last executing test programs: 2m22.784699049s ago: executing program 3 (id=4583): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m22.661755486s ago: executing program 3 (id=4586): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 2m22.52079084s ago: executing program 3 (id=4587): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b00008500000008000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xac}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) 2m22.366882822s ago: executing program 3 (id=4590): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x4}, 0x88, 0x701, 0x43a1bd76, 0x0, 0x8000000000000001, 0x6, 0xa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, &(0x7f0000000100), 0x120) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000050000000200000002000006040000000100000000000000030000000000000000302e5f0033bbf9cf13da819ab34d4780897131005e1e0bec11b80f6b55b583f28df7274e46f88fd708536c133f75937f8b37ef72f202da91ad28d127f3e06ef972fdd2466f06336e3078bb308218c0468e5674e5c65d2d30225909d3172fc28b339e21a39398522c7baace108f7a8561e3f517b49c35ea20d25a20"], 0x0, 0x39}, 0x28) (async) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (async) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x2b, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) (async) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 2m22.271453474s ago: executing program 3 (id=4599): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10800, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xfc, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x90090, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2m21.856495018s ago: executing program 3 (id=4594): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x104}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r5 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) (async) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x7, 0x20180, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x1c, 0x22, 0x2, 0x1, 0x0, 0x7, 0x0, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fcb010018000000000000000c0000000c00000009000006000000000000007b00000000002e2e005f615f5f00"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m6.862610896s ago: executing program 32 (id=4594): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x104}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r5 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) (async) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x7, 0x20180, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x1c, 0x22, 0x2, 0x1, 0x0, 0x7, 0x0, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fcb010018000000000000000c0000000c00000009000006000000000000007b00000000002e2e005f615f5f00"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) 10.78475977s ago: executing program 4 (id=5152): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x21, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x10}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r7) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x412, 0x0, 0x0, 0x6, 0x4, 0x8001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, 0x0, 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r2, 0x12) r13 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) 8.525126284s ago: executing program 4 (id=5158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffffffe0, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff01}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x0, 0x9, 0xa, 0x50, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x2e, &(0x7f0000000280)=""/46, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x0, 0x3, 0x4, 0x3}, {0x6, 0x1, 0x8}, {0x1, 0x5, 0x7, 0x4}, {0x4, 0x5, 0x3, 0x6}], 0x10, 0x10000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 5.869318457s ago: executing program 0 (id=5169): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x22, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800"/32], 0x0}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 5.700736186s ago: executing program 2 (id=5170): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b00008500000008000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xac}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) 5.576234993s ago: executing program 0 (id=5171): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x48b, 0x0, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1f, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000000000000049d61394ac1232642f4fd555f99308", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000008000000000000000200000031b90000f0ffffffb7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xd5, &(0x7f0000000580)=""/213, 0x41000, 0x73, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0x0, 0xf}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x5, 0x8, 0x8}, {0x5, 0x3, 0x10, 0x7}, {0x0, 0x2, 0xb, 0x2}, {0x1, 0x5, 0x7, 0x3}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000940)) 5.520732683s ago: executing program 1 (id=5172): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 5.241815792s ago: executing program 2 (id=5173): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 5.188929272s ago: executing program 4 (id=5174): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107ba3, 0x2, @perf_bp={0x0, 0x3}, 0x18021, 0x0, 0x43a1bd7a, 0x7, 0x9, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 5.173612829s ago: executing program 1 (id=5175): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 8) close(r0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) 5.132467612s ago: executing program 0 (id=5176): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000008007bc5000000000700000085000000530000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x80, 0x1, 0x3, 0x5, 0x0, 0x5, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xb, 0x6}, 0x10120, 0x3d, 0x7, 0x0, 0x2, 0x4, 0x14, 0x0, 0x8, 0x0, 0x9}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) 4.929049284s ago: executing program 2 (id=5177): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="020000e904000000040000f28d45dfdae493ff0072c7acad0641759c91ce5b0c3ceb5598cf1337305d80939a67ba4946ed8c89cd3e3d2402c922abfc88a6784401e1c0d5284a1d703402c4db80a1a487e142cbaec6255a52722ca62676abb283b000000000113d5038341c063ab0c2000d47d87d72f42ebcfb9438c2c2e89e1d762c3bc0860e9ccbcb3eb4e3e8c9954274e86800000000000000a03ac743e24b4f12e5752dfba19f0a5fb4e04211d2a4f0b88235cdffa8e6f32f6671f0082505db04220bb5a2581f5eb8b52772e4d74ba207a7232ca4ae877c68b2fe3af7c0848a1d7770ed2c85692f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r1}, 0x38) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@ld}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x49, &(0x7f0000000600)=""/73, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x5, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r0], &(0x7f0000000700)=[{0x3, 0x1, 0x4, 0x5f00f2abbbc08e30}, {0x2, 0x2, 0x4, 0x5}, {0x0, 0x1, 0xd, 0x7}, {0x2, 0x2, 0x10, 0x2}, {0x0, 0x3, 0x5, 0xd}, {0x0, 0x5, 0xe, 0x6}, {0x2, 0x4, 0x7, 0xc14f8e3596e50079}], 0x10, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000840)={r3, r0}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000000000002d83002ba40000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r5, 0x4) 4.788591319s ago: executing program 1 (id=5178): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r3 = socket$kcm(0x18, 0x0, 0x2) recvmsg$kcm(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1ff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4048000) r5 = socket$kcm(0xa, 0x5, 0x0) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100)=r6, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000004700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000600000000000000000000000000000000000000000009defc73a025d751bd4312b2fab7b4b6847d9d9e157bb9682aae27f614a7d30c158562fb65"], 0x50) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r8, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 4.19890075s ago: executing program 0 (id=5179): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x22, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800"/32], 0x0}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c0000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 4.116800795s ago: executing program 4 (id=5180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x0, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0a026b876c1d0048007ea60864160af3651100120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb239fb86280a5c92bfc67c51b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.064578795s ago: executing program 2 (id=5181): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b00008500000008000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xac}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.916923949s ago: executing program 1 (id=5182): r0 = socket$kcm(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000500)={r0, r2}) 3.800880867s ago: executing program 0 (id=5183): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r2}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.727893434s ago: executing program 1 (id=5184): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x403, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800, 0x2}, 0x2000, 0x9759}, 0xffffffffffffffff, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x2, [{@loopback, 0x5}, {@rand_addr=0x64010102}]}]}}}], 0x48}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @broadcast}, 0x10, 0x0, 0x10}, 0x30040044) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$kcm(0x15, 0x5, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x7f, '\x00', 0x0, r10, 0x2, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000500)={r6, r8}) 3.503486702s ago: executing program 2 (id=5185): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x48b, 0x0, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1f, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000000000000049d61394ac1232642f4fd555f99308", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000008000000000000000200000031b90000f0ffffffb7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xd5, &(0x7f0000000580)=""/213, 0x41000, 0x73, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0xb}, {0x0, 0x4, 0x0, 0xf}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x5, 0x8, 0x8}, {0x5, 0x3, 0x10, 0x7}, {0x0, 0x2, 0xb, 0x2}, {0x1, 0x5, 0x7, 0x3}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000940)) 2.394336539s ago: executing program 4 (id=5186): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_tos_u8={{0x11, 0x11}}], 0x30}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="170000000000000000000000000000000000d54f858e0f6fa6c6d700000000000000000079114605751f39ea26cc76098f32898f2b94eee202425242ad3d104d9dcaaa84907e5b4c2bf8667279"], 0x2b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r9, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r6}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 34.089346ms ago: executing program 2 (id=5187): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000008007bc5000000000700000085000000530000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x80, 0x1, 0x3, 0x5, 0x0, 0x5, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xb, 0x6}, 0x10120, 0x3d, 0x7, 0x0, 0x2, 0x4, 0x14, 0x0, 0x8, 0x0, 0x9}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) 649.44µs ago: executing program 0 (id=5188): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) 467.4µs ago: executing program 1 (id=5189): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x47}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) (fail_nth: 5) 0s ago: executing program 4 (id=5190): r0 = socket$kcm(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000500)={r0, r2}) (fail_nth: 2) kernel console output (not intermixed with test programs): [ 851.469602][T19812] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 851.559753][T19814] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4441'. [ 851.613754][T19818] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4442'. [ 851.949006][T19826] tun0: tun_chr_ioctl cmd 1074025675 [ 851.955198][T19826] tun0: persist enabled [ 851.960194][T19826] tun0: tun_chr_ioctl cmd 1074025675 [ 851.972302][T19826] tun0: persist disabled [ 854.038051][T19854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.438307][T19859] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4458'. [ 855.439978][T19883] tun0: tun_chr_ioctl cmd 1074025675 [ 855.447340][T19883] tun0: persist enabled [ 855.463069][T19883] tun0: tun_chr_ioctl cmd 1074025675 [ 855.468432][T19883] tun0: persist disabled [ 856.092536][T19896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4471'. [ 856.094301][T19895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4470'. [ 856.131156][T19896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4471'. [ 856.240636][T19896] netlink: 'syz.2.4471': attribute type 10 has an invalid length. [ 856.271297][T19896] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.4471'. [ 857.266024][T19924] __nla_validate_parse: 1 callbacks suppressed [ 857.266043][T19924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4480'. [ 857.295624][T19924] FAULT_INJECTION: forcing a failure. [ 857.295624][T19924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.323792][T19924] CPU: 1 PID: 19924 Comm: syz.0.4480 Not tainted syzkaller #0 [ 857.331341][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.341454][T19924] Call Trace: [ 857.344835][T19924] [ 857.347816][T19924] dump_stack_lvl+0x18c/0x250 [ 857.352570][T19924] ? show_regs_print_info+0x20/0x20 [ 857.357983][T19924] ? load_image+0x400/0x400 [ 857.362555][T19924] ? __lock_acquire+0x7d40/0x7d40 [ 857.367650][T19924] ? snprintf+0xe9/0x140 [ 857.372053][T19924] should_fail_ex+0x39d/0x4d0 [ 857.376806][T19924] _copy_to_user+0x2f/0xa0 [ 857.381281][T19924] simple_read_from_buffer+0xe7/0x150 [ 857.386745][T19924] proc_fail_nth_read+0x1e8/0x260 [ 857.391844][T19924] ? proc_fault_inject_write+0x360/0x360 [ 857.397547][T19924] ? fsnotify_perm+0x271/0x5e0 [ 857.402370][T19924] ? proc_fault_inject_write+0x360/0x360 [ 857.408148][T19924] vfs_read+0x28b/0x970 [ 857.412374][T19924] ? kernel_read+0x1e0/0x1e0 [ 857.417021][T19924] ? __fget_files+0x28/0x4b0 [ 857.421657][T19924] ? __fget_files+0x28/0x4b0 [ 857.426303][T19924] ? __fget_files+0x43d/0x4b0 [ 857.431024][T19924] ? __fdget_pos+0x2a3/0x330 [ 857.435633][T19924] ? ksys_read+0x75/0x260 [ 857.439995][T19924] ksys_read+0x150/0x260 [ 857.444264][T19924] ? vfs_write+0x990/0x990 [ 857.448723][T19924] ? lockdep_hardirqs_on+0x98/0x150 [ 857.453977][T19924] do_syscall_64+0x55/0xa0 [ 857.458423][T19924] ? clear_bhb_loop+0x40/0x90 [ 857.463120][T19924] ? clear_bhb_loop+0x40/0x90 [ 857.467819][T19924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.473815][T19924] RIP: 0033:0x7f5df555cfce [ 857.478253][T19924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.497964][T19924] RSP: 002b:00007f5df64befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.506417][T19924] RAX: ffffffffffffffda RBX: 00007f5df64bf6c0 RCX: 00007f5df555cfce [ 857.514581][T19924] RDX: 000000000000000f RSI: 00007f5df64bf0a0 RDI: 0000000000000007 [ 857.522572][T19924] RBP: 00007f5df64bf090 R08: 0000000000000000 R09: 0000000000000000 [ 857.530559][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 857.538545][T19924] R13: 00007f5df5816038 R14: 00007f5df5815fa0 R15: 00007ffc6a216628 [ 857.546560][T19924] [ 858.570204][T19957] FAULT_INJECTION: forcing a failure. [ 858.570204][T19957] name failslab, interval 1, probability 0, space 0, times 0 [ 858.593733][T19957] CPU: 1 PID: 19957 Comm: syz.3.4492 Not tainted syzkaller #0 [ 858.601281][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.611483][T19957] Call Trace: [ 858.614825][T19957] [ 858.617796][T19957] dump_stack_lvl+0x18c/0x250 [ 858.622529][T19957] ? show_regs_print_info+0x20/0x20 [ 858.627845][T19957] ? load_image+0x400/0x400 [ 858.632391][T19957] ? __might_sleep+0xe0/0xe0 [ 858.637119][T19957] ? __lock_acquire+0x7d40/0x7d40 [ 858.642188][T19957] ? __asan_memset+0x22/0x40 [ 858.646828][T19957] should_fail_ex+0x39d/0x4d0 [ 858.651563][T19957] should_failslab+0x9/0x20 [ 858.656128][T19957] slab_pre_alloc_hook+0x59/0x310 [ 858.661206][T19957] kmem_cache_alloc+0x5a/0x2d0 [ 858.666022][T19957] ? security_inode_alloc+0x34/0x110 [ 858.671380][T19957] security_inode_alloc+0x34/0x110 [ 858.676546][T19957] inode_init_always+0x8fc/0xc90 [ 858.681539][T19957] ? new_inode_pseudo+0x82/0x1d0 [ 858.686530][T19957] new_inode_pseudo+0x95/0x1d0 [ 858.691377][T19957] ? __ns_get_path+0x2c/0x640 [ 858.696097][T19957] __ns_get_path+0x24d/0x640 [ 858.700727][T19957] ? _raw_spin_unlock+0x28/0x40 [ 858.705620][T19957] ns_get_path+0x54/0x90 [ 858.709905][T19957] proc_ns_get_link+0xf8/0x240 [ 858.714702][T19957] ? proc_ns_instantiate+0xf0/0xf0 [ 858.719851][T19957] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 858.725438][T19957] ? security_inode_follow_link+0xb7/0x100 [ 858.731317][T19957] ? proc_ns_instantiate+0xf0/0xf0 [ 858.736465][T19957] pick_link+0x666/0xdd0 [ 858.740852][T19957] step_into+0xc4d/0xf20 [ 858.745142][T19957] ? rcu_read_lock_any_held+0xb4/0x140 [ 858.750725][T19957] ? rcu_read_lock_bh_held+0x100/0x100 [ 858.756220][T19957] ? set_root+0x3a0/0x3a0 [ 858.760582][T19957] ? d_splice_alias+0x114/0x330 [ 858.765568][T19957] path_openat+0x1714/0x3230 [ 858.770228][T19957] ? do_filp_open+0x430/0x430 [ 858.774958][T19957] ? trace_event_raw_event_lock+0x250/0x250 [ 858.780916][T19957] do_filp_open+0x1f5/0x430 [ 858.785485][T19957] ? alloc_fd+0x58f/0x630 [ 858.789890][T19957] ? vfs_tmpfile+0x490/0x490 [ 858.794567][T19957] ? _raw_spin_unlock+0x28/0x40 [ 858.799470][T19957] ? alloc_fd+0x58f/0x630 [ 858.803865][T19957] do_sys_openat2+0x134/0x1d0 [ 858.808586][T19957] ? do_sys_open+0xe0/0xe0 [ 858.813042][T19957] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 858.819066][T19957] ? lock_chain_count+0x20/0x20 [ 858.824156][T19957] __x64_sys_openat+0x139/0x160 [ 858.829085][T19957] do_syscall_64+0x55/0xa0 [ 858.833541][T19957] ? clear_bhb_loop+0x40/0x90 [ 858.838688][T19957] ? clear_bhb_loop+0x40/0x90 [ 858.843407][T19957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.850327][T19957] RIP: 0033:0x7f3ea2d5cfce [ 858.854790][T19957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.874462][T19957] RSP: 002b:00007f3ea3c2eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 858.883034][T19957] RAX: ffffffffffffffda RBX: 00007f3ea3c2f6c0 RCX: 00007f3ea2d5cfce [ 858.891145][T19957] RDX: 0000000000000002 RSI: 00007f3ea3c2ef90 RDI: ffffffffffffff9c [ 858.899159][T19957] RBP: 00007f3ea3c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 858.907167][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 858.915188][T19957] R13: 00007f3ea3016038 R14: 00007f3ea3015fa0 R15: 00007ffc9e585ae8 [ 858.923320][T19957] [ 859.090536][T19949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4490'. [ 860.844246][T19985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4499'. [ 860.932952][T19985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4499'. [ 860.971113][T19986] netlink: 'syz.3.4499': attribute type 10 has an invalid length. [ 860.982973][T19986] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4499'. [ 861.014302][T19989] FAULT_INJECTION: forcing a failure. [ 861.014302][T19989] name failslab, interval 1, probability 0, space 0, times 0 [ 861.084996][T19989] CPU: 0 PID: 19989 Comm: syz.1.4501 Not tainted syzkaller #0 [ 861.092732][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.102834][T19989] Call Trace: [ 861.106154][T19989] [ 861.109135][T19989] dump_stack_lvl+0x18c/0x250 [ 861.113875][T19989] ? show_regs_print_info+0x20/0x20 [ 861.119138][T19989] ? load_image+0x400/0x400 [ 861.123706][T19989] ? __might_sleep+0xe0/0xe0 [ 861.128337][T19989] ? __lock_acquire+0x7d40/0x7d40 [ 861.133399][T19989] ? __asan_memset+0x22/0x40 [ 861.138127][T19989] should_fail_ex+0x39d/0x4d0 [ 861.142854][T19989] should_failslab+0x9/0x20 [ 861.147403][T19989] slab_pre_alloc_hook+0x59/0x310 [ 861.152586][T19989] kmem_cache_alloc+0x5a/0x2d0 [ 861.157673][T19989] ? security_inode_alloc+0x34/0x110 [ 861.163032][T19989] security_inode_alloc+0x34/0x110 [ 861.168203][T19989] inode_init_always+0x8fc/0xc90 [ 861.173185][T19989] ? new_inode_pseudo+0x82/0x1d0 [ 861.178189][T19989] new_inode_pseudo+0x95/0x1d0 [ 861.183001][T19989] ? __ns_get_path+0x2c/0x640 [ 861.187827][T19989] __ns_get_path+0x24d/0x640 [ 861.192460][T19989] ? _raw_spin_unlock+0x28/0x40 [ 861.197362][T19989] ns_get_path+0x54/0x90 [ 861.201646][T19989] proc_ns_get_link+0xf8/0x240 [ 861.206463][T19989] ? proc_ns_instantiate+0xf0/0xf0 [ 861.211717][T19989] ? try_to_unlazy+0x34c/0x5a0 [ 861.216629][T19989] ? proc_ns_instantiate+0xf0/0xf0 [ 861.221795][T19989] pick_link+0x666/0xdd0 [ 861.226095][T19989] step_into+0xc4d/0xf20 [ 861.230388][T19989] ? pid_revalidate+0x22/0x260 [ 861.235213][T19989] ? pid_revalidate+0x22/0x260 [ 861.240200][T19989] ? set_root+0x3a0/0x3a0 [ 861.244576][T19989] ? lookup_fast+0x4a2/0x4d0 [ 861.249224][T19989] path_openat+0x1714/0x3230 [ 861.253974][T19989] ? do_sys_openat2+0xda/0x1d0 [ 861.258793][T19989] ? verify_lock_unused+0x140/0x140 [ 861.264039][T19989] ? do_filp_open+0x430/0x430 [ 861.268771][T19989] ? __virt_addr_valid+0x18c/0x540 [ 861.273969][T19989] do_filp_open+0x1f5/0x430 [ 861.278546][T19989] ? vfs_tmpfile+0x490/0x490 [ 861.283215][T19989] ? _raw_spin_unlock+0x28/0x40 [ 861.288201][T19989] ? alloc_fd+0x58f/0x630 [ 861.292599][T19989] do_sys_openat2+0x134/0x1d0 [ 861.297319][T19989] ? do_sys_open+0xe0/0xe0 [ 861.302086][T19989] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 861.308194][T19989] ? lock_chain_count+0x20/0x20 [ 861.313094][T19989] __x64_sys_openat+0x139/0x160 [ 861.318013][T19989] do_syscall_64+0x55/0xa0 [ 861.322475][T19989] ? clear_bhb_loop+0x40/0x90 [ 861.327241][T19989] ? clear_bhb_loop+0x40/0x90 [ 861.332057][T19989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.338217][T19989] RIP: 0033:0x7f03bd35cfce [ 861.342677][T19989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 861.362505][T19989] RSP: 002b:00007f03be18cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.370973][T19989] RAX: ffffffffffffffda RBX: 00007f03be18d6c0 RCX: 00007f03bd35cfce [ 861.378991][T19989] RDX: 0000000000000000 RSI: 00007f03be18cf90 RDI: ffffffffffffff9c [ 861.387022][T19989] RBP: 00007f03be18d090 R08: 0000000000000000 R09: 0000000000000000 [ 861.395047][T19989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.401701][T20001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4505'. [ 861.403304][T19989] R13: 00007f03bd616038 R14: 00007f03bd615fa0 R15: 00007fffe7a83a38 [ 861.403344][T19989] [ 862.137804][T20016] FAULT_INJECTION: forcing a failure. [ 862.137804][T20016] name failslab, interval 1, probability 0, space 0, times 0 [ 862.196389][T20016] CPU: 0 PID: 20016 Comm: syz.3.4511 Not tainted syzkaller #0 [ 862.204023][T20016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.214737][T20016] Call Trace: [ 862.218055][T20016] [ 862.221025][T20016] dump_stack_lvl+0x18c/0x250 [ 862.225834][T20016] ? sctp_sendmsg+0x1575/0x28c0 [ 862.230706][T20016] ? ___sys_sendmsg+0x2a6/0x360 [ 862.235929][T20016] ? show_regs_print_info+0x20/0x20 [ 862.241156][T20016] ? load_image+0x400/0x400 [ 862.245716][T20016] should_fail_ex+0x39d/0x4d0 [ 862.250448][T20016] should_failslab+0x9/0x20 [ 862.254983][T20016] slab_pre_alloc_hook+0x59/0x310 [ 862.260042][T20016] ? sctp_add_bind_addr+0x8c/0x360 [ 862.265172][T20016] __kmem_cache_alloc_node+0x53/0x250 [ 862.270574][T20016] ? sctp_add_bind_addr+0x8c/0x360 [ 862.275698][T20016] kmalloc_trace+0x2a/0xe0 [ 862.280149][T20016] sctp_add_bind_addr+0x8c/0x360 [ 862.285124][T20016] sctp_copy_local_addr_list+0x315/0x4f0 [ 862.290781][T20016] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 862.296604][T20016] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 862.302784][T20016] ? sctp_v4_is_any+0x35/0x60 [ 862.307472][T20016] ? sctp_copy_one_addr+0x8c/0x350 [ 862.312615][T20016] sctp_bind_addr_copy+0xb3/0x3c0 [ 862.317666][T20016] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 862.324156][T20016] sctp_connect_new_asoc+0x2f9/0x6a0 [ 862.329465][T20016] ? __sctp_connect+0xd80/0xd80 [ 862.334326][T20016] ? __local_bh_enable_ip+0x13a/0x1c0 [ 862.339716][T20016] ? _local_bh_enable+0xa0/0xa0 [ 862.344576][T20016] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 862.350395][T20016] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 862.356217][T20016] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 862.361779][T20016] ? security_sctp_bind_connect+0x89/0xb0 [ 862.367516][T20016] sctp_sendmsg+0x1575/0x28c0 [ 862.372390][T20016] ? sctp_getsockopt+0xb60/0xb60 [ 862.377341][T20016] ? aa_sk_perm+0x83c/0x970 [ 862.381913][T20016] ? aa_af_perm+0x330/0x330 [ 862.386430][T20016] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 862.392889][T20016] ? sock_rps_record_flow+0x19/0x3f0 [ 862.398201][T20016] ? inet_sendmsg+0x7c/0x2f0 [ 862.402802][T20016] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 862.408100][T20016] ? security_socket_sendmsg+0x80/0xa0 [ 862.413566][T20016] ? inet_send_prepare+0x260/0x260 [ 862.418690][T20016] ____sys_sendmsg+0x5ba/0x960 [ 862.423472][T20016] ? __lock_acquire+0x7d40/0x7d40 [ 862.428510][T20016] ? __asan_memset+0x22/0x40 [ 862.433202][T20016] ? __sys_sendmsg_sock+0x30/0x30 [ 862.438237][T20016] ? __import_iovec+0x5f2/0x850 [ 862.443197][T20016] ? import_iovec+0x73/0xa0 [ 862.447724][T20016] ___sys_sendmsg+0x2a6/0x360 [ 862.452593][T20016] ? get_pid_task+0x20/0x1e0 [ 862.457243][T20016] ? __sys_sendmsg+0x2a0/0x2a0 [ 862.462125][T20016] ? __lock_acquire+0x7d40/0x7d40 [ 862.467189][T20016] __se_sys_sendmsg+0x1c2/0x2b0 [ 862.472147][T20016] ? __x64_sys_sendmsg+0x80/0x80 [ 862.477265][T20016] ? lockdep_hardirqs_on+0x98/0x150 [ 862.482480][T20016] do_syscall_64+0x55/0xa0 [ 862.487025][T20016] ? clear_bhb_loop+0x40/0x90 [ 862.491719][T20016] ? clear_bhb_loop+0x40/0x90 [ 862.496617][T20016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.502521][T20016] RIP: 0033:0x7f3ea2d9c799 [ 862.506954][T20016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.526579][T20016] RSP: 002b:00007f3ea3c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.535094][T20016] RAX: ffffffffffffffda RBX: 00007f3ea3016090 RCX: 00007f3ea2d9c799 [ 862.543075][T20016] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 862.551054][T20016] RBP: 00007f3ea3c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 862.559126][T20016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.567200][T20016] R13: 00007f3ea3016128 R14: 00007f3ea3016090 R15: 00007ffc9e585ae8 [ 862.575198][T20016] [ 862.697742][T20018] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4508'. [ 862.755058][T20019] netlink: 'syz.2.4510': attribute type 33 has an invalid length. [ 863.090978][T20032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4515'. [ 863.115165][T20032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4515'. [ 863.207189][T20032] netlink: 'syz.0.4515': attribute type 10 has an invalid length. [ 863.241115][T20032] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.4515'. [ 863.275946][T20041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4516'. [ 863.306485][T20041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4516'. [ 863.333106][T20041] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4516'. [ 863.730560][T20046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4519'. [ 864.995459][T20079] sctp: [Deprecated]: syz.1.4529 (pid 20079) Use of int in max_burst socket option deprecated. [ 864.995459][T20079] Use struct sctp_assoc_value instead [ 865.550092][T20097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4535'. [ 866.155579][T20105] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4539'. [ 867.169705][T20131] netlink: 'syz.1.4549': attribute type 33 has an invalid length. [ 867.327668][T20135] syzkaller0: entered promiscuous mode [ 867.333382][T20135] syzkaller0: entered allmulticast mode [ 867.814764][T20147] __nla_validate_parse: 10 callbacks suppressed [ 867.814811][T20147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4556'. [ 867.835011][T20147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4556'. [ 867.845649][T20147] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4556'. [ 868.741142][T20166] FAULT_INJECTION: forcing a failure. [ 868.741142][T20166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 868.769984][T20166] CPU: 0 PID: 20166 Comm: syz.3.4560 Not tainted syzkaller #0 [ 868.777623][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.787733][T20166] Call Trace: [ 868.791062][T20166] [ 868.794044][T20166] dump_stack_lvl+0x18c/0x250 [ 868.797641][T20169] sctp: [Deprecated]: syz.0.4561 (pid 20169) Use of int in max_burst socket option deprecated. [ 868.797641][T20169] Use struct sctp_assoc_value instead [ 868.798752][T20166] ? show_regs_print_info+0x20/0x20 [ 868.819715][T20166] ? load_image+0x400/0x400 [ 868.824260][T20166] ? __lock_acquire+0x7d40/0x7d40 [ 868.829388][T20166] ? mark_lock+0x94/0x320 [ 868.833764][T20166] should_fail_ex+0x39d/0x4d0 [ 868.838469][T20166] prepare_alloc_pages+0x1e2/0x5f0 [ 868.843612][T20166] __alloc_pages+0x134/0x460 [ 868.848303][T20166] ? zone_statistics+0x170/0x170 [ 868.853343][T20166] ? do_wp_page+0x7ca/0x35f0 [ 868.857959][T20166] ? do_wp_page+0xfc5/0x35f0 [ 868.862566][T20166] __folio_alloc+0x10/0x20 [ 868.867000][T20166] vma_alloc_folio+0x47a/0x8f0 [ 868.871780][T20166] do_wp_page+0x1243/0x35f0 [ 868.876307][T20166] ? folio_put+0xd0/0xd0 [ 868.880555][T20166] ? do_raw_spin_lock+0x11f/0x2c0 [ 868.885598][T20166] ? __rwlock_init+0x150/0x150 [ 868.890391][T20166] handle_mm_fault+0x135d/0x4c00 [ 868.895345][T20166] ? handle_mm_fault+0xe7/0x4c00 [ 868.900308][T20166] ? numa_migrate_prep+0x350/0x350 [ 868.905447][T20166] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 868.910765][T20166] do_user_addr_fault+0x730/0x12c0 [ 868.915916][T20166] exc_page_fault+0x64/0x100 [ 868.920520][T20166] asm_exc_page_fault+0x26/0x30 [ 868.925468][T20166] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 868.931382][T20166] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 868.951352][T20166] RSP: 0018:ffffc90004f9f498 EFLAGS: 00050206 [ 868.957436][T20166] RAX: ffffffff84274001 RBX: 1ffff920009f3fc7 RCX: 0000000000001480 [ 868.965420][T20166] RDX: 0000000000000000 RSI: ffff88802ea7eb80 RDI: 0000200000009000 [ 868.973404][T20166] RBP: ffffc90004f9f5e8 R08: ffff88802ea7ffff R09: 1ffff11005d4ffff [ 868.981389][T20166] R10: dffffc0000000000 R11: ffffed1005d50000 R12: ffff88802ea78000 [ 868.989370][T20166] R13: 0000000000008000 R14: 0000000000008000 R15: ffffc90004f9fe48 [ 868.997392][T20166] ? _copy_to_iter+0x221/0x1120 [ 869.002271][T20166] _copy_to_iter+0x24f/0x1120 [ 869.006967][T20166] ? __mutex_trylock_common+0x159/0x260 [ 869.012533][T20166] ? __virt_addr_valid+0x18c/0x540 [ 869.017666][T20166] ? iov_iter_init+0x1e0/0x1e0 [ 869.022450][T20166] ? __virt_addr_valid+0x18c/0x540 [ 869.027600][T20166] ? __virt_addr_valid+0x469/0x540 [ 869.032737][T20166] ? __phys_addr_symbol+0x2f/0x70 [ 869.037775][T20166] ? __check_object_size+0x506/0xa20 [ 869.043092][T20166] __skb_datagram_iter+0x2ff/0x780 [ 869.048224][T20166] ? skb_copy_datagram_iter+0x200/0x200 [ 869.053792][T20166] skb_copy_datagram_iter+0xb1/0x200 [ 869.059110][T20166] unix_stream_read_actor+0x6c/0xa0 [ 869.064331][T20166] unix_stream_read_generic+0xd69/0x2080 [ 869.070012][T20166] ? unix_stream_read_actor+0xa0/0xa0 [ 869.075399][T20166] ? wake_bit_function+0x200/0x200 [ 869.080540][T20166] ? aa_sk_perm+0x83c/0x970 [ 869.085182][T20166] unix_stream_recvmsg+0x169/0x1c0 [ 869.090342][T20166] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 869.095671][T20166] ? __lock_acquire+0x1273/0x7d40 [ 869.100720][T20166] ? __unix_stream_recvmsg+0x150/0x150 [ 869.106209][T20166] ? verify_lock_unused+0x140/0x140 [ 869.111430][T20166] ? aa_sock_msg_perm+0x94/0x150 [ 869.116484][T20166] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 869.122046][T20166] ? security_socket_recvmsg+0x89/0xb0 [ 869.127516][T20166] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 869.132825][T20166] ____sys_recvmsg+0x2ce/0x5e0 [ 869.137615][T20166] ? __sys_recvmsg_sock+0x50/0x50 [ 869.142696][T20166] ? import_iovec+0x73/0xa0 [ 869.147230][T20166] ___sys_recvmsg+0x216/0x590 [ 869.151935][T20166] ? __sys_recvmsg+0x2a0/0x2a0 [ 869.156722][T20166] ? ksys_write+0x1c4/0x260 [ 869.161252][T20166] ? __fget_files+0x43d/0x4b0 [ 869.165958][T20166] __x64_sys_recvmsg+0x20c/0x2e0 [ 869.170927][T20166] ? ___sys_recvmsg+0x590/0x590 [ 869.176017][T20166] ? lockdep_hardirqs_on+0x98/0x150 [ 869.181262][T20166] do_syscall_64+0x55/0xa0 [ 869.185711][T20166] ? clear_bhb_loop+0x40/0x90 [ 869.190411][T20166] ? clear_bhb_loop+0x40/0x90 [ 869.195113][T20166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.201025][T20166] RIP: 0033:0x7f3ea2d9c799 [ 869.205462][T20166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.225526][T20166] RSP: 002b:00007f3ea3c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 869.234062][T20166] RAX: ffffffffffffffda RBX: 00007f3ea3015fa0 RCX: 00007f3ea2d9c799 [ 869.242043][T20166] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000005 [ 869.250113][T20166] RBP: 00007f3ea3c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 869.258186][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.266338][T20166] R13: 00007f3ea3016038 R14: 00007f3ea3015fa0 R15: 00007ffc9e585ae8 [ 869.274339][T20166] [ 870.283261][T20210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'. [ 870.303157][T20210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'. [ 870.323267][T20210] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4572'. [ 870.593916][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.600295][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.756311][T20235] netlink: 'syz.2.4585': attribute type 10 has an invalid length. [ 871.780327][T20235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4585'. [ 871.807445][T20235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 871.974757][T20246] netlink: 'syz.2.4589': attribute type 10 has an invalid length. [ 871.993222][T20246] netlink: 'syz.2.4589': attribute type 19 has an invalid length. [ 872.001670][T20246] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.4589'. [ 872.169689][T20258] netlink: 'syz.2.4589': attribute type 10 has an invalid length. [ 872.222972][T20258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4589'. [ 872.252429][T20258] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 872.506105][T20259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4592'. [ 873.217682][T20268] bond0: (slave syz_tun): Releasing backup interface [ 873.273324][T20259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4592'. [ 873.282394][T20259] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4592'. [ 873.372638][T20282] FAULT_INJECTION: forcing a failure. [ 873.372638][T20282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.402969][T20282] CPU: 1 PID: 20282 Comm: syz.0.4597 Not tainted syzkaller #0 [ 873.410684][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.420864][T20282] Call Trace: [ 873.424246][T20282] [ 873.427206][T20282] dump_stack_lvl+0x18c/0x250 [ 873.431910][T20282] ? show_regs_print_info+0x20/0x20 [ 873.437142][T20282] ? load_image+0x400/0x400 [ 873.441664][T20282] ? __might_fault+0xaa/0x120 [ 873.446350][T20282] ? __lock_acquire+0x7d40/0x7d40 [ 873.451424][T20282] should_fail_ex+0x39d/0x4d0 [ 873.456124][T20282] _copy_from_user+0x2f/0xe0 [ 873.460881][T20282] __sys_bpf+0x23e/0x890 [ 873.465139][T20282] ? bpf_link_show_fdinfo+0x390/0x390 [ 873.470571][T20282] ? lock_chain_count+0x20/0x20 [ 873.475435][T20282] __x64_sys_bpf+0x7c/0x90 [ 873.480211][T20282] do_syscall_64+0x55/0xa0 [ 873.484641][T20282] ? clear_bhb_loop+0x40/0x90 [ 873.489351][T20282] ? clear_bhb_loop+0x40/0x90 [ 873.494129][T20282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.500118][T20282] RIP: 0033:0x7f5df559c799 [ 873.504545][T20282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.524165][T20282] RSP: 002b:00007f5df64bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 873.532621][T20282] RAX: ffffffffffffffda RBX: 00007f5df5815fa0 RCX: 00007f5df559c799 [ 873.540625][T20282] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 873.548618][T20282] RBP: 00007f5df64bf090 R08: 0000000000000000 R09: 0000000000000000 [ 873.556602][T20282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.564586][T20282] R13: 00007f5df5816038 R14: 00007f5df5815fa0 R15: 00007ffc6a216628 [ 873.572580][T20282] [ 873.644575][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 873.711284][T20289] FAULT_INJECTION: forcing a failure. [ 873.711284][T20289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.725605][T20289] CPU: 1 PID: 20289 Comm: syz.1.4602 Not tainted syzkaller #0 [ 873.733303][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.743476][T20289] Call Trace: [ 873.746818][T20289] [ 873.749763][T20289] dump_stack_lvl+0x18c/0x250 [ 873.754465][T20289] ? show_regs_print_info+0x20/0x20 [ 873.759692][T20289] ? load_image+0x400/0x400 [ 873.764307][T20289] ? __might_fault+0xaa/0x120 [ 873.769001][T20289] ? __lock_acquire+0x7d40/0x7d40 [ 873.774050][T20289] should_fail_ex+0x39d/0x4d0 [ 873.778751][T20289] _copy_from_user+0x2f/0xe0 [ 873.783382][T20289] ___sys_sendmsg+0x1c7/0x360 [ 873.788071][T20289] ? get_pid_task+0x20/0x1e0 [ 873.792679][T20289] ? __sys_sendmsg+0x2a0/0x2a0 [ 873.797485][T20289] ? __lock_acquire+0x7d40/0x7d40 [ 873.802625][T20289] __se_sys_sendmsg+0x1c2/0x2b0 [ 873.807500][T20289] ? __x64_sys_sendmsg+0x80/0x80 [ 873.812470][T20289] ? lockdep_hardirqs_on+0x98/0x150 [ 873.817706][T20289] do_syscall_64+0x55/0xa0 [ 873.822151][T20289] ? clear_bhb_loop+0x40/0x90 [ 873.827025][T20289] ? clear_bhb_loop+0x40/0x90 [ 873.831736][T20289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.837670][T20289] RIP: 0033:0x7f03bd39c799 [ 873.842120][T20289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.861850][T20289] RSP: 002b:00007f03be18d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.870285][T20289] RAX: ffffffffffffffda RBX: 00007f03bd615fa0 RCX: 00007f03bd39c799 [ 873.878376][T20289] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 873.886390][T20289] RBP: 00007f03be18d090 R08: 0000000000000000 R09: 0000000000000000 [ 873.894487][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.902667][T20289] R13: 00007f03bd616038 R14: 00007f03bd615fa0 R15: 00007fffe7a83a38 [ 873.910679][T20289] [ 874.397248][T20308] netlink: 'syz.0.4609': attribute type 33 has an invalid length. [ 874.489332][T20315] FAULT_INJECTION: forcing a failure. [ 874.489332][T20315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.502986][T20315] CPU: 1 PID: 20315 Comm: syz.2.4612 Not tainted syzkaller #0 [ 874.510656][T20315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.520747][T20315] Call Trace: [ 874.524054][T20315] [ 874.527003][T20315] dump_stack_lvl+0x18c/0x250 [ 874.531706][T20315] ? show_regs_print_info+0x20/0x20 [ 874.537005][T20315] ? load_image+0x400/0x400 [ 874.541533][T20315] ? __might_fault+0xaa/0x120 [ 874.546281][T20315] ? __lock_acquire+0x7d40/0x7d40 [ 874.551326][T20315] should_fail_ex+0x39d/0x4d0 [ 874.556036][T20315] _copy_from_user+0x2f/0xe0 [ 874.560734][T20315] ___sys_sendmsg+0x1c7/0x360 [ 874.565510][T20315] ? get_pid_task+0x20/0x1e0 [ 874.570127][T20315] ? __sys_sendmsg+0x2a0/0x2a0 [ 874.574920][T20315] ? __lock_acquire+0x7d40/0x7d40 [ 874.579979][T20315] __se_sys_sendmsg+0x1c2/0x2b0 [ 874.584929][T20315] ? __x64_sys_sendmsg+0x80/0x80 [ 874.589977][T20315] ? lockdep_hardirqs_on+0x98/0x150 [ 874.595192][T20315] do_syscall_64+0x55/0xa0 [ 874.599710][T20315] ? clear_bhb_loop+0x40/0x90 [ 874.604397][T20315] ? clear_bhb_loop+0x40/0x90 [ 874.609084][T20315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.615080][T20315] RIP: 0033:0x7f689999c799 [ 874.619505][T20315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.639209][T20315] RSP: 002b:00007f689a873028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.647688][T20315] RAX: ffffffffffffffda RBX: 00007f6899c15fa0 RCX: 00007f689999c799 [ 874.655671][T20315] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 874.663666][T20315] RBP: 00007f689a873090 R08: 0000000000000000 R09: 0000000000000000 [ 874.671676][T20315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.679763][T20315] R13: 00007f6899c16038 R14: 00007f6899c15fa0 R15: 00007fffcb227b98 [ 874.687965][T20315] [ 875.062209][T20332] FAULT_INJECTION: forcing a failure. [ 875.062209][T20332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.112804][T20332] CPU: 1 PID: 20332 Comm: syz.0.4619 Not tainted syzkaller #0 [ 875.120440][T20332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.130629][T20332] Call Trace: [ 875.133992][T20332] [ 875.136959][T20332] dump_stack_lvl+0x18c/0x250 [ 875.141698][T20332] ? show_regs_print_info+0x20/0x20 [ 875.147056][T20332] ? load_image+0x400/0x400 [ 875.151584][T20332] ? __might_fault+0xaa/0x120 [ 875.156297][T20332] ? __lock_acquire+0x7d40/0x7d40 [ 875.161447][T20332] should_fail_ex+0x39d/0x4d0 [ 875.166171][T20332] _copy_from_user+0x2f/0xe0 [ 875.170807][T20332] ___sys_sendmsg+0x1c7/0x360 [ 875.175640][T20332] ? get_pid_task+0x20/0x1e0 [ 875.180291][T20332] ? __sys_sendmsg+0x2a0/0x2a0 [ 875.185112][T20332] ? __lock_acquire+0x7d40/0x7d40 [ 875.190474][T20332] __se_sys_sendmsg+0x1c2/0x2b0 [ 875.195350][T20332] ? __x64_sys_sendmsg+0x80/0x80 [ 875.200332][T20332] ? lockdep_hardirqs_on+0x98/0x150 [ 875.205651][T20332] do_syscall_64+0x55/0xa0 [ 875.210091][T20332] ? clear_bhb_loop+0x40/0x90 [ 875.214791][T20332] ? clear_bhb_loop+0x40/0x90 [ 875.219492][T20332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.225410][T20332] RIP: 0033:0x7f5df559c799 [ 875.229954][T20332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.249597][T20332] RSP: 002b:00007f5df64bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.258140][T20332] RAX: ffffffffffffffda RBX: 00007f5df5815fa0 RCX: 00007f5df559c799 [ 875.266140][T20332] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 875.274148][T20332] RBP: 00007f5df64bf090 R08: 0000000000000000 R09: 0000000000000000 [ 875.282169][T20332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.290168][T20332] R13: 00007f5df5816038 R14: 00007f5df5815fa0 R15: 00007ffc6a216628 [ 875.298201][T20332] [ 875.319317][T20336] netlink: 'syz.1.4622': attribute type 22 has an invalid length. [ 875.332218][T20337] netlink: 'syz.2.4621': attribute type 33 has an invalid length. [ 875.343509][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 875.430173][T20341] netlink: 'syz.0.4624': attribute type 58 has an invalid length. [ 875.452886][T20341] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4624'. [ 875.484297][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4625'. [ 875.493740][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4625'. [ 875.505943][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4625'. [ 875.516830][T20343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4625'. [ 875.528317][T20343] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4625'. [ 875.786665][T20359] FAULT_INJECTION: forcing a failure. [ 875.786665][T20359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.800262][T20359] CPU: 0 PID: 20359 Comm: syz.0.4631 Not tainted syzkaller #0 [ 875.807849][T20359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.817949][T20359] Call Trace: [ 875.821267][T20359] [ 875.824239][T20359] dump_stack_lvl+0x18c/0x250 [ 875.829021][T20359] ? show_regs_print_info+0x20/0x20 [ 875.834352][T20359] ? load_image+0x400/0x400 [ 875.839070][T20359] ? __might_fault+0xaa/0x120 [ 875.843782][T20359] ? __lock_acquire+0x7d40/0x7d40 [ 875.848940][T20359] should_fail_ex+0x39d/0x4d0 [ 875.853846][T20359] _copy_from_user+0x2f/0xe0 [ 875.858508][T20359] __sys_bpf+0x23e/0x890 [ 875.862791][T20359] ? bpf_link_show_fdinfo+0x390/0x390 [ 875.868225][T20359] ? lock_chain_count+0x20/0x20 [ 875.873118][T20359] __x64_sys_bpf+0x7c/0x90 [ 875.877600][T20359] do_syscall_64+0x55/0xa0 [ 875.882069][T20359] ? clear_bhb_loop+0x40/0x90 [ 875.886789][T20359] ? clear_bhb_loop+0x40/0x90 [ 875.891488][T20359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.897424][T20359] RIP: 0033:0x7f5df559c799 [ 875.902034][T20359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.921658][T20359] RSP: 002b:00007f5df64bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 875.930177][T20359] RAX: ffffffffffffffda RBX: 00007f5df5815fa0 RCX: 00007f5df559c799 [ 875.938160][T20359] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 875.946156][T20359] RBP: 00007f5df64bf090 R08: 0000000000000000 R09: 0000000000000000 [ 875.954219][T20359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.962284][T20359] R13: 00007f5df5816038 R14: 00007f5df5815fa0 R15: 00007ffc6a216628 [ 875.970274][T20359] [ 876.106847][T20364] netlink: 'syz.0.4633': attribute type 1 has an invalid length. [ 876.192056][T20366] netlink: 'syz.1.4634': attribute type 33 has an invalid length. [ 877.023237][T20382] netlink: 'syz.1.4641': attribute type 6 has an invalid length. [ 877.297151][T20389] netlink: 'syz.1.4644': attribute type 33 has an invalid length. [ 878.627044][T20409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.636334][T20409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.644515][T20409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.652236][T20409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.885253][T20413] __nla_validate_parse: 5 callbacks suppressed [ 878.885286][T20413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4652'. [ 878.901548][T20413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4652'. [ 878.912847][T20413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4652'. [ 878.923838][T20413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4652'. [ 879.109808][T20423] netlink: 'syz.0.4656': attribute type 6 has an invalid length. [ 879.118855][T20423] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4656'. [ 879.226358][T20427] sit0: left promiscuous mode [ 879.450971][T20436] netlink: 'syz.0.4660': attribute type 3 has an invalid length. [ 879.461938][T20436] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.4660'. [ 879.479954][T20436] netlink: 'syz.0.4660': attribute type 10 has an invalid length. [ 879.488581][T20436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4660'. [ 879.522261][T20436] netlink: 'syz.0.4660': attribute type 12 has an invalid length. [ 879.532251][T20436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4660'. [ 880.067439][T20448] netlink: 'syz.0.4665': attribute type 33 has an invalid length. [ 880.091691][T20452] FAULT_INJECTION: forcing a failure. [ 880.091691][T20452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.109646][T20452] CPU: 0 PID: 20452 Comm: syz.1.4667 Not tainted syzkaller #0 [ 880.117182][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.127262][T20452] Call Trace: [ 880.130561][T20452] [ 880.133511][T20452] dump_stack_lvl+0x18c/0x250 [ 880.138216][T20452] ? show_regs_print_info+0x20/0x20 [ 880.143466][T20452] ? load_image+0x400/0x400 [ 880.147998][T20452] ? __might_fault+0xaa/0x120 [ 880.152701][T20452] ? __lock_acquire+0x7d40/0x7d40 [ 880.157748][T20452] should_fail_ex+0x39d/0x4d0 [ 880.162567][T20452] _copy_from_iter+0x1d9/0x12e0 [ 880.167468][T20452] ? __virt_addr_valid+0x18c/0x540 [ 880.172615][T20452] ? __lock_acquire+0x7d40/0x7d40 [ 880.177677][T20452] ? rcu_is_watching+0x15/0xb0 [ 880.182468][T20452] ? copyout_mc+0x70/0x70 [ 880.186816][T20452] ? __virt_addr_valid+0x18c/0x540 [ 880.191944][T20452] ? __virt_addr_valid+0x18c/0x540 [ 880.197083][T20452] ? __virt_addr_valid+0x469/0x540 [ 880.202213][T20452] ? __check_object_size+0x506/0xa20 [ 880.207518][T20452] kcm_sendmsg+0xd95/0x28b0 [ 880.212079][T20452] ? kcm_getsockopt+0x280/0x280 [ 880.217098][T20452] ? aa_sock_msg_perm+0x94/0x150 [ 880.222080][T20452] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 880.227426][T20452] ? security_socket_sendmsg+0x80/0xa0 [ 880.232911][T20452] ? kcm_getsockopt+0x280/0x280 [ 880.237815][T20452] ____sys_sendmsg+0x5ba/0x960 [ 880.242600][T20452] ? __asan_memset+0x22/0x40 [ 880.247293][T20452] ? __sys_sendmsg_sock+0x30/0x30 [ 880.252326][T20452] ? __import_iovec+0x5f2/0x850 [ 880.257225][T20452] ? import_iovec+0x73/0xa0 [ 880.261743][T20452] ___sys_sendmsg+0x2a6/0x360 [ 880.266463][T20452] ? __sys_sendmsg+0x2a0/0x2a0 [ 880.271258][T20452] ? __lock_acquire+0x7d40/0x7d40 [ 880.276326][T20452] __se_sys_sendmsg+0x1c2/0x2b0 [ 880.281190][T20452] ? __x64_sys_sendmsg+0x80/0x80 [ 880.286156][T20452] ? lockdep_hardirqs_on+0x98/0x150 [ 880.291545][T20452] do_syscall_64+0x55/0xa0 [ 880.295994][T20452] ? clear_bhb_loop+0x40/0x90 [ 880.300825][T20452] ? clear_bhb_loop+0x40/0x90 [ 880.305520][T20452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.311428][T20452] RIP: 0033:0x7f03bd39c799 [ 880.315860][T20452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.335564][T20452] RSP: 002b:00007f03bb5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.344014][T20452] RAX: ffffffffffffffda RBX: 00007f03bd616090 RCX: 00007f03bd39c799 [ 880.351998][T20452] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000006 [ 880.360097][T20452] RBP: 00007f03bb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.368079][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.376058][T20452] R13: 00007f03bd616128 R14: 00007f03bd616090 R15: 00007fffe7a83a38 [ 880.384061][T20452] [ 881.027815][T20470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4671'. [ 881.037200][T20470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4671'. [ 881.098026][T20466] netlink: 'syz.1.4670': attribute type 3 has an invalid length. [ 881.126606][T20466] netlink: 'syz.1.4670': attribute type 10 has an invalid length. [ 881.243990][T20466] netlink: 'syz.1.4670': attribute type 12 has an invalid length. [ 884.049502][T20504] netlink: 'syz.2.4684': attribute type 3 has an invalid length. [ 884.100819][T20504] __nla_validate_parse: 8 callbacks suppressed [ 884.100892][T20504] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.4684'. [ 884.140183][T20511] netlink: 'syz.2.4684': attribute type 10 has an invalid length. [ 884.150306][T20511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4684'. [ 884.256947][T20504] netlink: 'syz.2.4684': attribute type 12 has an invalid length. [ 884.268975][T20504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4684'. [ 884.746366][T20523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4690'. [ 884.776799][T20523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4690'. [ 884.793049][T20523] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4690'. [ 885.655474][T20528] aaaaaaaaaaaaaaa: entered promiscuous mode [ 885.874190][T20536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4701'. [ 885.891530][T20537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4691'. [ 885.923240][T20537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4691'. [ 885.983080][T20537] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4691'. [ 888.774584][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 888.789747][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 888.800407][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 888.811378][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 888.838163][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 888.852489][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 889.822118][T20571] chnl_net:caif_netlink_parms(): no params data found [ 890.541257][T20571] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.549088][T20571] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.557694][T20571] bridge_slave_0: entered allmulticast mode [ 890.575123][T20571] bridge_slave_0: entered promiscuous mode [ 890.594943][T20571] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.652801][T20571] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.713075][T20571] bridge_slave_1: entered allmulticast mode [ 890.720899][T20571] bridge_slave_1: entered promiscuous mode [ 890.768053][T20571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.804714][T20571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.870128][T20571] team0: Port device team_slave_0 added [ 890.889522][T20571] team0: Port device team_slave_1 added [ 890.933359][ T51] Bluetooth: hci4: command tx timeout [ 891.006305][T20571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.052653][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.104648][T20571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.119478][T20571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.133471][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.163193][T20571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.238682][T20571] hsr_slave_0: entered promiscuous mode [ 891.270068][T20571] hsr_slave_1: entered promiscuous mode [ 891.278733][T20571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 891.288017][T20571] Cannot create hsr debugfs directory [ 891.346259][T20609] __nla_validate_parse: 2 callbacks suppressed [ 891.346278][T20609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4715'. [ 891.662520][T20622] netlink: 'syz.0.4718': attribute type 10 has an invalid length. [ 892.605737][T20571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 892.649056][T20571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 892.679686][T20571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 892.707995][T20571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 893.015095][ T51] Bluetooth: hci4: command tx timeout [ 893.034805][T20571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.096309][T20571] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.146858][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.154211][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.191194][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.198497][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.226050][T20640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4724'. [ 893.498447][T20650] netlink: 'syz.1.4727': attribute type 10 has an invalid length. [ 893.543612][T20650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4727'. [ 893.581872][T20650] team0: entered promiscuous mode [ 893.603313][T20650] C: entered promiscuous mode [ 893.608407][T20650] team_slave_1: entered promiscuous mode [ 893.623255][T20650] geneve1: entered promiscuous mode [ 893.628802][T20650] bond0: entered promiscuous mode [ 893.672262][T20650] bond_slave_0: entered promiscuous mode [ 893.693072][T20650] bond_slave_1: entered promiscuous mode [ 893.699292][T20650] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 893.744623][T20650] dummy0: entered promiscuous mode [ 893.789725][T20650] team0: entered allmulticast mode [ 893.890531][T20650] C: entered allmulticast mode [ 893.912804][T20650] team_slave_1: entered allmulticast mode [ 893.918716][T20650] geneve1: entered allmulticast mode [ 893.933089][T20650] bond0: entered allmulticast mode [ 893.943488][T20650] bond_slave_0: entered allmulticast mode [ 893.956156][T20650] bond_slave_1: entered allmulticast mode [ 893.968550][T20650] dummy0: entered allmulticast mode [ 894.003666][T20650] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 894.246313][T20645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.296970][T20571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.630749][T20681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4736'. [ 894.760466][T20684] netlink: 'syz.1.4737': attribute type 10 has an invalid length. [ 894.813900][T20571] veth0_vlan: entered promiscuous mode [ 894.843430][T20571] veth1_vlan: entered promiscuous mode [ 894.919701][T20571] veth0_macvtap: entered promiscuous mode [ 894.956346][T20571] veth1_macvtap: entered promiscuous mode [ 895.003981][T20697] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4741'. [ 895.057931][T20571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.083611][T20571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.093592][ T51] Bluetooth: hci4: command tx timeout [ 895.109594][T20571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.126672][T20571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.147534][T20571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.166956][T20571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.579173][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.635752][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.660167][T20709] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4745'. [ 895.758387][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.767698][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.176049][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.178819][ T51] Bluetooth: hci4: command tx timeout [ 899.318442][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 899.926024][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 899.935633][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 899.964837][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 899.978113][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.993020][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 900.003778][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 900.019060][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 900.177513][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.312262][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 900.328464][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.633543][T20755] netlink: 'syz.4.4758': attribute type 10 has an invalid length. [ 900.691252][T20755] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 900.731441][T20753] netlink: 'syz.2.4757': attribute type 10 has an invalid length. [ 900.759638][T20753] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4757'. [ 900.792893][T20753] batadv_slave_1: entered promiscuous mode [ 901.296551][T20740] chnl_net:caif_netlink_parms(): no params data found [ 901.334940][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4763'. [ 901.469662][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4763'. [ 901.495818][T20774] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4763'. [ 902.133585][ T51] Bluetooth: hci1: command tx timeout [ 902.674402][T20803] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4767'. [ 902.889574][T20809] netlink: 'syz.4.4769': attribute type 10 has an invalid length. [ 902.910233][T20809] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4769'. [ 902.931947][T20809] batadv_slave_1: entered promiscuous mode [ 902.947056][T20809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.956388][T20809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.969940][T20740] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.979623][T20740] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.987095][T20740] bridge_slave_0: entered allmulticast mode [ 903.008109][T20740] bridge_slave_0: entered promiscuous mode [ 903.079420][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.088638][T20740] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.113005][T20740] bridge_slave_1: entered allmulticast mode [ 903.132879][T20740] bridge_slave_1: entered promiscuous mode [ 903.190527][T20814] netlink: 'syz.4.4770': attribute type 10 has an invalid length. [ 903.220082][T20814] hsr0: entered promiscuous mode [ 903.228625][T20816] can: request_module (can-proto-5) failed. [ 903.268836][T20814] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 903.283038][T20814] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 903.313671][T20814] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 903.330526][T20814] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 903.546701][T20740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.573812][T20832] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4773'. [ 903.609911][T20740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.034553][T20740] team0: Port device team_slave_0 added [ 904.081817][T20740] team0: Port device team_slave_1 added [ 904.216005][ T51] Bluetooth: hci1: command tx timeout [ 904.328473][T20740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.419078][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.643712][T20740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.885837][T20855] netlink: 'syz.1.4776': attribute type 11 has an invalid length. [ 904.915637][T20855] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.4776'. [ 905.487222][T20846] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4776'. [ 905.544271][T20740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.551268][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.578394][T20740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.855291][T20740] hsr_slave_0: entered promiscuous mode [ 905.862177][T20740] hsr_slave_1: entered promiscuous mode [ 905.874087][T20740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.891894][T20740] Cannot create hsr debugfs directory [ 905.988243][T20868] netlink: 'syz.1.4778': attribute type 10 has an invalid length. [ 906.063522][T20868] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4778'. [ 906.090053][T20868] batadv_slave_1: entered promiscuous mode [ 906.304811][ T51] Bluetooth: hci1: command tx timeout [ 906.372416][T20886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4783'. [ 906.828817][T20895] netlink: 'syz.1.4784': attribute type 28 has an invalid length. [ 906.843854][T20895] netlink: 'syz.1.4784': attribute type 29 has an invalid length. [ 906.877979][T20895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4784'. [ 907.135097][T20886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4783'. [ 907.169764][T20886] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4783'. [ 907.439099][ T49] bond0: (slave .3ãc¤±): Releasing backup interface [ 907.693049][ T49] hsr_slave_0: left promiscuous mode [ 907.699501][ T49] hsr_slave_1: left promiscuous mode [ 907.765056][ T49] veth1_macvtap: left promiscuous mode [ 907.771067][ T49] veth0_macvtap: left promiscuous mode [ 907.778644][ T49] veth1_vlan: left promiscuous mode [ 907.785808][ T49] veth0_vlan: left promiscuous mode [ 908.377809][ T51] Bluetooth: hci1: command tx timeout [ 909.986024][T20934] netlink: 'syz.2.4787': attribute type 11 has an invalid length. [ 910.012339][T20934] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4787'. [ 910.635243][ T49] team0 (unregistering): Port device geneve1 removed [ 911.085333][ T49] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 911.143940][ T49] team0 (unregistering): Port device team_slave_1 removed [ 911.192066][ T49] team0 (unregistering): Port device team_slave_0 removed [ 911.245936][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.309136][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.383593][ T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 911.728411][ T49] bond0 (unregistering): Released all slaves [ 911.830357][T20926] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4787'. [ 911.898761][T20945] netlink: 'syz.1.4791': attribute type 10 has an invalid length. [ 911.908857][T20945] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 911.919657][T20945] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 911.943115][T20945] team0: Port device wlan1 removed [ 912.228699][T20959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4793'. [ 912.280456][T20959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4793'. [ 912.297208][T20959] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4793'. [ 912.577876][T20963] FAULT_INJECTION: forcing a failure. [ 912.577876][T20963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.609111][T20963] CPU: 0 PID: 20963 Comm: syz.4.4794 Not tainted syzkaller #0 [ 912.616637][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.626728][T20963] Call Trace: [ 912.630050][T20963] [ 912.633017][T20963] dump_stack_lvl+0x18c/0x250 [ 912.637751][T20963] ? show_regs_print_info+0x20/0x20 [ 912.642990][T20963] ? load_image+0x400/0x400 [ 912.647530][T20963] ? __might_fault+0xaa/0x120 [ 912.652247][T20963] ? __lock_acquire+0x7d40/0x7d40 [ 912.657326][T20963] should_fail_ex+0x39d/0x4d0 [ 912.662061][T20963] _copy_from_user+0x2f/0xe0 [ 912.666819][T20963] bpf_prog_test_run_xdp+0xd77/0x10e0 [ 912.672331][T20963] ? dev_put+0x80/0x80 [ 912.676450][T20963] ? dev_put+0x80/0x80 [ 912.680749][T20963] bpf_prog_test_run+0x321/0x390 [ 912.685729][T20963] __sys_bpf+0x49d/0x890 [ 912.690013][T20963] ? bpf_link_show_fdinfo+0x390/0x390 [ 912.695531][T20963] ? lock_chain_count+0x20/0x20 [ 912.700423][T20963] __x64_sys_bpf+0x7c/0x90 [ 912.704891][T20963] do_syscall_64+0x55/0xa0 [ 912.709352][T20963] ? clear_bhb_loop+0x40/0x90 [ 912.714059][T20963] ? clear_bhb_loop+0x40/0x90 [ 912.718789][T20963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.724725][T20963] RIP: 0033:0x7f13a399c799 [ 912.729177][T20963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.749079][T20963] RSP: 002b:00007f13a4858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 912.757534][T20963] RAX: ffffffffffffffda RBX: 00007f13a3c15fa0 RCX: 00007f13a399c799 [ 912.765530][T20963] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 912.773616][T20963] RBP: 00007f13a4858090 R08: 0000000000000000 R09: 0000000000000000 [ 912.781615][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.789611][T20963] R13: 00007f13a3c16038 R14: 00007f13a3c15fa0 R15: 00007ffcb84d1ba8 [ 912.797629][T20963] [ 913.402256][T20740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.464341][T20740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.487484][T20740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.551590][T20740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.793690][T20994] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4801'. [ 914.090259][T20997] netlink: 'syz.4.4801': attribute type 11 has an invalid length. [ 914.120454][T20740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.166566][T20997] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4801'. [ 914.244488][T20740] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.334488][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.341720][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.432348][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.439640][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.452572][T20740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.909313][T20740] veth0_vlan: entered promiscuous mode [ 915.995640][T20740] veth1_vlan: entered promiscuous mode [ 916.028129][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4806'. [ 916.088106][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4806'. [ 916.120693][T21025] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4806'. [ 916.207218][T20740] veth0_macvtap: entered promiscuous mode [ 916.258547][T20740] veth1_macvtap: entered promiscuous mode [ 916.349843][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.445187][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.471576][T20740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.546845][T20740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.611497][T20740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.659350][T20740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.699986][T20740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.737295][T20740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.960096][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.982387][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.054252][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.073461][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.294807][T21066] netlink: 'syz.0.4748': attribute type 10 has an invalid length. [ 917.325098][T21066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4748'. [ 917.343123][T21066] team0: entered promiscuous mode [ 917.358234][T21066] team_slave_0: entered promiscuous mode [ 917.381125][T21066] team_slave_1: entered promiscuous mode [ 917.400285][T21066] team0: entered allmulticast mode [ 917.422894][T21066] team_slave_0: entered allmulticast mode [ 917.447044][T21066] team_slave_1: entered allmulticast mode [ 917.467049][T21066] bridge0: port 3(team0) entered blocking state [ 917.495561][T21066] bridge0: port 3(team0) entered disabled state [ 917.532449][T21066] bridge0: port 3(team0) entered blocking state [ 917.538993][T21066] bridge0: port 3(team0) entered forwarding state [ 917.787513][T21078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4815'. [ 918.498000][T21088] netlink: 'syz.4.4818': attribute type 33 has an invalid length. [ 919.301250][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 919.324676][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 919.346654][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 919.370601][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 919.380054][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 919.392580][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 921.493322][ T51] Bluetooth: hci3: command tx timeout [ 921.952856][T21121] netlink: 'syz.4.4824': attribute type 10 has an invalid length. [ 921.961026][T21121] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 921.984720][T21121] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 922.005483][T21121] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 922.038744][T21121] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 922.118835][T21125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4826'. [ 922.254490][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.710058][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.136778][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.575796][ T51] Bluetooth: hci3: command tx timeout [ 923.888668][T21105] chnl_net:caif_netlink_parms(): no params data found [ 924.201004][ T70] tipc: Left network mode [ 924.245821][T21180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4835'. [ 924.379274][T21105] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.406216][T21105] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.448197][T21105] bridge_slave_0: entered allmulticast mode [ 924.484368][T21105] bridge_slave_0: entered promiscuous mode [ 924.680545][T21105] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.694356][T21105] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.701778][T21105] bridge_slave_1: entered allmulticast mode [ 924.717405][T21105] bridge_slave_1: entered promiscuous mode [ 924.869540][T21105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.900846][T21194] FAULT_INJECTION: forcing a failure. [ 924.900846][T21194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.902089][T21105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.957873][T21194] CPU: 1 PID: 21194 Comm: syz.1.4838 Not tainted syzkaller #0 [ 924.965419][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 924.975743][T21194] Call Trace: [ 924.979028][T21194] [ 924.981957][T21194] dump_stack_lvl+0x18c/0x250 [ 924.986641][T21194] ? show_regs_print_info+0x20/0x20 [ 924.991841][T21194] ? load_image+0x400/0x400 [ 924.996343][T21194] ? __might_fault+0xaa/0x120 [ 925.001019][T21194] ? __lock_acquire+0x7d40/0x7d40 [ 925.006044][T21194] ? tomoyo_path_number_perm+0x5b4/0x620 [ 925.011682][T21194] should_fail_ex+0x39d/0x4d0 [ 925.016476][T21194] _copy_from_user+0x2f/0xe0 [ 925.021117][T21194] wext_handle_ioctl+0xc8/0x1d0 [ 925.026018][T21194] ? call_commit_handler+0xf0/0xf0 [ 925.031279][T21194] sock_ioctl+0x15d/0x7e0 [ 925.035626][T21194] ? sock_poll+0x3e0/0x3e0 [ 925.040070][T21194] ? bpf_lsm_file_ioctl+0x9/0x10 [ 925.045022][T21194] ? security_file_ioctl+0x80/0xa0 [ 925.050147][T21194] ? sock_poll+0x3e0/0x3e0 [ 925.054572][T21194] __se_sys_ioctl+0xfd/0x170 [ 925.059185][T21194] do_syscall_64+0x55/0xa0 [ 925.063617][T21194] ? clear_bhb_loop+0x40/0x90 [ 925.068398][T21194] ? clear_bhb_loop+0x40/0x90 [ 925.073088][T21194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.078995][T21194] RIP: 0033:0x7f03bd39c799 [ 925.083430][T21194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.103149][T21194] RSP: 002b:00007f03be18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.111858][T21194] RAX: ffffffffffffffda RBX: 00007f03bd615fa0 RCX: 00007f03bd39c799 [ 925.119858][T21194] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 000000000000000a [ 925.127965][T21194] RBP: 00007f03be18d090 R08: 0000000000000000 R09: 0000000000000000 [ 925.136056][T21194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.144047][T21194] R13: 00007f03bd616038 R14: 00007f03bd615fa0 R15: 00007fffe7a83a38 [ 925.152198][T21194] [ 925.703111][ T51] Bluetooth: hci3: command tx timeout [ 925.731046][T21105] team0: Port device team_slave_0 added [ 926.179345][T21105] team0: Port device team_slave_1 added [ 926.350881][T21105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.359576][T21230] netlink: 'syz.4.4844': attribute type 3 has an invalid length. [ 926.369605][T21105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.371401][T21230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4844'. [ 926.412818][T21105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.455790][ T70] gretap0 (unregistering): left allmulticast mode [ 926.471148][ T70] gretap0 (unregistering): left promiscuous mode [ 926.479585][T21233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4846'. [ 926.489462][ T70] Ÿë: port 1(gretap0) entered disabled state [ 926.526902][T21105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.577082][T21105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.608270][T21105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.679923][T21229] netlink: 'syz.0.4845': attribute type 7 has an invalid length. [ 926.859146][T21105] hsr_slave_0: entered promiscuous mode [ 926.871679][T21105] hsr_slave_1: entered promiscuous mode [ 926.880520][T21105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.890450][T21105] Cannot create hsr debugfs directory [ 927.347636][T21249] netlink: 'syz.0.4848': attribute type 2 has an invalid length. [ 927.355543][T21249] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4848'. [ 927.367396][T21255] netlink: 'syz.1.4849': attribute type 39 has an invalid length. [ 927.733225][ T51] Bluetooth: hci3: command tx timeout [ 928.231868][T21285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4854'. [ 928.246692][T21287] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4855'. [ 928.411772][ T70] bond0: (slave wlan1): Releasing backup interface [ 928.592917][T21298] C: renamed from team_slave_0 (while UP) [ 928.663990][T21298] netlink: 'syz.0.4857': attribute type 8 has an invalid length. [ 928.683559][T21298] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 929.051909][T21303] netlink: 'syz.4.4859': attribute type 10 has an invalid length. [ 929.091161][ T70] veth0_to_team: left allmulticast mode [ 929.112149][ T70] veth0_to_team: left promiscuous mode [ 929.143437][ T70] Ÿë: port 2(veth0_to_team) entered disabled state [ 929.270138][ T70] hsr_slave_0: left promiscuous mode [ 929.284335][ T70] hsr_slave_1: left promiscuous mode [ 929.329550][ T70] veth1_macvtap: left promiscuous mode [ 929.344426][ T70] veth0_macvtap: left promiscuous mode [ 929.352296][ T70] veth1_vlan: left promiscuous mode [ 929.360914][ T70] veth0_vlan: left promiscuous mode [ 929.916554][ T70] team0 (unregistering): Port device geneve1 removed [ 929.947418][T21308] delete_channel: no stack [ 930.418129][ T70] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 930.469502][ T70] team0 (unregistering): Port device team_slave_1 removed [ 930.520520][ T70] team0 (unregistering): Port device team_slave_0 removed [ 930.568796][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.632594][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.995016][ T70] bond0 (unregistering): Released all slaves [ 931.039392][T21309] netlink: 'syz.1.4860': attribute type 10 has an invalid length. [ 931.077648][T21309] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 931.109967][T21309] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 931.123732][T21309] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 931.467114][T21329] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4866'. [ 931.516529][T21105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 931.617263][T21105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 931.674586][T21105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 931.696411][T21105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 931.897622][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.905722][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.998314][T21105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.072083][T21105] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.111959][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.119200][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.164409][T21350] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4869'. [ 932.210513][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.217752][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.234387][T21354] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4870'. [ 932.270505][T21354] netlink: 'syz.0.4870': attribute type 22 has an invalid length. [ 932.285341][T21354] netlink: 14565 bytes leftover after parsing attributes in process `syz.0.4870'. [ 933.177601][T21105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.728078][T21393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4875'. [ 935.924062][T21399] netlink: 'syz.4.4877': attribute type 4 has an invalid length. [ 935.927072][T21105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.939333][T21399] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4877'. [ 936.062276][T21399] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4877'. [ 936.099173][T21105] veth0_vlan: entered promiscuous mode [ 936.137128][T21105] veth1_vlan: entered promiscuous mode [ 936.195060][T21105] veth0_macvtap: entered promiscuous mode [ 936.227738][T21105] veth1_macvtap: entered promiscuous mode [ 936.264580][T21407] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.4880'. [ 936.313355][T21105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.339763][T21105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.362837][T21105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.384389][T21105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.401743][T21105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.417711][T21105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.428462][T21105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.458297][T21105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.529371][T21105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.585343][T21105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.632811][T21105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.669812][T21105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.718328][T21412] IPv6: Can't replace route, no match found [ 937.109312][T21417] syzkaller0: entered promiscuous mode [ 937.118815][T21417] syzkaller0: entered allmulticast mode [ 937.432479][T21427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4887'. [ 939.642437][T21438] netlink: 'syz.4.4890': attribute type 1 has an invalid length. [ 939.657121][T21438] netlink: 'syz.4.4890': attribute type 4 has an invalid length. [ 939.668312][T21438] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4890'. [ 939.756684][T21435] syzkaller0: entered promiscuous mode [ 939.762588][T21435] syzkaller0: entered allmulticast mode [ 939.771821][T21440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4890'. [ 939.848568][T21446] netlink: 'syz.1.4891': attribute type 29 has an invalid length. [ 939.952854][T21445] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4891'. [ 943.565100][T21444] netlink: 'syz.1.4891': attribute type 11 has an invalid length. [ 943.576511][T21446] netlink: 'syz.1.4891': attribute type 29 has an invalid length. [ 943.598232][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.643155][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.728881][T21473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4898'. [ 943.765071][T21292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.775106][T21292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.900073][T21478] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4900'. [ 944.302883][T21488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4817'. [ 944.483674][T21488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4817'. [ 944.620295][T21488] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4817'. [ 945.309697][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 945.320981][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 945.329424][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 945.340127][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 945.388751][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 945.397591][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 946.101629][T21516] netlink: 'syz.4.4910': attribute type 33 has an invalid length. [ 947.274882][T21530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4914'. [ 947.506554][ T5781] Bluetooth: hci5: command tx timeout [ 948.509909][T21523] syzkaller0: entered promiscuous mode [ 948.515529][T21523] syzkaller0: entered allmulticast mode [ 948.592106][ T2881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.036808][T21547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4918'. [ 949.220305][T21549] netlink: 'syz.0.4919': attribute type 33 has an invalid length. [ 949.583897][ T5781] Bluetooth: hci5: command tx timeout [ 950.952583][T21557] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4922'. [ 951.667303][ T5781] Bluetooth: hci5: command tx timeout [ 952.195138][ T2881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.225163][T21547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4918'. [ 952.234399][T21547] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4918'. [ 952.362460][ T2881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.531688][ T2881] bond0: (slave netdevsim0): Releasing backup interface [ 952.650937][ T2881] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 952.708579][ T2881] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 952.757213][ T2881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.784578][T21571] netlink: 'syz.2.4927': attribute type 33 has an invalid length. [ 953.398321][T21502] chnl_net:caif_netlink_parms(): no params data found [ 953.408266][T21592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4931'. [ 953.458362][T21592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4931'. [ 953.502082][T21592] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4931'. [ 953.579795][T21595] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4932'. [ 953.733794][ T5781] Bluetooth: hci5: command tx timeout [ 954.443037][T21502] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.450257][T21502] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.493160][T21502] bridge_slave_0: entered allmulticast mode [ 954.514171][T21502] bridge_slave_0: entered promiscuous mode [ 954.541861][T21502] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.573724][T21502] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.603119][T21502] bridge_slave_1: entered allmulticast mode [ 954.658278][T21502] bridge_slave_1: entered promiscuous mode [ 954.789796][T21626] netlink: 'syz.0.4937': attribute type 33 has an invalid length. [ 955.030771][T21502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.102974][T21502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.587812][T21638] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4940'. [ 955.840463][T21502] team0: Port device team_slave_0 added [ 955.894138][T21502] team0: Port device team_slave_1 added [ 956.023638][T21502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.029793][T21660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4941'. [ 956.038166][T21502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.090381][T21661] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4943'. [ 956.139696][T21502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.183520][T21660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4941'. [ 956.223618][T21660] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4941'. [ 956.287453][ T2881] gretap0 (unregistering): left allmulticast mode [ 956.295081][ T2881] gretap0 (unregistering): left promiscuous mode [ 956.301620][ T2881] Ÿë: port 2(gretap0) entered disabled state [ 956.341917][T21502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.350014][T21502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.377282][T21502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.585735][T21672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4946'. [ 956.641643][T21502] hsr_slave_0: entered promiscuous mode [ 956.649003][T21502] hsr_slave_1: entered promiscuous mode [ 956.656088][T21502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.667512][T21502] Cannot create hsr debugfs directory [ 956.675545][T21672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4946'. [ 956.719285][T21674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4946'. [ 956.812543][T21675] netlink: 'syz.4.4947': attribute type 33 has an invalid length. [ 957.895672][T21698] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4953'. [ 958.657979][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4955'. [ 958.742306][T21716] netlink: 'syz.2.4956': attribute type 33 has an invalid length. [ 958.984515][T21502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 959.029222][T21502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 959.083691][T21502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 959.107967][T21502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 959.427789][ T2881] veth0_to_team: left allmulticast mode [ 959.443442][ T2881] veth0_to_team: left promiscuous mode [ 959.449914][ T2881] Ÿë: port 1(veth0_to_team) entered disabled state [ 959.662360][ T2881] hsr_slave_0: left promiscuous mode [ 959.706575][ T2881] veth1_macvtap: left promiscuous mode [ 959.712209][ T2881] veth0_macvtap: left promiscuous mode [ 960.042526][T21743] netlink: 'syz.4.4965': attribute type 33 has an invalid length. [ 960.549004][ T2881] geneve1 (unregistering): left promiscuous mode [ 960.561223][ T2881] geneve1 (unregistering): left allmulticast mode [ 960.581240][ T2881] team0 (unregistering): Port device geneve1 removed [ 961.685208][ T2881] team_slave_1 (unregistering): left promiscuous mode [ 961.692053][ T2881] team_slave_1 (unregistering): left allmulticast mode [ 961.701495][ T2881] team0 (unregistering): Port device team_slave_1 removed [ 961.790425][ T2881] C (unregistering): left promiscuous mode [ 961.797006][ T2881] C (unregistering): left allmulticast mode [ 961.805464][ T2881] team0 (unregistering): Port device C removed [ 961.854203][ T2881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.863903][ T2881] bond_slave_1 (unregistering): left promiscuous mode [ 961.870743][ T2881] bond_slave_1 (unregistering): left allmulticast mode [ 961.922357][ T2881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.937011][ T2881] bond_slave_0 (unregistering): left promiscuous mode [ 961.944242][ T2881] bond_slave_0 (unregistering): left allmulticast mode [ 962.270523][ T2881] dummy0 (unregistering): left promiscuous mode [ 962.279144][ T2881] dummy0 (unregistering): left allmulticast mode [ 962.287043][ T2881] team0 (unregistering): Port device dummy0 removed [ 962.320454][ T2881] bond0 (unregistering): left promiscuous mode [ 962.326964][ T2881] bond0 (unregistering): left allmulticast mode [ 962.336273][ T2881] team0 (unregistering): Port device bond0 removed [ 962.374985][ T2881] bond0 (unregistering): Released all slaves [ 962.430794][T21758] __nla_validate_parse: 4 callbacks suppressed [ 962.430814][T21758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4967'. [ 962.469491][T21758] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4967'. [ 962.481871][T21765] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.4971'. [ 962.727386][T21502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.811216][T21502] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.849014][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.856266][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.870643][T21773] netlink: 'syz.4.4974': attribute type 33 has an invalid length. [ 962.943318][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.950541][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.530602][T21502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.649260][T21502] veth0_vlan: entered promiscuous mode [ 963.753756][T21502] veth1_vlan: entered promiscuous mode [ 963.987816][T21502] veth0_macvtap: entered promiscuous mode [ 964.071899][T21502] veth1_macvtap: entered promiscuous mode [ 964.299129][T21502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.311770][T21502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.323226][T21502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.333961][T21502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.350259][T21502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.377037][T21502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.395563][T21815] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4980'. [ 964.406737][T21502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.469029][T21502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.523804][T21502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.545024][T21502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.572714][T21502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.594488][T21502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.008696][T21828] netlink: set zone limit has 8 unknown bytes [ 965.048251][T21502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.076852][T21502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.117383][T21502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.141007][T21502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.820883][T21291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.865426][T21291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.308451][T21291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.357981][T21291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.377669][T21842] FAULT_INJECTION: forcing a failure. [ 966.377669][T21842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.458100][T21842] CPU: 0 PID: 21842 Comm: syz.4.4984 Not tainted syzkaller #0 [ 966.465627][T21842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.475717][T21842] Call Trace: [ 966.479127][T21842] [ 966.482091][T21842] dump_stack_lvl+0x18c/0x250 [ 966.486821][T21842] ? show_regs_print_info+0x20/0x20 [ 966.492055][T21842] ? load_image+0x400/0x400 [ 966.496603][T21842] ? __might_fault+0xaa/0x120 [ 966.501408][T21842] ? __lock_acquire+0x7d40/0x7d40 [ 966.506478][T21842] should_fail_ex+0x39d/0x4d0 [ 966.511205][T21842] _copy_to_user+0x2f/0xa0 [ 966.515760][T21842] bpf_test_finish+0x4e7/0x650 [ 966.520572][T21842] ? convert___skb_to_skb+0x590/0x590 [ 966.525981][T21842] ? convert_skb_to___skb+0x420/0x420 [ 966.531398][T21842] ? slab_build_skb+0x25f/0x3f0 [ 966.536302][T21842] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 966.541746][T21842] ? cpu_online+0x60/0x60 [ 966.546118][T21842] bpf_prog_test_run+0x321/0x390 [ 966.551101][T21842] __sys_bpf+0x49d/0x890 [ 966.555391][T21842] ? bpf_link_show_fdinfo+0x390/0x390 [ 966.560823][T21842] ? lock_chain_count+0x20/0x20 [ 966.565720][T21842] __x64_sys_bpf+0x7c/0x90 [ 966.570175][T21842] do_syscall_64+0x55/0xa0 [ 966.574664][T21842] ? clear_bhb_loop+0x40/0x90 [ 966.579380][T21842] ? clear_bhb_loop+0x40/0x90 [ 966.584096][T21842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.590026][T21842] RIP: 0033:0x7f13a399c799 [ 966.594910][T21842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.614553][T21842] RSP: 002b:00007f13a4858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.623019][T21842] RAX: ffffffffffffffda RBX: 00007f13a3c15fa0 RCX: 00007f13a399c799 [ 966.631037][T21842] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 966.639046][T21842] RBP: 00007f13a4858090 R08: 0000000000000000 R09: 0000000000000000 [ 966.647053][T21842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.655061][T21842] R13: 00007f13a3c16038 R14: 00007f13a3c15fa0 R15: 00007ffcb84d1ba8 [ 966.663096][T21842] [ 966.857574][T21849] netlink: 'syz.0.4985': attribute type 33 has an invalid length. [ 967.506424][T21858] netlink: 'syz.1.4903': attribute type 10 has an invalid length. [ 967.598675][T21858] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.4903'. [ 968.225547][T21865] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4988'. [ 972.104245][T21916] netlink: 'syz.1.4996': attribute type 33 has an invalid length. [ 972.525953][T21930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5000'. [ 973.344967][T21953] FAULT_INJECTION: forcing a failure. [ 973.344967][T21953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.387202][T21959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5007'. [ 973.402841][T21953] CPU: 0 PID: 21953 Comm: syz.1.5006 Not tainted syzkaller #0 [ 973.410462][T21953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 973.411783][T21959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5007'. [ 973.420634][T21953] Call Trace: [ 973.420649][T21953] [ 973.420659][T21953] dump_stack_lvl+0x18c/0x250 [ 973.420696][T21953] ? show_regs_print_info+0x20/0x20 [ 973.420723][T21953] ? load_image+0x400/0x400 [ 973.450358][T21953] ? __might_fault+0xaa/0x120 [ 973.455072][T21953] ? __lock_acquire+0x7d40/0x7d40 [ 973.455661][T21959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5007'. [ 973.460208][T21953] should_fail_ex+0x39d/0x4d0 [ 973.460249][T21953] _copy_from_iter+0x1d9/0x12e0 [ 973.460281][T21953] ? slab_post_alloc_hook+0x8a/0x4b0 [ 973.460307][T21953] ? __virt_addr_valid+0x18c/0x540 [ 973.489262][T21953] ? __lock_acquire+0x7d40/0x7d40 [ 973.494343][T21953] ? rcu_is_watching+0x15/0xb0 [ 973.499164][T21953] ? copyout_mc+0x70/0x70 [ 973.503539][T21953] ? __virt_addr_valid+0x18c/0x540 [ 973.508700][T21953] ? __virt_addr_valid+0x18c/0x540 [ 973.513864][T21953] ? __virt_addr_valid+0x469/0x540 [ 973.519201][T21953] ? __check_object_size+0x506/0xa20 [ 973.524552][T21953] netlink_sendmsg+0x76b/0xbf0 [ 973.529371][T21953] ? netlink_getsockopt+0x590/0x590 [ 973.534599][T21953] ? aa_sock_msg_perm+0x94/0x150 [ 973.539563][T21953] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 973.545037][T21953] ? security_socket_sendmsg+0x80/0xa0 [ 973.550593][T21953] ? netlink_getsockopt+0x590/0x590 [ 973.555806][T21953] ____sys_sendmsg+0x5ba/0x960 [ 973.560587][T21953] ? __asan_memset+0x22/0x40 [ 973.565213][T21953] ? __sys_sendmsg_sock+0x30/0x30 [ 973.570262][T21953] ? __import_iovec+0x5f2/0x850 [ 973.575151][T21953] ? import_iovec+0x73/0xa0 [ 973.579676][T21953] ___sys_sendmsg+0x2a6/0x360 [ 973.584388][T21953] ? get_pid_task+0x20/0x1e0 [ 973.589007][T21953] ? __sys_sendmsg+0x2a0/0x2a0 [ 973.593979][T21953] ? __lock_acquire+0x7d40/0x7d40 [ 973.599252][T21953] __se_sys_sendmsg+0x1c2/0x2b0 [ 973.604210][T21953] ? __x64_sys_sendmsg+0x80/0x80 [ 973.609175][T21953] ? lockdep_hardirqs_on+0x98/0x150 [ 973.614392][T21953] do_syscall_64+0x55/0xa0 [ 973.618836][T21953] ? clear_bhb_loop+0x40/0x90 [ 973.623530][T21953] ? clear_bhb_loop+0x40/0x90 [ 973.628216][T21953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.634170][T21953] RIP: 0033:0x7f5d0939c799 [ 973.638596][T21953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.658296][T21953] RSP: 002b:00007f5d0a1dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.666731][T21953] RAX: ffffffffffffffda RBX: 00007f5d09615fa0 RCX: 00007f5d0939c799 [ 973.674715][T21953] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 973.682724][T21953] RBP: 00007f5d0a1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 973.690702][T21953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.698768][T21953] R13: 00007f5d09616038 R14: 00007f5d09615fa0 R15: 00007ffc7b2ec288 [ 973.706765][T21953] [ 974.821454][T21984] IPv6: Can't replace route, no match found [ 974.972841][T21971] netlink: 'syz.2.5009': attribute type 33 has an invalid length. [ 975.234695][T21987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5013'. [ 975.321755][T21992] FAULT_INJECTION: forcing a failure. [ 975.321755][T21992] name failslab, interval 1, probability 0, space 0, times 0 [ 975.361040][T21992] CPU: 0 PID: 21992 Comm: syz.0.5015 Not tainted syzkaller #0 [ 975.368584][T21992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.378685][T21992] Call Trace: [ 975.381995][T21992] [ 975.384971][T21992] dump_stack_lvl+0x18c/0x250 [ 975.389760][T21992] ? sctp_sendmsg+0x1575/0x28c0 [ 975.394655][T21992] ? ___sys_sendmsg+0x2a6/0x360 [ 975.399555][T21992] ? show_regs_print_info+0x20/0x20 [ 975.405027][T21992] ? load_image+0x400/0x400 [ 975.409600][T21992] should_fail_ex+0x39d/0x4d0 [ 975.414347][T21992] should_failslab+0x9/0x20 [ 975.418905][T21992] slab_pre_alloc_hook+0x59/0x310 [ 975.423991][T21992] ? sctp_add_bind_addr+0x8c/0x360 [ 975.429240][T21992] __kmem_cache_alloc_node+0x53/0x250 [ 975.434664][T21992] ? sctp_add_bind_addr+0x8c/0x360 [ 975.439819][T21992] kmalloc_trace+0x2a/0xe0 [ 975.444282][T21992] sctp_add_bind_addr+0x8c/0x360 [ 975.449260][T21992] sctp_copy_local_addr_list+0x315/0x4f0 [ 975.454940][T21992] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 975.460717][T21992] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 975.466841][T21992] ? sctp_v4_is_any+0x35/0x60 [ 975.471572][T21992] ? sctp_copy_one_addr+0x8c/0x350 [ 975.476927][T21992] sctp_bind_addr_copy+0xb3/0x3c0 [ 975.482010][T21992] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 975.488392][T21992] sctp_connect_new_asoc+0x2f9/0x6a0 [ 975.493759][T21992] ? __sctp_connect+0xd80/0xd80 [ 975.498675][T21992] ? __local_bh_enable_ip+0x13a/0x1c0 [ 975.504260][T21992] ? _local_bh_enable+0xa0/0xa0 [ 975.509146][T21992] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 975.515000][T21992] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 975.520859][T21992] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 975.526447][T21992] ? security_sctp_bind_connect+0x89/0xb0 [ 975.532300][T21992] sctp_sendmsg+0x1575/0x28c0 [ 975.537200][T21992] ? sctp_getsockopt+0xb60/0xb60 [ 975.542233][T21992] ? aa_sk_perm+0x83c/0x970 [ 975.546796][T21992] ? aa_af_perm+0x330/0x330 [ 975.551346][T21992] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 975.557803][T21992] ? sock_rps_record_flow+0x19/0x3f0 [ 975.563139][T21992] ? inet_sendmsg+0x7c/0x2f0 [ 975.567770][T21992] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 975.573105][T21992] ? security_socket_sendmsg+0x80/0xa0 [ 975.578605][T21992] ? inet_send_prepare+0x260/0x260 [ 975.583845][T21992] ____sys_sendmsg+0x5ba/0x960 [ 975.588731][T21992] ? __lock_acquire+0x7d40/0x7d40 [ 975.593889][T21992] ? __asan_memset+0x22/0x40 [ 975.598610][T21992] ? __sys_sendmsg_sock+0x30/0x30 [ 975.603771][T21992] ? __import_iovec+0x5f2/0x850 [ 975.608768][T21992] ? import_iovec+0x73/0xa0 [ 975.613393][T21992] ___sys_sendmsg+0x2a6/0x360 [ 975.618195][T21992] ? get_pid_task+0x20/0x1e0 [ 975.622918][T21992] ? __sys_sendmsg+0x2a0/0x2a0 [ 975.627843][T21992] ? __lock_acquire+0x7d40/0x7d40 [ 975.632969][T21992] __se_sys_sendmsg+0x1c2/0x2b0 [ 975.637866][T21992] ? __x64_sys_sendmsg+0x80/0x80 [ 975.642858][T21992] ? lockdep_hardirqs_on+0x98/0x150 [ 975.648106][T21992] do_syscall_64+0x55/0xa0 [ 975.652560][T21992] ? clear_bhb_loop+0x40/0x90 [ 975.657269][T21992] ? clear_bhb_loop+0x40/0x90 [ 975.661991][T21992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.667921][T21992] RIP: 0033:0x7f8c1d19c799 [ 975.672379][T21992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.692115][T21992] RSP: 002b:00007f8c1e0fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.700578][T21992] RAX: ffffffffffffffda RBX: 00007f8c1d416090 RCX: 00007f8c1d19c799 [ 975.708587][T21992] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 975.716764][T21992] RBP: 00007f8c1e0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 975.724767][T21992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.732785][T21992] R13: 00007f8c1d416128 R14: 00007f8c1d416090 R15: 00007fff8f45b678 [ 975.740908][T21992] [ 976.304114][T22007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5018'. [ 976.595145][T22015] FAULT_INJECTION: forcing a failure. [ 976.595145][T22015] name failslab, interval 1, probability 0, space 0, times 0 [ 976.614652][T22015] CPU: 0 PID: 22015 Comm: syz.2.5022 Not tainted syzkaller #0 [ 976.622173][T22015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.632277][T22015] Call Trace: [ 976.635615][T22015] [ 976.638573][T22015] dump_stack_lvl+0x18c/0x250 [ 976.643299][T22015] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 976.649932][T22015] ? show_regs_print_info+0x20/0x20 [ 976.655210][T22015] ? load_image+0x400/0x400 [ 976.659756][T22015] ? should_fail_ex+0x322/0x4d0 [ 976.664638][T22015] should_fail_ex+0x39d/0x4d0 [ 976.669378][T22015] should_failslab+0x9/0x20 [ 976.673934][T22015] slab_pre_alloc_hook+0x59/0x310 [ 976.679013][T22015] ? lockdep_hardirqs_on+0x98/0x150 [ 976.684269][T22015] kmem_cache_alloc+0x5a/0x2d0 [ 976.689120][T22015] ? dst_alloc+0x105/0x170 [ 976.693591][T22015] dst_alloc+0x105/0x170 [ 976.696076][T22020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5023'. [ 976.697954][T22015] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 976.697999][T22015] ? ip_route_output_key_hash+0x13d/0x330 [ 976.718945][T22015] ip_route_output_key_hash+0x1f3/0x330 [ 976.724544][T22015] ? ip_route_input_rcu+0x30f0/0x30f0 [ 976.729973][T22015] ? crng_make_state+0x350/0x700 [ 976.735056][T22015] ? lockdep_hardirqs_on+0x98/0x150 [ 976.740476][T22015] ip_route_output_flow+0x2a/0x150 [ 976.745640][T22015] sctp_v4_get_dst+0x400/0x1230 [ 976.750559][T22015] ? sctp_v4_xmit+0xde0/0xde0 [ 976.755292][T22015] ? _get_random_bytes+0x1e8/0x250 [ 976.760561][T22015] ? _raw_spin_unlock+0x40/0x40 [ 976.765475][T22015] ? dst_release+0x72/0x1a0 [ 976.770037][T22015] sctp_transport_route+0x10b/0x2c0 [ 976.775292][T22015] sctp_assoc_add_peer+0x650/0x1390 [ 976.780555][T22015] sctp_connect_new_asoc+0x323/0x6a0 [ 976.785893][T22015] ? __sctp_connect+0xd80/0xd80 [ 976.790794][T22015] ? _local_bh_enable+0xa0/0xa0 [ 976.795690][T22015] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 976.801541][T22015] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 976.807400][T22015] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 976.812998][T22015] ? security_sctp_bind_connect+0x89/0xb0 [ 976.818768][T22015] sctp_sendmsg+0x1575/0x28c0 [ 976.823502][T22015] ? sctp_getsockopt+0xb60/0xb60 [ 976.828495][T22015] ? lock_chain_count+0x20/0x20 [ 976.833410][T22015] ? inet_send_prepare+0x260/0x260 [ 976.838569][T22015] ? sock_rps_record_flow+0x19/0x3f0 [ 976.843900][T22015] ? inet_sendmsg+0x7c/0x2f0 [ 976.848533][T22015] ? inet_send_prepare+0x260/0x260 [ 976.853694][T22015] ____sys_sendmsg+0x5ba/0x960 [ 976.858509][T22015] ? __asan_memset+0x22/0x40 [ 976.863170][T22015] ? __sys_sendmsg_sock+0x30/0x30 [ 976.868327][T22015] ? __import_iovec+0x5f2/0x850 [ 976.873338][T22015] ? import_iovec+0x73/0xa0 [ 976.877999][T22015] ___sys_sendmsg+0x2a6/0x360 [ 976.882728][T22015] ? __sys_sendmsg+0x2a0/0x2a0 [ 976.887539][T22015] ? perf_trace_preemptirq_template+0x269/0x330 [ 976.894314][T22015] __se_sys_sendmsg+0x1c2/0x2b0 [ 976.899378][T22015] ? __x64_sys_sendmsg+0x80/0x80 [ 976.904372][T22015] ? lockdep_hardirqs_on+0x98/0x150 [ 976.909617][T22015] do_syscall_64+0x55/0xa0 [ 976.914088][T22015] ? clear_bhb_loop+0x40/0x90 [ 976.918870][T22015] ? clear_bhb_loop+0x40/0x90 [ 976.923610][T22015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.929582][T22015] RIP: 0033:0x7fc00d79c799 [ 976.934008][T22015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.953716][T22015] RSP: 002b:00007fc00e57c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.962151][T22015] RAX: ffffffffffffffda RBX: 00007fc00da15fa0 RCX: 00007fc00d79c799 [ 976.970143][T22015] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 976.978268][T22015] RBP: 00007fc00e57c090 R08: 0000000000000000 R09: 0000000000000000 [ 976.986455][T22015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.994463][T22015] R13: 00007fc00da16038 R14: 00007fc00da15fa0 R15: 00007ffe5ef885c8 [ 977.002489][T22015] [ 977.254440][T22025] netlink: 'syz.0.5024': attribute type 33 has an invalid length. [ 977.465209][T22032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5026'. [ 978.751053][T22058] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5035'. [ 978.965407][T22066] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5039'. [ 979.087483][T22070] netlink: 'syz.2.5037': attribute type 33 has an invalid length. [ 980.245062][T22103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5051'. [ 980.312021][T22099] netlink: 'syz.4.5050': attribute type 5 has an invalid length. [ 981.262292][T22116] FAULT_INJECTION: forcing a failure. [ 981.262292][T22116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.283116][T22116] CPU: 0 PID: 22116 Comm: syz.2.5054 Not tainted syzkaller #0 [ 981.290728][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.300920][T22116] Call Trace: [ 981.304348][T22116] [ 981.307409][T22116] dump_stack_lvl+0x18c/0x250 [ 981.312270][T22116] ? show_regs_print_info+0x20/0x20 [ 981.317647][T22116] ? load_image+0x400/0x400 [ 981.322424][T22116] ? __might_fault+0xaa/0x120 [ 981.327276][T22116] ? __lock_acquire+0x7d40/0x7d40 [ 981.332513][T22116] should_fail_ex+0x39d/0x4d0 [ 981.337419][T22116] _copy_from_user+0x2f/0xe0 [ 981.342191][T22116] __sys_bpf+0x23e/0x890 [ 981.346628][T22116] ? bpf_link_show_fdinfo+0x390/0x390 [ 981.352239][T22116] ? lock_chain_count+0x20/0x20 [ 981.357352][T22116] __x64_sys_bpf+0x7c/0x90 [ 981.361869][T22116] do_syscall_64+0x55/0xa0 [ 981.366634][T22116] ? clear_bhb_loop+0x40/0x90 [ 981.371388][T22116] ? clear_bhb_loop+0x40/0x90 [ 981.376172][T22116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.382143][T22116] RIP: 0033:0x7fc00d79c799 [ 981.386649][T22116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.406595][T22116] RSP: 002b:00007fc00e57c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 981.415218][T22116] RAX: ffffffffffffffda RBX: 00007fc00da15fa0 RCX: 00007fc00d79c799 [ 981.423530][T22116] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 981.431745][T22116] RBP: 00007fc00e57c090 R08: 0000000000000000 R09: 0000000000000000 [ 981.439959][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.448047][T22116] R13: 00007fc00da16038 R14: 00007fc00da15fa0 R15: 00007ffe5ef885c8 [ 981.456217][T22116] [ 981.758871][T22128] FAULT_INJECTION: forcing a failure. [ 981.758871][T22128] name failslab, interval 1, probability 0, space 0, times 0 [ 981.773633][T22128] CPU: 1 PID: 22128 Comm: syz.4.5058 Not tainted syzkaller #0 [ 981.781178][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.791297][T22128] Call Trace: [ 981.794637][T22128] [ 981.797606][T22128] dump_stack_lvl+0x18c/0x250 [ 981.802346][T22128] ? show_regs_print_info+0x20/0x20 [ 981.807610][T22128] ? load_image+0x400/0x400 [ 981.812284][T22128] ? __lock_acquire+0x7d40/0x7d40 [ 981.817466][T22128] ? kobject_set_name_vargs+0x61/0x110 [ 981.823004][T22128] ? rcu_is_watching+0x15/0xb0 [ 981.827868][T22128] should_fail_ex+0x39d/0x4d0 [ 981.832654][T22128] should_failslab+0x9/0x20 [ 981.837240][T22128] slab_pre_alloc_hook+0x59/0x310 [ 981.842350][T22128] ? device_add+0xbe/0xc20 [ 981.846851][T22128] __kmem_cache_alloc_node+0x53/0x250 [ 981.852305][T22128] ? device_add+0xbe/0xc20 [ 981.856806][T22128] kmalloc_trace+0x2a/0xe0 [ 981.861321][T22128] device_add+0xbe/0xc20 [ 981.865637][T22128] ? device_initialize+0x24b/0x440 [ 981.870824][T22128] netdev_register_kobject+0x188/0x320 [ 981.876342][T22128] register_netdevice+0x12ee/0x1bb0 [ 981.881629][T22128] ? netif_stacked_transfer_operstate+0x210/0x210 [ 981.888092][T22128] ? __asan_memset+0x22/0x40 [ 981.892761][T22128] ? tun_net_initialize+0x1ac/0x480 [ 981.898138][T22128] ? tun_not_capable+0x1f0/0x1f0 [ 981.903128][T22128] ? alloc_netdev_mqs+0xc34/0x1040 [ 981.908384][T22128] tun_set_iff+0x848/0xed0 [ 981.912900][T22128] __tun_chr_ioctl+0x7ee/0x2000 [ 981.917805][T22128] ? tun_flow_create+0x310/0x310 [ 981.922856][T22128] ? bpf_lsm_file_ioctl+0x9/0x10 [ 981.927968][T22128] ? security_file_ioctl+0x80/0xa0 [ 981.933251][T22128] ? tun_chr_poll+0x630/0x630 [ 981.937973][T22128] __se_sys_ioctl+0xfd/0x170 [ 981.942615][T22128] do_syscall_64+0x55/0xa0 [ 981.947170][T22128] ? clear_bhb_loop+0x40/0x90 [ 981.951894][T22128] ? clear_bhb_loop+0x40/0x90 [ 981.956608][T22128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.962529][T22128] RIP: 0033:0x7f13a399c799 [ 981.966981][T22128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.986677][T22128] RSP: 002b:00007f13a4858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.995162][T22128] RAX: ffffffffffffffda RBX: 00007f13a3c15fa0 RCX: 00007f13a399c799 [ 982.003169][T22128] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000005 [ 982.011173][T22128] RBP: 00007f13a4858090 R08: 0000000000000000 R09: 0000000000000000 [ 982.019180][T22128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.027210][T22128] R13: 00007f13a3c16038 R14: 00007f13a3c15fa0 R15: 00007ffcb84d1ba8 [ 982.035329][T22128] [ 982.773305][T22136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5060'. [ 982.922291][T22144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5063'. [ 983.419706][T22159] netlink: 'syz.0.5067': attribute type 33 has an invalid length. [ 983.766927][T22171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5069'. [ 983.790535][T22171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5069'. [ 983.806501][T22171] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5069'. [ 984.340700][T22176] pim6reg1: entered allmulticast mode [ 984.666949][T22180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5074'. [ 984.772141][T22186] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5077'. [ 984.852499][T22186] netlink: zone id is out of range [ 984.857854][T22186] netlink: zone id is out of range [ 984.872870][T22186] netlink: zone id is out of range [ 984.878687][T22186] netlink: zone id is out of range [ 984.893794][T22186] netlink: zone id is out of range [ 984.899064][T22186] netlink: zone id is out of range [ 984.915361][T22186] netlink: zone id is out of range [ 984.921759][T22186] netlink: zone id is out of range [ 984.953017][T22186] netlink: zone id is out of range [ 984.969414][T22186] netlink: zone id is out of range [ 985.041411][T22192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5078'. [ 985.061430][T22194] FAULT_INJECTION: forcing a failure. [ 985.061430][T22194] name failslab, interval 1, probability 0, space 0, times 0 [ 985.074879][T22194] CPU: 1 PID: 22194 Comm: syz.1.5080 Not tainted syzkaller #0 [ 985.082389][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.082930][T22192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5078'. [ 985.092660][T22194] Call Trace: [ 985.092676][T22194] [ 985.092688][T22194] dump_stack_lvl+0x18c/0x250 [ 985.092725][T22194] ? show_regs_print_info+0x20/0x20 [ 985.092753][T22194] ? load_image+0x400/0x400 [ 985.092781][T22194] ? verify_lock_unused+0x140/0x140 [ 985.092809][T22194] ? perf_trace_lock+0xfc/0x3b0 [ 985.092845][T22194] should_fail_ex+0x39d/0x4d0 [ 985.092879][T22194] should_failslab+0x9/0x20 [ 985.092904][T22194] slab_pre_alloc_hook+0x59/0x310 [ 985.092939][T22194] kmem_cache_alloc+0x5a/0x2d0 [ 985.092965][T22194] ? skb_clone+0x1eb/0x370 [ 985.093002][T22194] skb_clone+0x1eb/0x370 [ 985.093027][T22194] __netlink_deliver_tap+0x41c/0x830 [ 985.166741][T22194] ? netlink_deliver_tap+0x2e/0x1b0 [ 985.171993][T22194] netlink_deliver_tap+0x19c/0x1b0 [ 985.177238][T22194] netlink_unicast+0x72c/0x8d0 [ 985.182057][T22194] netlink_sendmsg+0x8d0/0xbf0 [ 985.186888][T22194] ? netlink_getsockopt+0x590/0x590 [ 985.192144][T22194] ? aa_sock_msg_perm+0x94/0x150 [ 985.197125][T22194] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 985.202463][T22194] ? security_socket_sendmsg+0x80/0xa0 [ 985.207969][T22194] ? netlink_getsockopt+0x590/0x590 [ 985.213223][T22194] ____sys_sendmsg+0x5ba/0x960 [ 985.218194][T22194] ? __asan_memset+0x22/0x40 [ 985.222826][T22194] ? __sys_sendmsg_sock+0x30/0x30 [ 985.227872][T22194] ? __import_iovec+0x5f2/0x850 [ 985.232781][T22194] ? import_iovec+0x73/0xa0 [ 985.237335][T22194] ___sys_sendmsg+0x2a6/0x360 [ 985.242051][T22194] ? __sys_sendmsg+0x2a0/0x2a0 [ 985.246877][T22194] ? __lock_acquire+0x7d40/0x7d40 [ 985.252090][T22194] __se_sys_sendmsg+0x1c2/0x2b0 [ 985.256986][T22194] ? __x64_sys_sendmsg+0x80/0x80 [ 985.261966][T22194] ? lockdep_hardirqs_on+0x98/0x150 [ 985.267199][T22194] do_syscall_64+0x55/0xa0 [ 985.271656][T22194] ? clear_bhb_loop+0x40/0x90 [ 985.276354][T22194] ? clear_bhb_loop+0x40/0x90 [ 985.281068][T22194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.286988][T22194] RIP: 0033:0x7f5d0939c799 [ 985.291425][T22194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.311069][T22194] RSP: 002b:00007f5d0a1dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.319952][T22194] RAX: ffffffffffffffda RBX: 00007f5d09615fa0 RCX: 00007f5d0939c799 [ 985.327952][T22194] RDX: ff0f000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 985.335947][T22194] RBP: 00007f5d0a1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 985.344033][T22194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.352038][T22194] R13: 00007f5d09616038 R14: 00007f5d09615fa0 R15: 00007ffc7b2ec288 [ 985.360586][T22194] [ 985.380895][T22195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5078'. [ 985.450075][T22192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5078'. [ 985.450903][T22196] netlink: 'syz.0.5079': attribute type 33 has an invalid length. [ 985.524585][T22203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5081'. [ 986.078075][T22211] netlink: 'syz.0.5084': attribute type 10 has an invalid length. [ 986.559713][T22215] netlink: 'syz.0.5089': attribute type 25 has an invalid length. [ 987.072432][T22229] netlink: 'syz.0.5091': attribute type 33 has an invalid length. [ 987.244753][T22231] netlink: 'syz.4.5092': attribute type 33 has an invalid length. [ 988.279847][T22251] FAULT_INJECTION: forcing a failure. [ 988.279847][T22251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.302859][T22251] CPU: 1 PID: 22251 Comm: syz.4.5098 Not tainted syzkaller #0 [ 988.310423][T22251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.320625][T22251] Call Trace: [ 988.323945][T22251] [ 988.326891][T22251] dump_stack_lvl+0x18c/0x250 [ 988.331602][T22251] ? show_regs_print_info+0x20/0x20 [ 988.336911][T22251] ? load_image+0x400/0x400 [ 988.341433][T22251] ? __lock_acquire+0x7d40/0x7d40 [ 988.346504][T22251] ? snprintf+0xe9/0x140 [ 988.350765][T22251] should_fail_ex+0x39d/0x4d0 [ 988.355464][T22251] _copy_to_user+0x2f/0xa0 [ 988.359894][T22251] simple_read_from_buffer+0xe7/0x150 [ 988.365292][T22251] proc_fail_nth_read+0x1e8/0x260 [ 988.370455][T22251] ? proc_fault_inject_write+0x360/0x360 [ 988.376104][T22251] ? fsnotify_perm+0x271/0x5e0 [ 988.380989][T22251] ? proc_fault_inject_write+0x360/0x360 [ 988.386726][T22251] vfs_read+0x28b/0x970 [ 988.390903][T22251] ? kernel_read+0x1e0/0x1e0 [ 988.395614][T22251] ? __fget_files+0x28/0x4b0 [ 988.400228][T22251] ? __fget_files+0x28/0x4b0 [ 988.404834][T22251] ? __fget_files+0x43d/0x4b0 [ 988.409617][T22251] ? __fdget_pos+0x2a3/0x330 [ 988.414229][T22251] ? ksys_read+0x75/0x260 [ 988.418577][T22251] ksys_read+0x150/0x260 [ 988.422854][T22251] ? vfs_write+0x990/0x990 [ 988.427312][T22251] ? lockdep_hardirqs_on+0x98/0x150 [ 988.432543][T22251] do_syscall_64+0x55/0xa0 [ 988.436993][T22251] ? clear_bhb_loop+0x40/0x90 [ 988.441774][T22251] ? clear_bhb_loop+0x40/0x90 [ 988.446464][T22251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.452374][T22251] RIP: 0033:0x7f13a395cfce [ 988.456804][T22251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 988.476507][T22251] RSP: 002b:00007f13a4857fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.485125][T22251] RAX: ffffffffffffffda RBX: 00007f13a48586c0 RCX: 00007f13a395cfce [ 988.493218][T22251] RDX: 000000000000000f RSI: 00007f13a48580a0 RDI: 0000000000000003 [ 988.501230][T22251] RBP: 00007f13a4858090 R08: 0000000000000000 R09: 0000000000000000 [ 988.509228][T22251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 988.517307][T22251] R13: 00007f13a3c16038 R14: 00007f13a3c15fa0 R15: 00007ffcb84d1ba8 [ 988.525312][T22251] [ 988.933958][T22264] FAULT_INJECTION: forcing a failure. [ 988.933958][T22264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.978529][T22264] CPU: 1 PID: 22264 Comm: syz.0.5103 Not tainted syzkaller #0 [ 988.986161][T22264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.996461][T22264] Call Trace: [ 988.999867][T22264] [ 989.002845][T22264] dump_stack_lvl+0x18c/0x250 [ 989.007765][T22264] ? show_regs_print_info+0x20/0x20 [ 989.013031][T22264] ? load_image+0x400/0x400 [ 989.017575][T22264] ? __might_fault+0xaa/0x120 [ 989.022276][T22264] ? __lock_acquire+0x7d40/0x7d40 [ 989.027337][T22264] should_fail_ex+0x39d/0x4d0 [ 989.032039][T22264] _copy_from_user+0x2f/0xe0 [ 989.036733][T22264] __sys_bpf+0x23e/0x890 [ 989.041087][T22264] ? bpf_link_show_fdinfo+0x390/0x390 [ 989.046488][T22264] ? lock_chain_count+0x20/0x20 [ 989.051369][T22264] __x64_sys_bpf+0x7c/0x90 [ 989.055802][T22264] do_syscall_64+0x55/0xa0 [ 989.060242][T22264] ? clear_bhb_loop+0x40/0x90 [ 989.064974][T22264] ? clear_bhb_loop+0x40/0x90 [ 989.069692][T22264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.075598][T22264] RIP: 0033:0x7f8c1d19c799 [ 989.080050][T22264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.099767][T22264] RSP: 002b:00007f8c1e11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 989.108285][T22264] RAX: ffffffffffffffda RBX: 00007f8c1d415fa0 RCX: 00007f8c1d19c799 [ 989.116269][T22264] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 989.124253][T22264] RBP: 00007f8c1e11f090 R08: 0000000000000000 R09: 0000000000000000 [ 989.132505][T22264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.140685][T22264] R13: 00007f8c1d416038 R14: 00007f8c1d415fa0 R15: 00007fff8f45b678 [ 989.148774][T22264] [ 989.568629][T22277] netlink: 'syz.1.5107': attribute type 33 has an invalid length. [ 990.960308][T22301] __nla_validate_parse: 8 callbacks suppressed [ 990.960328][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5111'. [ 991.008512][T22300] hsr0: entered promiscuous mode [ 991.022809][T22300] hsr0: entered allmulticast mode [ 991.028095][T22300] hsr_slave_0: entered allmulticast mode [ 991.035791][T22300] hsr_slave_1: entered allmulticast mode [ 991.055493][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5111'. [ 991.097068][T22301] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5111'. [ 991.173409][T22307] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5114'. [ 991.847784][T22315] hsr0: entered promiscuous mode [ 991.893093][T22315] hsr0: entered allmulticast mode [ 991.898555][T22315] hsr_slave_0: entered allmulticast mode [ 991.938399][T22315] hsr_slave_1: entered allmulticast mode [ 993.586901][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.597754][T22320] netlink: 'syz.2.5119': attribute type 10 has an invalid length. [ 993.605879][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.687104][T22320] netlink: 'syz.2.5119': attribute type 10 has an invalid length. [ 995.663081][T22320] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5119'. [ 997.068817][T22320] net_ratelimit: 216 callbacks suppressed [ 997.068840][T22320] openvswitch: netlink: Message has 4 unknown bytes. [ 997.169865][T22336] hsr0: entered allmulticast mode [ 997.191848][T22336] hsr_slave_0: entered allmulticast mode [ 997.204796][T22336] hsr_slave_1: entered allmulticast mode [ 997.545182][T22348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5127'. [ 997.749747][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5126'. [ 997.782988][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5126'. [ 997.792024][T22359] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5126'. [ 999.102885][T22375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5137'. [ 999.267648][T22377] netlink: 'syz.1.5136': attribute type 33 has an invalid length. [ 999.513754][T22385] netlink: 'syz.2.5139': attribute type 4 has an invalid length. [ 999.573774][T22387] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1000.356095][T22401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1000.457506][T22401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1000.574641][T22401] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1001.213579][T22411] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5147'. [ 1003.037361][T22414] netlink: 'syz.4.5149': attribute type 10 has an invalid length. [ 1003.064147][T22414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5149'. [ 1003.172511][T22420] netlink: 'syz.1.5148': attribute type 33 has an invalid length. [ 1005.108350][T22445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1005.242803][T22445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1005.251831][T22445] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1005.990226][T22454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1006.519763][T22457] syzkaller0: entered promiscuous mode [ 1006.661648][T22457] syzkaller0: entered allmulticast mode [ 1006.707046][T22468] netlink: 'syz.2.5162': attribute type 33 has an invalid length. [ 1008.056328][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1008.498465][T22473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1008.508442][T22473] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1008.528537][T22473] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1008.550222][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1008.569683][T22485] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1008.741226][T22494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1008.976420][T22497] netlink: 'syz.0.5171': attribute type 33 has an invalid length. [ 1009.429242][T22514] netlink: 'syz.4.5174': attribute type 10 has an invalid length. [ 1009.678523][T22514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.844903][T22514] bond0: (slave team0): Enslaving as an active interface with an up link [ 1010.458430][T22527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5181'. [ 1010.669609][T22536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.686656][T22536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.699193][T22537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1010.744470][T22536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.773493][T22536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.106112][T22537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1011.215780][T22537] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1011.242421][T22544] netlink: 'syz.2.5185': attribute type 33 has an invalid length. [ 1014.392823][T20268] unregister_netdevice: waiting for syz_tun to become free. Usage count = 4 [ 1014.401935][T20268] ref_tracker: syz_tun@ffff888068f485b8 has 1/3 users at [ 1014.401935][T20268] dst_init+0xd9/0x460 [ 1014.401935][T20268] dst_alloc+0x12e/0x170 [ 1014.401935][T20268] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 1014.401935][T20268] ip_route_output_key_hash+0x1f3/0x330 [ 1014.401935][T20268] ip_route_output_flow+0x2a/0x150 [ 1014.401935][T20268] udp_sendmsg+0x1603/0x23b0 [ 1014.401935][T20268] udpv6_sendmsg+0x790/0x2390 [ 1014.401935][T20268] ____sys_sendmsg+0x5ba/0x960 [ 1014.401935][T20268] ___sys_sendmsg+0x2a6/0x360 [ 1014.401935][T20268] __se_sys_sendmsg+0x1c2/0x2b0 [ 1014.401935][T20268] do_syscall_64+0x55/0xa0 [ 1014.401935][T20268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.401935][T20268] [ 1014.474033][T20268] ref_tracker: syz_tun@ffff888068f485b8 has 1/3 users at [ 1014.474033][T20268] dst_init+0xd9/0x460 [ 1014.474033][T20268] dst_alloc+0x12e/0x170 [ 1014.474033][T20268] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 1014.474033][T20268] ip_route_output_key_hash+0x1f3/0x330 [ 1014.474033][T20268] ip_route_output_flow+0x2a/0x150 [ 1014.474033][T20268] geneve_link_config+0x1a6/0x670 [ 1014.474033][T20268] geneve_newlink+0x151/0x1c0 [ 1014.474033][T20268] rtnl_newlink+0x1542/0x20a0 [ 1014.474033][T20268] rtnetlink_rcv_msg+0x869/0xfa0 [ 1014.474033][T20268] netlink_rcv_skb+0x241/0x4d0 [ 1014.474033][T20268] netlink_unicast+0x751/0x8d0 [ 1014.474033][T20268] netlink_sendmsg+0x8d0/0xbf0 [ 1014.474033][T20268] __sys_sendto+0x4a9/0x6b0 [ 1014.474033][T20268] __x64_sys_sendto+0xde/0xf0 [ 1014.474033][T20268] do_syscall_64+0x55/0xa0 [ 1014.474033][T20268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.474033][T20268] [ 1014.565540][T20268] ref_tracker: syz_tun@ffff888068f485b8 has 1/3 users at [ 1014.565540][T20268] fib_check_nh+0xd23/0x1a70 [ 1014.565540][T20268] fib_create_info+0x142c/0x2460 [ 1014.565540][T20268] fib_table_insert+0xc6/0x1b20 [ 1014.565540][T20268] fib_magic+0x2e5/0x3c0 [ 1014.565540][T20268] fib_add_ifaddr+0x38d/0x5e0 [ 1014.565540][T20268] fib_netdev_event+0x389/0x490 [ 1014.565540][T20268] notifier_call_chain+0x197/0x380 [ 1014.565540][T20268] __dev_notify_flags+0x1aa/0x310 [ 1014.565540][T20268] dev_change_flags+0xe8/0x1a0 [ 1014.565540][T20268] do_setlink+0xc58/0x4130 [ 1014.565540][T20268] rtnl_newlink+0x17da/0x20a0 [ 1014.565540][T20268] rtnetlink_rcv_msg+0x869/0xfa0 [ 1014.565540][T20268] netlink_rcv_skb+0x241/0x4d0 [ 1014.565540][T20268] netlink_unicast+0x751/0x8d0 [ 1014.565540][T20268] netlink_sendmsg+0x8d0/0xbf0 [ 1014.565540][T20268] __sys_sendto+0x4a9/0x6b0 [ 1014.565540][T20268] [ 1014.756207][T22564] FAULT_INJECTION: forcing a failure. [ 1014.756207][T22564] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.791932][T22565] FAULT_INJECTION: forcing a failure. [ 1014.791932][T22565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.809941][T22565] CPU: 1 PID: 22565 Comm: syz.1.5189 Not tainted syzkaller #0 [ 1014.817467][T22565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1014.827639][T22565] Call Trace: [ 1014.830940][T22565] [ 1014.833892][T22565] dump_stack_lvl+0x18c/0x250 [ 1014.838697][T22565] ? show_regs_print_info+0x20/0x20 [ 1014.844006][T22565] ? load_image+0x400/0x400 [ 1014.848524][T22565] ? __lock_acquire+0x7d40/0x7d40 [ 1014.853562][T22565] ? __virt_addr_valid+0x18c/0x540 [ 1014.858696][T22565] should_fail_ex+0x39d/0x4d0 [ 1014.863567][T22565] _copy_from_user+0x2f/0xe0 [ 1014.868171][T22565] map_update_elem+0x4e8/0x700 [ 1014.872955][T22565] __sys_bpf+0x6b5/0x890 [ 1014.877305][T22565] ? bpf_link_show_fdinfo+0x390/0x390 [ 1014.882714][T22565] ? lock_chain_count+0x20/0x20 [ 1014.887764][T22565] __x64_sys_bpf+0x7c/0x90 [ 1014.892195][T22565] do_syscall_64+0x55/0xa0 [ 1014.896634][T22565] ? clear_bhb_loop+0x40/0x90 [ 1014.901671][T22565] ? clear_bhb_loop+0x40/0x90 [ 1014.906383][T22565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.912370][T22565] RIP: 0033:0x7f5d0939c799 [ 1014.916973][T22565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.936766][T22565] RSP: 002b:00007f5d0a1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1014.945228][T22565] RAX: ffffffffffffffda RBX: 00007f5d09616090 RCX: 00007f5d0939c799 [ 1014.953242][T22565] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000002 [ 1014.961230][T22565] RBP: 00007f5d0a1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.969213][T22565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.977198][T22565] R13: 00007f5d09616128 R14: 00007f5d09616090 R15: 00007ffc7b2ec288 [ 1014.985377][T22565] [ 1015.002580][T22564] CPU: 1 PID: 22564 Comm: syz.4.5190 Not tainted syzkaller #0 [ 1015.010128][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1015.020226][T22564] Call Trace: [ 1015.023543][T22564] [ 1015.026506][T22564] dump_stack_lvl+0x18c/0x250 [ 1015.031259][T22564] ? show_regs_print_info+0x20/0x20 [ 1015.036502][T22564] ? load_image+0x400/0x400 [ 1015.041054][T22564] ? __might_sleep+0xe0/0xe0 [ 1015.045686][T22564] ? __lock_acquire+0x7d40/0x7d40 [ 1015.050769][T22564] should_fail_ex+0x39d/0x4d0 [ 1015.055677][T22564] should_failslab+0x9/0x20 [ 1015.060228][T22564] slab_pre_alloc_hook+0x59/0x310 [ 1015.065362][T22564] ? tomoyo_encode+0x28b/0x540 [ 1015.070236][T22564] ? tomoyo_encode+0x28b/0x540 [ 1015.075017][T22564] __kmem_cache_alloc_node+0x53/0x250 [ 1015.080418][T22564] ? tomoyo_encode+0x28b/0x540 [ 1015.085195][T22564] __kmalloc+0xa4/0x230 [ 1015.089471][T22564] tomoyo_encode+0x28b/0x540 [ 1015.094082][T22564] tomoyo_realpath_from_path+0x592/0x5d0 [ 1015.099741][T22564] tomoyo_path_number_perm+0x248/0x620 [ 1015.105217][T22564] ? tomoyo_path_number_perm+0x217/0x620 [ 1015.111055][T22564] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1015.116531][T22564] ? ksys_write+0x1c4/0x260 [ 1015.121291][T22564] ? __fget_files+0x28/0x4b0 [ 1015.125987][T22564] ? __fget_files+0x28/0x4b0 [ 1015.130603][T22564] security_file_ioctl+0x70/0xa0 [ 1015.135587][T22564] __se_sys_ioctl+0x48/0x170 [ 1015.140224][T22564] do_syscall_64+0x55/0xa0 [ 1015.144810][T22564] ? clear_bhb_loop+0x40/0x90 [ 1015.149519][T22564] ? clear_bhb_loop+0x40/0x90 [ 1015.154221][T22564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.160134][T22564] RIP: 0033:0x7f13a399c799 [ 1015.164562][T22564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.184359][T22564] RSP: 002b:00007f13a4837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.192878][T22564] RAX: ffffffffffffffda RBX: 00007f13a3c16090 RCX: 00007f13a399c799 [ 1015.201039][T22564] RDX: 0000200000000500 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1015.209023][T22564] RBP: 00007f13a4837090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.217007][T22564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.224987][T22564] R13: 00007f13a3c16128 R14: 00007f13a3c16090 R15: 00007ffcb84d1ba8 [ 1015.232996][T22564] [ 1015.302496][T22564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1015.895318][ T51] Bluetooth: hci4: command 0x0406 tx timeout