667] hsr_slave_1 (unregistering): left promiscuous mode [ 367.715890][T10672] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 367.859110][T10674] netlink: 'syz.2.1865': attribute type 3 has an invalid length. [ 367.875154][T10674] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1865'. [ 367.934204][T10677] netlink: 'syz.3.1866': attribute type 3 has an invalid length. [ 367.944519][T10677] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 367.954986][T10673] delete_channel: no stack [ 367.965127][T10677] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1866'. [ 368.365976][T10688] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 368.438644][T10688] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1867'. [ 368.450894][T10688] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1867'. [ 369.888295][T10705] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1869'. [ 369.977670][T10705] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 370.328489][T10698] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1868'. [ 370.716174][T10698] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 371.749529][T10721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1872'. [ 371.840657][T10721] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 371.924788][T10729] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 371.950106][T10725] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1881'. [ 372.049497][T10725] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 372.519519][T10741] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 372.550494][T10741] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.038394][T10755] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 374.732214][T10761] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1889'. [ 374.742215][T10761] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 375.135403][T10781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1890'. [ 375.154918][T10781] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 375.174573][T10774] netlink: 'syz.0.1892': attribute type 10 has an invalid length. [ 375.355575][T10774] team0: Device hsr_slave_0 failed to register rx_handler [ 377.585966][T10786] netlink: 'syz.3.1894': attribute type 10 has an invalid length. [ 377.662979][T10786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.702127][T10786] bond0: entered promiscuous mode [ 377.707252][T10786] bond_slave_0: entered promiscuous mode [ 377.743396][T10786] bond_slave_1: entered promiscuous mode [ 377.766037][T10786] bond0: entered allmulticast mode [ 377.787029][T10786] bond_slave_0: entered allmulticast mode [ 377.808168][T10786] bond_slave_1: entered allmulticast mode [ 377.837291][T10786] team0: Port device bond0 added [ 378.396454][T10795] __sock_release: fasync list not empty! [ 378.835425][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.842143][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.623310][T10804] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 381.082582][T10818] netlink: 'syz.2.1906': attribute type 7 has an invalid length. [ 381.177073][T10816] netlink: 56855 bytes leftover after parsing attributes in process `syz.3.1905'. [ 381.222431][T10821] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 381.251431][T10821] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1905'. [ 381.752719][T10834] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 381.764306][T10827] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1902'. [ 381.776152][T10831] sock: sock_timestamping_bind_phc: sock not bind to device [ 381.797457][T10827] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 381.927688][T10832] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.980886][T10832] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1909'. [ 382.529930][T10849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.537201][T10849] IPv6: NLM_F_CREATE should be set when creating new route [ 382.698488][T10855] netlink: 56855 bytes leftover after parsing attributes in process `syz.2.1917'. [ 382.742143][T10855] netlink: 'syz.2.1917': attribute type 10 has an invalid length. [ 382.754293][T10855] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1917'. [ 382.974202][T10859] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 382.984041][T10849] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 382.992483][T10849] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1916'. [ 383.089760][T10861] netlink: 'syz.1.1921': attribute type 7 has an invalid length. [ 383.759270][T10875] Q6`Ҙ: renamed from lo (while UP) [ 383.781370][T10871] sock: sock_timestamping_bind_phc: sock not bind to device [ 384.059388][T10881] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.067338][T10881] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1923'. [ 384.095009][T10863] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1922'. [ 384.105238][T10863] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 384.436421][T10889] netlink: 'syz.2.1930': attribute type 10 has an invalid length. [ 384.873682][T10895] netlink: 56855 bytes leftover after parsing attributes in process `syz.1.1933'. [ 384.932696][T10895] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 385.722287][T10911] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 385.898766][T10912] netlink: 'syz.3.1938': attribute type 10 has an invalid length. [ 388.793900][T10912] team0: Device hsr_slave_0 failed to register rx_handler [ 388.970240][T10923] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 389.196196][T10928] sock: sock_timestamping_bind_phc: sock not bind to device [ 389.217287][T10928] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.233031][T10928] __nla_validate_parse: 2 callbacks suppressed [ 389.233051][T10928] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1942'. [ 393.569946][T10975] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 393.941989][T10992] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 393.982003][T10992] team0: Device nlmon0 is of different type [ 394.410004][T10996] netlink: 'syz.0.1970': attribute type 10 has an invalid length. [ 394.422344][T10996] team0: Device nlmon0 is of different type [ 395.195820][T11011] netlink: 'syz.1.1977': attribute type 10 has an invalid length. [ 395.204848][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'. [ 395.218642][T11011] ipvlan1: entered promiscuous mode [ 395.229760][T11011] ipvlan1: entered allmulticast mode [ 395.237199][T11011] veth0_vlan: entered allmulticast mode [ 395.350136][T11011] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 395.517536][T11020] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 395.531664][T11020] team0: Device nlmon0 is of different type [ 396.305823][T11024] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1980'. [ 396.329880][T11024] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 396.406275][T11034] syzkaller0: entered promiscuous mode [ 396.415758][T11034] syzkaller0: entered allmulticast mode [ 396.548462][T11037] netlink: 'syz.3.1989': attribute type 10 has an invalid length. [ 396.572064][T11037] team0: Device nlmon0 is of different type [ 396.887994][T11049] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 396.899117][T11049] team0: Device nlmon0 is of different type [ 397.308435][T11057] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1994'. [ 397.333992][T11057] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 397.771290][T11064] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1996'. [ 397.806036][T11064] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 399.402640][T11074] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 399.434484][T11074] team0: Device nlmon0 is of different type [ 399.660915][T11080] FAULT_INJECTION: forcing a failure. [ 399.660915][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.680125][T11078] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 399.682544][T11080] CPU: 0 PID: 11080 Comm: syz.1.2002 Not tainted syzkaller #0 [ 399.695451][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.705536][T11080] Call Trace: [ 399.708837][T11080] [ 399.711713][T11078] team0: Device nlmon0 is of different type [ 399.717677][T11080] dump_stack_lvl+0x18c/0x250 [ 399.722451][T11080] ? show_regs_print_info+0x20/0x20 [ 399.727684][T11080] ? load_image+0x420/0x420 [ 399.732229][T11080] ? __might_fault+0xaa/0x120 [ 399.736941][T11080] ? __lock_acquire+0x7d80/0x7d80 [ 399.741997][T11080] ? bpf_percpu_hash_update+0x2b/0x200 [ 399.747495][T11080] ? __virt_addr_valid+0x10c/0x380 [ 399.752655][T11080] should_fail_ex+0x394/0x4c0 [ 399.757390][T11080] _copy_from_user+0x2f/0xe0 [ 399.762035][T11080] generic_map_update_batch+0x58c/0x800 [ 399.767622][T11080] ? rcu_read_unlock+0xa0/0xa0 [ 399.772420][T11080] ? __fdget+0x180/0x210 [ 399.776701][T11080] ? rcu_read_unlock+0xa0/0xa0 [ 399.781502][T11080] bpf_map_do_batch+0x3f2/0x600 [ 399.786379][T11080] ? bpf_lsm_key_alloc+0x10/0x10 [ 399.791352][T11080] __sys_bpf+0x381/0x890 [ 399.795627][T11080] ? bpf_link_show_fdinfo+0x390/0x390 [ 399.801032][T11080] ? lock_chain_count+0x20/0x20 [ 399.805911][T11080] __x64_sys_bpf+0x7c/0x90 [ 399.810347][T11080] do_syscall_64+0x55/0xb0 [ 399.814782][T11080] ? clear_bhb_loop+0x40/0x90 [ 399.819478][T11080] ? clear_bhb_loop+0x40/0x90 [ 399.824174][T11080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.830087][T11080] RIP: 0033:0x7f605d59e159 [ 399.834514][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.854144][T11080] RSP: 002b:00007f605e4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.862574][T11080] RAX: ffffffffffffffda RBX: 00007f605d825fa0 RCX: 00007f605d59e159 [ 399.870554][T11080] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 399.878540][T11080] RBP: 00007f605e4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.886528][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.894549][T11080] R13: 00007f605d826038 R14: 00007f605d825fa0 R15: 00007ffee1d44f08 [ 399.902559][T11080] [ 400.294295][T11091] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 400.306457][T11091] hsr0: entered promiscuous mode [ 400.335341][T11091] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.361153][T11091] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 400.387579][T11091] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 400.401946][T11091] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 400.411264][T11088] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2004'. [ 400.865888][T11099] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2007'. [ 400.918221][T11099] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 400.982744][T11105] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2008'. [ 400.993236][T11105] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 401.994393][T11117] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 402.681727][T11115] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2013'. [ 402.692300][T11115] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 403.273565][T11134] netlink: 'syz.2.2021': attribute type 28 has an invalid length. [ 403.293821][T11134] netlink: 'syz.2.2021': attribute type 29 has an invalid length. [ 403.336361][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2021'. [ 403.593404][T11145] FAULT_INJECTION: forcing a failure. [ 403.593404][T11145] name failslab, interval 1, probability 0, space 0, times 0 [ 403.606434][T11145] CPU: 0 PID: 11145 Comm: syz.0.2022 Not tainted syzkaller #0 [ 403.613976][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.624042][T11145] Call Trace: [ 403.627322][T11145] [ 403.630279][T11145] dump_stack_lvl+0x18c/0x250 [ 403.634971][T11145] ? show_regs_print_info+0x20/0x20 [ 403.640174][T11145] ? load_image+0x420/0x420 [ 403.644680][T11145] ? lock_acquire+0x208/0x420 [ 403.649357][T11145] should_fail_ex+0x394/0x4c0 [ 403.654041][T11145] should_failslab+0x9/0x20 [ 403.658547][T11145] slab_pre_alloc_hook+0x59/0x300 [ 403.663584][T11145] kmem_cache_alloc+0x5a/0x2c0 [ 403.668356][T11145] ? inet_getpeer+0xbff/0x1500 [ 403.673120][T11145] inet_getpeer+0xbff/0x1500 [ 403.677707][T11145] ? verify_lock_unused+0x140/0x140 [ 403.682911][T11145] ? kasan_set_track+0x5f/0x70 [ 403.687685][T11145] ? ip4_frag_init+0x2bb/0x5a0 [ 403.692452][T11145] ? inet_peer_base_init+0x110/0x110 [ 403.697755][T11145] ? packet_rcv_fanout+0x139/0x680 [ 403.702889][T11145] ? dev_hard_start_xmit+0x150/0x790 [ 403.708215][T11145] ? __dev_queue_xmit+0x1be8/0x37e0 [ 403.713423][T11145] ? __bpf_tx_skb+0x181/0x260 [ 403.718106][T11145] ? bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 403.723736][T11145] ? bpf_test_run+0x2df/0x870 [ 403.728436][T11145] ? bpf_prog_test_run_skb+0xdbb/0x18f0 [ 403.734015][T11145] ip4_frag_init+0x2bb/0x5a0 [ 403.738603][T11145] ? ip4_frag_init+0x132/0x5a0 [ 403.743364][T11145] ? pskb_may_pull+0xf0/0xf0 [ 403.747955][T11145] ? slab_post_alloc_hook+0x86/0x4d0 [ 403.753272][T11145] ? rcu_is_watching+0x15/0xb0 [ 403.758043][T11145] ? inet_frag_find+0x7ee/0x1c00 [ 403.762991][T11145] inet_frag_find+0x83c/0x1c00 [ 403.767760][T11145] ? ip4_obj_hashfn+0x1e0/0x1e0 [ 403.772620][T11145] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 403.777905][T11145] ? read_lock_is_recursive+0x20/0x20 [ 403.783281][T11145] ? verify_lock_unused+0x140/0x140 [ 403.788485][T11145] ip_defrag+0x3d9/0x1e60 [ 403.792821][T11145] ? ip_defrag+0x1dd/0x1e60 [ 403.797319][T11145] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.803300][T11145] ? lock_chain_count+0x20/0x20 [ 403.808148][T11145] ? __in_dev_get_rcu+0xc0/0xc0 [ 403.812997][T11145] ? skb_copy_bits+0x6d5/0x7a0 [ 403.817762][T11145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.823922][T11145] ip_check_defrag+0x373/0x550 [ 403.828698][T11145] ? ip_defrag+0x1e60/0x1e60 [ 403.833289][T11145] ? __skb_clone+0x446/0x6c0 [ 403.837882][T11145] packet_rcv_fanout+0x139/0x680 [ 403.842843][T11145] ? fanout_init_data+0xf0/0xf0 [ 403.847707][T11145] dev_queue_xmit_nit+0xb0c/0xba0 [ 403.852733][T11145] ? dev_queue_xmit_nit+0x2d/0xba0 [ 403.857851][T11145] dev_hard_start_xmit+0x150/0x790 [ 403.862984][T11145] __dev_queue_xmit+0x1be8/0x37e0 [ 403.868012][T11145] ? __dev_queue_xmit+0x272/0x37e0 [ 403.873143][T11145] ? netdev_core_pick_tx+0x370/0x370 [ 403.878427][T11145] ? pskb_expand_head+0x17a/0x1150 [ 403.883540][T11145] ? pskb_expand_head+0x17a/0x1150 [ 403.888653][T11145] ? skb_release_data+0x1de/0x7f0 [ 403.893688][T11145] ? __bpf_redirect+0x4d1/0xdf0 [ 403.898539][T11145] __bpf_tx_skb+0x181/0x260 [ 403.903044][T11145] bpf_clone_redirect+0x315/0x4a0 [ 403.908078][T11145] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 403.913540][T11145] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.919521][T11145] ? __lock_acquire+0x7d80/0x7d80 [ 403.924545][T11145] ? lock_chain_count+0x20/0x20 [ 403.929397][T11145] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 403.935640][T11145] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 403.940926][T11145] ? ktime_get+0x7f/0x280 [ 403.945290][T11145] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 403.951529][T11145] ? ktime_get_real_ts64+0x440/0x440 [ 403.956809][T11145] ? __x64_sys_bpf+0x7c/0x90 [ 403.961397][T11145] ? __local_bh_disable_ip+0x108/0x1a0 [ 403.966855][T11145] ? __cant_sleep+0x220/0x220 [ 403.971533][T11145] ? read_tsc+0x9/0x20 [ 403.975598][T11145] ? ktime_get+0x24b/0x280 [ 403.980018][T11145] ? bpf_test_run+0x174/0x870 [ 403.984697][T11145] bpf_test_run+0x2df/0x870 [ 403.989209][T11145] ? bpf_test_run+0x174/0x870 [ 403.993887][T11145] ? dst_hold+0x70/0x70 [ 403.998047][T11145] ? eth_get_headlen+0x210/0x210 [ 404.003074][T11145] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 404.008464][T11145] ? cpu_online+0x60/0x60 [ 404.012794][T11145] bpf_prog_test_run+0x31f/0x390 [ 404.017736][T11145] __sys_bpf+0x49d/0x890 [ 404.021978][T11145] ? bpf_link_show_fdinfo+0x390/0x390 [ 404.027364][T11145] ? lock_chain_count+0x20/0x20 [ 404.032211][T11145] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.038194][T11145] __x64_sys_bpf+0x7c/0x90 [ 404.042607][T11145] do_syscall_64+0x55/0xb0 [ 404.047022][T11145] ? clear_bhb_loop+0x40/0x90 [ 404.051695][T11145] ? clear_bhb_loop+0x40/0x90 [ 404.056370][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.062261][T11145] RIP: 0033:0x7f16a4d9e159 [ 404.066678][T11145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.086402][T11145] RSP: 002b:00007f16a5bbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.094837][T11145] RAX: ffffffffffffffda RBX: 00007f16a5025fa0 RCX: 00007f16a4d9e159 [ 404.102809][T11145] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 404.110781][T11145] RBP: 00007f16a5bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 404.118749][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.126725][T11145] R13: 00007f16a5026038 R14: 00007f16a5025fa0 R15: 00007ffd5f9592e8 [ 404.134705][T11145] [ 404.336657][T11151] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 404.558060][T11155] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2025'. [ 404.590457][T11154] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 404.598629][T11154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2027'. [ 404.620117][T11155] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 404.645296][T11154] ipvlan1: entered promiscuous mode [ 404.663936][T11154] ipvlan1: entered allmulticast mode [ 404.680768][T11154] veth0_vlan: entered allmulticast mode [ 404.845861][T11154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 406.027211][T11184] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2040'. [ 406.048365][T11182] netlink: 'syz.3.2037': attribute type 10 has an invalid length. [ 406.061547][T11182] team0: Device nlmon0 is of different type [ 406.721174][T11201] netlink: 'syz.1.2045': attribute type 10 has an invalid length. [ 407.230231][T11211] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 407.252188][T11211] team0: Device nlmon0 is of different type [ 408.653001][T11218] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2032'. [ 408.670147][T11218] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 408.837999][T11230] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 410.317448][T11243] netlink: 'syz.0.2061': attribute type 10 has an invalid length. [ 410.326840][T11243] team0: Device nlmon0 is of different type [ 410.470174][T11247] netlink: 'syz.1.2063': attribute type 29 has an invalid length. [ 410.479963][T11247] netlink: 'syz.1.2063': attribute type 29 has an invalid length. [ 410.498994][T11247] netlink: 'syz.1.2063': attribute type 29 has an invalid length. [ 410.545292][T11247] netlink: 'syz.1.2063': attribute type 29 has an invalid length. [ 410.583336][T11247] netlink: 'syz.1.2063': attribute type 29 has an invalid length. [ 412.267317][T11263] netlink: 'syz.0.2066': attribute type 10 has an invalid length. [ 412.416126][T11271] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 412.434546][T11271] team0: Device nlmon0 is of different type [ 412.800607][T11282] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2075'. [ 412.855534][T11282] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 412.897698][T11277] syz.1.2076 (11277) used obsolete PPPIOCDETACH ioctl [ 413.473859][T11296] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 413.512163][T11296] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2080'. [ 413.652228][T11294] delete_channel: no stack [ 413.820282][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.828601][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.838146][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.849481][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.870691][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.879266][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.908015][T11303] netlink: 'syz.0.2082': attribute type 10 has an invalid length. [ 413.993537][T11304] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2083'. [ 415.432954][T11321] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2084'. [ 415.442857][T11321] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 415.529593][T11301] chnl_net:caif_netlink_parms(): no params data found [ 415.549022][T11323] netlink: 'syz.0.2088': attribute type 21 has an invalid length. [ 415.725737][T11330] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2089'. [ 415.763715][T11330] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 415.950030][ T5787] Bluetooth: hci4: command tx timeout [ 415.967527][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.977139][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.986844][T11342] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 415.994569][T11301] bridge_slave_0: entered allmulticast mode [ 415.995981][T11342] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2093'. [ 416.005701][T11301] bridge_slave_0: entered promiscuous mode [ 416.026049][T11343] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 416.039417][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.055885][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.071022][T11341] delete_channel: no stack [ 416.076642][T11301] bridge_slave_1: entered allmulticast mode [ 416.084121][T11301] bridge_slave_1: entered promiscuous mode [ 416.194457][T11301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.237614][T11301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.406612][T11301] team0: Port device team_slave_0 added [ 416.427773][T11301] team0: Port device team_slave_1 added [ 416.581272][T11301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.588417][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.729738][T11301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.754431][T11301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.763999][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.855474][T11301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.901697][T11349] syzkaller0: entered promiscuous mode [ 416.907226][T11349] syzkaller0: entered allmulticast mode [ 417.011459][T11359] FAULT_INJECTION: forcing a failure. [ 417.011459][T11359] name failslab, interval 1, probability 0, space 0, times 0 [ 417.044124][T11359] CPU: 1 PID: 11359 Comm: syz.2.2098 Not tainted syzkaller #0 [ 417.051653][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.061736][T11359] Call Trace: [ 417.065041][T11359] [ 417.067988][T11359] dump_stack_lvl+0x18c/0x250 [ 417.072699][T11359] ? show_regs_print_info+0x20/0x20 [ 417.077934][T11359] ? load_image+0x420/0x420 [ 417.082470][T11359] ? __might_sleep+0xe0/0xe0 [ 417.087090][T11359] ? __lock_acquire+0x7d80/0x7d80 [ 417.092155][T11359] should_fail_ex+0x394/0x4c0 [ 417.096868][T11359] should_failslab+0x9/0x20 [ 417.101395][T11359] slab_pre_alloc_hook+0x59/0x300 [ 417.106451][T11359] ? br_vlan_lookup+0x8b/0x710 [ 417.111371][T11359] ? nbp_vlan_add+0x20f/0x3c0 [ 417.116084][T11359] __kmem_cache_alloc_node+0x53/0x250 [ 417.121483][T11359] ? __vlan_flush+0x3e0/0x3e0 [ 417.126198][T11359] ? nbp_vlan_add+0x20f/0x3c0 [ 417.130900][T11359] kmalloc_trace+0x2a/0xe0 [ 417.135350][T11359] nbp_vlan_add+0x20f/0x3c0 [ 417.139889][T11359] br_vlan_info+0x101/0x460 [ 417.144441][T11359] ? br_process_vlan_info+0x8a0/0x8a0 [ 417.149848][T11359] ? mark_lock+0x94/0x320 [ 417.154205][T11359] br_process_vlan_info+0x316/0x8a0 [ 417.159435][T11359] ? __lock_acquire+0x1336/0x7d80 [ 417.164475][T11359] ? br_getlink+0x180/0x180 [ 417.169008][T11359] br_afspec+0x399/0x5f0 [ 417.173452][T11359] ? br_setport+0x1680/0x1680 [ 417.178160][T11359] br_setlink+0x355/0x860 [ 417.182521][T11359] ? br_vlan_info+0x460/0x460 [ 417.187276][T11359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 417.193296][T11359] ? mutex_is_locked+0x12/0x40 [ 417.198093][T11359] rtnl_bridge_setlink+0x5b2/0x7d0 [ 417.203236][T11359] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 417.208547][T11359] ? rtnetlink_rcv_msg+0x831/0xf90 [ 417.213695][T11359] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 417.219002][T11359] rtnetlink_rcv_msg+0x843/0xf90 [ 417.223991][T11359] ? rtnetlink_rcv_msg+0x220/0xf90 [ 417.229132][T11359] ? rtnetlink_bind+0x80/0x80 [ 417.233845][T11359] ? mark_lock+0x94/0x320 [ 417.238208][T11359] ? __lock_acquire+0x1262/0x7d80 [ 417.243279][T11359] ? mark_lock+0x94/0x320 [ 417.247644][T11359] ? mark_lock+0x94/0x320 [ 417.252003][T11359] ? __lock_acquire+0x1262/0x7d80 [ 417.257100][T11359] ? verify_lock_unused+0x140/0x140 [ 417.262341][T11359] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 417.268634][T11359] ? verify_lock_unused+0x140/0x140 [ 417.273883][T11359] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 417.279730][T11359] netlink_rcv_skb+0x235/0x4c0 [ 417.284528][T11359] ? rtnetlink_bind+0x80/0x80 [ 417.289239][T11359] ? netlink_ack+0x1160/0x1160 [ 417.294039][T11359] ? __lock_acquire+0x7d80/0x7d80 [ 417.299101][T11359] ? net_generic+0x1e/0x240 [ 417.303805][T11359] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.309037][T11359] netlink_unicast+0x7b1/0x930 [ 417.313845][T11359] netlink_sendmsg+0x8d0/0xbf0 [ 417.318646][T11359] ? netlink_getsockopt+0x590/0x590 [ 417.323872][T11359] ? apparmor_socket_sendmsg+0x8e/0x330 [ 417.329447][T11359] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.334761][T11359] ? security_socket_sendmsg+0x80/0xa0 [ 417.340242][T11359] ? netlink_getsockopt+0x590/0x590 [ 417.345483][T11359] ____sys_sendmsg+0x61b/0x980 [ 417.350279][T11359] ? __asan_memset+0x22/0x40 [ 417.354896][T11359] ? __sys_sendmsg_sock+0x30/0x30 [ 417.359947][T11359] ? __import_iovec+0x5f2/0x850 [ 417.364844][T11359] ? import_iovec+0x73/0xa0 [ 417.369380][T11359] ___sys_sendmsg+0x2a6/0x360 [ 417.374087][T11359] ? __sys_sendmsg+0x2b0/0x2b0 [ 417.378903][T11359] ? ktime_get+0x7f/0x280 [ 417.383263][T11359] ? trace_call_bpf+0xc3/0x6c0 [ 417.388083][T11359] __se_sys_sendmsg+0x1d0/0x2c0 [ 417.392964][T11359] ? perf_trace_preemptirq_template+0x269/0x330 [ 417.399235][T11359] ? __x64_sys_sendmsg+0x80/0x80 [ 417.404218][T11359] ? lockdep_hardirqs_on+0x98/0x150 [ 417.409464][T11359] do_syscall_64+0x55/0xb0 [ 417.413910][T11359] ? clear_bhb_loop+0x40/0x90 [ 417.418605][T11359] ? clear_bhb_loop+0x40/0x90 [ 417.423326][T11359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.429238][T11359] RIP: 0033:0x7f9888f9e159 [ 417.433679][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.453320][T11359] RSP: 002b:00007f9889ea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.461772][T11359] RAX: ffffffffffffffda RBX: 00007f9889225fa0 RCX: 00007f9888f9e159 [ 417.469859][T11359] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000a [ 417.477849][T11359] RBP: 00007f9889ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 417.485930][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.493929][T11359] R13: 00007f9889226038 R14: 00007f9889225fa0 R15: 00007ffce6dbef38 [ 417.501948][T11359] [ 418.030195][ T5787] Bluetooth: hci4: command tx timeout [ 418.155723][T11301] hsr_slave_0: entered promiscuous mode [ 418.193024][T11301] hsr_slave_1: entered promiscuous mode [ 418.216357][T11301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.236199][T11301] Cannot create hsr debugfs directory [ 418.641623][T11382] netlink: 'syz.2.2101': attribute type 10 has an invalid length. [ 418.774620][T11387] syzkaller0: entered promiscuous mode [ 418.825359][T11387] syzkaller0: entered allmulticast mode [ 418.827940][T11397] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2100'. [ 418.968771][T11397] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 419.047485][T11387] netlink: 'syz.3.2102': attribute type 21 has an invalid length. [ 419.059716][T11387] netlink: 14250 bytes leftover after parsing attributes in process `syz.3.2102'. [ 420.119843][ T5787] Bluetooth: hci4: command tx timeout [ 421.195878][T11428] netlink: 'syz.0.2111': attribute type 10 has an invalid length. [ 422.191244][ T5787] Bluetooth: hci4: command tx timeout [ 422.199498][T11437] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2115'. [ 422.250788][ T2919] hsr_slave_0: left promiscuous mode [ 422.314830][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.323046][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.331863][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.349797][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.408506][ T2919] veth1_macvtap: left promiscuous mode [ 422.426047][ T2919] veth0_macvtap: left promiscuous mode [ 422.436203][ T2919] veth1_vlan: left promiscuous mode [ 422.447167][ T2919] veth0_vlan: left promiscuous mode [ 422.455256][T11432] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2112'. [ 422.466719][T11432] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 422.849121][ T2919] team0 (unregistering): Port device geneve1 removed [ 423.350111][ T2919] team0 (unregistering): Port device team_slave_1 removed [ 423.391269][ T2919] team0 (unregistering): Port device team_slave_0 removed [ 423.432941][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.481708][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.745356][ T2919] team0 (unregistering): Port device bond0 removed [ 423.775673][ T2919] bond0 (unregistering): Released all slaves [ 423.854052][T11437] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2115'. [ 423.870247][T11450] netlink: 'syz.3.2115': attribute type 10 has an invalid length. [ 423.878593][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'. [ 423.891716][T11450] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 423.904832][T11450] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.935621][T11450] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 423.953657][T11467] netlink: 'syz.0.2118': attribute type 2 has an invalid length. [ 423.962718][T11439] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2115'. [ 423.972657][T11448] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2115'. [ 424.136280][T11472] netlink: 'syz.2.2119': attribute type 21 has an invalid length. [ 424.140418][T11475] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 424.159947][T11472] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2119'. [ 424.175023][T11475] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 424.210087][T11478] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 424.245850][T11477] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 424.363029][T11475] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 424.621665][T11301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.657295][T11301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.699122][T11475] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 424.814488][T11301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.860806][T11301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.345555][T11301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.433274][T11301] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.500859][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.508942][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.571420][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.578648][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.887747][T11501] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2123'. [ 425.958653][T11501] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 426.227620][T11301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.373741][T11301] veth0_vlan: entered promiscuous mode [ 426.409883][T11301] veth1_vlan: entered promiscuous mode [ 426.419215][T11522] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 426.476384][T11301] veth0_macvtap: entered promiscuous mode [ 426.515110][T11301] veth1_macvtap: entered promiscuous mode [ 426.557126][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.575740][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.593960][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.625190][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.650116][T11301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.690945][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.723241][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.747062][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.783571][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.797491][T11301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.818413][T11301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.841993][T11301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.878347][T11301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.899813][T11301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.924525][T11301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.943117][T11301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.971644][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.984152][T11535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.018309][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.040488][T11535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.287387][T11533] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2127'. [ 427.297557][T11533] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 427.412096][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.433589][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.530989][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.538865][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.048437][T11572] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2138'. [ 428.069860][T11572] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2138'. [ 428.095776][T11569] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2138'. [ 429.152272][T11597] __nla_validate_parse: 2 callbacks suppressed [ 429.152310][T11597] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2143'. [ 429.183992][T11597] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 429.396073][ C1] [ 429.396082][ C1] ================================ [ 429.396087][ C1] WARNING: inconsistent lock state [ 429.396101][ C1] syzkaller #0 Not tainted [ 429.396110][ C1] -------------------------------- [ 429.396113][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 429.396121][ C1] syz.2.2145/11605 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 429.396140][ C1] ffff888075a7bd20 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 429.396184][ C1] {INITIAL USE} state was registered at: [ 429.396190][ C1] lock_acquire+0x19e/0x420 [ 429.396208][ C1] _raw_spin_lock+0x2e/0x40 [ 429.396223][ C1] htab_lock_bucket+0x17d/0x300 [ 429.396238][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 429.396254][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 429.396271][ C1] bpf_overflow_handler+0x1fc/0x510 [ 429.396290][ C1] __perf_event_overflow+0x461/0x660 [ 429.396306][ C1] perf_swevent_event+0x319/0x570 [ 429.396323][ C1] perf_bp_event+0x319/0x430 [ 429.396338][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 429.396356][ C1] notifier_call_chain+0x18f/0x380 [ 429.396375][ C1] atomic_notifier_call_chain+0xda/0x180 [ 429.396393][ C1] notify_die+0x145/0x1a0 [ 429.396409][ C1] notify_debug+0x2e/0x50 [ 429.396451][ C1] noist_exc_debug+0x77/0x120 [ 429.396470][ C1] asm_exc_debug+0x33/0x40 [ 429.396491][ C1] irq event stamp: 3606 [ 429.396497][ C1] hardirqs last enabled at (3605): [] noist_exc_debug+0xf2/0x120 [ 429.396521][ C1] hardirqs last disabled at (3606): [] irqentry_enter+0x13/0x50 [ 429.396547][ C1] softirqs last enabled at (3528): [] bpf_prog_load+0x1204/0x1610 [ 429.396569][ C1] softirqs last disabled at (3526): [] bpf_ksym_add+0x2c/0x330 [ 429.396592][ C1] [ 429.396592][ C1] other info that might help us debug this: [ 429.396598][ C1] Possible unsafe locking scenario: [ 429.396598][ C1] [ 429.396601][ C1] CPU0 [ 429.396604][ C1] ---- [ 429.396607][ C1] lock(&htab->lockdep_key); [ 429.396618][ C1] [ 429.396621][ C1] lock(&htab->lockdep_key); [ 429.396631][ C1] [ 429.396631][ C1] *** DEADLOCK *** [ 429.396631][ C1] [ 429.396635][ C1] 1 lock held by syz.2.2145/11605: [ 429.396644][ C1] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 429.396694][ C1] [ 429.396694][ C1] stack backtrace: [ 429.396699][ C1] CPU: 1 PID: 11605 Comm: syz.2.2145 Not tainted syzkaller #0 [ 429.396716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.396726][ C1] Call Trace: [ 429.396732][ C1] <#DB> [ 429.396740][ C1] dump_stack_lvl+0x18c/0x250 [ 429.396766][ C1] ? show_regs_print_info+0x20/0x20 [ 429.396798][ C1] ? print_usage_bug+0x43d/0x6a0 [ 429.396820][ C1] ? verify_lock_unused+0x15/0x140 [ 429.396845][ C1] lock_acquire+0x2c2/0x420 [ 429.396872][ C1] ? htab_lock_bucket+0x17d/0x300 [ 429.396895][ C1] ? read_lock_is_recursive+0x20/0x20 [ 429.396937][ C1] _raw_spin_lock+0x2e/0x40 [ 429.396952][ C1] ? htab_lock_bucket+0x17d/0x300 [ 429.396971][ C1] htab_lock_bucket+0x17d/0x300 [ 429.396996][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 429.397017][ C1] ? look_up_lock_class+0x75/0x140 [ 429.397043][ C1] ? verify_lock_unused+0x15/0x140 [ 429.397066][ C1] ? jhash+0x34e/0x740 [ 429.397089][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 429.397118][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 429.397139][ C1] ? perf_callchain+0x220/0x220 [ 429.397170][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 429.397192][ C1] bpf_overflow_handler+0x1fc/0x510 [ 429.397215][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 429.397238][ C1] ? bpf_overflow_handler+0xde/0x510 [ 429.397263][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 429.397298][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 429.397324][ C1] __perf_event_overflow+0x461/0x660 [ 429.397355][ C1] perf_swevent_event+0x319/0x570 [ 429.397381][ C1] ? perf_tp_event+0x1550/0x1550 [ 429.397421][ C1] perf_bp_event+0x319/0x430 [ 429.397450][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 429.397517][ C1] ? lock_acquire+0x2c2/0x420 [ 429.397549][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 429.397579][ C1] notifier_call_chain+0x18f/0x380 [ 429.397605][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 429.397631][ C1] atomic_notifier_call_chain+0xda/0x180 [ 429.397667][ C1] notify_die+0x145/0x1a0 [ 429.397694][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 429.397735][ C1] notify_debug+0x2e/0x50 [ 429.397753][ C1] exc_debug+0xde/0x140 [ 429.397779][ C1] asm_exc_debug+0x1e/0x40 [ 429.397796][ C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 429.397819][ C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 429.397833][ C1] RSP: 0000:ffffc9000328f640 EFLAGS: 00040806 [ 429.397847][ C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92000651ee6 [ 429.397859][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 429.397871][ C1] RBP: 0000200000000300 R08: 0000000000000003 R09: 0000000000000000 [ 429.397882][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 0000000000000001 [ 429.397894][ C1] R13: 1ffff92000651ee4 R14: 0000000000000003 R15: dffffc0000000000 [ 429.397929][ C1] [ 429.397935][ C1] [ 429.397940][ C1] perf_callchain_user+0xbdd/0x15d0 [ 429.397977][ C1] ? get_callchain_entry+0x185/0x3c0 [ 429.398001][ C1] get_perf_callchain+0x394/0x510 [ 429.398025][ C1] ? put_callchain_entry+0xb0/0xb0 [ 429.398055][ C1] ? __perf_event_header__init_id+0x3b0/0x470 [ 429.398081][ C1] perf_prepare_sample+0x3c7/0x1db0 [ 429.398111][ C1] ? read_lock_is_recursive+0x20/0x20 [ 429.398133][ C1] ? perf_callchain+0x220/0x220 [ 429.398166][ C1] perf_event_output_forward+0x187/0x3e0 [ 429.398188][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 429.398208][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 429.398234][ C1] ? verify_lock_unused+0x140/0x140 [ 429.398260][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 429.398285][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 429.398310][ C1] __perf_event_overflow+0x461/0x660 [ 429.398341][ C1] perf_swevent_hrtimer+0x437/0x610 [ 429.398369][ C1] ? cpu_clock_event_read+0x40/0x40 [ 429.398386][ C1] ? __hrtimer_run_queues+0x426/0xc10 [ 429.398442][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 429.398469][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 429.398488][ C1] ? _raw_spin_unlock+0x40/0x40 [ 429.398515][ C1] ? cpu_clock_event_read+0x40/0x40 [ 429.398535][ C1] __hrtimer_run_queues+0x4e8/0xc10 [ 429.398554][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 429.398574][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 429.398620][ C1] ? hrtimer_interrupt+0x980/0x980 [ 429.398641][ C1] ? read_tsc+0x9/0x20 [ 429.398664][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 429.398698][ C1] hrtimer_interrupt+0x39d/0x980 [ 429.398751][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 429.398777][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 429.398802][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.398821][ C1] RIP: 0033:0x7f9888f7cefd [ 429.398836][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 429.398850][ C1] RSP: 002b:00007f9889ea28a8 EFLAGS: 00000283 [ 429.398864][ C1] RAX: 0000000000000300 RBX: 00007f9889ea2de0 RCX: 2f666c65732f636f [ 429.398876][ C1] RDX: 0000200000000300 RSI: 00007f988905f7e0 RDI: 0000200000000300 [ 429.398889][ C1] RBP: 0000200000000300 R08: 00007f9889ea3010 R09: 00000000ffffffff [ 429.398900][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 429.398911][ C1] R13: 0000000000000073 R14: 00007f988903437d R15: 00007f9889ea2ea0 [ 429.398946][ C1] [ 430.680619][T11613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2137'. [ 430.692098][T11613] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.