last executing test programs: 13.861134759s ago: executing program 0 (id=2272): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000001140)={'ipvlan1\x00', @random="0200ac7f7e00"}) 13.764868789s ago: executing program 0 (id=2273): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0, 0x700}, 0xc) 13.641101401s ago: executing program 0 (id=2276): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x29e0}, 0x1051ec, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) 13.253091001s ago: executing program 0 (id=2281): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11585, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xca, 0x4, @perf_config_ext={0x37, 0x9}, 0x7602, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x88) socketpair(0x23, 0x3, 0x3, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000000000)="b9ff03076044238cb89e14f0080047e0ffff00004000632f77fb8035140cac14140cabcbdd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000200), 0x33eb) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 12.545042783s ago: executing program 0 (id=2284): socket$kcm(0xa, 0x4, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x800}, 0x40800) sendmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61e", 0x9c}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)="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", 0x1094}], 0x3}, 0x40e4804) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xd, 0x4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="b703ab85262900000000000000031101000000000043001f6e34f275b16300000000000000"], &(0x7f0000001f00)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001f40)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000002040), 0x4) sendmsg$kcm(r4, &(0x7f0000002080)={&(0x7f00000020c0)=@hci={0x1f, 0x5865, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x16, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="b400000000000000791090000000000057000000000000009500000000000000"], &(0x7f0000002e80)='GPL\x00', 0x5, 0xfd90, &(0x7f0000002ec0)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003040)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000003140)={0x4, 0x80, 0x7, 0x8, 0x40, 0x9, 0x0, 0x3d15, 0xd1120, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000031c0), 0x4}, 0x100000, 0x7, 0xc, 0x9, 0x4, 0x9, 0x8001, 0x0, 0x10001, 0x0, 0x4f}, 0x0, 0xe, r1, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003280)}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28) 4.064982473s ago: executing program 3 (id=2325): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000300)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fe, &(0x7f0000000ac0)={'ip6tnl0\x00', @multicast}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a80)='./cgroup/file0\x00', 0x0, 0x4010, r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 2.933186899s ago: executing program 2 (id=2331): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040040) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000b1db00000018410000050000000000000000000000186700000a00000000000000ff03000095"], &(0x7f0000000500)='GPL\x00', 0x3, 0x24, &(0x7f0000000540)=""/36, 0x41100, 0x3c, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0x9, 0x8, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20040000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r7, &(0x7f0000000800)={&(0x7f0000000840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000900)={&(0x7f0000000940)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a7241, 0x0) close(r8) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000240)={'ip6tnl0\x00', @random="7fff00004ec6"}) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f8ff070000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0b", 0xbf}], 0x1}, 0x840) perf_event_open(&(0x7f0000000c00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="100000000000000000000000000000001800000000000000290000000b"], 0x28}, 0x0) 2.929427879s ago: executing program 3 (id=2332): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xed, 0x5, 0x0, 0x0, 0x0, 0x0, 0x50301, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000001480), 0x161) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f00000014c0), 0x4) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000001580)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001680)}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xa1, &(0x7f00000018c0)=[{&(0x7f0000001900)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.662149296s ago: executing program 3 (id=2333): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xed, 0x5, 0x0, 0x0, 0x0, 0x0, 0x50301, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0xe, &(0x7f0000000840)=[{&(0x7f0000000880)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000001480), 0x161) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f00000014c0), 0x4) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000001580)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001680)}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xa1, &(0x7f00000018c0)=[{&(0x7f0000001900)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xa, 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001bc0)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.558968437s ago: executing program 2 (id=2335): r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xfff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000a00)={0x0, 0x60, &(0x7f0000000a40)=[{&(0x7f0000000b00)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 2.195520435s ago: executing program 2 (id=2337): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11585, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xca, 0x4, @perf_config_ext={0x37, 0x9}, 0x7602, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x88) socketpair(0x23, 0x3, 0x3, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 2.038590071s ago: executing program 1 (id=2338): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8002, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.7491092s ago: executing program 1 (id=2339): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x29e0}, 0x1051ec, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000007c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 1.579539007s ago: executing program 3 (id=2340): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xed, 0x5, 0x0, 0x0, 0x0, 0x0, 0x50301, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000001480), 0x161) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f00000014c0), 0x4) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000001580)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001680)}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xa1, &(0x7f00000018c0)=[{&(0x7f0000001900)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.526366173s ago: executing program 2 (id=2341): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x5}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000480)=""/134, 0x50, 0x86, 0x1, 0x2, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f0000001cc0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000001e00), &(0x7f0000001e40)}, 0x28) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001f80)="ff", 0x4c}], 0x1, &(0x7f0000001fc0)=ANY=[], 0x11f0}, 0x10008014) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb864, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000100)='GPL\x00', 0x104, 0xfe, &(0x7f0000000200)=""/254, 0x41100, 0x21, '\x00', r1, @xdp=0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x2, 0x400}, 0x10, 0x0, r3, 0x2, 0x0, &(0x7f0000001e80)=[{0x3, 0x5, 0x8, 0x9}, {0x4, 0x5, 0x0, 0x9}], 0x10, 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 1.222827574s ago: executing program 1 (id=2342): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040040) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000b1db00000018410000050000000000000000000000186700000a00000000000000ff03000095"], &(0x7f0000000500)='GPL\x00', 0x3, 0x24, &(0x7f0000000540)=""/36, 0x41100, 0x3c, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0x9, 0x8, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20040000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r7, &(0x7f0000000800)={&(0x7f0000000840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000900)={&(0x7f0000000940)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a7241, 0x0) close(r8) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000240)={'ip6tnl0\x00', @random="7fff00004ec6"}) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f8ff070000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0b", 0xbf}], 0x1}, 0x840) perf_event_open(&(0x7f0000000c00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r2}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="100000000000000000000000000000001800000000000000290000000b"], 0x28}, 0x0) 1.221074284s ago: executing program 3 (id=2343): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) (async) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) (async) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="02", 0x1}, {0x0}], 0x2}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002180)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x20000000200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='devices.list\x00', 0x26e1, 0x0) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000900)={0x0, 0x2, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x15, 0x2000000000000216, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x7, 0xc, &(0x7f0000001d80)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = perf_event_open(&(0x7f0000001e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x0, 0xc, &(0x7f0000001f40)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000001fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x7, 0xc, &(0x7f0000002100)=ANY=[], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.045182572s ago: executing program 2 (id=2344): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000540), &(0x7f0000000700)=r4}, 0x3d) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 903.724307ms ago: executing program 1 (id=2345): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000480), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x2, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x2020) r2 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f0000000b00)={0xa, 0x4e23, @empty}, 0x10, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000b80)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167", 0x80}], 0x2, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x29, 0x32, 0xfffffffc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c80)={&(0x7f0000000cc0)=@in6={0xa, 0x4e23, 0xb00, @mcast1, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="10000000000000002900000002000000"], 0x10}, 0xf7e5) r4 = perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000e00)={0x5, 0x80, 0x2, 0x1, 0x8, 0xc9, 0x0, 0x8000000000000000, 0x8, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xffffffffffffffbf, 0x9}, 0x10000, 0x1, 0x9, 0x5, 0x40, 0x8001, 0x9, 0x0, 0x198e40, 0x0, 0x8000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1d) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000fc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000001140)={'ipvlan1\x00', @random="0200ac7f7e00"}) 417.908357ms ago: executing program 1 (id=2346): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8002, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 89.0901ms ago: executing program 3 (id=2347): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xed, 0x5, 0x0, 0x0, 0x0, 0x0, 0x50301, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0xe, &(0x7f0000000840)=[{&(0x7f0000000880)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000001480), 0x161) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f00000014c0), 0x4) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000001580)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001680)}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xa1, &(0x7f00000018c0)=[{&(0x7f0000001900)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xa, 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001bc0)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 18.361737ms ago: executing program 2 (id=2348): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000007, 0x20e6, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100001, 0x5}, 0x2004, 0x4, 0x0, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) getpid() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)="d80000001400dbcf1afbf4478a46b9040200080211000000040000a118000200e000200114140e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x204120, 0x0) ioctl$TUNGETVNETBE(r6, 0x800454df, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ff0f00000000010000f1ab4318000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007209f4ff01000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0xfb, 0x8b, 0x7, 0x39, 0x0, 0x3, 0x80001, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000c40), 0x1}, 0x2100, 0x100, 0x9, 0x7, 0x7, 0xffffffff, 0x2, 0x0, 0x1, 0x0, 0x7fff}, 0xffffffffffffffff, 0x7, r2, 0x1) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000c80)={'vlan0\x00', @random="010000201000"}) 10.511548ms ago: executing program 1 (id=2349): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x29e0}, 0x1051ec, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000007c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 0s ago: executing program 0 (id=2290): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000170001"], 0x0, 0x26}, 0x28) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): 0c8059f559 [ 445.590020][T11548] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000017 [ 445.596743][T11556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1752'. [ 445.598018][T11548] RBP: 00007f0c813e4090 R08: 0000000000000000 R09: 0000000000000000 [ 445.598036][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.598050][T11548] R13: 00007f0c80826128 R14: 00007f0c80826090 R15: 00007ffead73ce88 [ 445.598086][T11548] [ 445.964542][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 446.087193][T11565] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1754'. [ 446.110227][T11565] bridge_slave_1: default FDB implementation only supports local addresses [ 446.149350][T11571] netlink: 'syz.1.1756': attribute type 21 has an invalid length. [ 446.158820][T11571] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1756'. [ 446.201186][T11571] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 446.344042][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 446.464137][T11584] FAULT_INJECTION: forcing a failure. [ 446.464137][T11584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.549956][T11584] CPU: 0 PID: 11584 Comm: syz.1.1759 Not tainted syzkaller #0 [ 446.557511][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.567619][T11584] Call Trace: [ 446.570946][T11584] [ 446.573943][T11584] dump_stack_lvl+0x18c/0x250 [ 446.578690][T11584] ? show_regs_print_info+0x20/0x20 [ 446.583960][T11584] ? load_image+0x420/0x420 [ 446.588529][T11584] ? __might_fault+0xaa/0x120 [ 446.593276][T11584] ? __lock_acquire+0x7eb0/0x7eb0 [ 446.598392][T11584] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 446.604114][T11584] should_fail_ex+0x394/0x4c0 [ 446.608862][T11584] _copy_from_user+0x2f/0xe0 [ 446.613601][T11584] wext_handle_ioctl+0xc8/0x1e0 [ 446.618524][T11584] ? call_commit_handler+0xf0/0xf0 [ 446.623731][T11584] sock_ioctl+0x15d/0x7e0 [ 446.628130][T11584] ? sock_poll+0x460/0x460 [ 446.632633][T11584] ? bpf_lsm_file_ioctl+0x9/0x10 [ 446.637639][T11584] ? security_file_ioctl+0x80/0xa0 [ 446.642812][T11584] ? sock_poll+0x460/0x460 [ 446.647325][T11584] __se_sys_ioctl+0xfd/0x170 [ 446.651991][T11584] do_syscall_64+0x55/0xb0 [ 446.656473][T11584] ? clear_bhb_loop+0x40/0x90 [ 446.661224][T11584] ? clear_bhb_loop+0x40/0x90 [ 446.665971][T11584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.671922][T11584] RIP: 0033:0x7f0c8059f559 [ 446.676388][T11584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.696058][T11584] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.704536][T11584] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 446.712560][T11584] RDX: 0000200000000380 RSI: 0000000000008b32 RDI: 0000000000000003 [ 446.720577][T11584] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 446.729472][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.737591][T11584] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 446.745666][T11584] [ 446.935995][T11587] netlink: 'syz.2.1760': attribute type 21 has an invalid length. [ 446.957949][T11587] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1760'. [ 447.058129][T11587] netlink: 'syz.2.1760': attribute type 10 has an invalid length. [ 447.549691][T11604] FAULT_INJECTION: forcing a failure. [ 447.549691][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.581623][T11604] CPU: 0 PID: 11604 Comm: syz.0.1767 Not tainted syzkaller #0 [ 447.589171][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.599279][T11604] Call Trace: [ 447.602644][T11604] [ 447.605674][T11604] dump_stack_lvl+0x18c/0x250 [ 447.610423][T11604] ? show_regs_print_info+0x20/0x20 [ 447.615729][T11604] ? load_image+0x420/0x420 [ 447.619211][T11601] netlink: 'syz.1.1766': attribute type 2 has an invalid length. [ 447.620273][T11604] ? __lock_acquire+0x7eb0/0x7eb0 [ 447.620335][T11604] ? snprintf+0xe9/0x140 [ 447.620364][T11604] should_fail_ex+0x394/0x4c0 [ 447.620398][T11604] _copy_to_user+0x2f/0xa0 [ 447.620423][T11604] simple_read_from_buffer+0xe7/0x150 [ 447.620462][T11604] proc_fail_nth_read+0x1e8/0x260 [ 447.620501][T11604] ? proc_fault_inject_write+0x360/0x360 [ 447.620540][T11604] ? fsnotify_perm+0x271/0x5e0 [ 447.620568][T11604] ? proc_fault_inject_write+0x360/0x360 [ 447.620605][T11604] vfs_read+0x298/0x990 [ 447.620645][T11604] ? kernel_read+0x1e0/0x1e0 [ 447.620680][T11604] ? __fget_files+0x28/0x460 [ 447.620713][T11604] ? __fget_files+0x3fc/0x460 [ 447.620755][T11604] ? __fdget_pos+0x2a3/0x330 [ 447.620786][T11604] ? ksys_read+0x74/0x260 [ 447.620822][T11604] ksys_read+0x151/0x260 [ 447.657689][T11601] netlink: 'syz.1.1766': attribute type 8 has an invalid length. [ 447.663178][T11604] ? vfs_write+0x9a0/0x9a0 [ 447.663223][T11604] ? lockdep_hardirqs_on+0x98/0x150 [ 447.663251][T11604] do_syscall_64+0x55/0xb0 [ 447.663280][T11604] ? clear_bhb_loop+0x40/0x90 [ 447.663311][T11604] ? clear_bhb_loop+0x40/0x90 [ 447.663344][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.663376][T11604] RIP: 0033:0x7f607075fd8e [ 447.663397][T11604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 447.691027][T11601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1766'. [ 447.691964][T11604] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.691993][T11604] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 447.692011][T11604] RDX: 000000000000000f RSI: 00007f60716c00a0 RDI: 0000000000000003 [ 447.692026][T11604] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 447.692041][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.692055][T11604] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 447.692091][T11604] [ 448.256366][T11612] bridge_slave_1: default FDB implementation only supports local addresses [ 448.403034][T11625] FAULT_INJECTION: forcing a failure. [ 448.403034][T11625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.416454][T11625] CPU: 0 PID: 11625 Comm: syz.0.1774 Not tainted syzkaller #0 [ 448.423963][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 448.434049][T11625] Call Trace: [ 448.437364][T11625] [ 448.440329][T11625] dump_stack_lvl+0x18c/0x250 [ 448.445064][T11625] ? show_regs_print_info+0x20/0x20 [ 448.450305][T11625] ? load_image+0x420/0x420 [ 448.454846][T11625] ? __might_fault+0xaa/0x120 [ 448.459570][T11625] ? __lock_acquire+0x7eb0/0x7eb0 [ 448.464655][T11625] should_fail_ex+0x394/0x4c0 [ 448.469379][T11625] _copy_from_user+0x2f/0xe0 [ 448.474017][T11625] kstrtouint_from_user+0xde/0x170 [ 448.479172][T11625] ? kstrtol_from_user+0x190/0x190 [ 448.484338][T11625] proc_fail_nth_write+0x8f/0x250 [ 448.489426][T11625] ? proc_fail_nth_read+0x260/0x260 [ 448.494669][T11625] ? proc_fail_nth_read+0x260/0x260 [ 448.500002][T11625] vfs_write+0x299/0x9a0 [ 448.504297][T11625] ? file_end_write+0x250/0x250 [ 448.509191][T11625] ? __fget_files+0x28/0x460 [ 448.513818][T11625] ? __fget_files+0x3fc/0x460 [ 448.518546][T11625] ? __fdget_pos+0x2a3/0x330 [ 448.523200][T11625] ? ksys_write+0x74/0x260 [ 448.527656][T11625] ksys_write+0x151/0x260 [ 448.532050][T11625] ? __ia32_sys_read+0x90/0x90 [ 448.536859][T11625] ? lockdep_hardirqs_on+0x98/0x150 [ 448.542093][T11625] do_syscall_64+0x55/0xb0 [ 448.546545][T11625] ? clear_bhb_loop+0x40/0x90 [ 448.551267][T11625] ? clear_bhb_loop+0x40/0x90 [ 448.555987][T11625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.561921][T11625] RIP: 0033:0x7f607075fd8e [ 448.566372][T11625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.586122][T11625] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.594592][T11625] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 448.602599][T11625] RDX: 0000000000000001 RSI: 00007f60716c00a0 RDI: 0000000000000004 [ 448.610604][T11625] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 448.618601][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.626608][T11625] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 448.634625][T11625] [ 451.124289][T11680] validate_nla: 7 callbacks suppressed [ 451.124362][T11680] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 451.231285][T11688] netlink: 'syz.3.1792': attribute type 21 has an invalid length. [ 451.253451][T11688] __nla_validate_parse: 7 callbacks suppressed [ 451.253488][T11688] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1792'. [ 451.321860][T11688] netlink: 'syz.3.1792': attribute type 10 has an invalid length. [ 452.067626][T11707] FAULT_INJECTION: forcing a failure. [ 452.067626][T11707] name failslab, interval 1, probability 0, space 0, times 0 [ 452.084676][T11707] CPU: 1 PID: 11707 Comm: syz.2.1798 Not tainted syzkaller #0 [ 452.092239][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 452.102338][T11707] Call Trace: [ 452.105659][T11707] [ 452.108630][T11707] dump_stack_lvl+0x18c/0x250 [ 452.113370][T11707] ? show_regs_print_info+0x20/0x20 [ 452.118706][T11707] ? load_image+0x420/0x420 [ 452.123271][T11707] ? __might_sleep+0xe0/0xe0 [ 452.128004][T11707] ? __lock_acquire+0x7eb0/0x7eb0 [ 452.133085][T11707] ? trace_contention_end+0x39/0xe0 [ 452.138342][T11707] should_fail_ex+0x394/0x4c0 [ 452.143171][T11707] should_failslab+0x9/0x20 [ 452.147743][T11707] slab_pre_alloc_hook+0x59/0x300 [ 452.152886][T11707] ? mutex_lock_nested+0x20/0x20 [ 452.157849][T11707] ? rxrpc_lookup_local+0x57f/0x1700 [ 452.163266][T11707] __kmem_cache_alloc_node+0x53/0x260 [ 452.168678][T11707] ? rxrpc_lookup_local+0x57f/0x1700 [ 452.174005][T11707] kmalloc_trace+0x2a/0xe0 [ 452.178487][T11707] rxrpc_lookup_local+0x57f/0x1700 [ 452.183898][T11707] ? rxrpc_local_dont_fragment+0x70/0x70 [ 452.189567][T11707] ? lock_chain_count+0x20/0x20 [ 452.194475][T11707] ? __local_bh_enable_ip+0x13a/0x1c0 [ 452.199973][T11707] ? lockdep_hardirqs_on+0x98/0x150 [ 452.205290][T11707] ? __local_bh_enable_ip+0x13a/0x1c0 [ 452.210696][T11707] ? _local_bh_enable+0xa0/0xa0 [ 452.215614][T11707] ? do_raw_spin_unlock+0x121/0x230 [ 452.220852][T11707] rxrpc_sendmsg+0x2f3/0x5b0 [ 452.225552][T11707] ? rxrpc_getsockopt+0x150/0x150 [ 452.230606][T11707] ____sys_sendmsg+0x61b/0x980 [ 452.235403][T11707] ? __sys_sendmsg_sock+0x30/0x30 [ 452.240465][T11707] ? __import_iovec+0x3fa/0x850 [ 452.245366][T11707] ? import_iovec+0x73/0xa0 [ 452.249919][T11707] ___sys_sendmsg+0x2a6/0x360 [ 452.254647][T11707] ? get_pid_task+0x20/0x1e0 [ 452.259274][T11707] ? __sys_sendmsg+0x2b0/0x2b0 [ 452.264088][T11707] ? __lock_acquire+0x7eb0/0x7eb0 [ 452.269347][T11707] __se_sys_sendmsg+0x1d0/0x2c0 [ 452.274282][T11707] ? __x64_sys_sendmsg+0x80/0x80 [ 452.279267][T11707] ? lockdep_hardirqs_on+0x98/0x150 [ 452.284500][T11707] do_syscall_64+0x55/0xb0 [ 452.288953][T11707] ? clear_bhb_loop+0x40/0x90 [ 452.293667][T11707] ? clear_bhb_loop+0x40/0x90 [ 452.298388][T11707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.304367][T11707] RIP: 0033:0x7f760d79f559 [ 452.308900][T11707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.328542][T11707] RSP: 002b:00007f760e619028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.336988][T11707] RAX: ffffffffffffffda RBX: 00007f760da25fa0 RCX: 00007f760d79f559 [ 452.345012][T11707] RDX: 0000000000000040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 452.353015][T11707] RBP: 00007f760e619090 R08: 0000000000000000 R09: 0000000000000000 [ 452.361166][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.369178][T11707] R13: 00007f760da26038 R14: 00007f760da25fa0 R15: 00007ffe25f96038 [ 452.377311][T11707] [ 452.642738][T11715] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1801'. [ 452.661012][T11717] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1801'. [ 452.703294][T11718] netlink: 'syz.2.1803': attribute type 3 has an invalid length. [ 452.730444][T11718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1803'. [ 452.747259][T11722] netlink: 'syz.0.1804': attribute type 21 has an invalid length. [ 452.760458][T11722] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1804'. [ 452.786455][T11722] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 453.275706][T11732] netlink: 'syz.2.1807': attribute type 10 has an invalid length. [ 453.296606][T11732] batman_adv: batadv0: Removing interface: netdevsim0 [ 453.308906][T11733] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 454.617650][T11759] netlink: 'syz.1.1814': attribute type 21 has an invalid length. [ 454.719366][T11753] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1811'. [ 454.792058][T11766] FAULT_INJECTION: forcing a failure. [ 454.792058][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.824284][T11766] CPU: 0 PID: 11766 Comm: syz.3.1816 Not tainted syzkaller #0 [ 454.831853][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 454.841976][T11766] Call Trace: [ 454.845310][T11766] [ 454.848303][T11766] dump_stack_lvl+0x18c/0x250 [ 454.853057][T11766] ? show_regs_print_info+0x20/0x20 [ 454.858302][T11766] ? load_image+0x420/0x420 [ 454.862876][T11766] ? __might_fault+0xaa/0x120 [ 454.867601][T11766] ? __lock_acquire+0x7eb0/0x7eb0 [ 454.872682][T11766] should_fail_ex+0x394/0x4c0 [ 454.877411][T11766] _copy_from_user+0x2f/0xe0 [ 454.882044][T11766] ___sys_sendmsg+0x1c7/0x360 [ 454.886771][T11766] ? __sys_sendmsg+0x2b0/0x2b0 [ 454.891607][T11766] ? __lock_acquire+0x7eb0/0x7eb0 [ 454.896719][T11766] __se_sys_sendmsg+0x1d0/0x2c0 [ 454.901613][T11766] ? __x64_sys_sendmsg+0x80/0x80 [ 454.906619][T11766] ? lockdep_hardirqs_on+0x98/0x150 [ 454.911951][T11766] do_syscall_64+0x55/0xb0 [ 454.916407][T11766] ? clear_bhb_loop+0x40/0x90 [ 454.921124][T11766] ? clear_bhb_loop+0x40/0x90 [ 454.925852][T11766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.931905][T11766] RIP: 0033:0x7f461e19f559 [ 454.936361][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.956008][T11766] RSP: 002b:00007f461f00c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.964465][T11766] RAX: ffffffffffffffda RBX: 00007f461e425fa0 RCX: 00007f461e19f559 [ 454.972477][T11766] RDX: 00000000000480c1 RSI: 0000200000000c40 RDI: 0000000000000005 [ 454.980496][T11766] RBP: 00007f461f00c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.988501][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.996511][T11766] R13: 00007f461e426038 R14: 00007f461e425fa0 R15: 00007ffc07fe5158 [ 455.004544][T11766] [ 455.036074][T11768] netlink: 'syz.1.1817': attribute type 21 has an invalid length. [ 455.046096][T11768] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1817'. [ 455.282642][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 456.263989][T11793] FAULT_INJECTION: forcing a failure. [ 456.263989][T11793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.292256][T11793] CPU: 1 PID: 11793 Comm: syz.1.1825 Not tainted syzkaller #0 [ 456.299797][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 456.309897][T11793] Call Trace: [ 456.313228][T11793] [ 456.316204][T11793] dump_stack_lvl+0x18c/0x250 [ 456.320949][T11793] ? show_regs_print_info+0x20/0x20 [ 456.326210][T11793] ? load_image+0x420/0x420 [ 456.330770][T11793] ? __might_fault+0xaa/0x120 [ 456.335504][T11793] ? __lock_acquire+0x7eb0/0x7eb0 [ 456.340590][T11793] should_fail_ex+0x394/0x4c0 [ 456.345350][T11793] _copy_from_iter+0x1cd/0x1290 [ 456.350267][T11793] ? rcu_is_watching+0x15/0xb0 [ 456.355098][T11793] ? copyout_mc+0x70/0x70 [ 456.359482][T11793] ? __virt_addr_valid+0x10c/0x380 [ 456.364646][T11793] ? __virt_addr_valid+0x10c/0x380 [ 456.369829][T11793] ? __virt_addr_valid+0x10c/0x380 [ 456.374997][T11793] ? __check_object_size+0x4fc/0xa40 [ 456.380334][T11793] netlink_sendmsg+0x76b/0xbf0 [ 456.385156][T11793] ? netlink_getsockopt+0x590/0x590 [ 456.390407][T11793] ? apparmor_socket_sendmsg+0x8e/0x330 [ 456.396029][T11793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 456.401366][T11793] ? security_socket_sendmsg+0x80/0xa0 [ 456.406988][T11793] ? netlink_getsockopt+0x590/0x590 [ 456.412293][T11793] ____sys_sendmsg+0x61b/0x980 [ 456.417121][T11793] ? __asan_memset+0x22/0x40 [ 456.421805][T11793] ? __sys_sendmsg_sock+0x30/0x30 [ 456.427095][T11793] ? __import_iovec+0x5f2/0x850 [ 456.432096][T11793] ? import_iovec+0x73/0xa0 [ 456.436652][T11793] ___sys_sendmsg+0x2a6/0x360 [ 456.441475][T11793] ? get_pid_task+0x20/0x1e0 [ 456.446126][T11793] ? __sys_sendmsg+0x2b0/0x2b0 [ 456.450970][T11793] ? __lock_acquire+0x7eb0/0x7eb0 [ 456.456073][T11793] __se_sys_sendmsg+0x1d0/0x2c0 [ 456.460981][T11793] ? __x64_sys_sendmsg+0x80/0x80 [ 456.465981][T11793] ? lockdep_hardirqs_on+0x98/0x150 [ 456.471227][T11793] do_syscall_64+0x55/0xb0 [ 456.475698][T11793] ? clear_bhb_loop+0x40/0x90 [ 456.480424][T11793] ? clear_bhb_loop+0x40/0x90 [ 456.485163][T11793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.491118][T11793] RIP: 0033:0x7f0c8059f559 [ 456.495585][T11793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.515241][T11793] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.523710][T11793] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 456.531731][T11793] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 456.539750][T11793] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 456.547768][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.555813][T11793] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 456.563939][T11793] [ 457.245706][T11799] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.442321][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 457.725679][T11813] validate_nla: 1 callbacks suppressed [ 457.725703][T11813] netlink: 'syz.2.1829': attribute type 21 has an invalid length. [ 457.746224][T11813] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1829'. [ 457.823677][T11811] netlink: 'syz.2.1829': attribute type 10 has an invalid length. [ 457.936210][T11798] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.038604][T11819] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 458.050287][T11819] batman_adv: batadv0: Removing interface: netdevsim0 [ 458.083142][T11819] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 458.103388][T11819] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 458.134371][T11819] team0: Port device netdevsim0 added [ 459.125035][T10928] batman_adv: batadv_iv_ogm_emit: soft interface switch for queued OGM [ 459.894976][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 460.287997][T11847] netlink: 'syz.1.1840': attribute type 21 has an invalid length. [ 460.304893][T11847] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1840'. [ 460.336761][T11847] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 460.533510][T11855] netlink: 'syz.2.1845': attribute type 10 has an invalid length. [ 460.546085][T11855] team0: Port device netdevsim0 added [ 460.718702][T11859] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 460.749075][T11862] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 461.049426][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 463.787795][T11873] netlink: 'syz.2.1851': attribute type 21 has an invalid length. [ 463.810521][T11873] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1851'. [ 463.866084][T11873] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 464.065669][T11871] syz.0.1850 (11871) used greatest stack depth: 18728 bytes left [ 464.287399][T11885] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 464.467986][T11891] netlink: 'syz.2.1867': attribute type 10 has an invalid length. [ 464.615897][T11891] team0: Port device netdevsim0 removed [ 464.670160][T11891] batman_adv: batadv0: Adding interface: netdevsim0 [ 464.684181][T11891] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.760278][T11891] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 464.796912][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 464.924043][T11897] netlink: 'syz.0.1860': attribute type 10 has an invalid length. [ 465.292361][T11904] netlink: 'syz.3.1863': attribute type 21 has an invalid length. [ 465.336564][T11904] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1863'. [ 465.376924][T11904] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 466.188717][T11924] netlink: 'syz.1.1873': attribute type 21 has an invalid length. [ 466.205630][T11924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1873'. [ 466.271282][T11922] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 466.413231][T11928] FAULT_INJECTION: forcing a failure. [ 466.413231][T11928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.455248][T11924] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 466.462881][T11928] CPU: 1 PID: 11928 Comm: syz.0.1872 Not tainted syzkaller #0 [ 466.471174][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 466.481297][T11928] Call Trace: [ 466.484633][T11928] [ 466.487611][T11928] dump_stack_lvl+0x18c/0x250 [ 466.492361][T11928] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.498598][T11928] ? show_regs_print_info+0x20/0x20 [ 466.503865][T11928] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.510220][T11928] should_fail_ex+0x394/0x4c0 [ 466.514954][T11928] _copy_to_user+0x2f/0xa0 [ 466.519415][T11928] simple_read_from_buffer+0xe7/0x150 [ 466.524848][T11928] proc_fail_nth_read+0x1e8/0x260 [ 466.529953][T11928] ? proc_fault_inject_write+0x360/0x360 [ 466.535658][T11928] ? fsnotify_perm+0x271/0x5e0 [ 466.540485][T11928] ? proc_fault_inject_write+0x360/0x360 [ 466.546190][T11928] vfs_read+0x298/0x990 [ 466.550421][T11928] ? kernel_read+0x1e0/0x1e0 [ 466.555087][T11928] ? __fget_files+0x28/0x460 [ 466.559848][T11928] ? __fget_files+0x3fc/0x460 [ 466.564614][T11928] ? __fdget_pos+0x2a3/0x330 [ 466.569260][T11928] ? ksys_read+0x74/0x260 [ 466.573736][T11928] ksys_read+0x151/0x260 [ 466.578041][T11928] ? vfs_write+0x9a0/0x9a0 [ 466.582519][T11928] ? syscall_enter_from_user_mode+0x2e/0x80 [ 466.588472][T11928] do_syscall_64+0x55/0xb0 [ 466.593118][T11928] ? clear_bhb_loop+0x40/0x90 [ 466.597854][T11928] ? clear_bhb_loop+0x40/0x90 [ 466.602593][T11928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.608637][T11928] RIP: 0033:0x7f607075fd8e [ 466.613133][T11928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 466.632802][T11928] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.641431][T11928] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 466.649450][T11928] RDX: 000000000000000f RSI: 00007f60716c00a0 RDI: 0000000000000008 [ 466.657446][T11928] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 466.665462][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.673458][T11928] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 466.681475][T11928] [ 470.100338][T11958] validate_nla: 1 callbacks suppressed [ 470.100360][T11958] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 470.105886][T11952] syz.2.1880 (11952) used greatest stack depth: 18536 bytes left [ 470.651858][T11976] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 471.043542][T11982] FAULT_INJECTION: forcing a failure. [ 471.043542][T11982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.063137][T11982] CPU: 0 PID: 11982 Comm: syz.1.1892 Not tainted syzkaller #0 [ 471.070851][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 471.080969][T11982] Call Trace: [ 471.084303][T11982] [ 471.087279][T11982] dump_stack_lvl+0x18c/0x250 [ 471.092032][T11982] ? show_regs_print_info+0x20/0x20 [ 471.097380][T11982] ? load_image+0x420/0x420 [ 471.101945][T11982] ? __might_fault+0xaa/0x120 [ 471.106706][T11982] ? __lock_acquire+0x7eb0/0x7eb0 [ 471.111815][T11982] should_fail_ex+0x394/0x4c0 [ 471.116563][T11982] _copy_from_iter+0x1cd/0x1290 [ 471.121549][T11982] ? rcu_is_watching+0x15/0xb0 [ 471.126373][T11982] ? copyout_mc+0x70/0x70 [ 471.130744][T11982] ? __virt_addr_valid+0x10c/0x380 [ 471.135993][T11982] ? __virt_addr_valid+0x10c/0x380 [ 471.141152][T11982] ? __virt_addr_valid+0x10c/0x380 [ 471.146305][T11982] ? __check_object_size+0x4fc/0xa40 [ 471.151655][T11982] netlink_sendmsg+0x76b/0xbf0 [ 471.156488][T11982] ? netlink_getsockopt+0x590/0x590 [ 471.161732][T11982] ? apparmor_socket_sendmsg+0x170/0x330 [ 471.167421][T11982] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 471.172761][T11982] ? security_socket_sendmsg+0x80/0xa0 [ 471.178264][T11982] ? netlink_getsockopt+0x590/0x590 [ 471.183511][T11982] ____sys_sendmsg+0x61b/0x980 [ 471.188336][T11982] ? __asan_memset+0x22/0x40 [ 471.192974][T11982] ? __sys_sendmsg_sock+0x30/0x30 [ 471.198043][T11982] ? __import_iovec+0x5f2/0x850 [ 471.202946][T11982] ? import_iovec+0x73/0xa0 [ 471.207509][T11982] ___sys_sendmsg+0x2a6/0x360 [ 471.212314][T11982] ? get_pid_task+0x20/0x1e0 [ 471.216960][T11982] ? __sys_sendmsg+0x2b0/0x2b0 [ 471.221801][T11982] ? __lock_acquire+0x7eb0/0x7eb0 [ 471.226920][T11982] __se_sys_sendmsg+0x1d0/0x2c0 [ 471.231830][T11982] ? __x64_sys_sendmsg+0x80/0x80 [ 471.236833][T11982] ? lockdep_hardirqs_on+0x98/0x150 [ 471.242100][T11982] do_syscall_64+0x55/0xb0 [ 471.246568][T11982] ? clear_bhb_loop+0x40/0x90 [ 471.251291][T11982] ? clear_bhb_loop+0x40/0x90 [ 471.256027][T11982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.261972][T11982] RIP: 0033:0x7f0c8059f559 [ 471.266446][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.286104][T11982] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.294579][T11982] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 471.302682][T11982] RDX: 0000000020040842 RSI: 0000200000000100 RDI: 0000000000000003 [ 471.310694][T11982] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 471.318712][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.326724][T11982] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 471.334937][T11982] [ 471.482681][T11985] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 471.584904][T11989] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 471.739820][T11994] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 471.825273][T11994] dummy0: left allmulticast mode [ 471.832037][T11994] dummy0: left promiscuous mode [ 471.837588][T11994] : port 1(dummy0) entered disabled state [ 471.856624][T11994] dummy0: entered promiscuous mode [ 471.863630][T11994] dummy0: entered allmulticast mode [ 471.870537][T11994] team0: Port device dummy0 added [ 471.886419][T11998] netlink: 'syz.1.1899': attribute type 21 has an invalid length. [ 471.895556][T11998] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1899'. [ 471.941730][T11998] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 471.989379][T12000] netlink: 'syz.2.1900': attribute type 2 has an invalid length. [ 472.005584][T12000] netlink: 'syz.2.1900': attribute type 8 has an invalid length. [ 472.030211][T12000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1900'. [ 472.081491][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 472.398365][T12014] FAULT_INJECTION: forcing a failure. [ 472.398365][T12014] name failslab, interval 1, probability 0, space 0, times 0 [ 472.430040][T12014] CPU: 0 PID: 12014 Comm: syz.1.1906 Not tainted syzkaller #0 [ 472.437627][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 472.447749][T12014] Call Trace: [ 472.451085][T12014] [ 472.454060][T12014] dump_stack_lvl+0x18c/0x250 [ 472.458835][T12014] ? show_regs_print_info+0x20/0x20 [ 472.464107][T12014] ? load_image+0x420/0x420 [ 472.468665][T12014] ? __might_sleep+0xe0/0xe0 [ 472.473317][T12014] ? __lock_acquire+0x7eb0/0x7eb0 [ 472.478398][T12014] ? mark_lock+0x94/0x320 [ 472.482793][T12014] should_fail_ex+0x394/0x4c0 [ 472.487540][T12014] should_failslab+0x9/0x20 [ 472.492094][T12014] slab_pre_alloc_hook+0x59/0x300 [ 472.497175][T12014] ? __get_vm_area_node+0x125/0x370 [ 472.502481][T12014] __kmem_cache_alloc_node+0x53/0x260 [ 472.507921][T12014] ? __get_vm_area_node+0x125/0x370 [ 472.513185][T12014] kmalloc_node_trace+0x26/0xe0 [ 472.518103][T12014] __get_vm_area_node+0x125/0x370 [ 472.523228][T12014] __vmalloc_node_range+0x36f/0x1320 [ 472.528573][T12014] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 472.534175][T12014] ? mark_lock+0x94/0x320 [ 472.538603][T12014] ? __lock_acquire+0x1431/0x7eb0 [ 472.543710][T12014] ? aa_get_newest_label+0xfd/0x5c0 [ 472.549056][T12014] ? free_vm_area+0x50/0x50 [ 472.553713][T12014] ? end_current_label_crit_section+0x170/0x170 [ 472.560049][T12014] ? verify_lock_unused+0x140/0x140 [ 472.565313][T12014] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 472.570927][T12014] __vmalloc+0x7a/0x90 [ 472.575491][T12014] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 472.581095][T12014] bpf_prog_alloc_no_stats+0x46/0x460 [ 472.586532][T12014] bpf_prog_alloc+0x3d/0x1a0 [ 472.591178][T12014] bpf_prog_load+0x6b2/0x1610 [ 472.595926][T12014] ? map_freeze+0x420/0x420 [ 472.600582][T12014] ? __might_fault+0xaa/0x120 [ 472.605311][T12014] ? __lock_acquire+0x7eb0/0x7eb0 [ 472.610392][T12014] ? file_end_write+0x159/0x250 [ 472.615304][T12014] ? __might_fault+0xaa/0x120 [ 472.620049][T12014] ? __might_fault+0xc6/0x120 [ 472.624783][T12014] ? __might_fault+0xaa/0x120 [ 472.629535][T12014] ? bpf_lsm_bpf+0x9/0x10 [ 472.633941][T12014] ? security_bpf+0x7e/0xa0 [ 472.638542][T12014] __sys_bpf+0x5ba/0x890 [ 472.642845][T12014] ? bpf_link_show_fdinfo+0x560/0x560 [ 472.648313][T12014] ? lock_chain_count+0x20/0x20 [ 472.653235][T12014] __x64_sys_bpf+0x7c/0x90 [ 472.657713][T12014] do_syscall_64+0x55/0xb0 [ 472.662189][T12014] ? clear_bhb_loop+0x40/0x90 [ 472.666930][T12014] ? clear_bhb_loop+0x40/0x90 [ 472.671675][T12014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.677629][T12014] RIP: 0033:0x7f0c8059f559 [ 472.682096][T12014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.701872][T12014] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.710403][T12014] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 472.718467][T12014] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 472.726490][T12014] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 472.734603][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.742628][T12014] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 472.750702][T12014] [ 472.778183][T12014] warn_alloc: 1 callbacks suppressed [ 472.778202][T12014] syz.1.1906: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 472.802324][T12014] CPU: 0 PID: 12014 Comm: syz.1.1906 Not tainted syzkaller #0 [ 472.809886][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 472.820018][T12014] Call Trace: [ 472.823395][T12014] [ 472.826375][T12014] dump_stack_lvl+0x18c/0x250 [ 472.831135][T12014] ? show_regs_print_info+0x20/0x20 [ 472.836401][T12014] ? load_image+0x420/0x420 [ 472.840997][T12014] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 472.847475][T12014] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 472.854068][T12014] warn_alloc+0x246/0x340 [ 472.858456][T12014] ? __get_vm_area_node+0x125/0x370 [ 472.863727][T12014] ? zone_watermark_ok_safe+0x230/0x230 [ 472.869337][T12014] ? rcu_is_watching+0x15/0xb0 [ 472.874264][T12014] ? __get_vm_area_node+0x356/0x370 [ 472.879633][T12014] __vmalloc_node_range+0x394/0x1320 [ 472.884985][T12014] ? mark_lock+0x94/0x320 [ 472.889386][T12014] ? __lock_acquire+0x1431/0x7eb0 [ 472.894601][T12014] ? aa_get_newest_label+0xfd/0x5c0 [ 472.899860][T12014] ? free_vm_area+0x50/0x50 [ 472.904437][T12014] ? end_current_label_crit_section+0x170/0x170 [ 472.910742][T12014] ? verify_lock_unused+0x140/0x140 [ 472.916000][T12014] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 472.921600][T12014] __vmalloc+0x7a/0x90 [ 472.925729][T12014] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 472.931341][T12014] bpf_prog_alloc_no_stats+0x46/0x460 [ 472.936797][T12014] bpf_prog_alloc+0x3d/0x1a0 [ 472.941454][T12014] bpf_prog_load+0x6b2/0x1610 [ 472.946219][T12014] ? map_freeze+0x420/0x420 [ 472.950816][T12014] ? __might_fault+0xaa/0x120 [ 472.955568][T12014] ? __lock_acquire+0x7eb0/0x7eb0 [ 472.960649][T12014] ? file_end_write+0x159/0x250 [ 472.965562][T12014] ? __might_fault+0xaa/0x120 [ 472.970294][T12014] ? __might_fault+0xc6/0x120 [ 472.975045][T12014] ? __might_fault+0xaa/0x120 [ 472.979776][T12014] ? bpf_lsm_bpf+0x9/0x10 [ 472.984167][T12014] ? security_bpf+0x7e/0xa0 [ 472.988725][T12014] __sys_bpf+0x5ba/0x890 [ 472.993031][T12014] ? bpf_link_show_fdinfo+0x560/0x560 [ 472.998517][T12014] ? lock_chain_count+0x20/0x20 [ 473.003443][T12014] __x64_sys_bpf+0x7c/0x90 [ 473.007939][T12014] do_syscall_64+0x55/0xb0 [ 473.012409][T12014] ? clear_bhb_loop+0x40/0x90 [ 473.017137][T12014] ? clear_bhb_loop+0x40/0x90 [ 473.021879][T12014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.027839][T12014] RIP: 0033:0x7f0c8059f559 [ 473.032324][T12014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.051981][T12014] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.060455][T12014] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 473.068468][T12014] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 473.076486][T12014] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 473.084508][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.092546][T12014] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 473.100610][T12014] [ 473.111884][T12014] Mem-Info: [ 473.115326][T12014] active_anon:9419 inactive_anon:0 isolated_anon:0 [ 473.115326][T12014] active_file:19518 inactive_file:40107 isolated_file:0 [ 473.115326][T12014] unevictable:768 dirty:265 writeback:0 [ 473.115326][T12014] slab_reclaimable:13376 slab_unreclaimable:112757 [ 473.115326][T12014] mapped:25048 shmem:1364 pagetables:556 [ 473.115326][T12014] sec_pagetables:0 bounce:0 [ 473.115326][T12014] kernel_misc_reclaimable:0 [ 473.115326][T12014] free:1312347 free_pcp:10047 free_cma:0 [ 473.166819][T12014] Node 0 active_anon:37676kB inactive_anon:0kB active_file:78072kB inactive_file:160224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100208kB dirty:1072kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11824kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 473.207059][T12014] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 473.213366][T12020] netlink: 'syz.0.1908': attribute type 39 has an invalid length. [ 473.246474][T12014] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.297308][T12014] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 473.306646][T12014] Node 0 DMA32 free:1335312kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:37736kB inactive_anon:0kB active_file:78072kB inactive_file:159404kB unevictable:1536kB writepending:1072kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:20824kB local_pcp:6288kB free_cma:0kB [ 473.381890][T12014] lowmem_reserve[]: 0 0 0 0 0 [ 473.395879][T12014] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 473.468135][T12014] lowmem_reserve[]: 0 0 0 0 0 [ 473.473651][T12014] Node 1 Normal free:3898716kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:6752kB free_cma:0kB [ 473.503877][T12014] lowmem_reserve[]: 0 0 0 0 0 [ 473.508684][T12014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.523386][T12014] Node 0 DMA32: 894*4kB (UE) 643*8kB (UME) 1038*16kB (UME) 1409*32kB (UM) 444*64kB (UM) 154*128kB (UM) 93*256kB (UM) 50*512kB (UME) 36*1024kB (UME) 10*2048kB (UME) 271*4096kB (M) = 1335312kB [ 473.544767][T12014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 473.557114][T12014] Node 1 Normal: 211*4kB (UME) 52*8kB (UME) 39*16kB (UME) 138*32kB (UME) 31*64kB (UME) 10*128kB (UME) 6*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3898716kB [ 473.650087][T12014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.659746][T12014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.679054][T12014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.689242][T12014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.706842][T12014] 60989 total pagecache pages [ 473.711862][T12014] 0 pages in swap cache [ 473.716067][T12014] Free swap = 124996kB [ 473.758698][T12014] Total swap = 124996kB [ 473.781726][T12014] 2097051 pages RAM [ 473.794426][T12026] FAULT_INJECTION: forcing a failure. [ 473.794426][T12026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.806706][T12014] 0 pages HighMem/MovableOnly [ 473.813050][T12014] 421729 pages reserved [ 473.817416][T12014] 0 pages cma reserved [ 473.870204][T12026] CPU: 1 PID: 12026 Comm: syz.2.1910 Not tainted syzkaller #0 [ 473.877764][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.887872][T12026] Call Trace: [ 473.891194][T12026] [ 473.894179][T12026] dump_stack_lvl+0x18c/0x250 [ 473.898957][T12026] ? show_regs_print_info+0x20/0x20 [ 473.904230][T12026] ? load_image+0x420/0x420 [ 473.908790][T12026] ? __might_fault+0xaa/0x120 [ 473.913520][T12026] ? __lock_acquire+0x7eb0/0x7eb0 [ 473.918672][T12026] ? __virt_addr_valid+0x10c/0x380 [ 473.923824][T12026] should_fail_ex+0x394/0x4c0 [ 473.928548][T12026] _copy_from_user+0x2f/0xe0 [ 473.933203][T12026] generic_map_update_batch+0x53e/0x800 [ 473.938796][T12026] ? rcu_read_unlock+0xa0/0xa0 [ 473.943595][T12026] ? __fdget+0x180/0x210 [ 473.947878][T12026] ? rcu_read_unlock+0xa0/0xa0 [ 473.952672][T12026] bpf_map_do_batch+0x3f2/0x600 [ 473.957572][T12026] ? bpf_lsm_xfrm_decode_session+0x10/0x10 [ 473.963472][T12026] __sys_bpf+0x381/0x890 [ 473.967845][T12026] ? bpf_link_show_fdinfo+0x560/0x560 [ 473.973279][T12026] ? lock_chain_count+0x20/0x20 [ 473.978185][T12026] __x64_sys_bpf+0x7c/0x90 [ 473.982644][T12026] do_syscall_64+0x55/0xb0 [ 473.987103][T12026] ? clear_bhb_loop+0x40/0x90 [ 473.991821][T12026] ? clear_bhb_loop+0x40/0x90 [ 473.996542][T12026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.002483][T12026] RIP: 0033:0x7f760d79f559 [ 474.006932][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.026572][T12026] RSP: 002b:00007f760e619028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.035114][T12026] RAX: ffffffffffffffda RBX: 00007f760da25fa0 RCX: 00007f760d79f559 [ 474.043313][T12026] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 000000000000001a [ 474.051339][T12026] RBP: 00007f760e619090 R08: 0000000000000000 R09: 0000000000000000 [ 474.059776][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.067976][T12026] R13: 00007f760da26038 R14: 00007f760da25fa0 R15: 00007ffe25f96038 [ 474.075998][T12026] [ 474.138490][T12031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1912'. [ 474.240275][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1913'. [ 474.293385][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 474.636806][T12042] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 474.679132][T12042] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 474.714951][T12042] team0: Port device netdevsim0 removed [ 474.732052][T12042] batman_adv: batadv0: Adding interface: netdevsim0 [ 474.749396][T12042] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.810006][T12042] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 474.895676][T12052] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.924585][T12052] FAULT_INJECTION: forcing a failure. [ 474.924585][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 474.939862][T12052] CPU: 0 PID: 12052 Comm: syz.2.1921 Not tainted syzkaller #0 [ 474.947404][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 474.957553][T12052] Call Trace: [ 474.960918][T12052] [ 474.963898][T12052] dump_stack_lvl+0x18c/0x250 [ 474.968642][T12052] ? show_regs_print_info+0x20/0x20 [ 474.973914][T12052] ? load_image+0x420/0x420 [ 474.978485][T12052] ? __lock_acquire+0x7eb0/0x7eb0 [ 474.983569][T12052] ? __lock_acquire+0x135d/0x7eb0 [ 474.988659][T12052] should_fail_ex+0x394/0x4c0 [ 474.993405][T12052] should_failslab+0x9/0x20 [ 474.997988][T12052] slab_pre_alloc_hook+0x59/0x300 [ 475.003067][T12052] kmem_cache_alloc_lru+0x4d/0x2c0 [ 475.008225][T12052] ? __d_alloc+0x31/0x710 [ 475.012632][T12052] __d_alloc+0x31/0x710 [ 475.016823][T12052] d_alloc_parallel+0xe0/0x1590 [ 475.021719][T12052] ? trace_event_raw_event_lock+0x240/0x240 [ 475.027652][T12052] ? lockdep_softirqs_off+0x440/0x440 [ 475.033063][T12052] ? lockdep_softirqs_off+0x440/0x440 [ 475.038479][T12052] ? d_hash_and_lookup+0x1b0/0x1b0 [ 475.043726][T12052] ? __init_waitqueue_head+0xa8/0x140 [ 475.049135][T12052] __lookup_slow+0x138/0x400 [ 475.053776][T12052] ? lookup_one_len+0x2e0/0x2e0 [ 475.058681][T12052] lookup_one_len+0x1a1/0x2e0 [ 475.063393][T12052] ? lookup_one_common+0x450/0x450 [ 475.068545][T12052] start_creating+0x184/0x310 [ 475.073304][T12052] debugfs_create_dir+0x25/0x4b0 [ 475.078304][T12052] ieee80211_debugfs_add_netdev+0x120/0xf90 [ 475.084308][T12052] ? link_sta_eht_capa_read+0x2620/0x2620 [ 475.090080][T12052] ? ieee80211_link_setup+0x77/0xa0 [ 475.095389][T12052] ? ieee80211_setup_sdata+0x9f2/0xc80 [ 475.100887][T12052] ieee80211_if_change_type+0x215/0xaa0 [ 475.106470][T12052] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 475.113301][T12052] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 475.119843][T12052] ieee80211_change_iface+0x5c/0x4c0 [ 475.125173][T12052] cfg80211_change_iface+0x786/0xe20 [ 475.130585][T12052] cfg80211_wext_siwmode+0x1e8/0x2c0 [ 475.135907][T12052] ? cfg80211_wext_giwname+0x30/0x30 [ 475.141227][T12052] ? apparmor_capable+0x137/0x1a0 [ 475.146314][T12052] ioctl_standard_call+0xca/0x250 [ 475.151371][T12052] ? cfg80211_wext_giwname+0x30/0x30 [ 475.156693][T12052] ? cfg80211_wext_giwname+0x30/0x30 [ 475.162011][T12052] wext_ioctl_dispatch+0x51a/0x650 [ 475.167152][T12052] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.172211][T12052] ? wext_ioctl_dispatch+0x650/0x650 [ 475.177524][T12052] ? iw_handler_get_private+0x1f0/0x1f0 [ 475.183104][T12052] ? wext_handle_ioctl+0x1e0/0x1e0 [ 475.188251][T12052] ? __might_fault+0xaa/0x120 [ 475.192958][T12052] ? __might_fault+0xc6/0x120 [ 475.197661][T12052] ? __might_fault+0xaa/0x120 [ 475.202378][T12052] wext_handle_ioctl+0x118/0x1e0 [ 475.207454][T12052] ? call_commit_handler+0xf0/0xf0 [ 475.212614][T12052] sock_ioctl+0x15d/0x7e0 [ 475.216984][T12052] ? sock_poll+0x460/0x460 [ 475.221451][T12052] ? bpf_lsm_file_ioctl+0x9/0x10 [ 475.226450][T12052] ? security_file_ioctl+0x80/0xa0 [ 475.231621][T12052] ? sock_poll+0x460/0x460 [ 475.236072][T12052] __se_sys_ioctl+0xfd/0x170 [ 475.240707][T12052] do_syscall_64+0x55/0xb0 [ 475.245159][T12052] ? clear_bhb_loop+0x40/0x90 [ 475.249873][T12052] ? clear_bhb_loop+0x40/0x90 [ 475.254599][T12052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.260532][T12052] RIP: 0033:0x7f760d79f559 [ 475.265001][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.284657][T12052] RSP: 002b:00007f760e619028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.293147][T12052] RAX: ffffffffffffffda RBX: 00007f760da25fa0 RCX: 00007f760d79f559 [ 475.301160][T12052] RDX: 0000200000000140 RSI: 0000000000008b06 RDI: 0000000000000007 [ 475.309247][T12052] RBP: 00007f760e619090 R08: 0000000000000000 R09: 0000000000000000 [ 475.317272][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.325277][T12052] R13: 00007f760da26038 R14: 00007f760da25fa0 R15: 00007ffe25f96038 [ 475.333321][T12052] [ 475.382462][T12055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1922'. [ 475.446092][T12059] validate_nla: 7 callbacks suppressed [ 475.446113][T12059] netlink: 'syz.1.1923': attribute type 2 has an invalid length. [ 475.486869][T12059] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1923'. [ 475.616875][T12063] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 475.640263][T12063] netlink: 'syz.2.1925': attribute type 8 has an invalid length. [ 475.663040][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1925'. [ 475.696823][T12065] netlink: 'syz.0.1924': attribute type 21 has an invalid length. [ 475.723736][T12065] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1924'. [ 475.823667][T12065] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 476.382444][T12084] netlink: 'syz.2.1931': attribute type 10 has an invalid length. [ 476.700814][T12090] netlink: 'syz.2.1932': attribute type 39 has an invalid length. [ 477.200493][T12104] FAULT_INJECTION: forcing a failure. [ 477.200493][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.230033][T12104] CPU: 1 PID: 12104 Comm: syz.0.1936 Not tainted syzkaller #0 [ 477.237582][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.247915][T12104] Call Trace: [ 477.251258][T12104] [ 477.254233][T12104] dump_stack_lvl+0x18c/0x250 [ 477.258982][T12104] ? show_regs_print_info+0x20/0x20 [ 477.264365][T12104] ? load_image+0x420/0x420 [ 477.268925][T12104] ? __might_fault+0xaa/0x120 [ 477.273655][T12104] ? __lock_acquire+0x7eb0/0x7eb0 [ 477.278744][T12104] should_fail_ex+0x394/0x4c0 [ 477.283485][T12104] _copy_from_user+0x2f/0xe0 [ 477.288164][T12104] ___sys_sendmsg+0x1c7/0x360 [ 477.292937][T12104] ? __sys_sendmsg+0x2b0/0x2b0 [ 477.297813][T12104] __se_sys_sendmsg+0x1d0/0x2c0 [ 477.302731][T12104] ? __x64_sys_sendmsg+0x80/0x80 [ 477.307739][T12104] ? syscall_enter_from_user_mode+0x2e/0x80 [ 477.313694][T12104] do_syscall_64+0x55/0xb0 [ 477.318167][T12104] ? clear_bhb_loop+0x40/0x90 [ 477.322929][T12104] ? clear_bhb_loop+0x40/0x90 [ 477.328031][T12104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.333990][T12104] RIP: 0033:0x7f607079f559 [ 477.338461][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.358149][T12104] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.366618][T12104] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 477.374625][T12104] RDX: 00000000200048cc RSI: 0000200000001880 RDI: 0000000000000005 [ 477.382627][T12104] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 477.390631][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.398634][T12104] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 477.406649][T12104] [ 477.443815][T12106] netlink: 'syz.2.1937': attribute type 21 has an invalid length. [ 477.455355][T12106] __nla_validate_parse: 1 callbacks suppressed [ 477.455374][T12106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1937'. [ 477.509635][T12106] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 477.659083][T12110] netlink: 'syz.0.1938': attribute type 2 has an invalid length. [ 477.691395][T12110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1938'. [ 477.714829][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 477.897231][T12118] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1943'. [ 477.942886][T12121] FAULT_INJECTION: forcing a failure. [ 477.942886][T12121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.956494][T12121] CPU: 0 PID: 12121 Comm: syz.0.1944 Not tainted syzkaller #0 [ 477.964019][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.974147][T12121] Call Trace: [ 477.977556][T12121] [ 477.980532][T12121] dump_stack_lvl+0x18c/0x250 [ 477.985273][T12121] ? show_regs_print_info+0x20/0x20 [ 477.990527][T12121] ? load_image+0x420/0x420 [ 477.995078][T12121] ? __might_fault+0xaa/0x120 [ 477.999806][T12121] ? __lock_acquire+0x7eb0/0x7eb0 [ 478.004883][T12121] ? unix_ioctl+0x259/0x6b0 [ 478.009477][T12121] should_fail_ex+0x394/0x4c0 [ 478.014216][T12121] _copy_from_user+0x2f/0xe0 [ 478.018860][T12121] sock_do_ioctl+0x190/0x310 [ 478.023599][T12121] ? sock_show_fdinfo+0xb0/0xb0 [ 478.028534][T12121] sock_ioctl+0x5be/0x7e0 [ 478.032928][T12121] ? sock_poll+0x460/0x460 [ 478.037412][T12121] ? bpf_lsm_file_ioctl+0x9/0x10 [ 478.042433][T12121] ? security_file_ioctl+0x80/0xa0 [ 478.047602][T12121] ? sock_poll+0x460/0x460 [ 478.052084][T12121] __se_sys_ioctl+0xfd/0x170 [ 478.056721][T12121] do_syscall_64+0x55/0xb0 [ 478.061175][T12121] ? clear_bhb_loop+0x40/0x90 [ 478.066017][T12121] ? clear_bhb_loop+0x40/0x90 [ 478.070741][T12121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.076704][T12121] RIP: 0033:0x7f607079f559 [ 478.081156][T12121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.100969][T12121] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.109417][T12121] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 478.117415][T12121] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 478.125503][T12121] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.133767][T12121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.141768][T12121] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 478.149903][T12121] [ 478.201982][T12123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1942'. [ 478.243133][T12123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 478.311847][T12124] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1945'. [ 478.327555][T12124] bridge_slave_1: default FDB implementation only supports local addresses [ 478.418179][T12129] FAULT_INJECTION: forcing a failure. [ 478.418179][T12129] name failslab, interval 1, probability 0, space 0, times 0 [ 478.438152][T12129] CPU: 0 PID: 12129 Comm: syz.0.1947 Not tainted syzkaller #0 [ 478.445722][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.455829][T12129] Call Trace: [ 478.459151][T12129] [ 478.462116][T12129] dump_stack_lvl+0x18c/0x250 [ 478.466870][T12129] ? show_regs_print_info+0x20/0x20 [ 478.472110][T12129] ? load_image+0x420/0x420 [ 478.476647][T12129] ? __might_sleep+0xe0/0xe0 [ 478.481359][T12129] ? __lock_acquire+0x7eb0/0x7eb0 [ 478.486448][T12129] should_fail_ex+0x394/0x4c0 [ 478.491271][T12129] should_failslab+0x9/0x20 [ 478.495826][T12129] slab_pre_alloc_hook+0x59/0x300 [ 478.500890][T12129] ? __rwlock_init+0x150/0x150 [ 478.505784][T12129] kmem_cache_alloc_lru+0x4d/0x2c0 [ 478.510963][T12129] ? iget_locked+0x205/0x8c0 [ 478.515590][T12129] iget_locked+0x205/0x8c0 [ 478.520047][T12129] kernfs_get_inode+0x4f/0x6e0 [ 478.524865][T12129] kernfs_iop_lookup+0x263/0x380 [ 478.529841][T12129] lookup_one_qstr_excl+0x112/0x250 [ 478.535113][T12129] filename_create+0x246/0x450 [ 478.539922][T12129] ? kern_path_create+0x50/0x50 [ 478.544830][T12129] ? __virt_addr_valid+0x10c/0x380 [ 478.549993][T12129] do_mkdirat+0xa9/0x450 [ 478.554285][T12129] ? vfs_mkdir+0x470/0x470 [ 478.558745][T12129] __x64_sys_mkdirat+0x89/0xa0 [ 478.563545][T12129] do_syscall_64+0x55/0xb0 [ 478.568082][T12129] ? clear_bhb_loop+0x40/0x90 [ 478.572826][T12129] ? clear_bhb_loop+0x40/0x90 [ 478.577545][T12129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.583474][T12129] RIP: 0033:0x7f607079f559 [ 478.587922][T12129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.607593][T12129] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 478.616040][T12129] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 478.624042][T12129] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 0000000000000007 [ 478.632131][T12129] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.640134][T12129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.648140][T12129] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 478.656156][T12129] [ 478.814947][T12132] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1948'. [ 478.970590][T12141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1952'. [ 479.080819][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 479.791791][T12156] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1957'. [ 479.957643][T12154] bridge_slave_1: default FDB implementation only supports local addresses [ 480.256147][T12164] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 480.597211][T12172] validate_nla: 13 callbacks suppressed [ 480.597234][T12172] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 480.761462][T12178] bridge_slave_1: default FDB implementation only supports local addresses [ 480.860747][T12175] bridge_slave_1: default FDB implementation only supports local addresses [ 481.034666][T12185] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 481.113856][T12183] bridge_slave_1: default FDB implementation only supports local addresses [ 481.282456][T12193] netlink: 'syz.2.1971': attribute type 21 has an invalid length. [ 481.305203][T12193] netlink: 'syz.2.1971': attribute type 10 has an invalid length. [ 481.316744][T12196] FAULT_INJECTION: forcing a failure. [ 481.316744][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 481.343166][T12196] CPU: 0 PID: 12196 Comm: syz.1.1972 Not tainted syzkaller #0 [ 481.350813][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.360941][T12196] Call Trace: [ 481.364308][T12196] [ 481.367295][T12196] dump_stack_lvl+0x18c/0x250 [ 481.372067][T12196] ? show_regs_print_info+0x20/0x20 [ 481.377537][T12196] ? load_image+0x420/0x420 [ 481.382127][T12196] ? __lock_acquire+0x7eb0/0x7eb0 [ 481.387243][T12196] should_fail_ex+0x394/0x4c0 [ 481.392011][T12196] should_failslab+0x9/0x20 [ 481.396598][T12196] slab_pre_alloc_hook+0x59/0x300 [ 481.401712][T12196] ? ____sys_sendmsg+0x61b/0x980 [ 481.406729][T12196] ? ___sys_sendmsg+0x2a6/0x360 [ 481.411680][T12196] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 481.416795][T12196] kmem_cache_alloc_node+0x5e/0x320 [ 481.422068][T12196] ? alloc_vmap_area+0x1b4/0x1e50 [ 481.427266][T12196] alloc_vmap_area+0x1b4/0x1e50 [ 481.432269][T12196] ? vm_map_ram+0xcf0/0xcf0 [ 481.436873][T12196] ? rcu_is_watching+0x15/0xb0 [ 481.441718][T12196] __get_vm_area_node+0x162/0x370 [ 481.446835][T12196] __vmalloc_node_range+0x36f/0x1320 [ 481.452202][T12196] ? netlink_sendmsg+0x602/0xbf0 [ 481.457201][T12196] ? netlink_insert+0x10d0/0x13e0 [ 481.462382][T12196] ? free_vm_area+0x50/0x50 [ 481.466987][T12196] ? netlink_sendmsg+0x602/0xbf0 [ 481.471993][T12196] vmalloc+0x79/0x90 [ 481.475968][T12196] ? netlink_sendmsg+0x602/0xbf0 [ 481.481065][T12196] netlink_sendmsg+0x602/0xbf0 [ 481.485913][T12196] ? netlink_getsockopt+0x590/0x590 [ 481.491192][T12196] ? apparmor_socket_sendmsg+0x8e/0x330 [ 481.496799][T12196] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.502143][T12196] ? security_socket_sendmsg+0x80/0xa0 [ 481.507647][T12196] ? netlink_getsockopt+0x590/0x590 [ 481.512894][T12196] ____sys_sendmsg+0x61b/0x980 [ 481.517714][T12196] ? __asan_memset+0x22/0x40 [ 481.522380][T12196] ? __sys_sendmsg_sock+0x30/0x30 [ 481.527459][T12196] ? __import_iovec+0x5f2/0x850 [ 481.532396][T12196] ? import_iovec+0x73/0xa0 [ 481.536958][T12196] ___sys_sendmsg+0x2a6/0x360 [ 481.541866][T12196] ? __sys_sendmsg+0x2b0/0x2b0 [ 481.546751][T12196] ? __lock_acquire+0x7eb0/0x7eb0 [ 481.551977][T12196] __se_sys_sendmsg+0x1d0/0x2c0 [ 481.556960][T12196] ? __x64_sys_sendmsg+0x80/0x80 [ 481.561973][T12196] ? lockdep_hardirqs_on+0x98/0x150 [ 481.567224][T12196] do_syscall_64+0x55/0xb0 [ 481.571683][T12196] ? clear_bhb_loop+0x40/0x90 [ 481.576417][T12196] ? clear_bhb_loop+0x40/0x90 [ 481.581146][T12196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.587086][T12196] RIP: 0033:0x7f0c8059f559 [ 481.591543][T12196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.611219][T12196] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.619677][T12196] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 481.627692][T12196] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 481.635713][T12196] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 481.643726][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.651739][T12196] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 481.659797][T12196] [ 481.687030][T12198] netlink: 'syz.2.1973': attribute type 2 has an invalid length. [ 481.695330][T12198] netlink: 'syz.2.1973': attribute type 8 has an invalid length. [ 481.917978][T12203] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 482.370430][T12217] netlink: 'syz.0.1981': attribute type 21 has an invalid length. [ 482.396492][T12217] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 482.427855][T12214] bridge_slave_1: default FDB implementation only supports local addresses [ 482.740362][T12225] netlink: 'syz.0.1984': attribute type 2 has an invalid length. [ 482.762342][T12225] netlink: 'syz.0.1984': attribute type 8 has an invalid length. [ 482.774976][T12225] __nla_validate_parse: 14 callbacks suppressed [ 482.775015][T12225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1984'. [ 482.854604][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 483.444404][T12238] C: renamed from team_slave_0 (while UP) [ 483.511229][T12238] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1989'. [ 483.528314][T12238] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 483.565288][T12244] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1989'. [ 483.576707][T12244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 483.698261][T12248] FAULT_INJECTION: forcing a failure. [ 483.698261][T12248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.725405][T12248] CPU: 0 PID: 12248 Comm: syz.0.1992 Not tainted syzkaller #0 [ 483.732956][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 483.743064][T12248] Call Trace: [ 483.746394][T12248] [ 483.749374][T12248] dump_stack_lvl+0x18c/0x250 [ 483.754129][T12248] ? show_regs_print_info+0x20/0x20 [ 483.759487][T12248] ? load_image+0x420/0x420 [ 483.764056][T12248] ? __lock_acquire+0x7eb0/0x7eb0 [ 483.769131][T12248] ? snprintf+0xe9/0x140 [ 483.773419][T12248] should_fail_ex+0x394/0x4c0 [ 483.778147][T12248] _copy_to_user+0x2f/0xa0 [ 483.782688][T12248] simple_read_from_buffer+0xe7/0x150 [ 483.788105][T12248] proc_fail_nth_read+0x1e8/0x260 [ 483.793262][T12248] ? proc_fault_inject_write+0x360/0x360 [ 483.798961][T12248] ? fsnotify_perm+0x271/0x5e0 [ 483.803788][T12248] ? proc_fault_inject_write+0x360/0x360 [ 483.809482][T12248] vfs_read+0x298/0x990 [ 483.813701][T12248] ? kernel_read+0x1e0/0x1e0 [ 483.818509][T12248] ? __fget_files+0x28/0x460 [ 483.823147][T12248] ? __fget_files+0x3fc/0x460 [ 483.827879][T12248] ? __fdget_pos+0x2a3/0x330 [ 483.832515][T12248] ? ksys_read+0x74/0x260 [ 483.836883][T12248] ksys_read+0x151/0x260 [ 483.841256][T12248] ? vfs_write+0x9a0/0x9a0 [ 483.845719][T12248] ? lockdep_hardirqs_on+0x98/0x150 [ 483.851130][T12248] do_syscall_64+0x55/0xb0 [ 483.855582][T12248] ? clear_bhb_loop+0x40/0x90 [ 483.860334][T12248] ? clear_bhb_loop+0x40/0x90 [ 483.865049][T12248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.870980][T12248] RIP: 0033:0x7f607075fd8e [ 483.875429][T12248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.895251][T12248] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.903788][T12248] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 483.911822][T12248] RDX: 000000000000000f RSI: 00007f60716c00a0 RDI: 0000000000000007 [ 483.919827][T12248] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 483.927831][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.935860][T12248] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 483.943880][T12248] [ 483.968036][T12251] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1991'. [ 483.978497][T12251] bridge_slave_1: default FDB implementation only supports local addresses [ 484.473039][T12269] FAULT_INJECTION: forcing a failure. [ 484.473039][T12269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.494207][T12266] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1998'. [ 484.504173][T12266] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 484.518603][T12267] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1999'. [ 484.521190][T12269] CPU: 1 PID: 12269 Comm: syz.3.2000 Not tainted syzkaller #0 [ 484.535799][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.545934][T12269] Call Trace: [ 484.549252][T12269] [ 484.552233][T12269] dump_stack_lvl+0x18c/0x250 [ 484.556983][T12269] ? show_regs_print_info+0x20/0x20 [ 484.562244][T12269] ? load_image+0x420/0x420 [ 484.566803][T12269] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.571965][T12269] ? snprintf+0xe9/0x140 [ 484.576263][T12269] should_fail_ex+0x394/0x4c0 [ 484.581021][T12269] _copy_to_user+0x2f/0xa0 [ 484.585575][T12269] simple_read_from_buffer+0xe7/0x150 [ 484.591007][T12269] proc_fail_nth_read+0x1e8/0x260 [ 484.596179][T12269] ? proc_fault_inject_write+0x360/0x360 [ 484.601883][T12269] ? fsnotify_perm+0x271/0x5e0 [ 484.606701][T12269] ? proc_fault_inject_write+0x360/0x360 [ 484.612400][T12269] vfs_read+0x298/0x990 [ 484.616720][T12269] ? kernel_read+0x1e0/0x1e0 [ 484.621379][T12269] ? __fget_files+0x28/0x460 [ 484.626123][T12269] ? __fget_files+0x3fc/0x460 [ 484.630871][T12269] ? __fdget_pos+0x2a3/0x330 [ 484.635519][T12269] ? ksys_read+0x74/0x260 [ 484.639948][T12269] ksys_read+0x151/0x260 [ 484.644264][T12269] ? vfs_write+0x9a0/0x9a0 [ 484.648740][T12269] ? lockdep_hardirqs_on+0x98/0x150 [ 484.654165][T12269] do_syscall_64+0x55/0xb0 [ 484.658634][T12269] ? clear_bhb_loop+0x40/0x90 [ 484.663376][T12269] ? clear_bhb_loop+0x40/0x90 [ 484.668136][T12269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.674113][T12269] RIP: 0033:0x7f461e15fd8e [ 484.678574][T12269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.698256][T12269] RSP: 002b:00007f461f00bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.706805][T12269] RAX: ffffffffffffffda RBX: 00007f461f00c6c0 RCX: 00007f461e15fd8e [ 484.714826][T12269] RDX: 000000000000000f RSI: 00007f461f00c0a0 RDI: 0000000000000006 [ 484.722844][T12269] RBP: 00007f461f00c090 R08: 0000000000000000 R09: 0000000000000000 [ 484.730974][T12269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.738998][T12269] R13: 00007f461e426038 R14: 00007f461e425fa0 R15: 00007ffc07fe5158 [ 484.747039][T12269] [ 485.117409][T12278] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2003'. [ 485.128398][T12278] bridge_slave_1: default FDB implementation only supports local addresses [ 485.400645][T12287] FAULT_INJECTION: forcing a failure. [ 485.400645][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.414522][T12287] CPU: 1 PID: 12287 Comm: syz.1.2005 Not tainted syzkaller #0 [ 485.422050][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.432169][T12287] Call Trace: [ 485.435497][T12287] [ 485.438480][T12287] dump_stack_lvl+0x18c/0x250 [ 485.443233][T12287] ? show_regs_print_info+0x20/0x20 [ 485.448500][T12287] ? load_image+0x420/0x420 [ 485.453070][T12287] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.458154][T12287] ? snprintf+0xe9/0x140 [ 485.462454][T12287] should_fail_ex+0x394/0x4c0 [ 485.467216][T12287] _copy_to_user+0x2f/0xa0 [ 485.471769][T12287] simple_read_from_buffer+0xe7/0x150 [ 485.477196][T12287] proc_fail_nth_read+0x1e8/0x260 [ 485.482267][T12287] ? proc_fault_inject_write+0x360/0x360 [ 485.487965][T12287] ? fsnotify_perm+0x271/0x5e0 [ 485.492763][T12287] ? proc_fault_inject_write+0x360/0x360 [ 485.498457][T12287] vfs_read+0x298/0x990 [ 485.502656][T12287] ? kernel_read+0x1e0/0x1e0 [ 485.507284][T12287] ? __fget_files+0x28/0x460 [ 485.511910][T12287] ? __fget_files+0x3fc/0x460 [ 485.516641][T12287] ? __fdget_pos+0x2a3/0x330 [ 485.521274][T12287] ? ksys_read+0x74/0x260 [ 485.525662][T12287] ksys_read+0x151/0x260 [ 485.529957][T12287] ? vfs_write+0x9a0/0x9a0 [ 485.534427][T12287] ? lockdep_hardirqs_on+0x98/0x150 [ 485.539653][T12287] do_syscall_64+0x55/0xb0 [ 485.544105][T12287] ? clear_bhb_loop+0x40/0x90 [ 485.548814][T12287] ? clear_bhb_loop+0x40/0x90 [ 485.553529][T12287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.559460][T12287] RIP: 0033:0x7f0c8055fd8e [ 485.563903][T12287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.583539][T12287] RSP: 002b:00007f0c813e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.591990][T12287] RAX: ffffffffffffffda RBX: 00007f0c813e46c0 RCX: 00007f0c8055fd8e [ 485.599988][T12287] RDX: 000000000000000f RSI: 00007f0c813e40a0 RDI: 000000000000000c [ 485.607988][T12287] RBP: 00007f0c813e4090 R08: 0000000000000000 R09: 0000000000000000 [ 485.615984][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.623980][T12287] R13: 00007f0c80826128 R14: 00007f0c80826090 R15: 00007ffead73ce88 [ 485.632001][T12287] [ 485.872698][T12300] validate_nla: 6 callbacks suppressed [ 485.872717][T12300] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 486.262952][T12312] netlink: 'syz.2.2014': attribute type 3 has an invalid length. [ 486.297531][T12312] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2014'. [ 486.496878][T12316] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2016'. [ 486.546623][T12316] bridge_slave_1: default FDB implementation only supports local addresses [ 486.700041][T12314] FAULT_INJECTION: forcing a failure. [ 486.700041][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.722205][T12314] CPU: 1 PID: 12314 Comm: syz.0.2015 Not tainted syzkaller #0 [ 486.729768][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 486.739892][T12314] Call Trace: [ 486.743223][T12314] [ 486.746201][T12314] dump_stack_lvl+0x18c/0x250 [ 486.750955][T12314] ? show_regs_print_info+0x20/0x20 [ 486.756219][T12314] ? load_image+0x420/0x420 [ 486.760814][T12314] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.767124][T12314] should_fail_ex+0x394/0x4c0 [ 486.771871][T12314] _copy_to_user+0x2f/0xa0 [ 486.776351][T12314] bpf_test_finish+0x19f/0x650 [ 486.781194][T12314] ? dst_hold+0x70/0x70 [ 486.785513][T12314] ? convert_skb_to___skb+0x420/0x420 [ 486.790949][T12314] ? bpf_prog_test_run_xdp+0x721/0x1140 [ 486.796591][T12314] bpf_prog_test_run_xdp+0x8b4/0x1140 [ 486.802025][T12314] ? __lock_acquire+0x7eb0/0x7eb0 [ 486.807121][T12314] ? dev_put+0x80/0x80 [ 486.811269][T12314] ? dev_put+0x80/0x80 [ 486.815399][T12314] bpf_prog_test_run+0x31f/0x390 [ 486.820409][T12314] __sys_bpf+0x49d/0x890 [ 486.824709][T12314] ? read_tsc+0x9/0x20 [ 486.828848][T12314] ? bpf_link_show_fdinfo+0x560/0x560 [ 486.834317][T12314] ? lock_chain_count+0x20/0x20 [ 486.839486][T12314] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 486.845581][T12314] __x64_sys_bpf+0x7c/0x90 [ 486.850103][T12314] do_syscall_64+0x55/0xb0 [ 486.854578][T12314] ? clear_bhb_loop+0x40/0x90 [ 486.859320][T12314] ? clear_bhb_loop+0x40/0x90 [ 486.864064][T12314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.870067][T12314] RIP: 0033:0x7f607079f559 [ 486.874672][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.894727][T12314] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.903207][T12314] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 486.911329][T12314] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 486.919478][T12314] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 486.927523][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.935558][T12314] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 486.943774][T12314] [ 487.101050][T12323] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 487.316089][T12331] netlink: 'syz.3.2020': attribute type 9 has an invalid length. [ 488.130138][T12340] FAULT_INJECTION: forcing a failure. [ 488.130138][T12340] name failslab, interval 1, probability 0, space 0, times 0 [ 488.147966][T12340] CPU: 1 PID: 12340 Comm: syz.2.2024 Not tainted syzkaller #0 [ 488.155500][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.165609][T12340] Call Trace: [ 488.168937][T12340] [ 488.171915][T12340] dump_stack_lvl+0x18c/0x250 [ 488.176659][T12340] ? show_regs_print_info+0x20/0x20 [ 488.181920][T12340] ? load_image+0x420/0x420 [ 488.186479][T12340] ? __might_sleep+0xe0/0xe0 [ 488.191173][T12340] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.196261][T12340] should_fail_ex+0x394/0x4c0 [ 488.201099][T12340] should_failslab+0x9/0x20 [ 488.205739][T12340] slab_pre_alloc_hook+0x59/0x300 [ 488.210820][T12340] ? ioctl_standard_iw_point+0x52d/0xd50 [ 488.216509][T12340] ? ioctl_standard_iw_point+0x52d/0xd50 [ 488.222212][T12340] __kmem_cache_alloc_node+0x53/0x260 [ 488.227646][T12340] ? ioctl_standard_iw_point+0x52d/0xd50 [ 488.233352][T12340] __kmalloc+0xa7/0x240 [ 488.237581][T12340] ioctl_standard_iw_point+0x52d/0xd50 [ 488.243206][T12340] ? cfg80211_rehash_bss+0x530/0x530 [ 488.248547][T12340] ? iw_handler_get_iwstats+0x110/0x110 [ 488.254176][T12340] ? wext_ioctl_dispatch+0x106/0x650 [ 488.259564][T12340] ? dev_load+0x21/0x1f0 [ 488.263857][T12340] ? mutex_lock_nested+0x20/0x20 [ 488.268837][T12340] ? apparmor_capable+0x137/0x1a0 [ 488.273905][T12340] ioctl_standard_call+0xae/0x250 [ 488.278971][T12340] ? cfg80211_rehash_bss+0x530/0x530 [ 488.284286][T12340] ? cfg80211_rehash_bss+0x530/0x530 [ 488.289605][T12340] wext_ioctl_dispatch+0x51a/0x650 [ 488.294766][T12340] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.299828][T12340] ? wext_ioctl_dispatch+0x650/0x650 [ 488.305153][T12340] ? iw_handler_get_private+0x1f0/0x1f0 [ 488.310746][T12340] ? wext_handle_ioctl+0x1e0/0x1e0 [ 488.315991][T12340] ? __might_fault+0xaa/0x120 [ 488.320725][T12340] ? __might_fault+0xc6/0x120 [ 488.325433][T12340] ? __might_fault+0xaa/0x120 [ 488.330152][T12340] wext_handle_ioctl+0x118/0x1e0 [ 488.335130][T12340] ? call_commit_handler+0xf0/0xf0 [ 488.340289][T12340] sock_ioctl+0x15d/0x7e0 [ 488.344659][T12340] ? sock_poll+0x460/0x460 [ 488.349121][T12340] ? bpf_lsm_file_ioctl+0x9/0x10 [ 488.354094][T12340] ? security_file_ioctl+0x80/0xa0 [ 488.359245][T12340] ? sock_poll+0x460/0x460 [ 488.363702][T12340] __se_sys_ioctl+0xfd/0x170 [ 488.368356][T12340] do_syscall_64+0x55/0xb0 [ 488.372831][T12340] ? clear_bhb_loop+0x40/0x90 [ 488.377568][T12340] ? clear_bhb_loop+0x40/0x90 [ 488.382299][T12340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.388238][T12340] RIP: 0033:0x7f760d79f559 [ 488.392705][T12340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.412447][T12340] RSP: 002b:00007f760e619028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.420902][T12340] RAX: ffffffffffffffda RBX: 00007f760da25fa0 RCX: 00007f760d79f559 [ 488.428974][T12340] RDX: 0000200000001240 RSI: 0000000000008b18 RDI: 0000000000000004 [ 488.437101][T12340] RBP: 00007f760e619090 R08: 0000000000000000 R09: 0000000000000000 [ 488.445113][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.453146][T12340] R13: 00007f760da26038 R14: 00007f760da25fa0 R15: 00007ffe25f96038 [ 488.461169][T12340] [ 488.500406][T12342] netlink: 'syz.3.2025': attribute type 2 has an invalid length. [ 488.520184][T12342] netlink: 'syz.3.2025': attribute type 8 has an invalid length. [ 488.528268][T12342] __nla_validate_parse: 1 callbacks suppressed [ 488.528305][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2025'. [ 488.618567][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 488.630503][T12345] netlink: 'syz.1.2026': attribute type 2 has an invalid length. [ 488.638496][T12345] netlink: 'syz.1.2026': attribute type 8 has an invalid length. [ 488.662330][T12345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2026'. [ 488.712728][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 488.770177][T12351] delete_channel: no stack [ 488.949463][T12356] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2029'. [ 488.971049][T12356] bridge_slave_1: default FDB implementation only supports local addresses [ 489.221420][T12370] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2033'. [ 489.245888][T12365] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 489.389924][T12378] FAULT_INJECTION: forcing a failure. [ 489.389924][T12378] name failslab, interval 1, probability 0, space 0, times 0 [ 489.402676][T12378] CPU: 0 PID: 12378 Comm: syz.0.2035 Not tainted syzkaller #0 [ 489.410192][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.420336][T12378] Call Trace: [ 489.423664][T12378] [ 489.426758][T12378] dump_stack_lvl+0x18c/0x250 [ 489.431510][T12378] ? show_regs_print_info+0x20/0x20 [ 489.436776][T12378] ? load_image+0x420/0x420 [ 489.441454][T12378] should_fail_ex+0x394/0x4c0 [ 489.446193][T12378] should_failslab+0x9/0x20 [ 489.450752][T12378] slab_pre_alloc_hook+0x59/0x300 [ 489.455921][T12378] ? ip6_pol_route+0x166/0x1360 [ 489.460869][T12378] kmem_cache_alloc+0x5a/0x2d0 [ 489.465851][T12378] ? dst_alloc+0x105/0x170 [ 489.470316][T12378] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 489.475991][T12378] dst_alloc+0x105/0x170 [ 489.480279][T12378] ip6_pol_route+0x9fa/0x1360 [ 489.485198][T12378] ? ip6_pol_route+0x166/0x1360 [ 489.490104][T12378] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 489.495790][T12378] fib6_rule_lookup+0x35d/0x580 [ 489.500760][T12378] ? skb_header_pointer+0x120/0x120 [ 489.506023][T12378] ? fib6_lookup+0x2d0/0x2d0 [ 489.510665][T12378] ? read_lock_is_recursive+0x20/0x20 [ 489.516097][T12378] ip6_route_output_flags+0x364/0x5d0 [ 489.521526][T12378] ? ip6_route_output_flags+0x2e/0x5d0 [ 489.527036][T12378] ip6_dst_lookup_tail+0x1a5/0x1660 [ 489.532280][T12378] ? __might_fault+0xc6/0x120 [ 489.537000][T12378] ? ip6_dst_lookup+0x60/0x60 [ 489.541727][T12378] ? copyout_mc+0x70/0x70 [ 489.546130][T12378] ? txopt_get+0x344/0x3f0 [ 489.550667][T12378] ? tomoyo_check_acl+0x37c/0x3f0 [ 489.555736][T12378] ? fl6_sock_lookup+0xc0/0xc0 [ 489.560569][T12378] ip6_dst_lookup_flow+0x48/0xe0 [ 489.565551][T12378] rawv6_sendmsg+0xd76/0x17c0 [ 489.570283][T12378] ? compat_rawv6_ioctl+0x70/0x70 [ 489.575789][T12378] ? aa_sk_perm+0x7bb/0x8e0 [ 489.580340][T12378] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 489.586896][T12378] ? aa_sock_msg_perm+0x94/0x150 [ 489.591886][T12378] ? inet_sendmsg+0x7e/0x2a0 [ 489.596544][T12378] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 489.601867][T12378] ? inet_send_prepare+0x250/0x250 [ 489.607064][T12378] ____sys_sendmsg+0x61b/0x980 [ 489.611877][T12378] ? __asan_memset+0x22/0x40 [ 489.616506][T12378] ? __sys_sendmsg_sock+0x30/0x30 [ 489.621594][T12378] ? __import_iovec+0x5f2/0x850 [ 489.626491][T12378] ? import_iovec+0x73/0xa0 [ 489.631032][T12378] ___sys_sendmsg+0x2a6/0x360 [ 489.635749][T12378] ? __sys_sendmsg+0x2b0/0x2b0 [ 489.640565][T12378] ? __lock_acquire+0x7eb0/0x7eb0 [ 489.645646][T12378] __se_sys_sendmsg+0x1d0/0x2c0 [ 489.650534][T12378] ? __x64_sys_sendmsg+0x80/0x80 [ 489.655542][T12378] ? lockdep_hardirqs_on+0x98/0x150 [ 489.660783][T12378] do_syscall_64+0x55/0xb0 [ 489.665246][T12378] ? clear_bhb_loop+0x40/0x90 [ 489.669970][T12378] ? clear_bhb_loop+0x40/0x90 [ 489.674695][T12378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.680892][T12378] RIP: 0033:0x7f607079f559 [ 489.685340][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.705063][T12378] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.713539][T12378] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 489.721549][T12378] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 489.729550][T12378] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 489.737679][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.745685][T12378] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 489.753705][T12378] [ 489.934036][T12385] netlink: 'syz.0.2039': attribute type 2 has an invalid length. [ 489.947979][T12385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2039'. [ 489.982780][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 490.048198][T12390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2040'. [ 490.122479][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 490.578385][T12404] bridge_slave_1: default FDB implementation only supports local addresses [ 490.663818][T12402] delete_channel: no stack [ 491.055746][T12417] validate_nla: 5 callbacks suppressed [ 491.055795][T12417] netlink: 'syz.3.2050': attribute type 2 has an invalid length. [ 491.110373][T12417] netlink: 'syz.3.2050': attribute type 8 has an invalid length. [ 491.133674][T12412] delete_channel: no stack [ 492.351428][T12448] netlink: 'syz.0.2059': attribute type 21 has an invalid length. [ 492.419798][T12448] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 492.971745][T12454] FAULT_INJECTION: forcing a failure. [ 492.971745][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.993532][T12454] CPU: 0 PID: 12454 Comm: syz.1.2060 Not tainted syzkaller #0 [ 493.001091][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.011210][T12454] Call Trace: [ 493.014535][T12454] [ 493.017525][T12454] dump_stack_lvl+0x18c/0x250 [ 493.022260][T12454] ? show_regs_print_info+0x20/0x20 [ 493.027498][T12454] ? load_image+0x420/0x420 [ 493.032053][T12454] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.037139][T12454] ? snprintf+0xe9/0x140 [ 493.041434][T12454] should_fail_ex+0x394/0x4c0 [ 493.046164][T12454] _copy_to_user+0x2f/0xa0 [ 493.050622][T12454] simple_read_from_buffer+0xe7/0x150 [ 493.056080][T12454] proc_fail_nth_read+0x1e8/0x260 [ 493.061155][T12454] ? proc_fault_inject_write+0x360/0x360 [ 493.066841][T12454] ? fsnotify_perm+0x271/0x5e0 [ 493.071646][T12454] ? proc_fault_inject_write+0x360/0x360 [ 493.077353][T12454] vfs_read+0x298/0x990 [ 493.081645][T12454] ? kernel_read+0x1e0/0x1e0 [ 493.086281][T12454] ? __fget_files+0x28/0x460 [ 493.090948][T12454] ? __fget_files+0x3fc/0x460 [ 493.095700][T12454] ? __fdget_pos+0x2a3/0x330 [ 493.100327][T12454] ? ksys_read+0x74/0x260 [ 493.104704][T12454] ksys_read+0x151/0x260 [ 493.108997][T12454] ? vfs_write+0x9a0/0x9a0 [ 493.113456][T12454] ? lockdep_hardirqs_on+0x98/0x150 [ 493.119212][T12454] do_syscall_64+0x55/0xb0 [ 493.123750][T12454] ? clear_bhb_loop+0x40/0x90 [ 493.128463][T12454] ? clear_bhb_loop+0x40/0x90 [ 493.133183][T12454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.139115][T12454] RIP: 0033:0x7f0c8055fd8e [ 493.143562][T12454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.163199][T12454] RSP: 002b:00007f0c813a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.171739][T12454] RAX: ffffffffffffffda RBX: 00007f0c813a26c0 RCX: 00007f0c8055fd8e [ 493.179777][T12454] RDX: 000000000000000f RSI: 00007f0c813a20a0 RDI: 0000000000000016 [ 493.187813][T12454] RBP: 00007f0c813a2090 R08: 0000000000000000 R09: 0000000000000000 [ 493.195825][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.203848][T12454] R13: 00007f0c80826308 R14: 00007f0c80826270 R15: 00007ffead73ce88 [ 493.211883][T12454] [ 493.554871][T12459] __nla_validate_parse: 5 callbacks suppressed [ 493.554890][T12459] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2062'. [ 493.639574][T12465] FAULT_INJECTION: forcing a failure. [ 493.639574][T12465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.656122][T12465] CPU: 0 PID: 12465 Comm: syz.1.2065 Not tainted syzkaller #0 [ 493.663742][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.673935][T12465] Call Trace: [ 493.677265][T12465] [ 493.680245][T12465] dump_stack_lvl+0x18c/0x250 [ 493.684995][T12465] ? show_regs_print_info+0x20/0x20 [ 493.690257][T12465] ? load_image+0x420/0x420 [ 493.694817][T12465] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.699950][T12465] ? snprintf+0xe9/0x140 [ 493.704267][T12465] should_fail_ex+0x394/0x4c0 [ 493.709005][T12465] _copy_to_user+0x2f/0xa0 [ 493.713463][T12465] simple_read_from_buffer+0xe7/0x150 [ 493.718883][T12465] proc_fail_nth_read+0x1e8/0x260 [ 493.723957][T12465] ? proc_fault_inject_write+0x360/0x360 [ 493.729660][T12465] ? fsnotify_perm+0x271/0x5e0 [ 493.734459][T12465] ? proc_fault_inject_write+0x360/0x360 [ 493.740137][T12465] vfs_read+0x298/0x990 [ 493.744336][T12465] ? kernel_read+0x1e0/0x1e0 [ 493.748965][T12465] ? __fget_files+0x28/0x460 [ 493.753600][T12465] ? __fget_files+0x3fc/0x460 [ 493.758331][T12465] ? __fdget_pos+0x2a3/0x330 [ 493.762961][T12465] ? ksys_read+0x74/0x260 [ 493.767340][T12465] ksys_read+0x151/0x260 [ 493.771626][T12465] ? vfs_write+0x9a0/0x9a0 [ 493.776129][T12465] ? lockdep_hardirqs_on+0x98/0x150 [ 493.781369][T12465] do_syscall_64+0x55/0xb0 [ 493.785834][T12465] ? clear_bhb_loop+0x40/0x90 [ 493.790637][T12465] ? clear_bhb_loop+0x40/0x90 [ 493.795360][T12465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.801291][T12465] RIP: 0033:0x7f0c8055fd8e [ 493.805744][T12465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.825380][T12465] RSP: 002b:00007f0c81404fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.833835][T12465] RAX: ffffffffffffffda RBX: 00007f0c814056c0 RCX: 00007f0c8055fd8e [ 493.841924][T12465] RDX: 000000000000000f RSI: 00007f0c814050a0 RDI: 0000000000000004 [ 493.849945][T12465] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 493.857963][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.865975][T12465] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 493.874087][T12465] [ 494.181603][T12470] netlink: 'syz.2.2067': attribute type 10 has an invalid length. [ 494.527008][T12483] netlink: 'syz.0.2072': attribute type 21 has an invalid length. [ 494.539662][T12483] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2072'. [ 494.576889][T12483] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 494.763940][T12485] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2073'. [ 494.776653][T12485] bridge_slave_1: default FDB implementation only supports local addresses [ 495.043637][T12489] sit0: entered promiscuous mode [ 496.239495][T12497] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2077'. [ 496.267790][T12497] netlink: 'syz.1.2077': attribute type 4 has an invalid length. [ 496.276245][T12497] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2077'. [ 496.900290][T12514] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2082'. [ 496.921837][T12514] bridge_slave_1: default FDB implementation only supports local addresses [ 497.311671][T12523] netlink: 'syz.1.2085': attribute type 2 has an invalid length. [ 497.327522][T12523] netlink: 'syz.1.2085': attribute type 8 has an invalid length. [ 497.338262][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2085'. [ 497.449832][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2085'. [ 497.561493][T12529] netlink: 'syz.0.2087': attribute type 21 has an invalid length. [ 497.575791][T12529] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2087'. [ 497.625821][T12529] netlink: 'syz.0.2087': attribute type 10 has an invalid length. [ 498.922627][T12547] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2093'. [ 498.950151][T12547] bridge_slave_1: default FDB implementation only supports local addresses [ 499.063641][T12549] netlink: 'syz.1.2094': attribute type 21 has an invalid length. [ 499.087756][T12549] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2094'. [ 499.149125][T12549] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 499.260566][T12557] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 499.346898][T12557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2095'. [ 499.398777][T12557] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 500.177543][T12574] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2100'. [ 500.207031][T12574] bridge_slave_1: default FDB implementation only supports local addresses [ 500.700663][T12584] netlink: 'syz.0.2104': attribute type 21 has an invalid length. [ 500.709262][T12584] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2104'. [ 500.768662][T12584] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 501.664692][T12594] netlink: 'syz.1.2106': attribute type 21 has an invalid length. [ 501.677055][T12594] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2106'. [ 501.691567][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697946][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.750921][T12594] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 501.800347][T12593] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2105'. [ 501.852296][T12593] bridge_slave_1: default FDB implementation only supports local addresses [ 502.060686][T12603] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 502.232433][T12607] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2111'. [ 502.258460][T12611] netlink: 'syz.0.2113': attribute type 21 has an invalid length. [ 502.267377][T12611] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2113'. [ 502.288945][T12606] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 502.298678][T12606] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2111'. [ 502.330738][T12611] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 502.694865][T12622] netlink: 'syz.2.2116': attribute type 21 has an invalid length. [ 502.729863][T12622] netlink: 'syz.2.2116': attribute type 10 has an invalid length. [ 502.745764][T12626] netlink: 'syz.0.2117': attribute type 21 has an invalid length. [ 502.768132][T12626] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 502.926105][T12628] FAULT_INJECTION: forcing a failure. [ 502.926105][T12628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.950490][T12628] CPU: 0 PID: 12628 Comm: syz.0.2118 Not tainted syzkaller #0 [ 502.958055][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.968164][T12628] Call Trace: [ 502.971506][T12628] [ 502.974493][T12628] dump_stack_lvl+0x18c/0x250 [ 502.979251][T12628] ? show_regs_print_info+0x20/0x20 [ 502.984679][T12628] ? load_image+0x420/0x420 [ 502.989225][T12628] ? __might_fault+0xaa/0x120 [ 502.993983][T12628] ? __lock_acquire+0x7eb0/0x7eb0 [ 502.999046][T12628] ? __virt_addr_valid+0x10c/0x380 [ 503.004202][T12628] should_fail_ex+0x394/0x4c0 [ 503.008922][T12628] _copy_from_user+0x2f/0xe0 [ 503.013551][T12628] ____sys_sendmsg+0x329/0x980 [ 503.018364][T12628] ? __sys_sendmsg_sock+0x30/0x30 [ 503.023448][T12628] ? __import_iovec+0x3fa/0x850 [ 503.028340][T12628] ? import_iovec+0x73/0xa0 [ 503.032882][T12628] ___sys_sendmsg+0x2a6/0x360 [ 503.037592][T12628] ? get_pid_task+0x20/0x1e0 [ 503.042251][T12628] ? __sys_sendmsg+0x2b0/0x2b0 [ 503.047068][T12628] ? __lock_acquire+0x7eb0/0x7eb0 [ 503.052150][T12628] __se_sys_sendmsg+0x1d0/0x2c0 [ 503.057124][T12628] ? __x64_sys_sendmsg+0x80/0x80 [ 503.062115][T12628] ? lockdep_hardirqs_on+0x98/0x150 [ 503.067345][T12628] do_syscall_64+0x55/0xb0 [ 503.071798][T12628] ? clear_bhb_loop+0x40/0x90 [ 503.076513][T12628] ? clear_bhb_loop+0x40/0x90 [ 503.081229][T12628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.087153][T12628] RIP: 0033:0x7f607079f559 [ 503.091596][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.111236][T12628] RSP: 002b:00007f60716c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.119681][T12628] RAX: ffffffffffffffda RBX: 00007f6070a25fa0 RCX: 00007f607079f559 [ 503.127679][T12628] RDX: 00000000200040c4 RSI: 0000200000000240 RDI: 000000000000000e [ 503.135676][T12628] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 503.143690][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.151686][T12628] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 503.159699][T12628] [ 503.315906][T12639] raw_sendmsg: syz.1.2121 forgot to set AF_INET. Fix it! [ 503.615760][T12632] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.188381][T12655] __nla_validate_parse: 6 callbacks suppressed [ 504.188422][T12655] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2126'. [ 504.812009][T12659] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2127'. [ 504.854283][T12659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2127'. [ 505.082250][T12668] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2129'. [ 505.096518][T12668] bridge_slave_1: default FDB implementation only supports local addresses [ 505.252345][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2130'. [ 505.282114][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 505.494260][T12680] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2134'. [ 506.633690][T12690] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2136'. [ 506.671938][T12690] validate_nla: 12 callbacks suppressed [ 506.671984][T12690] netlink: 'syz.1.2136': attribute type 10 has an invalid length. [ 506.780712][T12692] netlink: 'syz.0.2137': attribute type 21 has an invalid length. [ 506.789434][T12692] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2137'. [ 506.831528][T12692] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 506.839617][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2137'. [ 506.943222][T12692] batman_adv: batadv0: Adding interface: virt_wifi0 [ 506.970725][T12692] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.059509][T12692] batman_adv: batadv0: Interface activated: virt_wifi0 [ 507.155175][T12704] bridge_slave_1: default FDB implementation only supports local addresses [ 507.465173][T12715] netlink: 'syz.1.2145': attribute type 21 has an invalid length. [ 507.896183][T12718] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 509.861488][T12725] netlink: 'syz.1.2147': attribute type 21 has an invalid length. [ 509.880601][T12725] __nla_validate_parse: 2 callbacks suppressed [ 509.880642][T12725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2147'. [ 509.935702][T12725] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 510.626733][T12740] netlink: 'syz.3.2149': attribute type 2 has an invalid length. [ 510.658758][T12740] netlink: 'syz.3.2149': attribute type 8 has an invalid length. [ 510.683716][T12740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2149'. [ 510.713847][T12738] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2151'. [ 510.746662][T12738] bridge_slave_1: default FDB implementation only supports local addresses [ 510.758588][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 510.780619][T12744] FAULT_INJECTION: forcing a failure. [ 510.780619][T12744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.797584][T12744] CPU: 0 PID: 12744 Comm: syz.0.2153 Not tainted syzkaller #0 [ 510.805125][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 510.815317][T12744] Call Trace: [ 510.818647][T12744] [ 510.821660][T12744] dump_stack_lvl+0x18c/0x250 [ 510.826420][T12744] ? show_regs_print_info+0x20/0x20 [ 510.831686][T12744] ? load_image+0x420/0x420 [ 510.836248][T12744] ? __lock_acquire+0x7eb0/0x7eb0 [ 510.841333][T12744] ? snprintf+0xe9/0x140 [ 510.845669][T12744] should_fail_ex+0x394/0x4c0 [ 510.850405][T12744] _copy_to_user+0x2f/0xa0 [ 510.854874][T12744] simple_read_from_buffer+0xe7/0x150 [ 510.860335][T12744] proc_fail_nth_read+0x1e8/0x260 [ 510.865429][T12744] ? proc_fault_inject_write+0x360/0x360 [ 510.871140][T12744] ? fsnotify_perm+0x271/0x5e0 [ 510.875942][T12744] ? proc_fault_inject_write+0x360/0x360 [ 510.881622][T12744] vfs_read+0x298/0x990 [ 510.885826][T12744] ? kernel_read+0x1e0/0x1e0 [ 510.890469][T12744] ? __fget_files+0x28/0x460 [ 510.895121][T12744] ? __fget_files+0x3fc/0x460 [ 510.899859][T12744] ? __fdget_pos+0x2a3/0x330 [ 510.904526][T12744] ? ksys_read+0x74/0x260 [ 510.908899][T12744] ksys_read+0x151/0x260 [ 510.913206][T12744] ? vfs_write+0x9a0/0x9a0 [ 510.917670][T12744] ? lockdep_hardirqs_on+0x98/0x150 [ 510.922905][T12744] do_syscall_64+0x55/0xb0 [ 510.927390][T12744] ? clear_bhb_loop+0x40/0x90 [ 510.932121][T12744] ? clear_bhb_loop+0x40/0x90 [ 510.936860][T12744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.942790][T12744] RIP: 0033:0x7f607075fd8e [ 510.947351][T12744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.967089][T12744] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.975538][T12744] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 510.983542][T12744] RDX: 000000000000000f RSI: 00007f60716c00a0 RDI: 0000000000000006 [ 510.991717][T12744] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 510.999717][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.007720][T12744] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 511.015735][T12744] [ 511.477245][T12759] netlink: 'syz.0.2157': attribute type 21 has an invalid length. [ 511.522647][T12759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2157'. [ 511.859743][T12764] validate_nla: 1 callbacks suppressed [ 511.859784][T12764] netlink: 'syz.1.2158': attribute type 21 has an invalid length. [ 511.881087][T12764] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2158'. [ 511.909859][T12764] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 514.667017][T12773] netlink: 'syz.3.2160': attribute type 10 has an invalid length. [ 514.824179][T12772] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2163'. [ 514.851340][T12772] bridge_slave_1: default FDB implementation only supports local addresses [ 514.923637][T12779] netlink: 'syz.0.2164': attribute type 2 has an invalid length. [ 514.973024][T12779] netlink: 'syz.0.2164': attribute type 8 has an invalid length. [ 515.007248][T12779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2164'. [ 515.062283][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 515.286081][T12794] netlink: 'syz.0.2169': attribute type 21 has an invalid length. [ 515.295737][T12794] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2169'. [ 515.318076][T12794] netlink: 'syz.0.2169': attribute type 10 has an invalid length. [ 515.492354][T12798] netlink: 'syz.1.2170': attribute type 21 has an invalid length. [ 515.506233][T12798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2170'. [ 515.539494][T12797] netlink: 'syz.1.2170': attribute type 10 has an invalid length. [ 517.330815][T12812] netlink: 'syz.0.2173': attribute type 10 has an invalid length. [ 517.648042][T12823] netlink: 'syz.1.2177': attribute type 2 has an invalid length. [ 517.676899][T12823] netlink: 'syz.1.2177': attribute type 8 has an invalid length. [ 517.726708][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2177'. [ 517.795633][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 517.906969][T12832] netlink: 'syz.2.2179': attribute type 21 has an invalid length. [ 517.945914][T12832] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2179'. [ 518.025346][T12832] netlink: 'syz.2.2179': attribute type 10 has an invalid length. [ 518.132626][T12840] netlink: 'syz.1.2182': attribute type 21 has an invalid length. [ 518.170837][T12840] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2182'. [ 518.239359][T12839] netlink: 'syz.1.2182': attribute type 10 has an invalid length. [ 518.295963][T12837] rxe_eth0 speed is unknown, defaulting to 1000 [ 522.120438][T12853] netlink: 'syz.3.2186': attribute type 10 has an invalid length. [ 523.328046][T12884] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2193'. [ 523.338092][T12884] bridge_slave_1: default FDB implementation only supports local addresses [ 523.491347][T12887] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2194'. [ 523.510179][T12887] bridge_slave_1: default FDB implementation only supports local addresses [ 524.532244][T12918] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2203'. [ 524.563795][T12918] bridge_slave_1: default FDB implementation only supports local addresses [ 524.997376][T12927] syzkaller0: entered promiscuous mode [ 525.016865][T12936] netlink: 'syz.2.2207': attribute type 2 has an invalid length. [ 525.024861][T12936] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2207'. [ 525.032400][T12927] syzkaller0: entered allmulticast mode [ 525.055701][T12931] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 525.079672][T12931] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2210'. [ 525.108570][T12939] netlink: 'syz.0.2211': attribute type 21 has an invalid length. [ 525.118555][T12939] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2211'. [ 525.142724][T12926] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2208'. [ 525.161953][T12926] bridge_slave_1: default FDB implementation only supports local addresses [ 525.187286][T12935] netlink: 'syz.3.2210': attribute type 10 has an invalid length. [ 525.216415][T12932] sctp: [Deprecated]: syz.2.2207 (pid 12932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.216415][T12932] Use struct sctp_sack_info instead [ 525.262580][T12939] netlink: 'syz.0.2211': attribute type 10 has an invalid length. [ 525.493105][T12943] FAULT_INJECTION: forcing a failure. [ 525.493105][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.513757][T12943] CPU: 0 PID: 12943 Comm: syz.0.2213 Not tainted syzkaller #0 [ 525.521288][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 525.531391][T12943] Call Trace: [ 525.534737][T12943] [ 525.537719][T12943] dump_stack_lvl+0x18c/0x250 [ 525.542468][T12943] ? show_regs_print_info+0x20/0x20 [ 525.547729][T12943] ? load_image+0x420/0x420 [ 525.552286][T12943] ? __lock_acquire+0x7eb0/0x7eb0 [ 525.557358][T12943] ? snprintf+0xe9/0x140 [ 525.561649][T12943] should_fail_ex+0x394/0x4c0 [ 525.566386][T12943] _copy_to_user+0x2f/0xa0 [ 525.570943][T12943] simple_read_from_buffer+0xe7/0x150 [ 525.576404][T12943] proc_fail_nth_read+0x1e8/0x260 [ 525.581496][T12943] ? proc_fault_inject_write+0x360/0x360 [ 525.587194][T12943] ? fsnotify_perm+0x271/0x5e0 [ 525.592032][T12943] ? proc_fault_inject_write+0x360/0x360 [ 525.597739][T12943] vfs_read+0x298/0x990 [ 525.601968][T12943] ? kernel_read+0x1e0/0x1e0 [ 525.606618][T12943] ? __fget_files+0x28/0x460 [ 525.611249][T12943] ? __fget_files+0x3fc/0x460 [ 525.615975][T12943] ? __fdget_pos+0x2a3/0x330 [ 525.620601][T12943] ? ksys_read+0x74/0x260 [ 525.624968][T12943] ksys_read+0x151/0x260 [ 525.629253][T12943] ? vfs_write+0x9a0/0x9a0 [ 525.633724][T12943] ? lockdep_hardirqs_on+0x98/0x150 [ 525.638955][T12943] do_syscall_64+0x55/0xb0 [ 525.643418][T12943] ? clear_bhb_loop+0x40/0x90 [ 525.648127][T12943] ? clear_bhb_loop+0x40/0x90 [ 525.652931][T12943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.658858][T12943] RIP: 0033:0x7f607075fd8e [ 525.663302][T12943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.683047][T12943] RSP: 002b:00007f60716bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.691504][T12943] RAX: ffffffffffffffda RBX: 00007f60716c06c0 RCX: 00007f607075fd8e [ 525.699501][T12943] RDX: 000000000000000f RSI: 00007f60716c00a0 RDI: 0000000000000005 [ 525.707519][T12943] RBP: 00007f60716c0090 R08: 0000000000000000 R09: 0000000000000000 [ 525.715540][T12943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.723572][T12943] R13: 00007f6070a26038 R14: 00007f6070a25fa0 R15: 00007fff1c637fe8 [ 525.731614][T12943] [ 528.616819][T12952] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2215'. [ 528.626135][T12952] bridge_slave_1: default FDB implementation only supports local addresses [ 528.635471][T12963] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 528.647725][T12966] netlink: 'syz.0.2221': attribute type 21 has an invalid length. [ 528.665996][T12966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2221'. [ 528.686286][T12967] netlink: 'syz.0.2221': attribute type 10 has an invalid length. [ 528.834644][T12970] netlink: 'syz.3.2223': attribute type 21 has an invalid length. [ 528.868913][T12970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2223'. [ 528.918172][T12970] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 529.499454][T12991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2229'. [ 529.549333][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 529.775210][T13000] FAULT_INJECTION: forcing a failure. [ 529.775210][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 529.794146][T13000] CPU: 0 PID: 13000 Comm: syz.1.2231 Not tainted syzkaller #0 [ 529.801681][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 529.811785][T13000] Call Trace: [ 529.815110][T13000] [ 529.818104][T13000] dump_stack_lvl+0x18c/0x250 [ 529.822847][T13000] ? show_regs_print_info+0x20/0x20 [ 529.828109][T13000] ? load_image+0x420/0x420 [ 529.832671][T13000] ? __might_sleep+0xe0/0xe0 [ 529.837314][T13000] ? __lock_acquire+0x7eb0/0x7eb0 [ 529.842406][T13000] should_fail_ex+0x394/0x4c0 [ 529.847138][T13000] should_failslab+0x9/0x20 [ 529.851687][T13000] slab_pre_alloc_hook+0x59/0x300 [ 529.856764][T13000] ? kvmalloc_node+0x70/0x180 [ 529.861521][T13000] ? kvmalloc_node+0x70/0x180 [ 529.866263][T13000] __kmem_cache_alloc_node+0x53/0x260 [ 529.871670][T13000] ? kvmalloc_node+0x70/0x180 [ 529.876469][T13000] __kmalloc_node+0xa6/0x240 [ 529.881100][T13000] kvmalloc_node+0x70/0x180 [ 529.885643][T13000] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 529.891083][T13000] ? 0xffffffffa00053c0 [ 529.895266][T13000] ? 0xffffffffa00053c0 [ 529.899444][T13000] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 529.905375][T13000] ? xdp_convert_md_to_buff+0x330/0x330 [ 529.910989][T13000] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 529.917276][T13000] ? _copy_from_user+0xa5/0xe0 [ 529.922088][T13000] ? bpf_test_init+0x119/0x140 [ 529.926989][T13000] ? xdp_convert_md_to_buff+0x5b/0x330 [ 529.932504][T13000] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 529.937909][T13000] ? __lock_acquire+0x7eb0/0x7eb0 [ 529.942979][T13000] ? dev_put+0x80/0x80 [ 529.947088][T13000] ? dev_put+0x80/0x80 [ 529.951189][T13000] bpf_prog_test_run+0x31f/0x390 [ 529.956163][T13000] __sys_bpf+0x49d/0x890 [ 529.960474][T13000] ? bpf_link_show_fdinfo+0x560/0x560 [ 529.965896][T13000] ? lock_chain_count+0x20/0x20 [ 529.970877][T13000] __x64_sys_bpf+0x7c/0x90 [ 529.975333][T13000] do_syscall_64+0x55/0xb0 [ 529.980225][T13000] ? clear_bhb_loop+0x40/0x90 [ 529.984952][T13000] ? clear_bhb_loop+0x40/0x90 [ 529.989673][T13000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.995599][T13000] RIP: 0033:0x7f0c8059f559 [ 530.000050][T13000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.019685][T13000] RSP: 002b:00007f0c81405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.028131][T13000] RAX: ffffffffffffffda RBX: 00007f0c80825fa0 RCX: 00007f0c8059f559 [ 530.036216][T13000] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 530.044227][T13000] RBP: 00007f0c81405090 R08: 0000000000000000 R09: 0000000000000000 [ 530.052320][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.060927][T13000] R13: 00007f0c80826038 R14: 00007f0c80825fa0 R15: 00007ffead73ce88 [ 530.069024][T13000] [ 530.207604][T13002] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2232'. [ 530.226759][T13002] bridge_slave_1: default FDB implementation only supports local addresses [ 530.298893][T13006] validate_nla: 2 callbacks suppressed [ 530.298930][T13006] netlink: 'syz.1.2234': attribute type 21 has an invalid length. [ 530.325126][T13006] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2234'. [ 530.385691][T13006] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 530.747917][T13027] netlink: 'syz.2.2240': attribute type 21 has an invalid length. [ 530.756161][T13027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2240'. [ 530.787212][T13027] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 531.921610][T13041] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2245'. [ 531.940269][T13041] bridge_slave_1: default FDB implementation only supports local addresses [ 532.594616][T13069] netlink: 'syz.1.2253': attribute type 21 has an invalid length. [ 532.641183][T13069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2253'. [ 532.668920][T13069] netlink: 'syz.1.2253': attribute type 10 has an invalid length. [ 532.729151][T13074] netlink: 'syz.0.2256': attribute type 2 has an invalid length. [ 532.763589][T13074] netlink: 'syz.0.2256': attribute type 8 has an invalid length. [ 533.544360][T13081] bridge_slave_1: default FDB implementation only supports local addresses [ 533.932562][T13103] netlink: 'syz.1.2266': attribute type 21 has an invalid length. [ 533.960789][T13103] __nla_validate_parse: 3 callbacks suppressed [ 533.960827][T13103] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2266'. [ 534.018473][T13103] netlink: 'syz.1.2266': attribute type 10 has an invalid length. [ 535.049376][T13125] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2270'. [ 535.059122][T13125] bridge_slave_1: default FDB implementation only supports local addresses [ 535.176647][T13130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2271'. [ 535.286965][T13131] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2280'. [ 535.333357][T13131] bridge_slave_1: default FDB implementation only supports local addresses [ 535.347894][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 535.815965][T13144] validate_nla: 2 callbacks suppressed [ 535.816001][T13144] netlink: 'syz.1.2277': attribute type 21 has an invalid length. [ 535.849627][T13144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2277'. [ 535.878443][T13144] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 535.900263][T13148] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2279'. [ 537.014152][T13163] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2282'. [ 537.034084][T13163] bridge_slave_1: default FDB implementation only supports local addresses [ 537.558020][T13185] netlink: 'syz.2.2291': attribute type 21 has an invalid length. [ 537.567836][T13185] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2291'. [ 537.587139][T13185] netlink: 'syz.2.2291': attribute type 10 has an invalid length. [ 538.247287][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.256853][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.268867][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.291044][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.298930][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 538.307105][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.416084][T13188] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.154308][T10928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.246581][T10928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.422753][T10928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.442847][T13210] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2296'. [ 539.460865][T13210] bridge_slave_1: default FDB implementation only supports local addresses [ 539.488104][T13188] chnl_net:caif_netlink_parms(): no params data found [ 539.506189][T13217] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2297'. [ 539.581825][T10928] batman_adv: batadv0: Removing interface: netdevsim0 [ 539.595497][T10928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.703122][T13223] netlink: 'syz.2.2300': attribute type 21 has an invalid length. [ 539.712600][T13223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2300'. [ 539.773854][T13188] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.790174][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.798585][T13188] bridge_slave_0: entered allmulticast mode [ 539.807034][T13188] bridge_slave_0: entered promiscuous mode [ 539.817312][T13223] netlink: 'syz.2.2300': attribute type 10 has an invalid length. [ 539.839401][T13188] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.890083][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.897403][T13188] bridge_slave_1: entered allmulticast mode [ 539.950314][T13188] bridge_slave_1: entered promiscuous mode [ 540.401216][ T5794] Bluetooth: hci4: command tx timeout [ 540.457745][T13188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.478753][T13188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.541094][T13188] team0: Port device team_slave_0 added [ 540.555135][T13188] team0: Port device team_slave_1 added [ 540.602647][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.609772][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.636732][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.650161][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.657150][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.733416][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.919416][T13188] hsr_slave_0: entered promiscuous mode [ 540.960429][T13188] hsr_slave_1: entered promiscuous mode [ 541.403989][T13251] netlink: 'syz.3.2308': attribute type 2 has an invalid length. [ 541.419769][T13251] netlink: 'syz.3.2308': attribute type 8 has an invalid length. [ 541.428990][T13251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2308'. [ 541.485044][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'. [ 542.085400][T13267] netlink: 'syz.3.2311': attribute type 21 has an invalid length. [ 542.096199][T13267] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2311'. [ 542.147731][T13267] netlink: 'syz.3.2311': attribute type 10 has an invalid length. [ 542.470108][ T5794] Bluetooth: hci4: command tx timeout [ 543.192061][T13283] netlink: 'syz.3.2314': attribute type 10 has an invalid length. [ 543.365113][T13188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.594813][T13188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 543.652152][T13188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 543.710445][T13188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 543.977053][T13308] netlink: 'syz.3.2318': attribute type 2 has an invalid length. [ 544.005927][T13308] netlink: 'syz.3.2318': attribute type 8 has an invalid length. [ 544.030175][T13308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2318'. [ 544.053394][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2318'. [ 544.106259][T13311] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2319'. [ 544.556457][ T5794] Bluetooth: hci4: command tx timeout [ 544.631926][T13324] netlink: 'syz.2.2321': attribute type 21 has an invalid length. [ 544.651024][T13324] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2321'. [ 544.700593][T13327] netlink: 'syz.2.2321': attribute type 10 has an invalid length. [ 544.958745][T13188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.012567][T13188] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.147672][T10927] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.154932][T10927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.191504][T13334] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 545.311825][T10927] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.319058][T10927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.352320][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.388936][T13357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2330'. [ 546.480503][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 546.526259][T13360] validate_nla: 3 callbacks suppressed [ 546.526428][T13360] netlink: 'syz.3.2332': attribute type 10 has an invalid length. [ 546.630803][ T5794] Bluetooth: hci4: command tx timeout [ 546.707408][T13365] netlink: 'syz.3.2333': attribute type 21 has an invalid length. [ 546.731043][T13365] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2333'. [ 546.813227][T13188] veth0_vlan: entered promiscuous mode [ 546.825205][T13365] netlink: 'syz.3.2333': attribute type 10 has an invalid length. [ 546.965849][T13188] veth1_vlan: entered promiscuous mode [ 547.248122][T13188] veth0_macvtap: entered promiscuous mode [ 547.677460][T13188] veth1_macvtap: entered promiscuous mode [ 547.759169][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.790050][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.802049][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.813833][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.824156][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.848560][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.862377][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.872992][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.884993][T13188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.938947][T13390] netlink: 'syz.3.2340': attribute type 10 has an invalid length. [ 547.973786][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.985013][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.996343][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.017208][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.029949][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.045438][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.057814][T13188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.081067][T13188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.107024][T13188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.201930][T13188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.262447][T13188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.274368][T13188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.284001][T13188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.733392][T10919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.744110][T10919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.960548][T10921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.008270][T10921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.302174][T13412] netlink: 'syz.3.2347': attribute type 21 has an invalid length. [ 549.316002][T13412] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2347'. [ 549.376071][T13412] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 549.449756][T13418] FAULT_INJECTION: forcing a failure. [ 549.449756][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 549.472847][T10928] [ 549.475243][T10928] ====================================================== [ 549.482295][T10928] WARNING: possible circular locking dependency detected [ 549.489364][T10928] syzkaller #0 Not tainted [ 549.493835][T10928] ------------------------------------------------------ [ 549.500906][T10928] kworker/u4:31/10928 is trying to acquire lock: [ 549.507266][T10928] ffff88807d768dc0 (team->team_lock_key#4){+.+.}-{3:3}, at: team_device_event+0x295/0xc50 [ 549.517364][T10928] [ 549.517364][T10928] but task is already holding lock: [ 549.524816][T10928] ffff888076630768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 549.535232][T10928] [ 549.535232][T10928] which lock already depends on the new lock. [ 549.535232][T10928] [ 549.545669][T10928] [ 549.545669][T10928] the existing dependency chain (in reverse order) is: [ 549.554711][T10928] [ 549.554711][T10928] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 549.562478][T10928] __mutex_lock+0x135/0xce0 [ 549.567554][T10928] ieee80211_open+0x144/0x200 [ 549.572797][T10928] __dev_open+0x2cb/0x430 [ 549.577808][T10928] dev_open+0xab/0x190 [ 549.582461][T10928] team_add_slave+0x703/0x28a0 [ 549.587888][T10928] do_setlink+0xda4/0x3f00 [ 549.592863][T10928] rtnl_newlink+0x1848/0x2170 [ 549.598099][T10928] rtnetlink_rcv_msg+0x843/0xf90 [ 549.603682][T10928] netlink_rcv_skb+0x235/0x4c0 [ 549.610189][T10928] netlink_unicast+0x856/0x9e0 [ 549.615528][T10928] netlink_sendmsg+0x8d0/0xbf0 [ 549.620871][T10928] ____sys_sendmsg+0x61b/0x980 [ 549.626322][T10928] ___sys_sendmsg+0x2a6/0x360 [ 549.631559][T10928] __se_sys_sendmsg+0x1d0/0x2c0 [ 549.636978][T10928] do_syscall_64+0x55/0xb0 [ 549.641976][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.648435][T10928] [ 549.648435][T10928] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 549.656648][T10928] __lock_acquire+0x3a07/0x7eb0 [ 549.662064][T10928] lock_acquire+0x19e/0x420 [ 549.667133][T10928] __mutex_lock+0x135/0xce0 [ 549.672244][T10928] team_device_event+0x295/0xc50 [ 549.677747][T10928] notifier_call_chain+0x18f/0x380 [ 549.683444][T10928] unregister_netdevice_many_notify+0x1037/0x1910 [ 549.690422][T10928] unregister_netdevice_queue+0x2e9/0x330 [ 549.696700][T10928] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 549.702908][T10928] ieee80211_remove_interfaces+0x4b3/0x690 [ 549.709276][T10928] ieee80211_unregister_hw+0x5d/0x2a0 [ 549.715216][T10928] mac80211_hwsim_del_radio+0x289/0x480 [ 549.721344][T10928] hwsim_exit_net+0x58d/0x650 [ 549.726575][T10928] cleanup_net+0x6f7/0xb00 [ 549.731539][T10928] process_scheduled_works+0xa60/0x1600 [ 549.737653][T10928] worker_thread+0xa5e/0xfe0 [ 549.742892][T10928] kthread+0x2fa/0x390 [ 549.747517][T10928] ret_from_fork+0x48/0x80 [ 549.752490][T10928] ret_from_fork_asm+0x11/0x20 [ 549.757845][T10928] [ 549.757845][T10928] other info that might help us debug this: [ 549.757845][T10928] [ 549.768189][T10928] Possible unsafe locking scenario: [ 549.768189][T10928] [ 549.775679][T10928] CPU0 CPU1 [ 549.781069][T10928] ---- ---- [ 549.786633][T10928] lock(&rdev->wiphy.mtx); [ 549.791172][T10928] lock(team->team_lock_key#4); [ 549.798794][T10928] lock(&rdev->wiphy.mtx); [ 549.805875][T10928] lock(team->team_lock_key#4); [ 549.810877][T10928] [ 549.810877][T10928] *** DEADLOCK *** [ 549.810877][T10928] [ 549.819052][T10928] 5 locks held by kworker/u4:31/10928: [ 549.824536][T10928] #0: ffff88801b259138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 549.835472][T10928] #1: ffffc90004f87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 549.846069][T10928] #2: ffffffff8f3db1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 549.855515][T10928] #3: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 549.865406][T10928] #4: ffff888076630768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 549.876267][T10928] [ 549.876267][T10928] stack backtrace: [ 549.882192][T10928] CPU: 0 PID: 10928 Comm: kworker/u4:31 Not tainted syzkaller #0 [ 549.890120][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 549.900228][T10928] Workqueue: netns cleanup_net [ 549.905123][T10928] Call Trace: [ 549.908437][T10928] [ 549.911396][T10928] dump_stack_lvl+0x18c/0x250 [ 549.916116][T10928] ? load_image+0x420/0x420 [ 549.920744][T10928] ? show_regs_print_info+0x20/0x20 [ 549.926078][T10928] ? print_circular_bug+0x12b/0x1a0 [ 549.931360][T10928] check_noncircular+0x2fc/0x400 [ 549.936449][T10928] ? trace_call_bpf+0xc3/0x6c0 [ 549.941276][T10928] ? print_deadlock_bug+0x5d0/0x5d0 [ 549.946525][T10928] ? lockdep_lock+0xf5/0x230 [ 549.951165][T10928] ? _find_first_zero_bit+0xd6/0x100 [ 549.956500][T10928] __lock_acquire+0x3a07/0x7eb0 [ 549.961441][T10928] ? verify_lock_unused+0x140/0x140 [ 549.966690][T10928] ? verify_lock_unused+0x140/0x140 [ 549.971967][T10928] ? __up_read+0x2b8/0x6b0 [ 549.976421][T10928] ? up_read+0x20/0x20 [ 549.980543][T10928] lock_acquire+0x19e/0x420 [ 549.985091][T10928] ? team_device_event+0x295/0xc50 [ 549.990258][T10928] ? __might_sleep+0xe0/0xe0 [ 549.994900][T10928] ? read_lock_is_recursive+0x20/0x20 [ 550.000328][T10928] ? xsk_notifier+0x210/0x220 [ 550.005161][T10928] __mutex_lock+0x135/0xce0 [ 550.009708][T10928] ? team_device_event+0x295/0xc50 [ 550.014864][T10928] ? __mutex_lock+0x30d/0xce0 [ 550.019574][T10928] ? bond_netdev_event+0xeb/0xef0 [ 550.024646][T10928] ? team_device_event+0x295/0xc50 [ 550.029809][T10928] ? mutex_lock_nested+0x20/0x20 [ 550.034809][T10928] team_device_event+0x295/0xc50 [ 550.039819][T10928] notifier_call_chain+0x18f/0x380 [ 550.044980][T10928] unregister_netdevice_many_notify+0x1037/0x1910 [ 550.051462][T10928] ? unregister_netdevice_many+0x20/0x20 [ 550.057241][T10928] ? kernfs_remove_by_name_ns+0x117/0x150 [ 550.063032][T10928] ? __lock_acquire+0x7eb0/0x7eb0 [ 550.068193][T10928] unregister_netdevice_queue+0x2e9/0x330 [ 550.073954][T10928] ? list_netdevice+0x730/0x730 [ 550.078845][T10928] ? kernfs_remove_by_name_ns+0x117/0x150 [ 550.084643][T10928] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 550.090336][T10928] ieee80211_remove_interfaces+0x4b3/0x690 [ 550.096209][T10928] ? ieee80211_do_stop+0x2030/0x2030 [ 550.101539][T10928] ? rcu_is_watching+0x15/0xb0 [ 550.106352][T10928] ieee80211_unregister_hw+0x5d/0x2a0 [ 550.111781][T10928] mac80211_hwsim_del_radio+0x289/0x480 [ 550.117458][T10928] ? rhashtable_remove_fast+0xc00/0xc00 [ 550.123076][T10928] hwsim_exit_net+0x58d/0x650 [ 550.127800][T10928] ? hwsim_init_net+0x90/0x90 [ 550.132516][T10928] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 550.138450][T10928] cleanup_net+0x6f7/0xb00 [ 550.142911][T10928] ? ops_free_list+0x3b0/0x3b0 [ 550.147719][T10928] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.152956][T10928] ? process_scheduled_works+0x975/0x1600 [ 550.158714][T10928] ? process_scheduled_works+0x975/0x1600 [ 550.164475][T10928] process_scheduled_works+0xa60/0x1600 [ 550.170099][T10928] ? worker_attach_to_pool+0x370/0x370 [ 550.175602][T10928] ? assign_work+0x3cc/0x5d0 [ 550.180243][T10928] worker_thread+0xa5e/0xfe0 [ 550.184976][T10928] kthread+0x2fa/0x390 [ 550.189072][T10928] ? pr_cont_work+0x550/0x550 [ 550.193804][T10928] ? kthread_blkcg+0xd0/0xd0 [ 550.198429][T10928] ret_from_fork+0x48/0x80 [ 550.202881][T10928] ? kthread_blkcg+0xd0/0xd0 [ 550.207504][T10928] ret_from_fork_asm+0x11/0x20 [ 550.212320][T10928] [ 550.217919][T13418] CPU: 0 PID: 13418 Comm: syz.0.2290 Not tainted syzkaller #0 [ 550.225457][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.235554][T13418] Call Trace: [ 550.238869][T13418] [ 550.241840][T13418] dump_stack_lvl+0x18c/0x250 [ 550.246569][T13418] ? show_regs_print_info+0x20/0x20 [ 550.251826][T13418] ? load_image+0x420/0x420 [ 550.256377][T13418] ? __might_sleep+0xe0/0xe0 [ 550.257024][T10928] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 550.261016][T13418] ? __lock_acquire+0x7eb0/0x7eb0 [ 550.261044][T13418] ? trace_contention_end+0x39/0xe0 [ 550.279426][T13418] should_fail_ex+0x394/0x4c0 [ 550.284242][T13418] should_failslab+0x9/0x20 [ 550.288785][T13418] slab_pre_alloc_hook+0x59/0x300 [ 550.290420][T10928] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 550.293838][T13418] kmem_cache_alloc+0x5a/0x2d0 [ 550.306794][T13418] ? skb_clone+0x1eb/0x370 [ 550.311259][T13418] skb_clone+0x1eb/0x370 [ 550.315581][T13418] pfkey_sendmsg+0x4e3/0x11a0 [ 550.320345][T13418] ? pfkey_release+0x340/0x340 [ 550.325174][T13418] ? aa_sock_msg_perm+0x94/0x150 [ 550.330161][T13418] ? apparmor_socket_sendmsg+0x8e/0x330 [ 550.335765][T13418] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 550.341100][T13418] ? security_socket_sendmsg+0x80/0xa0 [ 550.346614][T13418] ? pfkey_release+0x340/0x340 [ 550.351432][T13418] ____sys_sendmsg+0x61b/0x980 [ 550.356249][T13418] ? __asan_memset+0x22/0x40 [ 550.360891][T13418] ? __sys_sendmsg_sock+0x30/0x30 [ 550.365980][T13418] ? __import_iovec+0x5f2/0x850 [ 550.370914][T13418] ? import_iovec+0x73/0xa0 [ 550.375467][T13418] ___sys_sendmsg+0x2a6/0x360 [ 550.380198][T13418] ? __sys_sendmsg+0x2b0/0x2b0 [ 550.385018][T13418] ? trace_call_bpf+0xc3/0x6c0 [ 550.389839][T13418] __se_sys_sendmsg+0x1d0/0x2c0 [ 550.394732][T13418] ? perf_trace_preemptirq_template+0x269/0x330 [ 550.401065][T13418] ? __x64_sys_sendmsg+0x80/0x80 [ 550.406067][T13418] ? lockdep_hardirqs_on+0x98/0x150 [ 550.411321][T13418] do_syscall_64+0x55/0xb0 [ 550.415796][T13418] ? clear_bhb_loop+0x40/0x90 [ 550.420524][T13418] ? clear_bhb_loop+0x40/0x90 [ 550.425260][T13418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.431209][T13418] RIP: 0033:0x7f1b5d59f559 [ 550.435671][T13418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.455420][T13418] RSP: 002b:00007f1b5e4f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.463905][T13418] RAX: ffffffffffffffda RBX: 00007f1b5d825fa0 RCX: 00007f1b5d59f559 [ 550.472012][T13418] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 550.480119][T13418] RBP: 00007f1b5e4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 550.488137][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.496152][T13418] R13: 00007f1b5d826038 R14: 00007f1b5d825fa0 R15: 00007ffc89dcdf38 [ 550.504191][T13418] [ 550.509679][T10928] team0: Port device wlan1 removed [ 550.542901][T13414] netlink: 'syz.2.2348': attribute type 2 has an invalid length. [ 550.553049][T13414] netlink: 'syz.2.2348': attribute type 8 has an invalid length. [ 550.591685][T13414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2348'. [ 550.774256][T10928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.783294][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.791230][T10928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.798653][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.808977][T10928] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 550.816680][T10928] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 550.824531][T10928] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 550.831681][T10928] batman_adv: batadv0: Removing interface: virt_wifi0 [ 550.841004][T10928] veth1_macvtap: left promiscuous mode [ 550.846538][T10928] veth0_macvtap: left promiscuous mode [ 550.859469][T10928] veth1_vlan: left promiscuous mode [ 550.864832][T10928] veth0_vlan: left promiscuous mode [ 550.949508][T10928] geneve1 (unregistering): left promiscuous mode [ 550.958301][T10928] geneve1 (unregistering): left allmulticast mode [ 550.966774][T10928] team0 (unregistering): Port device geneve1 removed [ 551.137869][T10928] team_slave_1 (unregistering): left promiscuous mode [ 551.144870][T10928] team_slave_1 (unregistering): left allmulticast mode [ 551.152629][T10928] team0 (unregistering): Port device team_slave_1 removed [ 551.178484][T10928] team_slave_0 (unregistering): left promiscuous mode [ 551.190177][T10928] team_slave_0 (unregistering): left allmulticast mode [ 551.199092][T10928] team0 (unregistering): Port device team_slave_0 removed [ 551.396852][T10928] dummy0 (unregistering): left promiscuous mode [ 551.403314][T10928] dummy0 (unregistering): left allmulticast mode [ 551.417215][T10928] team0 (unregistering): Port device dummy0 removed