last executing test programs: 11m37.799947984s ago: executing program 0 (id=3230): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e006f0d04000000e44fda63adb1", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x3, 0x0, 0x4, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x6, &(0x7f00000008c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000900)='GPL\x00', 0x5, 0x29e, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1d, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1576d, r3, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r3, 0x20, &(0x7f0000000600)={&(0x7f0000000480)=""/254, 0xfe, 0x0, &(0x7f00000005c0)=""/60, 0x3c}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000c0400109bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x8, 0x5, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f80)={r2, 0x0, 0x71, 0xd4, &(0x7f00000000c0)="87f907b93e45f6e9b77ded9ee36d9a6b9fe104a35f39438abb8cdc34a6b4e94b3dd666f07fe5c67aece72ed261270c2bc595c07978161e83aa56285568f343d4a34514acd525919575671b6a3bd2cf41513817855afaeadcf93a1a13caa0ef8fef06a2a351635edcbf29c1f699306ed0c1", &(0x7f0000000680)=""/212, 0x3, 0x0, 0x1000, 0xab, &(0x7f0000001ec0)="adcb83f7b33ce7fdfd16ddc976a4ba49e63bdaa6228586e39887f2a1417a01ce142118780ec4cabdbb4d55cdb42209aba3c269b95aed843600964105953b825514fd1c238bb10e4926f16d013478864308011f7539d49871cd63daea1c954567280f8d75c0d7ba949ee27e48aac854e1be7acd2dc6e49e7a85d1ab4df969d188a36e9d810c700bb2631470cca051f2c6ecd706f6d7e4c9baca1c38bb3dfa04e589c064bc4d85c98026a0ec9a70d39fac9c3a5c09a561d871ab03bf03016adabe52443de98f09d17854320bcfa2e675f584fb63dcec888e177475c3a1a313769d4a39a3706ceadb4775c509e86b6d9c35af5019ffeafefabe28097c7116e9ccca887b6e1308f741dab29497c44cb1f5135534e2f92bc4f8d6784b2436cbd2a85c5a67177a87c453169fe4c940245062639c1c819b2c40bd9978343b39d2f534c916db84bf963b274689e8c9576af60af613693bf67a02ff6ccc1525c5d7e57f4519cf669bdae051994446c16900bb764d8eba8691673ab1dfbf8b6b5dc000e6c5f3ad686370c1d03da840e8b251c2595e28b0452334cb04a757c3f34ed532d66a103a55d8b816bd7578e6d316ccfae1244ab6ce4ea726f7497d21510fa70f698e94c3c8b0ca9375517335d8873a99a093bc462b7aaf7631adc731a0eb63be049f8aa24dd563e5904755b96bac5921001581b7d40f0f4eee7fa6ae0894a4f749d0db643a653dc164ea3d0ecff65dfe179e2caf8899d89eb8ba53c9b31b6fa2da4a7c4978b69d70d9a4ac9dddbaac32ed13972d3659ccc0dcd87099cea63a5f6b752e3d0c108a33e261eadc9317f8fbb72a63464954808e35fccbea3fffd84729b7c19760ee3262fffc82a9de9c69912e6580f376882060c3e92136e802e402898a6fa732955631f76d2c14582080c9ab89885d67c251f4f7d0d4e9457dedd3176d5c44d4d0d543142a99c5c428c65b75de6c30b08fac50888bd952d1efab11620a33d82c8e2562bb962bfc6afcd8fbf1280961f08f94690efa231f82d1f10b2143015ac737eaba2994c138fe403c5684f077919824ba2da05a648d75a8a75e068ad5e5742194d9ce151f9349796744a3e60b386edfc615320feefd11d16038bc69e3699918a3aa160dec5e985501e5985e46e025643e2b874d196f3f80cd22cf384c3a9da343a707519d7a823a13d7951bc6473df60e85f10b6a674daa01c5c53fa5d15a524cc168e79062af8bb1cd5a7feca4918bb32b387748a7e0a96e12ed89cc986efd4d737763cdeb770d53476626a7f1425fd513ca6fa1674e2a15b493c1650d1cfdfd783b80b99d41b074f7ca2bd7973b4fd3d4afe03fbf8a9b0d45a08eaed2cb8a70fdeaccd29abbd1ab215ff1c4ba6a93c8d7417a2196592bfcbfc1e4d671c5615064a7b63a0bd1d3944b6a4af4477dfc02ee628058b586d37313c1952bcd69503b77a2184137a341a389825141a3341c488c224c3771a3f089d0d238a9d4e938723b67a644c6844c6a01cb78b00ee3488ed457de3e8d49fb130685230094b5894acf73dc07851c98a2cd3751ef214aadf13227ae00a60e26315da7717f00ad7ab7726f2f193a5daba81863f2ef2e6a33f0047cbbb0437d1e2e8b18d7c9645b2efc8cd0e41525628cdb5c2584b602f23abd294ce7fd9b91b26dbfbd9463b301cd93b875b54b357f4725cddff608af619d8c3374076af99c19f79eae8cc238866eb1d2d032891e5bf42d3caa2182245aebeb34e60b02ba9da0d434accf98f74fc0c5c0446e8f79b7daf5a7484a413d33165647357ba08088bea7abb8c68fc918523f1719fc461dde4c2fe9f12dc5db5d16a1c3037c6a12274f530693b6296d325a7e03224e48a16e7bec7af9db999a637ea180368ac5c79875578b45cdd27745ce03b76919163cce865298f6fdb498b870b6ea29d8697d2dc3f7a8580d366442de87bf4746414a1f766bd543b3a9eedf748fea825d2c2b0bbde46582465c88460edd0712691949997f03c6e95fb7eec89a5a83dae95455a62fafab9472bf54a635e2c57ae9627fd5a48902da83dba0a9105284c3e01c99df800ceb0c84c86301ae5ff41b056919844de7521e9a3054c43999ea4a19da6ac7ca061ac577baf021a75f6297b3f67ac7f0e83a5a53c0db5625d48f30e6d6dda4cc8e8969ae575d3b318f91c8ef18e130fdb672d6905eca18eb26eff759bbd0b8ec92d078a0ff9166cd138b8fd51626e4d270b3f758709300fb31c07e43e5a1cd6a3bae5ecf4d5efbb3e348377195979b2cc0c2d53a14507448bd6638c1cf9d104299132e22ca1de9f3e859036a100dbed14c79f999b16b808b6aaa0b7eb8e43aa9473d0dec87932652b0f690c724b07775bfb0dd32553fd0d5e235e551f66344ad8589eaeaf36d781269ce5fe16e70ee48fde6fc84930902976709737b9071a6070230735a84891b6183c2b4dd1a7a4488996fdefbb33396f2b3dbb0cc49e738b3d9ff29e7fe8b83c0c569ce603f3cf6a3272c9e7c7aac2bdfd0ac4a944f872c34afa5cebe06c2a9e9dd49457c1b5624ca9a6d80725db9fbc865049933e8b5fb279b64fe99c8e438cabdf722817717c5e6283df2fac45a7d5202fa97928fb3c7b8071d839050c053c5bb762e0dbd9c7bc21284f9a00d817551fb18c4d7f11e5543d8798865032ca2b35fd6627fdeade9402b8b40f4fd28348bb7ebd66e7c375c12d7e0302306e3c5fe8f8df85320266027234019a787ea11c8d3e780568ebc26cf01047db0aa9b0ed48d4c4efc8ec4e997467c869e83abdd2ffd92a6c95f9c34e5f155f433e8d6e78a56af50b5c5afe711dc45e41d4864fdaa4c0520e008253729ed1cb63a84f94173f9c544ca15e2673c7ac35ee1d5c726dd43a05323b5e56ca54fbb9e5dd120e10da44b95ad14252cb5378a29aa5fb0d3fc6ea1296215fad630b6a6f248d55f685abc800a034d6c03e27ab9ff2fee8d1dd1b40811fdeb3fe2cb00eeb4acebe601dcb499ae8d0c57a4aff26271446ca6e62855ec5c05eb61680a4b7c3250fd48b305e3c308dcb8221b0bb5ae0ae62f1c17c9a357301e4f97997c11a32b3f8564f6471747c0ec95610acdc6cf39a1b607dff6bf0dd0ddf5ed919bd6820f6706829ef4110a5815ed29e9e791d73e91001ee4cb3ac50e1e999e0683aa749e51bc6d9fc58900fcb6d71e6e815febefa59e68625234622d0899ff592e4fea326bb06fb6ada0ddcd4591809bf7d9cb4f0b7a54ce24a8de163a2d5a8fedc564ad524e4eda8faca382c293a32e698c4b403267d3b7491618c6251ebb2c2ee5aae5ae337a1256bf227e44dc5a8370a094a2a67b6b511b356d4c53ea851fdce2a3a0feba714de33b83685039e1e309f89e6a2f5817c6d289ff2efd15388c5455c02178061590c4719b68785b102b0278cbee900af81018097cf7f092b44ab670b348d3ca67e6d5c1c5d8a835157dc2b9039ef09902b6f842aed950a05c1912eb495f89620acd9b6dee1b8e7971afa31fcf221ce87bd49a0dd5e14a33436dc1611a3c42bea3d243a19c45eccb83df320eeb699c79f0f856b05f6e79ee343045628f0ef6896367f1e02db64d2ffa277d6f6991b956c138899421335b02b84f9dfb567bf9a788295b70f7daa4ff17f1d6694c0231fd2c7ed721526ce15fc88820bf807f28084e5e0ef966cd8cd505cd0974c9c82e1231255e5ce00387691483708c57ce269fbcdf4be17937613552c29aa0418476c5e04f90838ea61e35a58732c596fc3c4f3a246b1e1eac422241edc3de7e6b8029d912ff659bfd7e733241e2a96b14c4ef7253cd98137f445c9696c47070e33760e8399addd2c2c4e817e17eb06db08ad69bdf6b92f03be6a8450c0c745c8dcc3048322287caf307efe27cfb1f521f20659b81b85d15b29a6c4f4f22706c006c5ed66d759bd2ba958465fff0d53a2aee0070380f9d714c03dbf901f6159b30c5fd685a27ffb00bac3ac096fd007ed0973cf5b64994ed372185eba0e0743ae87c188b5363217e167443069a9b4a089dbf9e9cf107d81e0944ffcd4ae80bae261e916aa19271266f678b2f341cf3a635789dc8dfc53c29259407050b5c3cdb63487b6ee1882af7b465bbc53f88fe4d93d3c49f70fb3405503ac2640f137d05c9631007843b83e544cafd4f70d36ec32c9efb3b30d122e4dfd9d8f6a2e2764b119030418e883be5676ac97c737968106e9da8adcb741d4623fca6cb21d91c1b9c08a19c6e686ac0ee501f349961cd95d594e1c10ca4bdef424f171be5f5c60ee22a1976b48b355506444fb706bfd6b93fcbd445ab2f3b747bf0aa0227b8f4742ac4f1b7687abe77c2ed60f40bed40752492d0cb03c7151b3f851dea63b5cc229bb913118fc41e76386a64f2ad01fab17ca620eacff500676be1f72238a986b3a417af96f3a2674698f7782f13ac771aa4af81f95c81c027749e62b3aca38684608c3ad65274e77085274d57a206b3b8d50ad0a4ca5180059cb37cad9ba9d4017e91ff4277924ea1e6af024b84ce94fd2dd1b26e157da251711ad0ca58e59d36f13fd0209a8cb1256c49ed5c672f394572b14d0f8d6f0272479cbd8c1613bbec87347ef83e4f03c46458a22dfde6701957ec43c6078d87170311920cf877e03816fe6ef3c07240ba6db58159fd8f60dbd3d29c6c434c9fb59962dae57b762fb9f09fb40de08902fe3863088b80d725a4fe0160d122fb6af95d6a326c017f4acd4155db03ed8a9109222e679ae58307ec43005594c9eddad011a5bab4151e6dfb1ddb7c8d606ac7bbfcf046f6130ee4b1a2a587e7a69114b34a73f17a262847a8e0a218dc205b32cbd3af5ef8b0ac22561c9d81f01fe6611e910b13ed3817409b34ee962308ecd09679dfba1749e6b171c01d2ef14a4fb057e5e57c4c33907cbb1bbf3c540087a411b8fd4904e74b8cd3af8f07afe6d6b5d6ba734ef8b9a30b9c8ded1f2e97b766b6d80262fc1415614fc04cd3eff4725453fe27bdb1417aeb397d67f3c7018b73cce2006003e0673b0cd7123a9ec4e356209446ab243b74db726b03132af57e31062063df4d5fe4879e57994c8082fdcf25fade2e29649df3c2ada09dce3a8dbb584a7c9ecccdce151f612216e7a8ab7ad4583a4a4d8fac92e9165d77091fff42e015605cc073ecd8adc7f12028bd9bde42aba6f36eae08820e76945df0626508d6a0aa68fc67669d6c3ab06d1ba436767150f199c2ad7dcfbd0f30ae10b53e5c9a89f6fdc1ef33c9bd4254d8651808533c777002f3c1d09a568970b32194b196494f5d1590f9aaaa216b9cb998d6c0ae18b01ab0f6a76dd0ec5fe9655a23ce463bfe07cbf1ff6c5be1a75e91ea7f17bd036a55b0fea6e816e0e0bf8f4b8143133b030172427fd678190b2fd50944a4dce4e6b3cbb8e87e9e2d4ca733d42a7609c26a82a3125374b94d23b812a19af7f178a3ddeff6611ad00ed2d6918bcf85c2347e9d0c2b10d4b64aaef066a55cc2a5be69dd899744ad072c1dcf16d759e866e889da9348ddf08765bcb3cabb56bfb4db43f045d836a3a5c84c7bff00b1bf9916a5b4317345d3ac810fd6667febcd5e6640d317697cb134dec215b35ba6354099a0b88b7f46b56913be64c478fd8f0f6d3f43aa13e05d2ee698bfe239cfe0c34f2cbe671601a5813dfc10585ab3a864e0bd40d73cb841528ac48379daf4088b82c80f1361a2cac4ec89e0da854085ecd84612f4030840088fcf3d8299d650ae36e2246cf9e4575ad6fd0eb1d99a329bf821804da5d2fc9193d84783d690e8b595e230b7b30474514dbd53", &(0x7f0000002ec0)="e04dc436b97a5cb55e10473a43e6aa5800adc97b05d9030bc269915ba6c586fd24d9c05b3b4e4da6fb0d33b2a1b76830cf8e87bfcae06afe7fbade3e576edbbab009fa2f35fecebdb862f369d0debf3a88c5d43e233ea5bcbe41fd6299fb82fe81e494f5d3dd951138965a21ada5a00da625a9e3df9fe43891d19601d8fd5b07200a98d3eb051b2bd99f8070356ee4773f6f24cd9b031effb80af6d8b9e79fd4ae226ff5202c151e84b4f7", 0x2, 0x0, 0x80000000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000cc0)={r4, r2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x1100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000e40)="0c007f00e0ffffff007fb6adc76cec7fdfa1098fa281c909dfa2888ec004b2bad1a00ff4276604b6704ce63d8c25e8d746f8a05902c48b78640a805e0f734fcbb603ba9c01bda5ab7f2528b1ed60e75e3be4c2a196a6f23e863d3aea6a5add8cd7799e88a92cf72efdb053be40ca920871a663f57d6e8b3125622a1e28ba997a22efe180119e804fa5e978fc36e601f082d0f23a255a66d775634c1efc46d4f26a074d6838c87134f19b6ea6a82b13fa2a4c69ff59d652b930f803a2e2f06e", 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) 11m37.484743021s ago: executing program 0 (id=3233): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000018c0)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x10, 0x29, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) close(r1) socket$kcm(0xa, 0x3, 0x73) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00037300005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef) 11m36.952198004s ago: executing program 0 (id=3237): socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000700)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0x0, 0x0, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000cc0)) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000300020006000a0000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4b, &(0x7f0000000340), 0x4) socket$kcm(0x2, 0x5, 0x84) 11m36.538558144s ago: executing program 0 (id=3240): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r6}, 0xc) close(r4) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd5, 0x0, &(0x7f0000000080)="52a07de6419273d1a79e57a544356f59fadaaf8a96b6da270b4f0e6d8c8f6bd7470bb1fb10186ae4ca3b3d0b87595f10dfdb5f46ebdcaf0c888e8c75086d24a7e291c974d5b11b8f1cb2a8fd8e6207ef70bd71a1b70b10160c04a5c9f741b72195db92b479b0f42f4d692f06c3df8547a54f702473fef399068ea02863e8fe28204c1de477c7333c4a498752c4f0c0de7d43747bc56e609df9859d7cdeba4a464f94ee156516ed14e61d4374c7609bd161f0d5e26caa07fd162d77ec63b555f0357e20643080e7f6116b03f3adb01dd5c953ca9330", 0x0, 0x7, 0x0, 0x31, 0x0, &(0x7f00000001c0)="87c8d150eba810982d723c583473b5d646226261b818a0237530e9c52c0e3c53dd3adc606d86cab736e13bc67ea73b0fae", 0x0, 0x2, 0x0, 0x1}, 0x50) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 11m35.659719835s ago: executing program 0 (id=3244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={&(0x7f0000001200)=@in6={0xa, 0x4001, 0x4, @mcast2, 0x4}, 0x80, 0x0}, 0x20000001) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffff0001, 0x8}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001140)={0x5, 0x0}, 0x8) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={r3, 0x9, 0x10}, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x6, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000001100)='GPL\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x4, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 20) 11m35.557709007s ago: executing program 0 (id=3245): socket$kcm(0xa, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x33, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f00000003c0)={r2}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="180000007600a921059f317a9dab00"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000640)={r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xffffffff, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) 11m20.443973352s ago: executing program 32 (id=3245): socket$kcm(0xa, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x33, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f00000003c0)={r2}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="180000007600a921059f317a9dab00"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000640)={r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xffffffff, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) 14.537172877s ago: executing program 2 (id=7139): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x1c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xd0ff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff9, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.887988832s ago: executing program 2 (id=7144): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r1}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000300)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0xfffffff7) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000004c0)={0x1, 0x80, 0x6, 0x3, 0x6, 0x1, 0x0, 0x42, 0x40400, 0x13, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000480), 0x5}, 0x2080, 0x4, 0xd9, 0x6, 0x5, 0xffff0000, 0x401, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0xe, 0x8, 0x3, 0x0, 0xffffffffffffff40, 0x4, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000380)}, 0x505, 0x0, 0xfa5, 0x0, 0xff, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x8}, r3, 0x3, r4, 0x7) recvmsg$kcm(r1, &(0x7f0000002b00)={&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/84, 0x54}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/144, 0x90}, {&(0x7f0000002940)=""/233, 0xe9}], 0x8, &(0x7f0000002ac0)=""/40, 0x28}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002bc0)={0x1, 0x58, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002c00)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c40)="9c2bc78c8804c927fe41f7fff5c2879d0f6c409c6fcd7ed7bbb428d5d3afc5173103a5efc5e87b4b72ff5b13fa1163d059a555a597c8e2e6b4db0ea0b52431386faeb67db06fbb56bbde2d550f207882e94a2431aa2c3fe76a0f521f2e4ce2834fe58241e5a2e3c6d916de4408f411fdeb717a7e400b76dad7b716f58f6b707058170d4bc794f220c3e80333c6a69dcee4e8b56dbdadf38624dc1ca8d9207d2083639f843f12e2bdad16174384bc6b47ec1eb427fabb70289a5b8e8df41456dfb20b024db9085707dbeca7c10ec3", 0xce}, {&(0x7f0000002d40)="027d6428f54066e8cc3ee7d52f74c0edd4993f36c88a5ec082b455904561ca6f1dd9e798868e7a685dba46d6fd884c4c99444f98f3c69e3043581d0db4a23752056777fb53f1679d233f29eda70a73820e6161c0063e56ee78fd3ac5c59449fd73929c3e6b6d872dab8d8fd97705e0553eed128e3e68012e96dd8e52b9569db77ddebf05a1031a9577ae85f9f72b8927", 0x90}], 0x2, &(0x7f0000002e40)=[{0xa0, 0xff, 0x20200, "d135fc15b41fc4d7acca58496e31f0966e718d044e12c0f1c6ed95f7498816a3c1d8edac16564b7fda763c971082b455a09f324af6c69f5c3d8876d7336e60b414f7581cb6b16e5b275c4b8c0932750f12a96e76f5c9f7b345d409e110df3fdb86ad7e3ccaf7566f3d59b56c375a93cf8a90f630c2ed836d64f7245c310d3f11e44ff6a7ae6ea22d44da97"}, {0xb0, 0x118, 0x1, "6829f4060d4ff44899232b4407348299c20c3b93afc30259153518545be706db596742782ef343b8e004c24d4b829d72676986f2dcbc2d9da845dd27b4b4a7b8ce39ea1a52a99a0eb16429d03d9727bd708bb6835f730a87f2c87e0a66c3cec8015b8c76a44780943bf567546d41ca99a1925fe6ce99a8b923edbd7a971d7860271e1feaa7dbbc1ac7d6463b063a6fea03eecf917c11c72fb836cd"}, {0xc8, 0x88, 0x7ff, "1afaccd8864bcb713161d6f17c6bd4585b8254e2f5fa993be290c84c9f30505d8af5a3f08e52b4e551cd800da8d540795168f64c274e42715d8ddf5aa20400533a1b42483c483deab7e7c9a0163e17a17db471df962362d9645c85ba71c99702510def701eef6e0e9f35c4b781fb21a5d4fba42578fd108c8975afb4fca2728baae917b37d7c51276cc426a6294e5e6804a5b59d0283130dfb33e91ddb82221ef70cc51fc4c03a4221202bf430f04f32e65b4ba979"}], 0x218}, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000030c0), 0x88400, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000003100)={'wg2\x00'}) r8 = perf_event_open(&(0x7f0000003140)={0x4, 0x80, 0xa, 0x2, 0x9, 0x9e, 0x0, 0xffffffffffffff2a, 0x6c000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80000001, 0x7ce}, 0x4, 0xc, 0x800, 0x5, 0x200, 0x3, 0x9, 0x0, 0x79c9, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r4, 0xb) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003440)={0x11, 0x19, &(0x7f00000031c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x800}, @generic={0x5, 0x3, 0xa, 0x3, 0x2fc}, @tail_call, @ldst={0x2, 0x0, 0x2, 0x0, 0x2, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x51}], &(0x7f00000032c0)='syzkaller\x00', 0x0, 0x82, &(0x7f0000003300)=""/130, 0x40f00, 0x58, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000033c0)={0x2, 0x0, 0xfffffff9, 0x34}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003400)=[{0x0, 0x4, 0x5}, {0x2, 0x1, 0x6, 0xd}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000003500)={'c', ' *:* ', 'rwm\x00'}, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000003540)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000035c0)={r10, r9}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000003600)) socketpair(0x2, 0x5, 0x9, &(0x7f0000003640)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000036c0)=@generic={&(0x7f0000003680)='./file0\x00', 0x0, 0x18}, 0x18) recvmsg(r10, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/209, 0xd1}, {&(0x7f00000038c0)=""/64, 0x40}, {&(0x7f0000003900)=""/188, 0xbc}, {&(0x7f00000039c0)=""/252, 0xfc}], 0x5, &(0x7f0000003b40)=""/48, 0x30}, 0x0) r11 = openat$cgroup_ro(r3, &(0x7f0000003bc0)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000003c00)={[{0x2d, 'blkio'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x0, 'net_prio'}, {0x2b, 'net_prio'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}]}, 0x3a) 10.325545146s ago: executing program 2 (id=7152): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602010000000e000a0010000000026e00001294", 0x2e}], 0x1}, 0x80054) (fail_nth: 13) 10.104162382s ago: executing program 2 (id=7157): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x4, 0x9, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) close(r0) r4 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x0, 0x35, 0x0, 0x1}, 0x28) (async) socketpair(0x22, 0x5, 0x25, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000500)={r4}) (rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 32) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) (async) close(r6) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.625922303s ago: executing program 2 (id=7159): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000002280), 0x4) sendmsg$kcm(r0, &(0x7f00000022c0)={&(0x7f0000002300)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002380)=[{&(0x7f00000023c0)="0204270003000000000040001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c438241efef948d0a3119fb8e74620180100000000000000c83a18ec683b5b583d8d74ba16a75b1b08c2cc43f2e4788494b20000", 0x5d}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500004cf79bec154a"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="183f0000010000000000000000000000370001000000000095002b43990800125e000000000000"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x69, &(0x7f0000000800)=[{&(0x7f0000000840)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/188, 0xbc}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/4077, 0xfed}, {&(0x7f0000001e80)=""/211, 0xd3}, {&(0x7f0000001f80)=""/231, 0xe7}, {0x0}, {&(0x7f0000002080)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r3, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000002200)={'wlan1\x00', @random="f7280200e700"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) recvmsg(r3, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000002500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1163e0, 0x3ff, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002580)=ANY=[], 0x20) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f00000025c0)={&(0x7f0000002600)=@in6={0xa, 0x4e23, 0x4411, @local, 0x4}, 0x18, &(0x7f0000002680)=[{&(0x7f00000026c0)='m', 0x1}], 0x1}, 0x40814) sendmsg$kcm(r2, &(0x7f0000002700)={0x0, 0x4, &(0x7f0000002740)=[{&(0x7f0000002780)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0xe, 0x4, 0x0, &(0x7f0000002880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 8.47678085s ago: executing program 2 (id=7168): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, &(0x7f0000000800)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x70bf}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000500)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000700)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 3.461032878s ago: executing program 1 (id=7185): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003cc0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) (fail_nth: 35) ioctl$TUNSETOFFLOAD(r0, 0x4004743c, 0xf0ff1f00000000) 2.975870069s ago: executing program 4 (id=7186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000c40)=r0, 0x4) recvmsg(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x518, 0x80000000, 0x20}, 0x48) close(r7) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/21], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.719409815s ago: executing program 3 (id=7187): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b23, 0x0) socket$kcm(0xa, 0x3, 0x106) socket$kcm(0xa, 0x3, 0x106) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, 0x0, 0x40000) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003040)={0x0, &(0x7f0000000380)=""/117, 0x0, 0x0, 0x1000, r6}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc00) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000900000000000000461d86eed483dc"], 0x18}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 2.718910285s ago: executing program 4 (id=7188): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0xb, 0xc}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000040), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000140), 0x43) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f00000001c0)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0xc) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x6, 0xb, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r5, 0x0, 0xe, 0x0, &(0x7f0000001800)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340), 0x43) 2.716962885s ago: executing program 1 (id=7189): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2.53959563s ago: executing program 3 (id=7190): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7f, 0xfffffffffffffff9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfa7ca) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x52, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4], &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, r7}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}]}}, &(0x7f0000000940)=""/183, 0x26, 0xb7, 0x0, 0x4, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0xef, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, r11, 0x4}, 0x38) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)=@o_path={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, r2}, 0x18) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x0, '\x00', 0x0, r13}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r14, &(0x7f0000001040)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x1c, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001300)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r19) recvmsg$unix(r18, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYRES8=r19, @ANYBLOB=','], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x0, 0x4, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @btf_id={0x18, 0xb2910681f5384ebd, 0x3, 0x0, 0x4}], &(0x7f00000002c0)='syzkaller\x00', 0xffffff01, 0xe5, &(0x7f0000000300)=""/229, 0x41100, 0x24, '\x00', r5, @fallback=0x6, r8, 0x8, &(0x7f0000000a40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)=[r11, 0x1, r12, r15, r16, r17, 0xffffffffffffffff], &(0x7f0000001600), 0x10, 0x4}, 0x94) r20 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="89000000130081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)="8137607335fb", 0x6}], 0x1}, 0x0) close(r0) 2.479012401s ago: executing program 1 (id=7191): socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x1}, 0x1904, 0x1fc, 0x0, 0x7, 0x0, 0x200000a, 0x40, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000240), 0xcf) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x4044850) r6 = socket$kcm(0xa, 0x2, 0x0) recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="63202a00f8ffff7700"], 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="1200000020000000", @ANYRES32, @ANYBLOB="234cc895eb2bf558d7ccf12f9daebb1d41d15052c218d0ed6f4ecb470b6996dfaf22e3003eee51ba171881afa9374bbda25dcc1be5747e70eec56cab8d15044d75c862f8bc23d1c001e582293183610f7424569cdcb2f987cba5ce8311c90195d6976b678ceb891df5fe9857c4452fc07b6d275438eb9eac7fe101dabd29b226d18f8d480d28d5ba2a11c7773f6f284454e682ce4afbd2627c71580818c38b6f4822ebdbb85c43762718f9b06c5e960bcbfd870013bc41debfe6c3d70e9d8432382730d16316f4408fdd0da9ab4cc074ea0e75cd262d9d76e6fb69", @ANYRES32, @ANYRES64=0x0], 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @typedef={0xd}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x0, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000a80)=""/47, 0x54, 0x2f, 0x1, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x1c, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x200}, [@map_idx={0x18, 0xb}, @generic={0x5, 0x0, 0xd, 0x40}, @ringbuf_query, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @printk={@d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000600)='GPL\x00', 0xfff, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @tracing=0x17, r8, 0x8, &(0x7f0000000b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x200, 0x6}, 0x10, 0x0, r1, 0xa, &(0x7f0000000b80)=[r0, 0xffffffffffffffff, r4], &(0x7f0000000bc0)=[{0x0, 0x1, 0x1, 0xb}, {0x0, 0x3, 0x10, 0x6}, {0x1, 0x4, 0x8, 0x8}, {0x4, 0x4, 0xb, 0x7}, {0x0, 0x2, 0x8, 0x6}, {0x4, 0x5, 0x2, 0xb}, {0x1, 0x4, 0x9, 0x6}, {0x3, 0x2, 0x2, 0x9}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x5, 0x1, 0x7}], 0x10, 0x9}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.184295748s ago: executing program 4 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x10, &(0x7f0000000580)="00fe000000000000", &(0x7f00000005c0)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.949976003s ago: executing program 4 (id=7193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18021817000000200000000000000000850000009e000000c300000a0000000095"], &(0x7f0000000580)='GPL\x00', 0x5}, 0x94) 1.949077143s ago: executing program 1 (id=7194): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x1, 0x7, 0x4, 0x5, 0x8000000}, 0x50) 1.867667055s ago: executing program 3 (id=7195): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x37a5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x37a5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @union={0xd, 0x6, 0x0, 0x5, 0x0, 0x6, [{0x4, 0x1, 0x7f}, {0xa, 0x0, 0x3}, {0x10, 0x0, 0x743}, {0xd, 0x1, 0x5}, {0x6, 0x3, 0x9}, {0x7, 0x1, 0x9}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x30, 0x30, 0x0]}}, &(0x7f0000000140)=""/221, 0xae, 0xdd, 0x0, 0x5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x7, 0x8000, 0x7fff, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x5, 0x3}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x7, 0x8000, 0x7fff, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x5, 0x3}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000340)=0x1) socketpair(0x8, 0x6, 0x1, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000003c0)={r4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0xffff8001, 0x9, 0xd68, 0x3004, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x0, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000004c0)='GPL\x00', 0x77, 0x0, &(0x7f0000000500), 0x41000, 0x2a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x5, 0x2}, 0x10, r8, r3, 0x1, &(0x7f00000009c0)=[r2, r5, r0, r3, r9, r2, r10, r2], &(0x7f0000000a00)=[{0x1, 0x4, 0xe, 0x3}], 0x10, 0xf310}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b00)={r4}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000b40)={'bond_slave_0\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) (async) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000bc0)={r12, r3, 0x0, r3}, 0x10) gettid() write$cgroup_devices(r3, &(0x7f0000000c00)={'c', ' *:* ', 'm\x00'}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000c80)={'wg0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000c80)={'wg0\x00', 0x200}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r9}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x1e, &(0x7f0000000d00)=@raw=[@alu={0x4, 0x1, 0x3, 0x4, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xc0000}, @jmp={0x5, 0x1, 0x4, 0x6, 0x8, 0x10, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x3, 0xa, 0x40, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit], &(0x7f0000000e00)='syzkaller\x00', 0xc4a, 0x1a, &(0x7f0000000e40)=""/26, 0x41100, 0x2a, '\x00', r7, 0x25, r3, 0x8, &(0x7f0000000e80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000f00)=[{0x5, 0x1, 0x5, 0x8}, {0x4, 0x1, 0xd}, {0x3, 0x2, 0x6, 0x1}, {0x1, 0x2, 0x6, 0x2}], 0x10, 0x7}, 0x94) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001180)=r8, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_ext={0x1c, 0x22, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @generic={0xfb, 0x9, 0x7, 0x3, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001140)='GPL\x00', 0x4f91714d, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f00000011c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x0, 0xe, 0x7f, 0xfffffff4}, 0x10, 0x966d, r11, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) write$cgroup_type(r3, &(0x7f0000001300), 0x9) (async) write$cgroup_type(r3, &(0x7f0000001300), 0x9) close(r6) (async) close(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@fallback=r6, r11, 0xb, 0x87a89f5e7cef0ccb}, 0x20) socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000001380)) (async) socketpair(0x5, 0x80000, 0x7ff, &(0x7f0000001380)) bpf$ITER_CREATE(0x21, &(0x7f00000013c0)={r12}, 0x8) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNGETFILTER(r13, 0x801054db, &(0x7f0000001400)=""/5) (async) ioctl$TUNGETFILTER(r13, 0x801054db, &(0x7f0000001400)=""/5) 1.67234139s ago: executing program 1 (id=7196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0xd18c9b60, &(0x7f0000000140)=[{&(0x7f00000001c0)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4000000) 1.67154615s ago: executing program 4 (id=7197): r0 = perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x7b7ddc52bd68ea5f, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000280)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x942, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8001, 0x1}, 0x13500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0xff, 0x43a19d76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x188c8, 0xfe, 0x8, 0x1, 0x4, 0xd, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800031282c300e4b68b00"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYRES8, @ANYRESOCT=r4, @ANYRES64=r9, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r9, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000009000000000000000100000018220000", @ANYRES32=r7, @ANYBLOB="00000000010001001831000003000000000000000000000018230000", @ANYRES32=r9, @ANYRESDEC], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xe4, &(0x7f0000000580)=""/228, 0x41000, 0x2, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xe, 0x1, 0x6}, 0x10, 0x8269, r10, 0x7, 0x0, &(0x7f0000000800)=[{0x0, 0x2, 0xb, 0x7}, {0x5, 0x5, 0x6, 0x1}, {0x2, 0x2, 0x2, 0xb}, {0x3, 0x4, 0xb, 0x4}, {0x1, 0x1, 0xf, 0x1}, {0x3, 0x4, 0x8, 0x2}, {0x3, 0x5, 0xd, 0x9}], 0x10, 0x8}, 0x94) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000c80)="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", 0xff}, {&(0x7f0000000d80)="58b6d5b64aa08dd4a4eaa5aa1ab3c74cb2a1cbc10196a8671af419ce46052ce17ad7ea956f4b8c0979eb536326753fa26c13189b38b884d6d1e3f0a51f1d1a3127a854d05e2196880193bc594a69de786a020e3eb7e5948b032d6ff359c294a1797b49cca1d1883206be8b0430c897abe5", 0x71}, {&(0x7f0000000e00)="dba1343595d29ee4a7bbe6a11c4e9628d3c2f5d268cb541c42ba19c75feb3e9dcf12ff4cb62126d0c340e49509602383422eab8d3d11bfddae6f3008d0185d9512ee7587d5ab2764b1c2f2327e70923d943ddfb355c22c6e87aca272e4eaec12201524a6b194727959958bf7b657909f63099046faed68976bebc6a2264f4f44910c05da9f9fbfd1d8d9a5bcb950cdf168cc499263b49ce220588718d7c1b05108ced26baaf0ac6cf17f4aa38c71f5442f32", 0xb2}, {&(0x7f0000001500)="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", 0x1000}], 0x5, 0x0, 0x0, 0x1f000801}, 0x8c8) 1.23252749s ago: executing program 3 (id=7198): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 875.317949ms ago: executing program 3 (id=7199): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x9, 0x1, 0x2, 0xff, 0x0, 0x3f46, 0x800, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7ff, 0x8000000000000000}, 0x100404, 0x4, 0x2, 0x9, 0x4, 0x0, 0x8e32, 0x0, 0x6}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) 783.981891ms ago: executing program 1 (id=7200): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/99, 0x63}, {&(0x7f0000000880)=""/157, 0x9d}], 0x3}, 0x2001) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f00000014c0), 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000a00), 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000680)=@isdn, 0x80, &(0x7f0000000700)=[{0x0, 0x4c2}], 0x1}, 0x10002) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10012) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000edff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x0, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1000, 0x7, 0x7, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x7, 0xc, &(0x7f0000001300)=ANY=[], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f00000014c0)=ANY=[], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000001540)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5796a9e, 0x241b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000020, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffeffffbffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000015c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001600)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000001640), 0x40010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x8000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001300)=r5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000280)="07ed4e4b8b9f6932f647092293919a1e9c40b0d2a103a9d0a62eadcab9be2b972028ca28cff94df5418bada68aff2a3e4dde7733d6a3aa6e9f39b75d5d6c5a0037b1dfd3e8ed72be394a53891bc1b556068ad678bedf7c68c96ba0175751f4e4e68aa0f6c553d5fd6c9888986ec2603c32da132a787472effc6c4e9bad0828bf273c97be840382830bcb1c5f1ce9fbb79b1619716eaa", &(0x7f0000000340)=""/92, &(0x7f00000003c0)="2135fde2370da05da8bb9443f41e5d9421ead1f422c277628fe0d3c688fc2626f2358d72c305513572c565685677b961f3b8410b93af3db9135f1d5620d2810f67b87b72c8d03b42e19842f828da021bb81bf48485863f652848759453ef576ba4537278530df7ae1c23feed5c544d27e18dd25c1ed9b1ea89501f5179b01878529ca10ef4d5cb7b3c00a9432a0c000d96ac18bcefed2a1110f0b570478e409c5de01297eaa2d02ae897e849bd2023e9577ec5a2353c1aeeeee67c0bcc1db263d3", &(0x7f00000004c0)="f8de53f7af7625fcfb3d741b194f250a28093356bc70291b5dee82cf1787e8d2c427783f2ade5e68d7aceb1abc36dcf18e5ee4b91dcb8f7d6f118b78dda32741b5ad18e1b3accb284ced837d316709274f1fbe88e029020562456a33b1e375fcf4d67b00fa7e", 0x1, r12}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r12, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000b00)=[{}, {}], 0x10, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) 343.310471ms ago: executing program 4 (id=7201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000600)=r4, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x57c, '\x00', r1, r4, 0x0, 0x1, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000007808500000004"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r6}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={&(0x7f00000006c0)="4f7202dbb6203cc6d8c4f6", &(0x7f0000000700)=""/88, &(0x7f0000000780)="de99cdee320d3718b63b864186a0f6d3ffae03bc2fb95d667bad7a622ddc110d1cf9988bae2ae0db0479e4f3184823653a6e47d256d7f1d4febc40d49c714828b402c45c47f54dc9756c19f07705e72c5a084687d12ce6adfc4ae8eda80170f90b1d610a1256ea5790f746ab9064b42fc87a8065897298b915d83031f4a4bd88255a9003a983fc0c2c984922dd547d78a9264bd1d6974eb801b5809f61ad4d488497d118b31f27e39a8afce8ea470ae09cf678b27d72acc0b0ee0fe2", &(0x7f0000000840)="6062bae7491ac599dbf2d86a9bb105820bd9e54baeba5dfce76bc6f6ad326984ba2a2c75b707581889d7df63879d13049d08a07497777fd52cdc1e459ec7c954206372d5afa90288d2a0734511fac9", 0x5, r5, 0x4}, 0x38) 0s ago: executing program 3 (id=7202): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4005) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x8, 0x10, &(0x7f0000000980), 0x10}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) sendmsg$sock(r1, &(0x7f0000000080)={&(0x7f0000000140)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) close(r1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802", 0x26}, {&(0x7f0000000100)="2afd354e67137a6d", 0x8}], 0x2}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): : 'syz.3.6602': attribute type 10 has an invalid length. [ 1171.722394][T27195] bridge0: port 2(team0) entered disabled state [ 1171.806530][T27195] team0: left allmulticast mode [ 1171.828430][T27195] team_slave_1: left allmulticast mode [ 1171.854840][T27195] batadv0: left allmulticast mode [ 1171.904756][T27195] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1171.923271][T27195] team0: left promiscuous mode [ 1171.941209][T27195] team_slave_1: left promiscuous mode [ 1171.967077][T27195] batadv0: left promiscuous mode [ 1171.972167][T27195] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1172.002435][T27195] bridge0: port 2(team0) entered disabled state [ 1172.125026][T27195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.164189][T27195] bond0: (slave team0): Enslaving as an active interface with an up link [ 1172.203432][T27193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1172.382021][T27208] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6605'. [ 1172.401693][T27209] syzkaller0: entered promiscuous mode [ 1172.409981][T27209] syzkaller0: entered allmulticast mode [ 1172.641236][T27217] netlink: 'syz.3.6606': attribute type 10 has an invalid length. [ 1172.646988][T27220] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1172.654464][T27217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1172.686649][T27217] team0: entered promiscuous mode [ 1172.692929][T27217] team_slave_1: entered promiscuous mode [ 1172.714092][T27217] batadv0: entered promiscuous mode [ 1172.720946][T27217] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1172.735123][T27217] team0: entered allmulticast mode [ 1172.741827][T27217] team_slave_1: entered allmulticast mode [ 1172.753930][T27217] batadv0: entered allmulticast mode [ 1172.762444][T27217] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1172.825831][T27217] bond0: (slave team0): Releasing backup interface [ 1173.072635][T27217] bridge0: port 2(team0) entered blocking state [ 1173.092966][T27217] bridge0: port 2(team0) entered disabled state [ 1173.124627][ T3430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1173.543780][ T8920] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1173.553104][ T8920] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1174.335199][T27242] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1174.350800][T27245] netlink: 'syz.1.6616': attribute type 10 has an invalid length. [ 1174.360479][T27245] team0: left promiscuous mode [ 1174.380622][T27245] team_slave_1: left promiscuous mode [ 1174.386483][T27245] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1174.400561][T27245] bond0: left promiscuous mode [ 1174.407566][T27245] bond_slave_0: left promiscuous mode [ 1174.417361][T27245] bond_slave_1: left promiscuous mode [ 1174.424720][T27245] team0: left allmulticast mode [ 1174.445938][T27245] team_slave_1: left allmulticast mode [ 1174.452804][T27245] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1174.471651][T27245] bond0: left allmulticast mode [ 1174.479845][T27245] bond_slave_0: left allmulticast mode [ 1174.485366][T27245] bond_slave_1: left allmulticast mode [ 1174.495176][T27245] geneve0: left allmulticast mode [ 1174.517274][T27245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.624301][T27255] syzkaller0: entered promiscuous mode [ 1174.634084][T27255] syzkaller0: entered allmulticast mode [ 1174.704984][T27261] netlink: 'syz.4.6621': attribute type 21 has an invalid length. [ 1174.726409][T27261] netlink: 'syz.4.6621': attribute type 10 has an invalid length. [ 1174.748501][T27261] bridge0: port 4(dummy0) entered disabled state [ 1174.755189][T27261] bridge0: port 3(team0) entered disabled state [ 1174.762886][T27261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.770906][T27261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.832438][T27261] bridge0: port 4(dummy0) entered blocking state [ 1174.839031][T27261] bridge0: port 4(dummy0) entered forwarding state [ 1174.845781][T27261] bridge0: port 3(team0) entered blocking state [ 1174.852306][T27261] bridge0: port 3(team0) entered forwarding state [ 1174.859067][T27261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.866385][T27261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.873975][T27261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.881270][T27261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.920551][T27261] bridge0: port 4(dummy0) entered disabled state [ 1174.927315][T27261] bridge0: port 3(team0) entered disabled state [ 1174.933829][T27261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.941122][T27261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.984156][T27270] netlink: 'syz.1.6624': attribute type 10 has an invalid length. [ 1175.004307][T27270] team0: entered promiscuous mode [ 1175.032934][T27270] team_slave_1: entered promiscuous mode [ 1175.050815][T27270] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1175.064321][T27270] bond0: entered promiscuous mode [ 1175.082837][T27270] bond_slave_0: entered promiscuous mode [ 1175.092093][T27270] bond_slave_1: entered promiscuous mode [ 1175.113179][T27270] team0: entered allmulticast mode [ 1175.118912][T27270] team_slave_1: entered allmulticast mode [ 1175.124931][T27270] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1175.133042][T27270] bond0: entered allmulticast mode [ 1175.138588][T27270] bond_slave_0: entered allmulticast mode [ 1175.144586][T27270] bond_slave_1: entered allmulticast mode [ 1175.151287][T27270] geneve0: entered allmulticast mode [ 1175.174621][T27270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.202665][T27270] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1175.220805][T27274] netlink: 'syz.4.6625': attribute type 10 has an invalid length. [ 1175.558702][T27281] __nla_validate_parse: 4 callbacks suppressed [ 1175.558768][T27281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6628'. [ 1175.592016][T27281] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1175.654135][T27282] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6627'. [ 1176.143910][T27295] FAULT_INJECTION: forcing a failure. [ 1176.143910][T27295] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.158286][T27291] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6639'. [ 1176.181874][T27295] CPU: 0 PID: 27295 Comm: syz.3.6632 Not tainted syzkaller #0 [ 1176.189402][T27295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1176.199480][T27295] Call Trace: [ 1176.202773][T27295] [ 1176.205713][T27295] dump_stack_lvl+0x18c/0x250 [ 1176.210416][T27295] ? show_regs_print_info+0x20/0x20 [ 1176.215631][T27295] ? load_image+0x420/0x420 [ 1176.220162][T27295] ? __might_sleep+0xe0/0xe0 [ 1176.224772][T27295] ? __lock_acquire+0x7eb0/0x7eb0 [ 1176.229875][T27295] should_fail_ex+0x394/0x4c0 [ 1176.234578][T27295] should_failslab+0x9/0x20 [ 1176.239098][T27295] slab_pre_alloc_hook+0x59/0x300 [ 1176.244137][T27295] kmem_cache_alloc+0x5a/0x2c0 [ 1176.250149][T27295] ? security_file_alloc+0x34/0x120 [ 1176.255390][T27295] security_file_alloc+0x34/0x120 [ 1176.260445][T27295] init_file+0x94/0x1f0 [ 1176.264623][T27295] alloc_empty_file+0xb7/0x1d0 [ 1176.269405][T27295] alloc_file+0x5b/0x600 [ 1176.273670][T27295] alloc_file_pseudo+0x184/0x210 [ 1176.278725][T27295] ? fput+0x1a0/0x1a0 [ 1176.282728][T27295] ? alloc_fd+0x590/0x640 [ 1176.287442][T27295] sock_alloc_file+0xb7/0x280 [ 1176.292152][T27295] __sys_socket+0x140/0x1b0 [ 1176.296673][T27295] __x64_sys_socket+0x7a/0x90 [ 1176.301376][T27295] do_syscall_64+0x55/0xb0 [ 1176.305817][T27295] ? clear_bhb_loop+0x40/0x90 [ 1176.310606][T27295] ? clear_bhb_loop+0x40/0x90 [ 1176.315297][T27295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1176.321221][T27295] RIP: 0033:0x7f7f3af9e2d9 [ 1176.325654][T27295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.345284][T27295] RSP: 002b:00007f7f3be2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1176.353716][T27295] RAX: ffffffffffffffda RBX: 00007f7f3b225fa0 RCX: 00007f7f3af9e2d9 [ 1176.361715][T27295] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 1176.369701][T27295] RBP: 00007f7f3be2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.377697][T27295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.385691][T27295] R13: 00007f7f3b226038 R14: 00007f7f3b225fa0 R15: 00007ffe86a4f308 [ 1176.393696][T27295] [ 1177.422739][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.430300][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.644029][T27317] validate_nla: 1 callbacks suppressed [ 1178.644049][T27317] netlink: 'syz.4.6637': attribute type 10 has an invalid length. [ 1178.687208][T27317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6637'. [ 1178.951104][T27324] netlink: 'syz.2.6640': attribute type 10 has an invalid length. [ 1178.973834][T27324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6640'. [ 1179.001063][T27324] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1179.101495][T27333] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6644'. [ 1179.600124][T27336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6641'. [ 1179.752308][T27346] netlink: 'syz.4.6654': attribute type 10 has an invalid length. [ 1179.779508][T27346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6654'. [ 1179.879927][T27349] netlink: 'syz.2.6649': attribute type 7 has an invalid length. [ 1181.243211][T27365] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6656'. [ 1181.261716][T27373] netlink: 'syz.4.6657': attribute type 10 has an invalid length. [ 1181.279806][T27373] veth0_macvtap: left promiscuous mode [ 1182.206725][T27396] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6667'. [ 1182.271242][T27398] netlink: 'syz.2.6668': attribute type 10 has an invalid length. [ 1182.290822][T27398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1182.343309][T27398] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1182.855302][T27410] netlink: 'syz.3.6673': attribute type 58 has an invalid length. [ 1182.863544][T27410] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1182.882479][T27414] netlink: 'syz.3.6673': attribute type 58 has an invalid length. [ 1182.892193][T27414] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1183.042794][T27420] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1183.273159][T27432] netlink: 'syz.4.6681': attribute type 29 has an invalid length. [ 1183.312430][T27432] netlink: 'syz.4.6681': attribute type 29 has an invalid length. [ 1185.393759][T27475] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.6692'. [ 1186.175862][T27493] FAULT_INJECTION: forcing a failure. [ 1186.175862][T27493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.195470][T27493] CPU: 0 PID: 27493 Comm: syz.4.6702 Not tainted syzkaller #0 [ 1186.203095][T27493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1186.213193][T27493] Call Trace: [ 1186.216506][T27493] [ 1186.219472][T27493] dump_stack_lvl+0x18c/0x250 [ 1186.224208][T27493] ? show_regs_print_info+0x20/0x20 [ 1186.229542][T27493] ? load_image+0x420/0x420 [ 1186.234102][T27493] ? __lock_acquire+0x7eb0/0x7eb0 [ 1186.239197][T27493] should_fail_ex+0x394/0x4c0 [ 1186.243940][T27493] _copy_from_user+0x2f/0xe0 [ 1186.248593][T27493] __copy_msghdr+0x388/0x560 [ 1186.253332][T27493] ___sys_sendmsg+0x214/0x360 [ 1186.258070][T27493] ? __sys_sendmsg+0x2b0/0x2b0 [ 1186.263085][T27493] ? __lock_acquire+0x7eb0/0x7eb0 [ 1186.268421][T27493] __se_sys_sendmsg+0x1d0/0x2c0 [ 1186.273326][T27493] ? __x64_sys_sendmsg+0x80/0x80 [ 1186.278481][T27493] ? lockdep_hardirqs_on+0x98/0x150 [ 1186.283972][T27493] do_syscall_64+0x55/0xb0 [ 1186.288450][T27493] ? clear_bhb_loop+0x40/0x90 [ 1186.293200][T27493] ? clear_bhb_loop+0x40/0x90 [ 1186.298520][T27493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.304466][T27493] RIP: 0033:0x7f48d639e2d9 [ 1186.308898][T27493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.328526][T27493] RSP: 002b:00007f48d7236028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.336976][T27493] RAX: ffffffffffffffda RBX: 00007f48d6625fa0 RCX: 00007f48d639e2d9 [ 1186.344980][T27493] RDX: 0000000000000000 RSI: 00002000000022c0 RDI: 0000000000000003 [ 1186.352965][T27493] RBP: 00007f48d7236090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.360967][T27493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.368952][T27493] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1186.376978][T27493] [ 1186.660447][T27503] tap0: tun_chr_ioctl cmd 1074820166 [ 1187.007214][T27509] validate_nla: 2 callbacks suppressed [ 1187.007281][T27509] netlink: 'syz.4.6710': attribute type 4 has an invalid length. [ 1190.791266][T27545] netlink: 'syz.3.6721': attribute type 3 has an invalid length. [ 1190.839338][T27545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1191.496700][T27554] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1191.719959][T27556] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1192.099919][T27558] netlink: 'syz.2.6724': attribute type 4 has an invalid length. [ 1192.410084][T27569] netlink: 'syz.2.6727': attribute type 21 has an invalid length. [ 1192.427308][T27569] IPv6: NLM_F_CREATE should be specified when creating new route [ 1192.435323][T27569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1192.442707][T27569] IPv6: NLM_F_CREATE should be set when creating new route [ 1192.450030][T27569] IPv6: NLM_F_CREATE should be set when creating new route [ 1192.457342][T27569] IPv6: NLM_F_CREATE should be set when creating new route [ 1192.493612][T27575] tap0: tun_chr_ioctl cmd 1074025675 [ 1192.506414][T27575] tap0: persist enabled [ 1192.752037][T27585] FAULT_INJECTION: forcing a failure. [ 1192.752037][T27585] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.766113][T27585] CPU: 1 PID: 27585 Comm: syz.4.6730 Not tainted syzkaller #0 [ 1192.773608][T27585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1192.783659][T27585] Call Trace: [ 1192.786960][T27585] [ 1192.789879][T27585] dump_stack_lvl+0x18c/0x250 [ 1192.794554][T27585] ? show_regs_print_info+0x20/0x20 [ 1192.799838][T27585] ? load_image+0x420/0x420 [ 1192.804352][T27585] ? __might_sleep+0xe0/0xe0 [ 1192.806223][T27588] netlink: 'syz.1.6731': attribute type 3 has an invalid length. [ 1192.808954][T27585] ? __lock_acquire+0x7eb0/0x7eb0 [ 1192.821768][T27585] should_fail_ex+0x394/0x4c0 [ 1192.826485][T27585] should_failslab+0x9/0x20 [ 1192.831022][T27585] slab_pre_alloc_hook+0x59/0x300 [ 1192.836076][T27585] kmem_cache_alloc+0x5a/0x2c0 [ 1192.836875][T27588] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1192.840852][T27585] ? __kernfs_new_node+0xe5/0x7f0 [ 1192.855175][T27585] __kernfs_new_node+0xe5/0x7f0 [ 1192.860058][T27585] ? kernfs_new_node+0x260/0x260 [ 1192.865032][T27585] ? up_write+0x1be/0x410 [ 1192.869388][T27585] kernfs_new_node+0x14c/0x260 [ 1192.874163][T27585] __kernfs_create_file+0x4b/0x2e0 [ 1192.879281][T27585] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1192.884658][T27585] internal_create_group+0x431/0xd10 [ 1192.889983][T27585] ? kernfs_add_one+0x149/0x6b0 [ 1192.894846][T27585] ? sysfs_create_group+0x20/0x20 [ 1192.899870][T27585] ? up_write+0x1be/0x410 [ 1192.904211][T27585] sysfs_create_groups+0x59/0x120 [ 1192.909322][T27585] device_add_attrs+0xdf/0x830 [ 1192.914089][T27585] ? device_add_class_symlinks+0x240/0x240 [ 1192.919900][T27585] ? device_add_class_symlinks+0x21f/0x240 [ 1192.925882][T27585] device_add+0x51a/0xc40 [ 1192.930216][T27585] netdev_register_kobject+0x188/0x320 [ 1192.935682][T27585] register_netdevice+0x12aa/0x1ba0 [ 1192.940893][T27585] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1192.946527][T27585] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1192.952941][T27585] ? mutex_unlock+0x10/0x10 [ 1192.957464][T27585] ? vscnprintf+0x80/0x80 [ 1192.961808][T27585] ppp_dev_configure+0x850/0xad0 [ 1192.966762][T27585] ppp_ioctl+0xafb/0x1bc0 [ 1192.971109][T27585] ? ppp_poll+0x250/0x250 [ 1192.975441][T27585] ? __fget_files+0x28/0x460 [ 1192.980041][T27585] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1192.984990][T27585] ? security_file_ioctl+0x80/0xa0 [ 1192.990131][T27585] ? ppp_poll+0x250/0x250 [ 1192.994476][T27585] __se_sys_ioctl+0xfd/0x170 [ 1192.999120][T27585] do_syscall_64+0x55/0xb0 [ 1193.003728][T27585] ? clear_bhb_loop+0x40/0x90 [ 1193.008409][T27585] ? clear_bhb_loop+0x40/0x90 [ 1193.013280][T27585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.019267][T27585] RIP: 0033:0x7f48d639e2d9 [ 1193.023684][T27585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.043299][T27585] RSP: 002b:00007f48d7236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1193.051718][T27585] RAX: ffffffffffffffda RBX: 00007f48d6625fa0 RCX: 00007f48d639e2d9 [ 1193.059688][T27585] RDX: 000000110c230000 RSI: 00000000c004743e RDI: 0000000000000003 [ 1193.067662][T27585] RBP: 00007f48d7236090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.075676][T27585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1193.083752][T27585] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1193.091829][T27585] [ 1193.417419][T27594] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1194.712698][T27604] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1194.732744][T27607] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1194.921098][T27605] netlink: 'syz.1.6737': attribute type 4 has an invalid length. [ 1195.148678][T27616] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1195.607378][T27622] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1196.554563][T27640] netlink: 'syz.2.6752': attribute type 3 has an invalid length. [ 1196.566273][T27640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1196.999817][T27643] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1200.214363][T27627] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1200.224076][T27631] netlink: 'syz.1.6746': attribute type 2 has an invalid length. [ 1200.234081][T27631] netlink: 'syz.1.6746': attribute type 8 has an invalid length. [ 1200.242105][T27631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1200.257565][T27634] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6749'. [ 1200.467410][T27651] FAULT_INJECTION: forcing a failure. [ 1200.467410][T27651] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.480170][T27651] CPU: 0 PID: 27651 Comm: syz.4.6755 Not tainted syzkaller #0 [ 1200.487938][T27651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1200.498092][T27651] Call Trace: [ 1200.501391][T27651] [ 1200.504336][T27651] dump_stack_lvl+0x18c/0x250 [ 1200.509057][T27651] ? show_regs_print_info+0x20/0x20 [ 1200.514645][T27651] ? load_image+0x420/0x420 [ 1200.519189][T27651] ? skb_network_protocol+0x533/0x790 [ 1200.524573][T27651] should_fail_ex+0x394/0x4c0 [ 1200.529442][T27651] should_failslab+0x9/0x20 [ 1200.534073][T27651] slab_pre_alloc_hook+0x59/0x300 [ 1200.539892][T27651] kmem_cache_alloc+0x5a/0x2c0 [ 1200.546628][T27651] ? skb_clone+0x1eb/0x370 [ 1200.551076][T27651] skb_clone+0x1eb/0x370 [ 1200.555322][T27651] ? dev_queue_xmit_nit+0x204/0xba0 [ 1200.560657][T27651] dev_queue_xmit_nit+0x23f/0xba0 [ 1200.565697][T27651] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1200.570904][T27651] dev_hard_start_xmit+0x150/0x790 [ 1200.576030][T27651] __dev_queue_xmit+0x1be8/0x37e0 [ 1200.581070][T27651] ? __dev_queue_xmit+0x272/0x37e0 [ 1200.586212][T27651] ? netdev_core_pick_tx+0x370/0x370 [ 1200.591521][T27651] ? pskb_expand_head+0x17a/0x1150 [ 1200.596638][T27651] ? pskb_expand_head+0x17a/0x1150 [ 1200.601827][T27651] ? skb_release_data+0x1de/0x7f0 [ 1200.606958][T27651] ? __bpf_redirect+0x4d1/0xdf0 [ 1200.611814][T27651] __bpf_tx_skb+0x181/0x260 [ 1200.616350][T27651] bpf_clone_redirect+0x315/0x4a0 [ 1200.621383][T27651] ? bpf_test_run+0x174/0x870 [ 1200.626104][T27651] bpf_prog_c9d58f5b8698340d+0x5e/0x63 [ 1200.631683][T27651] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1200.637697][T27651] ? preempt_schedule+0xc0/0xd0 [ 1200.642673][T27651] ? bpf_test_run+0x174/0x870 [ 1200.647374][T27651] ? preempt_schedule_common+0x82/0xc0 [ 1200.652866][T27651] ? schedule_preempt_disabled+0x20/0x20 [ 1200.658526][T27651] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1200.664619][T27651] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1200.669920][T27651] ? lock_chain_count+0x20/0x20 [ 1200.674861][T27651] ? preempt_schedule_thunk+0x1a/0x30 [ 1200.680790][T27651] ? __local_bh_disable_ip+0x108/0x1a0 [ 1200.686604][T27651] ? __cant_sleep+0x220/0x220 [ 1200.691295][T27651] ? __local_bh_enable_ip+0x14b/0x1c0 [ 1200.696802][T27651] ? _local_bh_enable+0xa0/0xa0 [ 1200.701812][T27651] ? bpf_test_run+0x174/0x870 [ 1200.706680][T27651] ? kvm_sched_clock_read+0x11/0x20 [ 1200.711922][T27651] bpf_test_run+0x4fa/0x870 [ 1200.716448][T27651] ? bpf_test_run+0x174/0x870 [ 1200.721411][T27651] ? dst_hold+0x70/0x70 [ 1200.725620][T27651] ? eth_get_headlen+0x210/0x210 [ 1200.730665][T27651] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1200.736082][T27651] ? cpu_online+0x60/0x60 [ 1200.740706][T27651] bpf_prog_test_run+0x31f/0x390 [ 1200.745657][T27651] __sys_bpf+0x49d/0x890 [ 1200.750025][T27651] ? bpf_link_show_fdinfo+0x560/0x560 [ 1200.755448][T27651] ? lock_chain_count+0x20/0x20 [ 1200.760338][T27651] __x64_sys_bpf+0x7c/0x90 [ 1200.765309][T27651] do_syscall_64+0x55/0xb0 [ 1200.769835][T27651] ? clear_bhb_loop+0x40/0x90 [ 1200.774525][T27651] ? clear_bhb_loop+0x40/0x90 [ 1200.779214][T27651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.785228][T27651] RIP: 0033:0x7f48d639e2d9 [ 1200.789652][T27651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.809361][T27651] RSP: 002b:00007f48d7236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1200.817899][T27651] RAX: ffffffffffffffda RBX: 00007f48d6625fa0 RCX: 00007f48d639e2d9 [ 1200.826071][T27651] RDX: 000000000000002c RSI: 0000200000000f80 RDI: 000000000000000a [ 1200.834095][T27651] RBP: 00007f48d7236090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.842168][T27651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.850145][T27651] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1200.858131][T27651] [ 1201.743946][T27666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1201.797886][T27666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1201.842517][T27666] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1201.887217][T27666] netlink: 'syz.4.6759': attribute type 10 has an invalid length. [ 1201.977149][T27666] bridge0: port 3(team0) entered disabled state [ 1202.002862][T27666] team_slave_0: left promiscuous mode [ 1202.011625][T27666] team_slave_0: left allmulticast mode [ 1202.054862][T27666] team0 (unregistering): Port device team_slave_0 removed [ 1202.068147][T27666] team_slave_1: left promiscuous mode [ 1202.073929][T27666] team_slave_1: left allmulticast mode [ 1202.090379][T27666] team0 (unregistering): Port device team_slave_1 removed [ 1202.108668][T27666] batadv0: left promiscuous mode [ 1202.117380][T27666] batadv0: left allmulticast mode [ 1202.156988][T27666] team0 (unregistering): Port device batadv0 removed [ 1202.167091][T27666] geneve1: left promiscuous mode [ 1202.172239][T27666] geneve1: left allmulticast mode [ 1202.257831][T27666] team0 (unregistering): Port device geneve1 removed [ 1202.275743][T27666] bond0: left promiscuous mode [ 1202.281300][T27666] bond_slave_0: left promiscuous mode [ 1202.287478][T27666] bond_slave_1: left promiscuous mode [ 1202.301563][T27666] bond0: left allmulticast mode [ 1202.318366][T27666] bond_slave_0: left allmulticast mode [ 1202.329200][T27666] bond_slave_1: left allmulticast mode [ 1202.365755][T27666] team0 (unregistering): Port device bond0 removed [ 1202.445383][T27673] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1202.485553][T27674] netlink: 'syz.1.6761': attribute type 10 has an invalid length. [ 1202.510971][T27674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1202.529835][T27674] dummy0: entered promiscuous mode [ 1202.536755][T27674] dummy0: entered allmulticast mode [ 1202.548802][T27674] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1202.635638][T27681] bridge0: entered allmulticast mode [ 1202.673824][T27679] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6763'. [ 1202.932831][T27691] netlink: 'syz.1.6765': attribute type 29 has an invalid length. [ 1202.944250][T27691] netlink: 'syz.1.6765': attribute type 29 has an invalid length. [ 1202.972572][T27691] netlink: 'syz.1.6765': attribute type 29 has an invalid length. [ 1203.445967][T27704] netlink: 'syz.2.6771': attribute type 10 has an invalid length. [ 1203.455582][T27704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6771'. [ 1203.477465][T27704] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1203.991646][T27713] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6774'. [ 1204.325005][T27718] FAULT_INJECTION: forcing a failure. [ 1204.325005][T27718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.357472][T27718] CPU: 0 PID: 27718 Comm: syz.4.6775 Not tainted syzkaller #0 [ 1204.365024][T27718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1204.375374][T27718] Call Trace: [ 1204.378678][T27718] [ 1204.381640][T27718] dump_stack_lvl+0x18c/0x250 [ 1204.387839][T27718] ? show_regs_print_info+0x20/0x20 [ 1204.393077][T27718] ? load_image+0x420/0x420 [ 1204.397645][T27718] ? __might_fault+0xaa/0x120 [ 1204.402484][T27718] ? __lock_acquire+0x7eb0/0x7eb0 [ 1204.407627][T27718] ? bpf_percpu_hash_update+0x2b/0x200 [ 1204.413210][T27718] ? __virt_addr_valid+0x10c/0x380 [ 1204.418800][T27718] should_fail_ex+0x394/0x4c0 [ 1204.423698][T27718] _copy_from_user+0x2f/0xe0 [ 1204.428420][T27718] generic_map_update_batch+0x53e/0x800 [ 1204.434032][T27718] ? rcu_read_unlock+0xa0/0xa0 [ 1204.438879][T27718] ? __fdget+0x180/0x210 [ 1204.443247][T27718] ? rcu_read_unlock+0xa0/0xa0 [ 1204.448053][T27718] bpf_map_do_batch+0x3f2/0x600 [ 1204.452958][T27718] __sys_bpf+0x381/0x890 [ 1204.457252][T27718] ? bpf_link_show_fdinfo+0x560/0x560 [ 1204.463194][T27718] ? lock_chain_count+0x20/0x20 [ 1204.468093][T27718] __x64_sys_bpf+0x7c/0x90 [ 1204.472554][T27718] do_syscall_64+0x55/0xb0 [ 1204.476998][T27718] ? clear_bhb_loop+0x40/0x90 [ 1204.481873][T27718] ? clear_bhb_loop+0x40/0x90 [ 1204.486587][T27718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.492961][T27718] RIP: 0033:0x7f48d639e2d9 [ 1204.497429][T27718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.517341][T27718] RSP: 002b:00007f48d71f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1204.525798][T27718] RAX: ffffffffffffffda RBX: 00007f48d6626180 RCX: 00007f48d639e2d9 [ 1204.533821][T27718] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001a [ 1204.541830][T27718] RBP: 00007f48d71f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.549841][T27718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.557880][T27718] R13: 00007f48d6626218 R14: 00007f48d6626180 R15: 00007ffd940a1938 [ 1204.565906][T27718] [ 1204.898700][T27721] tap0: tun_chr_ioctl cmd 1074820166 [ 1205.083827][T27733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1205.095839][T27733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1205.187827][T27733] netlink: 'syz.1.6781': attribute type 10 has an invalid length. [ 1205.386327][T27733] team_slave_1: left promiscuous mode [ 1205.418599][T27733] team_slave_1: left allmulticast mode [ 1205.517710][T27733] team0 (unregistering): Port device team_slave_1 removed [ 1205.525296][T27733] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1205.554156][T27733] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1205.596097][T27733] team0 (unregistering): Port device netdevsim0 removed [ 1205.617347][T27733] bond0: left promiscuous mode [ 1205.622448][T27733] bond_slave_0: left promiscuous mode [ 1205.649416][T27733] bond_slave_1: left promiscuous mode [ 1205.655334][T27733] bond0: left allmulticast mode [ 1205.670227][T27733] bond_slave_0: left allmulticast mode [ 1205.675756][T27733] bond_slave_1: left allmulticast mode [ 1205.681311][T27733] geneve0: left allmulticast mode [ 1205.711432][T27733] team0 (unregistering): Port device bond0 removed [ 1205.787294][T27740] sit0: entered promiscuous mode [ 1205.796405][T27740] sit0: entered allmulticast mode [ 1206.089041][T27756] netlink: 'syz.4.6787': attribute type 10 has an invalid length. [ 1206.456089][T27770] netlink: 'syz.1.6795': attribute type 10 has an invalid length. [ 1206.581453][T27780] sctp: [Deprecated]: syz.3.6800 (pid 27780) Use of int in maxseg socket option. [ 1206.581453][T27780] Use struct sctp_assoc_value instead [ 1206.901290][T27788] syzkaller0: entered promiscuous mode [ 1206.922760][T27793] netlink: 'syz.2.6805': attribute type 10 has an invalid length. [ 1206.934335][T27793] __nla_validate_parse: 7 callbacks suppressed [ 1206.934351][T27793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1206.956177][T27793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1207.119033][T27806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1207.872973][T27826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1210.829881][T27826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1210.839844][T27830] netlink: 'syz.1.6817': attribute type 10 has an invalid length. [ 1210.858511][T27830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6817'. [ 1210.876558][T27832] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1210.893583][T27832] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1211.079345][T27838] netlink: 'syz.3.6821': attribute type 21 has an invalid length. [ 1211.170673][T27841] netlink: 'syz.4.6822': attribute type 28 has an invalid length. [ 1211.186009][T27841] netlink: 29 bytes leftover after parsing attributes in process `syz.4.6822'. [ 1211.594405][T27854] netlink: 'syz.2.6828': attribute type 10 has an invalid length. [ 1211.620470][T27854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1211.642983][T27854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1211.892522][T27862] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1211.968415][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1212.627892][T27886] netlink: 'syz.4.6837': attribute type 21 has an invalid length. [ 1212.646413][T27886] IPv6: NLM_F_CREATE should be specified when creating new route [ 1212.662948][T27886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1212.671795][T27886] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.680103][T27886] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.687638][T27886] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.914034][T27890] netlink: 'syz.3.6839': attribute type 10 has an invalid length. [ 1212.945690][T27890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1213.032639][T27890] bridge0: port 2(team0) entered blocking state [ 1213.039632][T27890] bridge0: port 2(team0) entered listening state [ 1213.072325][T27890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.330917][T27900] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.6843'. [ 1213.559755][T27903] netlink: 'syz.3.6844': attribute type 39 has an invalid length. [ 1213.620676][T27905] FAULT_INJECTION: forcing a failure. [ 1213.620676][T27905] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.634238][T27905] CPU: 1 PID: 27905 Comm: syz.4.6845 Not tainted syzkaller #0 [ 1213.641771][T27905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1213.651857][T27905] Call Trace: [ 1213.655161][T27905] [ 1213.658117][T27905] dump_stack_lvl+0x18c/0x250 [ 1213.662821][T27905] ? __sctp_connect+0x5b7/0xd80 [ 1213.667698][T27905] ? sctp_setsockopt+0x6d8/0x11e0 [ 1213.672754][T27905] ? show_regs_print_info+0x20/0x20 [ 1213.677985][T27905] ? load_image+0x420/0x420 [ 1213.682549][T27905] should_fail_ex+0x394/0x4c0 [ 1213.687280][T27905] should_failslab+0x9/0x20 [ 1213.691815][T27905] slab_pre_alloc_hook+0x59/0x300 [ 1213.696867][T27905] ? sctp_add_bind_addr+0x8c/0x360 [ 1213.702009][T27905] __kmem_cache_alloc_node+0x53/0x250 [ 1213.707424][T27905] ? sctp_add_bind_addr+0x8c/0x360 [ 1213.712574][T27905] kmalloc_trace+0x2a/0xe0 [ 1213.717037][T27905] sctp_add_bind_addr+0x8c/0x360 [ 1213.722018][T27905] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1213.727690][T27905] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1213.733441][T27905] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1213.739550][T27905] ? sctp_v6_is_any+0x64/0x70 [ 1213.744241][T27905] ? sctp_copy_one_addr+0x8c/0x350 [ 1213.749374][T27905] sctp_bind_addr_copy+0xb3/0x3c0 [ 1213.754417][T27905] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1213.760759][T27905] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1213.766063][T27905] ? __sctp_connect+0xd80/0xd80 [ 1213.770923][T27905] ? sctp_get_af_specific+0x29/0x70 [ 1213.776122][T27905] ? sctp_inet6_send_verify+0x80/0x300 [ 1213.781587][T27905] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1213.787399][T27905] __sctp_connect+0x5b7/0xd80 [ 1213.792346][T27905] ? sctp_send_asconf+0x170/0x170 [ 1213.797374][T27905] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1213.804923][T27905] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1213.810515][T27905] ? security_sctp_bind_connect+0x89/0xb0 [ 1213.816249][T27905] sctp_setsockopt_connectx+0x104/0x1a0 [ 1213.821803][T27905] sctp_setsockopt+0x6d8/0x11e0 [ 1213.826658][T27905] ? sock_common_recvmsg+0x190/0x190 [ 1213.831948][T27905] do_sock_setsockopt+0x175/0x1a0 [ 1213.836979][T27905] ? __fdget+0x180/0x210 [ 1213.841229][T27905] __x64_sys_setsockopt+0x182/0x200 [ 1213.846457][T27905] do_syscall_64+0x55/0xb0 [ 1213.850872][T27905] ? clear_bhb_loop+0x40/0x90 [ 1213.855550][T27905] ? clear_bhb_loop+0x40/0x90 [ 1213.860228][T27905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1213.866124][T27905] RIP: 0033:0x7f48d639e2d9 [ 1213.870544][T27905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.890163][T27905] RSP: 002b:00007f48d7236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1213.898583][T27905] RAX: ffffffffffffffda RBX: 00007f48d6625fa0 RCX: 00007f48d639e2d9 [ 1213.906552][T27905] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1213.914525][T27905] RBP: 00007f48d7236090 R08: 0000000000000010 R09: 0000000000000000 [ 1213.922492][T27905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.930466][T27905] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1213.938545][T27905] [ 1214.173900][T27911] FAULT_INJECTION: forcing a failure. [ 1214.173900][T27911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.194318][T27911] CPU: 0 PID: 27911 Comm: syz.2.6849 Not tainted syzkaller #0 [ 1214.201838][T27911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1214.211921][T27911] Call Trace: [ 1214.215230][T27911] [ 1214.218273][T27911] dump_stack_lvl+0x18c/0x250 [ 1214.222980][T27911] ? show_regs_print_info+0x20/0x20 [ 1214.228202][T27911] ? load_image+0x420/0x420 [ 1214.233175][T27911] ? __might_fault+0xaa/0x120 [ 1214.237885][T27911] ? __lock_acquire+0x7eb0/0x7eb0 [ 1214.242946][T27911] should_fail_ex+0x394/0x4c0 [ 1214.247661][T27911] _copy_from_user+0x2f/0xe0 [ 1214.252369][T27911] ___sys_sendmsg+0x1c7/0x360 [ 1214.257072][T27911] ? get_pid_task+0x20/0x1e0 [ 1214.261687][T27911] ? __sys_sendmsg+0x2b0/0x2b0 [ 1214.266564][T27911] ? __lock_acquire+0x7eb0/0x7eb0 [ 1214.271617][T27911] __se_sys_sendmsg+0x1d0/0x2c0 [ 1214.276596][T27911] ? __x64_sys_sendmsg+0x80/0x80 [ 1214.282027][T27911] ? lockdep_hardirqs_on+0x98/0x150 [ 1214.287272][T27911] do_syscall_64+0x55/0xb0 [ 1214.291695][T27911] ? clear_bhb_loop+0x40/0x90 [ 1214.296373][T27911] ? clear_bhb_loop+0x40/0x90 [ 1214.301051][T27911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1214.306978][T27911] RIP: 0033:0x7ff8c639e2d9 [ 1214.311393][T27911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.331018][T27911] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.339624][T27911] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1214.347601][T27911] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1214.355577][T27911] RBP: 00007ff8c72bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.363548][T27911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.371522][T27911] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1214.379599][T27911] [ 1214.487682][T27917] netlink: 'syz.4.6851': attribute type 10 has an invalid length. [ 1214.506591][T27917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6851'. [ 1214.769438][T27925] netlink: 'syz.4.6853': attribute type 2 has an invalid length. [ 1214.777874][T27925] netlink: 'syz.4.6853': attribute type 8 has an invalid length. [ 1214.785896][T27925] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1214.860358][T27929] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6854'. [ 1215.199179][T27941] FAULT_INJECTION: forcing a failure. [ 1215.199179][T27941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.256590][T27941] CPU: 0 PID: 27941 Comm: syz.1.6859 Not tainted syzkaller #0 [ 1215.264124][T27941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1215.274218][T27941] Call Trace: [ 1215.277520][T27941] [ 1215.280468][T27941] dump_stack_lvl+0x18c/0x250 [ 1215.285172][T27941] ? show_regs_print_info+0x20/0x20 [ 1215.290393][T27941] ? load_image+0x420/0x420 [ 1215.294932][T27941] ? __lock_acquire+0x7eb0/0x7eb0 [ 1215.299991][T27941] ? snprintf+0xe9/0x140 [ 1215.304272][T27941] should_fail_ex+0x394/0x4c0 [ 1215.308989][T27941] _copy_to_user+0x2f/0xa0 [ 1215.313876][T27941] simple_read_from_buffer+0xe7/0x150 [ 1215.319283][T27941] proc_fail_nth_read+0x1e8/0x260 [ 1215.324356][T27941] ? proc_fault_inject_write+0x360/0x360 [ 1215.330273][T27941] ? fsnotify_perm+0x271/0x5e0 [ 1215.335072][T27941] ? proc_fault_inject_write+0x360/0x360 [ 1215.340738][T27941] vfs_read+0x298/0x990 [ 1215.344937][T27941] ? kernel_read+0x1e0/0x1e0 [ 1215.349564][T27941] ? __fget_files+0x28/0x460 [ 1215.354192][T27941] ? __fget_files+0x3fc/0x460 [ 1215.358907][T27941] ? __fdget_pos+0x2a3/0x330 [ 1215.363612][T27941] ? ksys_read+0x74/0x260 [ 1215.367980][T27941] ksys_read+0x151/0x260 [ 1215.372349][T27941] ? vfs_write+0x9a0/0x9a0 [ 1215.376793][T27941] ? lockdep_hardirqs_on+0x98/0x150 [ 1215.382020][T27941] do_syscall_64+0x55/0xb0 [ 1215.386454][T27941] ? clear_bhb_loop+0x40/0x90 [ 1215.391153][T27941] ? clear_bhb_loop+0x40/0x90 [ 1215.395870][T27941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1215.401796][T27941] RIP: 0033:0x7f124875eb0e [ 1215.406244][T27941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1215.425970][T27941] RSP: 002b:00007f124961ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1215.434417][T27941] RAX: ffffffffffffffda RBX: 00007f12496206c0 RCX: 00007f124875eb0e [ 1215.442430][T27941] RDX: 000000000000000f RSI: 00007f12496200a0 RDI: 0000000000000005 [ 1215.450434][T27941] RBP: 00007f1249620090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.458438][T27941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.466441][T27941] R13: 00007f1248a26128 R14: 00007f1248a26090 R15: 00007ffecd517fb8 [ 1215.474469][T27941] [ 1215.558764][T27945] netlink: 'syz.3.6862': attribute type 10 has an invalid length. [ 1215.571471][T27945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6862'. [ 1215.611802][T27943] netlink: 'syz.2.6861': attribute type 10 has an invalid length. [ 1215.631702][T27943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1215.677233][T27943] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1215.834231][T27955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6866'. [ 1215.913158][T27958] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6867'. [ 1216.195418][T27967] validate_nla: 3 callbacks suppressed [ 1216.195436][T27967] netlink: 'syz.1.6870': attribute type 3 has an invalid length. [ 1216.214742][T27967] netlink: 'syz.1.6870': attribute type 1 has an invalid length. [ 1216.223195][T27967] netlink: 'syz.1.6870': attribute type 6 has an invalid length. [ 1216.460146][T27973] netlink: 'syz.3.6872': attribute type 10 has an invalid length. [ 1216.793254][T27978] netlink: 'syz.4.6874': attribute type 10 has an invalid length. [ 1217.019409][T27985] netlink: 'syz.3.6884': attribute type 10 has an invalid length. [ 1217.037905][T27985] __nla_validate_parse: 7 callbacks suppressed [ 1217.037944][T27985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6884'. [ 1217.077453][T27986] netlink: 'syz.4.6875': attribute type 10 has an invalid length. [ 1217.096390][T27986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6875'. [ 1217.107361][T27988] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6877'. [ 1217.294931][T27994] netlink: 'syz.3.6879': attribute type 2 has an invalid length. [ 1217.306547][T27994] netlink: 'syz.3.6879': attribute type 8 has an invalid length. [ 1217.316533][T27994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6879'. [ 1217.444278][T28004] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1217.482031][T28002] netlink: 'syz.1.6883': attribute type 10 has an invalid length. [ 1217.499999][T28002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1218.146746][T28019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6890'. [ 1218.280548][T28021] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6891'. [ 1218.418549][T28021] hsr_slave_0: left promiscuous mode [ 1218.433369][T28021] hsr_slave_1: left promiscuous mode [ 1218.599681][T28029] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1218.765330][T28035] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1218.915339][T28045] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.6901'. [ 1219.892298][T28062] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1220.800724][T28080] hsr0: entered allmulticast mode [ 1220.818810][T28080] hsr_slave_0: entered allmulticast mode [ 1220.824590][T28080] hsr_slave_1: entered allmulticast mode [ 1221.075651][T28084] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1221.252355][T28091] validate_nla: 72 callbacks suppressed [ 1221.252374][T28091] netlink: 'syz.1.6916': attribute type 2 has an invalid length. [ 1221.282591][T28091] netlink: 'syz.1.6916': attribute type 8 has an invalid length. [ 1221.312205][T28091] netlink: 'syz.1.6916': attribute type 11 has an invalid length. [ 1221.343717][T28091] netlink: 'syz.1.6916': attribute type 8 has an invalid length. [ 1222.040640][T28116] FAULT_INJECTION: forcing a failure. [ 1222.040640][T28116] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.102334][T28116] CPU: 0 PID: 28116 Comm: syz.2.6925 Not tainted syzkaller #0 [ 1222.110054][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1222.120137][T28116] Call Trace: [ 1222.123432][T28116] [ 1222.126378][T28116] dump_stack_lvl+0x18c/0x250 [ 1222.131082][T28116] ? sctp_sendmsg+0x1519/0x27b0 [ 1222.136054][T28116] ? ___sys_sendmsg+0x2a6/0x360 [ 1222.141044][T28116] ? show_regs_print_info+0x20/0x20 [ 1222.146538][T28116] ? load_image+0x420/0x420 [ 1222.151099][T28116] should_fail_ex+0x394/0x4c0 [ 1222.155816][T28116] should_failslab+0x9/0x20 [ 1222.160357][T28116] slab_pre_alloc_hook+0x59/0x300 [ 1222.165408][T28116] ? sctp_add_bind_addr+0x8c/0x360 [ 1222.170550][T28116] __kmem_cache_alloc_node+0x53/0x250 [ 1222.175959][T28116] ? sctp_add_bind_addr+0x8c/0x360 [ 1222.181095][T28116] kmalloc_trace+0x2a/0xe0 [ 1222.185584][T28116] sctp_add_bind_addr+0x8c/0x360 [ 1222.190566][T28116] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1222.196228][T28116] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1222.201973][T28116] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1222.208073][T28116] ? sctp_v4_is_any+0x35/0x60 [ 1222.212776][T28116] ? sctp_copy_one_addr+0x8c/0x350 [ 1222.217915][T28116] sctp_bind_addr_copy+0xb3/0x3c0 [ 1222.222959][T28116] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1222.229315][T28116] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1222.234629][T28116] ? __sctp_connect+0xd80/0xd80 [ 1222.239520][T28116] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1222.244921][T28116] ? _local_bh_enable+0xa0/0xa0 [ 1222.249797][T28116] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1222.255894][T28116] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1222.261725][T28116] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1222.267567][T28116] ? security_sctp_bind_connect+0x89/0xb0 [ 1222.273330][T28116] sctp_sendmsg+0x1519/0x27b0 [ 1222.278059][T28116] ? sctp_getsockopt+0xb60/0xb60 [ 1222.283030][T28116] ? aa_af_perm+0x330/0x330 [ 1222.287587][T28116] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1222.294039][T28116] ? sock_rps_record_flow+0x19/0x3f0 [ 1222.299545][T28116] ? inet_sendmsg+0x7e/0x2a0 [ 1222.304170][T28116] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1222.309490][T28116] ? inet_send_prepare+0x250/0x250 [ 1222.314636][T28116] ____sys_sendmsg+0x61b/0x980 [ 1222.319458][T28116] ? __asan_memset+0x22/0x40 [ 1222.324078][T28116] ? __sys_sendmsg_sock+0x30/0x30 [ 1222.329140][T28116] ? __import_iovec+0x5f2/0x850 [ 1222.334033][T28116] ? import_iovec+0x73/0xa0 [ 1222.338580][T28116] ___sys_sendmsg+0x2a6/0x360 [ 1222.343285][T28116] ? get_pid_task+0x20/0x1e0 [ 1222.347908][T28116] ? __sys_sendmsg+0x2b0/0x2b0 [ 1222.352721][T28116] ? __lock_acquire+0x7eb0/0x7eb0 [ 1222.357799][T28116] __se_sys_sendmsg+0x1d0/0x2c0 [ 1222.362770][T28116] ? __x64_sys_sendmsg+0x80/0x80 [ 1222.367759][T28116] ? lockdep_hardirqs_on+0x98/0x150 [ 1222.373842][T28116] do_syscall_64+0x55/0xb0 [ 1222.378289][T28116] ? clear_bhb_loop+0x40/0x90 [ 1222.382996][T28116] ? clear_bhb_loop+0x40/0x90 [ 1222.387803][T28116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1222.395119][T28116] RIP: 0033:0x7ff8c639e2d9 [ 1222.399567][T28116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.419319][T28116] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.427854][T28116] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1222.435864][T28116] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1222.443863][T28116] RBP: 00007ff8c72bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.452306][T28116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1222.460306][T28116] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1222.468416][T28116] [ 1222.682472][T28125] __nla_validate_parse: 72 callbacks suppressed [ 1222.682493][T28125] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6928'. [ 1223.111458][T28131] FAULT_INJECTION: forcing a failure. [ 1223.111458][T28131] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.148666][T28131] CPU: 1 PID: 28131 Comm: syz.2.6931 Not tainted syzkaller #0 [ 1223.156193][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1223.166272][T28131] Call Trace: [ 1223.169580][T28131] [ 1223.172531][T28131] dump_stack_lvl+0x18c/0x250 [ 1223.177228][T28131] ? show_regs_print_info+0x20/0x20 [ 1223.182440][T28131] ? load_image+0x420/0x420 [ 1223.186970][T28131] ? __might_sleep+0xe0/0xe0 [ 1223.191567][T28131] ? __lock_acquire+0x7eb0/0x7eb0 [ 1223.196599][T28131] should_fail_ex+0x394/0x4c0 [ 1223.201303][T28131] should_failslab+0x9/0x20 [ 1223.205811][T28131] slab_pre_alloc_hook+0x59/0x300 [ 1223.210852][T28131] ? ethnl_default_start+0x135/0x560 [ 1223.216146][T28131] ? ethnl_default_start+0x135/0x560 [ 1223.221437][T28131] __kmem_cache_alloc_node+0x53/0x250 [ 1223.226820][T28131] ? ethnl_default_start+0x135/0x560 [ 1223.232107][T28131] __kmalloc+0xa7/0x240 [ 1223.236361][T28131] ethnl_default_start+0x135/0x560 [ 1223.241480][T28131] genl_start+0x4b4/0x6c0 [ 1223.245821][T28131] __netlink_dump_start+0x43c/0x7a0 [ 1223.251026][T28131] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1223.256771][T28131] ? genl_rcv_msg+0x7a0/0x7a0 [ 1223.261465][T28131] ? genl_get_cmd+0x693/0x930 [ 1223.266171][T28131] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1223.271900][T28131] ? genl_start+0x6c0/0x6c0 [ 1223.276407][T28131] ? genl_dumpit+0x1a0/0x1a0 [ 1223.281012][T28131] genl_rcv_msg+0x5de/0x7a0 [ 1223.285549][T28131] ? genl_bind+0x360/0x360 [ 1223.289967][T28131] ? ethnl_default_doit+0xba0/0xba0 [ 1223.295173][T28131] ? ethnl_default_start+0x560/0x560 [ 1223.300474][T28131] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1223.305875][T28131] netlink_rcv_skb+0x235/0x4c0 [ 1223.310646][T28131] ? genl_bind+0x360/0x360 [ 1223.315067][T28131] ? netlink_ack+0x1160/0x1160 [ 1223.319853][T28131] ? __lock_acquire+0x7eb0/0x7eb0 [ 1223.324916][T28131] ? down_read+0x1ac/0x2e0 [ 1223.329340][T28131] genl_rcv+0x28/0x40 [ 1223.333327][T28131] netlink_unicast+0x7b1/0x930 [ 1223.338111][T28131] netlink_sendmsg+0x8d0/0xbf0 [ 1223.342880][T28131] ? lockdep_hardirqs_on+0x98/0x150 [ 1223.348085][T28131] ? netlink_getsockopt+0x590/0x590 [ 1223.353319][T28131] ? security_socket_sendmsg+0x7b/0xa0 [ 1223.358781][T28131] ? security_socket_sendmsg+0x80/0xa0 [ 1223.364259][T28131] ? netlink_getsockopt+0x590/0x590 [ 1223.369555][T28131] ____sys_sendmsg+0x61b/0x980 [ 1223.374338][T28131] ? __asan_memset+0x22/0x40 [ 1223.378936][T28131] ? __sys_sendmsg_sock+0x30/0x30 [ 1223.383962][T28131] ? __import_iovec+0x5f2/0x850 [ 1223.388913][T28131] ? import_iovec+0x73/0xa0 [ 1223.393426][T28131] ___sys_sendmsg+0x2a6/0x360 [ 1223.398118][T28131] ? __sys_sendmsg+0x2b0/0x2b0 [ 1223.402906][T28131] ? __lock_acquire+0x7eb0/0x7eb0 [ 1223.408134][T28131] __se_sys_sendmsg+0x1d0/0x2c0 [ 1223.412992][T28131] ? __x64_sys_sendmsg+0x80/0x80 [ 1223.417952][T28131] do_syscall_64+0x55/0xb0 [ 1223.422375][T28131] ? clear_bhb_loop+0x40/0x90 [ 1223.427056][T28131] ? clear_bhb_loop+0x40/0x90 [ 1223.431739][T28131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1223.437639][T28131] RIP: 0033:0x7ff8c639e2d9 [ 1223.442055][T28131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.461665][T28131] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.470084][T28131] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1223.478150][T28131] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1223.486123][T28131] RBP: 00007ff8c72bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.494178][T28131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.502240][T28131] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1223.510341][T28131] [ 1223.553659][T28135] netlink: 'syz.1.6933': attribute type 2 has an invalid length. [ 1223.572484][T28135] netlink: 'syz.1.6933': attribute type 8 has an invalid length. [ 1223.596958][T28135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1223.633620][T28137] netlink: 'syz.4.6934': attribute type 29 has an invalid length. [ 1223.652426][T28137] netlink: 'syz.4.6934': attribute type 29 has an invalid length. [ 1223.672874][T28137] netlink: 'syz.4.6934': attribute type 29 has an invalid length. [ 1223.879527][T28140] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.6935'. [ 1224.382117][T28148] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6939'. [ 1224.538782][T28153] netlink: 'syz.2.6940': attribute type 10 has an invalid length. [ 1224.608735][T28153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1224.674671][T28160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1224.812670][T28165] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6944'. [ 1225.897575][T28180] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1226.864343][T28192] validate_nla: 1 callbacks suppressed [ 1226.864378][T28192] netlink: 'syz.3.6954': attribute type 10 has an invalid length. [ 1226.903896][T28192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6954'. [ 1227.476274][T28203] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1227.735400][T28205] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6958'. [ 1227.808532][T28205] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1227.829497][T28205] CPU: 1 PID: 28205 Comm: syz.2.6958 Not tainted syzkaller #0 [ 1227.837232][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1227.847355][T28205] Call Trace: [ 1227.850663][T28205] [ 1227.853640][T28205] dump_stack_lvl+0x18c/0x250 [ 1227.858367][T28205] ? show_regs_print_info+0x20/0x20 [ 1227.863612][T28205] ? load_image+0x420/0x420 [ 1227.868181][T28205] sysfs_warn_dup+0x8e/0xa0 [ 1227.872736][T28205] sysfs_do_create_link_sd+0xc0/0x110 [ 1227.878164][T28205] device_add_class_symlinks+0x1cf/0x240 [ 1227.883868][T28205] device_add+0x4f9/0xc40 [ 1227.888279][T28205] wiphy_register+0x1d99/0x2ac0 [ 1227.893244][T28205] ? cfg80211_event_work+0x40/0x40 [ 1227.898432][T28205] ? minstrel_ht_alloc+0x88a/0x990 [ 1227.903699][T28205] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1227.909818][T28205] ieee80211_register_hw+0x2f3d/0x3cb0 [ 1227.915316][T28205] ? ieee80211_register_hw+0xfb1/0x3cb0 [ 1227.920979][T28205] ? ieee80211_tasklet_handler+0x20/0x20 [ 1227.926722][T28205] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1227.932812][T28205] ? __debug_object_init+0xec/0x450 [ 1227.938066][T28205] ? __asan_memset+0x22/0x40 [ 1227.942766][T28205] ? __hrtimer_init+0x189/0x270 [ 1227.947670][T28205] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1227.953473][T28205] ? mac80211_hwsim_free+0x220/0x220 [ 1227.958781][T28205] ? rcu_is_watching+0x15/0xb0 [ 1227.963592][T28205] ? kstrndup+0xbd/0x140 [ 1227.967857][T28205] hwsim_new_radio_nl+0xdad/0x1a70 [ 1227.973010][T28205] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1227.978761][T28205] ? mark_lock+0x94/0x320 [ 1227.983117][T28205] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1227.989466][T28205] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1227.995627][T28205] ? lockdep_hardirqs_on+0x98/0x150 [ 1228.000840][T28205] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1228.007032][T28205] genl_family_rcv_msg_doit+0x21a/0x310 [ 1228.012620][T28205] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1228.018544][T28205] ? bpf_lsm_capable+0x9/0x10 [ 1228.023235][T28205] ? security_capable+0x89/0xb0 [ 1228.028131][T28205] genl_rcv_msg+0x611/0x7a0 [ 1228.032699][T28205] ? genl_bind+0x360/0x360 [ 1228.037144][T28205] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1228.043492][T28205] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1228.050132][T28205] netlink_rcv_skb+0x235/0x4c0 [ 1228.054940][T28205] ? genl_bind+0x360/0x360 [ 1228.059382][T28205] ? netlink_ack+0x1160/0x1160 [ 1228.064238][T28205] ? __lock_acquire+0x7eb0/0x7eb0 [ 1228.069309][T28205] ? down_read+0x1ac/0x2e0 [ 1228.073745][T28205] genl_rcv+0x28/0x40 [ 1228.077886][T28205] netlink_unicast+0x7b1/0x930 [ 1228.082683][T28205] netlink_sendmsg+0x8d0/0xbf0 [ 1228.087504][T28205] ? apparmor_socket_sendmsg+0x19/0x330 [ 1228.093065][T28205] ? netlink_getsockopt+0x590/0x590 [ 1228.098276][T28205] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1228.103840][T28205] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1228.109138][T28205] ? security_socket_sendmsg+0x80/0xa0 [ 1228.114602][T28205] ? netlink_getsockopt+0x590/0x590 [ 1228.119900][T28205] ____sys_sendmsg+0x61b/0x980 [ 1228.124712][T28205] ? __asan_memset+0x22/0x40 [ 1228.129417][T28205] ? __sys_sendmsg_sock+0x30/0x30 [ 1228.134448][T28205] ? __import_iovec+0x5f2/0x850 [ 1228.139346][T28205] ? import_iovec+0x73/0xa0 [ 1228.143887][T28205] ___sys_sendmsg+0x2a6/0x360 [ 1228.148592][T28205] ? __sys_sendmsg+0x2b0/0x2b0 [ 1228.153414][T28205] __se_sys_sendmsg+0x1d0/0x2c0 [ 1228.158271][T28205] ? perf_trace_preemptirq_template+0x269/0x330 [ 1228.164550][T28205] ? __x64_sys_sendmsg+0x80/0x80 [ 1228.169538][T28205] ? lockdep_hardirqs_on+0x98/0x150 [ 1228.174773][T28205] do_syscall_64+0x55/0xb0 [ 1228.179207][T28205] ? clear_bhb_loop+0x40/0x90 [ 1228.183897][T28205] ? clear_bhb_loop+0x40/0x90 [ 1228.188584][T28205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1228.194494][T28205] RIP: 0033:0x7ff8c639e2d9 [ 1228.198999][T28205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.218813][T28205] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.227368][T28205] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1228.235472][T28205] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 000000000000000a [ 1228.243449][T28205] RBP: 00007ff8c6435888 R08: 0000000000000000 R09: 0000000000000000 [ 1228.251431][T28205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.259411][T28205] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1228.267406][T28205] [ 1228.616861][ C1] bridge0: port 2(team0) entered learning state [ 1228.914159][T28222] FAULT_INJECTION: forcing a failure. [ 1228.914159][T28222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.931873][T28221] netlink: 'syz.1.6965': attribute type 10 has an invalid length. [ 1228.955324][T28221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6965'. [ 1228.965844][T28222] CPU: 0 PID: 28222 Comm: syz.4.6967 Not tainted syzkaller #0 [ 1228.965872][T28222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1228.965885][T28222] Call Trace: [ 1228.965893][T28222] [ 1228.965902][T28222] dump_stack_lvl+0x18c/0x250 [ 1228.965933][T28222] ? show_regs_print_info+0x20/0x20 [ 1228.965953][T28222] ? load_image+0x420/0x420 [ 1228.965982][T28222] ? __lock_acquire+0x7eb0/0x7eb0 [ 1228.966007][T28222] ? snprintf+0xe9/0x140 [ 1228.966034][T28222] should_fail_ex+0x394/0x4c0 [ 1228.966066][T28222] _copy_to_user+0x2f/0xa0 [ 1228.966091][T28222] simple_read_from_buffer+0xe7/0x150 [ 1228.966118][T28222] proc_fail_nth_read+0x1e8/0x260 [ 1228.966148][T28222] ? proc_fault_inject_write+0x360/0x360 [ 1228.966187][T28222] ? fsnotify_perm+0x271/0x5e0 [ 1228.966213][T28222] ? proc_fault_inject_write+0x360/0x360 [ 1228.966240][T28222] vfs_read+0x298/0x990 [ 1228.966272][T28222] ? kernel_read+0x1e0/0x1e0 [ 1228.966299][T28222] ? __fget_files+0x28/0x460 [ 1228.966325][T28222] ? __fget_files+0x3fc/0x460 [ 1228.966359][T28222] ? __fdget_pos+0x2a3/0x330 [ 1228.966381][T28222] ? ksys_read+0x74/0x260 [ 1228.966408][T28222] ksys_read+0x151/0x260 [ 1228.966436][T28222] ? vfs_write+0x9a0/0x9a0 [ 1228.966466][T28222] ? lockdep_hardirqs_on+0x98/0x150 [ 1228.966492][T28222] do_syscall_64+0x55/0xb0 [ 1228.966510][T28222] ? clear_bhb_loop+0x40/0x90 [ 1228.966529][T28222] ? clear_bhb_loop+0x40/0x90 [ 1228.966551][T28222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1228.966577][T28222] RIP: 0033:0x7f48d635eb0e [ 1228.966595][T28222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1228.966612][T28222] RSP: 002b:00007f48d7235fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1228.966637][T28222] RAX: ffffffffffffffda RBX: 00007f48d72366c0 RCX: 00007f48d635eb0e [ 1228.966651][T28222] RDX: 000000000000000f RSI: 00007f48d72360a0 RDI: 0000000000000004 [ 1228.966665][T28222] RBP: 00007f48d7236090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.966678][T28222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.966690][T28222] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1228.966724][T28222] [ 1229.014341][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1229.079433][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1229.314077][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1229.330852][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1229.341390][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1229.350833][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1229.648795][T28235] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1229.801972][T28241] netlink: 'syz.1.6974': attribute type 29 has an invalid length. [ 1229.834189][T16059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.880183][T28242] netlink: 'syz.4.6973': attribute type 10 has an invalid length. [ 1229.906344][T28241] netlink: 'syz.1.6974': attribute type 29 has an invalid length. [ 1230.013079][T16059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.051684][T28241] netlink: 'syz.1.6974': attribute type 29 has an invalid length. [ 1230.065136][T28245] netlink: 'syz.1.6974': attribute type 29 has an invalid length. [ 1230.112722][T28244] netlink: 'syz.1.6974': attribute type 29 has an invalid length. [ 1230.222916][T16059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.367807][T28255] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6977'. [ 1230.415777][T16059] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1230.440402][T16059] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1230.470158][T16059] team0: Port device netdevsim0 removed [ 1230.496517][T16059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.548248][T28253] netlink: 'syz.4.6978': attribute type 28 has an invalid length. [ 1230.860447][T28260] netlink: 'syz.4.6979': attribute type 9 has an invalid length. [ 1230.864703][T28223] chnl_net:caif_netlink_parms(): no params data found [ 1230.884996][T28260] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1231.417394][T15767] Bluetooth: hci3: command tx timeout [ 1231.508967][T28223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.523321][T28223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.547168][T28223] bridge_slave_0: entered allmulticast mode [ 1231.569062][T28223] bridge_slave_0: entered promiscuous mode [ 1231.758605][T28223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.766008][T28223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.839877][T28223] bridge_slave_1: entered allmulticast mode [ 1231.880503][T28223] bridge_slave_1: entered promiscuous mode [ 1232.154584][T28278] netlink: 'syz.1.6983': attribute type 21 has an invalid length. [ 1232.177651][T28278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1232.482948][T28223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.540188][T28223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.154104][T28301] netlink: 'syz.2.6985': attribute type 10 has an invalid length. [ 1233.192828][T28301] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1233.257905][T28317] netlink: 'syz.4.6989': attribute type 10 has an invalid length. [ 1233.275105][T28317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6989'. [ 1233.442697][T28223] team0: Port device team_slave_0 added [ 1233.466089][T28223] team0: Port device team_slave_1 added [ 1233.505719][T15767] Bluetooth: hci3: command tx timeout [ 1233.572828][T28223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.606896][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.654998][T28223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.704005][T28223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.724097][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.774788][T28223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.804388][T28328] FAULT_INJECTION: forcing a failure. [ 1233.804388][T28328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.846892][T28328] CPU: 0 PID: 28328 Comm: syz.1.6993 Not tainted syzkaller #0 [ 1233.854458][T28328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.864564][T28328] Call Trace: [ 1233.867892][T28328] [ 1233.870868][T28328] dump_stack_lvl+0x18c/0x250 [ 1233.875616][T28328] ? show_regs_print_info+0x20/0x20 [ 1233.880870][T28328] ? load_image+0x420/0x420 [ 1233.885404][T28328] ? __might_fault+0xaa/0x120 [ 1233.890105][T28328] ? __lock_acquire+0x7eb0/0x7eb0 [ 1233.895175][T28328] should_fail_ex+0x394/0x4c0 [ 1233.899892][T28328] _copy_from_iter+0x1cd/0x1290 [ 1233.904768][T28328] ? rcu_is_watching+0x15/0xb0 [ 1233.909560][T28328] ? copyout_mc+0x70/0x70 [ 1233.913928][T28328] ? __virt_addr_valid+0x10c/0x380 [ 1233.919087][T28328] ? __virt_addr_valid+0x10c/0x380 [ 1233.924273][T28328] ? __virt_addr_valid+0x10c/0x380 [ 1233.929424][T28328] ? __check_object_size+0x4fc/0xa40 [ 1233.934743][T28328] netlink_sendmsg+0x76b/0xbf0 [ 1233.939553][T28328] ? netlink_getsockopt+0x590/0x590 [ 1233.944778][T28328] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1233.950363][T28328] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1233.955663][T28328] ? security_socket_sendmsg+0x80/0xa0 [ 1233.961141][T28328] ? netlink_getsockopt+0x590/0x590 [ 1233.966385][T28328] ____sys_sendmsg+0x61b/0x980 [ 1233.971188][T28328] ? __asan_memset+0x22/0x40 [ 1233.975915][T28328] ? __sys_sendmsg_sock+0x30/0x30 [ 1233.980976][T28328] ? __import_iovec+0x5f2/0x850 [ 1233.985879][T28328] ? import_iovec+0x73/0xa0 [ 1233.990425][T28328] ___sys_sendmsg+0x2a6/0x360 [ 1233.995164][T28328] ? get_pid_task+0x20/0x1e0 [ 1233.999789][T28328] ? __sys_sendmsg+0x2b0/0x2b0 [ 1234.004619][T28328] ? __lock_acquire+0x7eb0/0x7eb0 [ 1234.010992][T28328] __se_sys_sendmsg+0x1d0/0x2c0 [ 1234.023715][T28328] ? __x64_sys_sendmsg+0x80/0x80 [ 1234.031014][T28328] ? lockdep_hardirqs_on+0x98/0x150 [ 1234.036372][T28328] do_syscall_64+0x55/0xb0 [ 1234.040820][T28328] ? clear_bhb_loop+0x40/0x90 [ 1234.045541][T28328] ? clear_bhb_loop+0x40/0x90 [ 1234.050442][T28328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.056379][T28328] RIP: 0033:0x7f124879e2d9 [ 1234.060820][T28328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.080554][T28328] RSP: 002b:00007f1249641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.089013][T28328] RAX: ffffffffffffffda RBX: 00007f1248a25fa0 RCX: 00007f124879e2d9 [ 1234.097010][T28328] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1234.105025][T28328] RBP: 00007f1249641090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.113026][T28328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.121131][T28328] R13: 00007f1248a26038 R14: 00007f1248a25fa0 R15: 00007ffecd517fb8 [ 1234.129162][T28328] [ 1234.307842][T28223] hsr_slave_0: entered promiscuous mode [ 1234.423997][T28338] FAULT_INJECTION: forcing a failure. [ 1234.423997][T28338] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.453098][T28338] CPU: 1 PID: 28338 Comm: syz.1.6995 Not tainted syzkaller #0 [ 1234.460727][T28338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1234.471944][T28338] Call Trace: [ 1234.475247][T28338] [ 1234.478212][T28338] dump_stack_lvl+0x18c/0x250 [ 1234.482928][T28338] ? show_regs_print_info+0x20/0x20 [ 1234.488159][T28338] ? load_image+0x420/0x420 [ 1234.492698][T28338] ? __might_sleep+0xe0/0xe0 [ 1234.497332][T28338] ? __lock_acquire+0x7eb0/0x7eb0 [ 1234.502390][T28338] should_fail_ex+0x394/0x4c0 [ 1234.507555][T28338] should_failslab+0x9/0x20 [ 1234.512126][T28338] slab_pre_alloc_hook+0x59/0x300 [ 1234.517202][T28338] ? __lock_acquire+0x7eb0/0x7eb0 [ 1234.522288][T28338] kmem_cache_alloc_node+0x5e/0x310 [ 1234.527521][T28338] ? __alloc_skb+0x103/0x2c0 [ 1234.532147][T28338] __alloc_skb+0x103/0x2c0 [ 1234.536611][T28338] netlink_sendmsg+0x66a/0xbf0 [ 1234.541419][T28338] ? netlink_getsockopt+0x590/0x590 [ 1234.546665][T28338] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1234.552254][T28338] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1234.558023][T28338] ? security_socket_sendmsg+0x80/0xa0 [ 1234.563519][T28338] ? netlink_getsockopt+0x590/0x590 [ 1234.569118][T28338] ____sys_sendmsg+0x61b/0x980 [ 1234.573941][T28338] ? __asan_memset+0x22/0x40 [ 1234.578590][T28338] ? __sys_sendmsg_sock+0x30/0x30 [ 1234.583694][T28338] ? __import_iovec+0x5f2/0x850 [ 1234.588575][T28338] ? import_iovec+0x73/0xa0 [ 1234.593117][T28338] ___sys_sendmsg+0x2a6/0x360 [ 1234.598096][T28338] ? get_pid_task+0x20/0x1e0 [ 1234.603684][T28338] ? __sys_sendmsg+0x2b0/0x2b0 [ 1234.615638][T28338] ? __lock_acquire+0x7eb0/0x7eb0 [ 1234.622197][T28338] __se_sys_sendmsg+0x1d0/0x2c0 [ 1234.627085][T28338] ? __x64_sys_sendmsg+0x80/0x80 [ 1234.632067][T28338] ? lockdep_hardirqs_on+0x98/0x150 [ 1234.637346][T28338] do_syscall_64+0x55/0xb0 [ 1234.641822][T28338] ? clear_bhb_loop+0x40/0x90 [ 1234.646520][T28338] ? clear_bhb_loop+0x40/0x90 [ 1234.651212][T28338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.657225][T28338] RIP: 0033:0x7f124879e2d9 [ 1234.661645][T28338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.681357][T28338] RSP: 002b:00007f1249641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.689861][T28338] RAX: ffffffffffffffda RBX: 00007f1248a25fa0 RCX: 00007f124879e2d9 [ 1234.697835][T28338] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1234.705808][T28338] RBP: 00007f1249641090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.713778][T28338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.721767][T28338] R13: 00007f1248a26038 R14: 00007f1248a25fa0 R15: 00007ffecd517fb8 [ 1234.729786][T28338] [ 1234.979009][T28223] hsr_slave_1: entered promiscuous mode [ 1235.066780][T28223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.075335][T28223] Cannot create hsr debugfs directory [ 1235.168110][T28357] netlink: 'syz.1.6998': attribute type 1 has an invalid length. [ 1235.200732][T28357] FAULT_INJECTION: forcing a failure. [ 1235.200732][T28357] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.250923][T28357] CPU: 0 PID: 28357 Comm: syz.1.6998 Not tainted syzkaller #0 [ 1235.258467][T28357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1235.268552][T28357] Call Trace: [ 1235.271861][T28357] [ 1235.274822][T28357] dump_stack_lvl+0x18c/0x250 [ 1235.279540][T28357] ? sctp_sendmsg+0x1519/0x27b0 [ 1235.284425][T28357] ? ___sys_sendmsg+0x2a6/0x360 [ 1235.289324][T28357] ? show_regs_print_info+0x20/0x20 [ 1235.294559][T28357] ? load_image+0x420/0x420 [ 1235.299127][T28357] should_fail_ex+0x394/0x4c0 [ 1235.303854][T28357] should_failslab+0x9/0x20 [ 1235.308397][T28357] slab_pre_alloc_hook+0x59/0x300 [ 1235.313468][T28357] ? sctp_add_bind_addr+0x8c/0x360 [ 1235.318611][T28357] __kmem_cache_alloc_node+0x53/0x250 [ 1235.324029][T28357] ? sctp_add_bind_addr+0x8c/0x360 [ 1235.329178][T28357] kmalloc_trace+0x2a/0xe0 [ 1235.333639][T28357] sctp_add_bind_addr+0x8c/0x360 [ 1235.338622][T28357] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1235.344305][T28357] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1235.350325][T28357] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1235.356441][T28357] ? sctp_v6_is_any+0x64/0x70 [ 1235.361164][T28357] ? sctp_copy_one_addr+0x8c/0x350 [ 1235.366321][T28357] sctp_bind_addr_copy+0xb3/0x3c0 [ 1235.371482][T28357] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1235.377851][T28357] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1235.383269][T28357] ? __sctp_connect+0xd80/0xd80 [ 1235.388161][T28357] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1235.393836][T28357] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1235.399433][T28357] ? security_sctp_bind_connect+0x89/0xb0 [ 1235.405206][T28357] sctp_sendmsg+0x1519/0x27b0 [ 1235.409929][T28357] ? sctp_getsockopt+0xb60/0xb60 [ 1235.415173][T28357] ? aa_af_perm+0x330/0x330 [ 1235.419720][T28357] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1235.426172][T28357] ? sock_rps_record_flow+0x19/0x3f0 [ 1235.431502][T28357] ? inet_sendmsg+0xce/0x2a0 [ 1235.436137][T28357] ? inet_send_prepare+0x250/0x250 [ 1235.441298][T28357] ____sys_sendmsg+0x61b/0x980 [ 1235.446114][T28357] ? __sys_sendmsg_sock+0x30/0x30 [ 1235.451195][T28357] ? __import_iovec+0x5f2/0x850 [ 1235.456115][T28357] ? import_iovec+0x73/0xa0 [ 1235.460709][T28357] ___sys_sendmsg+0x2a6/0x360 [ 1235.465439][T28357] ? __sys_sendmsg+0x2b0/0x2b0 [ 1235.470351][T28357] ? ktime_get+0x7f/0x280 [ 1235.474741][T28357] __se_sys_sendmsg+0x1d0/0x2c0 [ 1235.479665][T28357] ? perf_trace_preemptirq_template+0x269/0x330 [ 1235.485948][T28357] ? __x64_sys_sendmsg+0x80/0x80 [ 1235.490940][T28357] ? lockdep_hardirqs_on+0x98/0x150 [ 1235.496196][T28357] do_syscall_64+0x55/0xb0 [ 1235.500651][T28357] ? clear_bhb_loop+0x40/0x90 [ 1235.505356][T28357] ? clear_bhb_loop+0x40/0x90 [ 1235.510076][T28357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1235.516030][T28357] RIP: 0033:0x7f124879e2d9 [ 1235.520482][T28357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.540908][T28357] RSP: 002b:00007f1249641028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.549363][T28357] RAX: ffffffffffffffda RBX: 00007f1248a25fa0 RCX: 00007f124879e2d9 [ 1235.557396][T28357] RDX: 0000000000000041 RSI: 0000200000000280 RDI: 0000000000000007 [ 1235.565418][T28357] RBP: 00007f1249641090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.573432][T28357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1235.581856][T28357] R13: 00007f1248a26038 R14: 00007f1248a25fa0 R15: 00007ffecd517fb8 [ 1235.590046][T28357] [ 1235.636126][T15767] Bluetooth: hci3: command tx timeout [ 1235.789714][T28363] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6999'. [ 1236.689115][T16059] hsr_slave_0: left promiscuous mode [ 1236.727935][T16059] hsr_slave_1: left promiscuous mode [ 1236.738411][T16059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.756261][T16059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.784273][T16059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.793986][T16059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.838378][T16059] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1236.845860][T16059] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1236.891168][T16059] bridge0: port 2(team0) entered disabled state [ 1236.932401][T16059] bridge_slave_0: left allmulticast mode [ 1236.938915][T16059] bridge_slave_0: left promiscuous mode [ 1236.954266][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.139261][T16059] veth1_macvtap: left promiscuous mode [ 1237.145058][T16059] veth0_macvtap: left promiscuous mode [ 1237.657112][T15767] Bluetooth: hci3: command tx timeout [ 1238.304157][T16059] team_slave_1 (unregistering): left promiscuous mode [ 1238.311799][T16059] team_slave_1 (unregistering): left allmulticast mode [ 1238.323859][T16059] team0 (unregistering): Port device team_slave_1 removed [ 1238.451274][T16059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.512108][T16059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.869614][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.880856][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.893811][T16059] batadv0 (unregistering): left promiscuous mode [ 1238.901107][T16059] batadv0 (unregistering): left allmulticast mode [ 1238.913611][T16059] team0 (unregistering): Port device batadv0 removed [ 1239.082765][T16059] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1239.094137][T16059] bond0 (unregistering): Released all slaves [ 1239.183310][T28399] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1239.195867][T28418] netlink: 'syz.4.7013': attribute type 21 has an invalid length. [ 1239.208580][T28418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7013'. [ 1239.404216][T28223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1239.419327][T28223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1239.451114][T28223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1239.491731][T28422] netlink: 'syz.1.7016': attribute type 10 has an invalid length. [ 1239.517434][T28422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1239.547060][T28223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1239.872703][T28223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.936600][T28223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.982026][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.989372][T16059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.038862][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.046480][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.077441][T28438] netlink: 'syz.2.7020': attribute type 3 has an invalid length. [ 1240.136589][T28438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1240.140810][T28437] netlink: 'syz.2.7020': attribute type 1 has an invalid length. [ 1240.175838][T28437] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1240.901198][T28450] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7022'. [ 1241.140686][T28457] sit0: left promiscuous mode [ 1241.269496][T28465] netlink: 'syz.1.7024': attribute type 2 has an invalid length. [ 1241.445126][T28223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.608969][T28223] veth0_vlan: entered promiscuous mode [ 1241.643062][T28223] veth1_vlan: entered promiscuous mode [ 1241.718808][T28223] veth0_macvtap: entered promiscuous mode [ 1241.844859][T28223] veth1_macvtap: entered promiscuous mode [ 1241.927347][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.955552][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.985497][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.004128][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.015633][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.032182][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.045596][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1242.065474][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.090802][T28223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.188413][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.235100][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.262997][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.284753][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.313456][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.332879][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.352560][T28223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.363897][T28223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.376073][T28223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.435092][T28223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.468510][T28223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.478143][T28223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.487162][T28223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.721924][T23533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.755818][T23533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.832376][T23532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.866431][T23532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.957999][T28537] netlink: 'syz.3.7038': attribute type 10 has an invalid length. [ 1244.083787][T28537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.112728][T28537] team0: Port device batadv0 added [ 1244.387126][T28553] netlink: 'syz.1.7049': attribute type 9 has an invalid length. [ 1244.458782][T28553] netlink: 134756 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1244.520413][T28557] netlink: 'syz.2.7042': attribute type 49 has an invalid length. [ 1244.529912][T28557] netlink: 'syz.2.7042': attribute type 49 has an invalid length. [ 1245.760694][T28565] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.7043'. [ 1245.778642][T28565] netlink: 'syz.4.7043': attribute type 3 has an invalid length. [ 1245.818719][T28565] netlink: 11080 bytes leftover after parsing attributes in process `syz.4.7043'. [ 1246.041653][T28579] netlink: 'syz.2.7046': attribute type 21 has an invalid length. [ 1246.056507][T28579] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1246.252835][T28590] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7051'. [ 1246.868263][T28621] netlink: 'syz.3.7055': attribute type 9 has an invalid length. [ 1246.882487][T28619] FAULT_INJECTION: forcing a failure. [ 1246.882487][T28619] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.927176][T28619] CPU: 0 PID: 28619 Comm: syz.2.7056 Not tainted syzkaller #0 [ 1246.934726][T28619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1246.945000][T28619] Call Trace: [ 1246.948331][T28619] [ 1246.951294][T28619] dump_stack_lvl+0x18c/0x250 [ 1246.956003][T28619] ? ___sys_sendmsg+0x2a6/0x360 [ 1246.960910][T28619] ? show_regs_print_info+0x20/0x20 [ 1246.966145][T28619] ? load_image+0x420/0x420 [ 1246.970707][T28619] ? mark_lock+0x94/0x320 [ 1246.975091][T28619] should_fail_ex+0x394/0x4c0 [ 1246.979826][T28619] should_failslab+0x9/0x20 [ 1246.984372][T28619] slab_pre_alloc_hook+0x59/0x300 [ 1246.989538][T28619] ? sctp_add_bind_addr+0x8c/0x360 [ 1246.995363][T28619] __kmem_cache_alloc_node+0x53/0x250 [ 1247.000778][T28619] ? sctp_add_bind_addr+0x8c/0x360 [ 1247.005897][T28619] kmalloc_trace+0x2a/0xe0 [ 1247.010325][T28619] sctp_add_bind_addr+0x8c/0x360 [ 1247.015276][T28619] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1247.020918][T28619] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1247.026645][T28619] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1247.032894][T28619] ? sctp_v4_is_any+0x35/0x60 [ 1247.037580][T28619] ? sctp_copy_one_addr+0x8c/0x350 [ 1247.043246][T28619] sctp_bind_addr_copy+0xb3/0x3c0 [ 1247.048391][T28619] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1247.054895][T28619] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1247.060230][T28619] ? __sctp_connect+0xd80/0xd80 [ 1247.068097][T28619] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1247.074803][T28619] ? _local_bh_enable+0xa0/0xa0 [ 1247.080913][T28619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1247.086938][T28619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1247.093568][T28619] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1247.099134][T28619] ? security_sctp_bind_connect+0x89/0xb0 [ 1247.105104][T28619] sctp_sendmsg+0x1519/0x27b0 [ 1247.110619][T28619] ? sctp_getsockopt+0xb60/0xb60 [ 1247.115566][T28619] ? aa_af_perm+0x330/0x330 [ 1247.120116][T28619] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1247.126564][T28619] ? sock_rps_record_flow+0x19/0x3f0 [ 1247.131866][T28619] ? inet_sendmsg+0x7e/0x2a0 [ 1247.136574][T28619] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1247.141895][T28619] ? inet_send_prepare+0x250/0x250 [ 1247.147042][T28619] ____sys_sendmsg+0x61b/0x980 [ 1247.151823][T28619] ? __asan_memset+0x22/0x40 [ 1247.156530][T28619] ? __sys_sendmsg_sock+0x30/0x30 [ 1247.161571][T28619] ? __import_iovec+0x5f2/0x850 [ 1247.166450][T28619] ? import_iovec+0x73/0xa0 [ 1247.171046][T28619] ___sys_sendmsg+0x2a6/0x360 [ 1247.175733][T28619] ? __sys_sendmsg+0x2b0/0x2b0 [ 1247.180536][T28619] __se_sys_sendmsg+0x1d0/0x2c0 [ 1247.185387][T28619] ? perf_trace_preemptirq_template+0x269/0x330 [ 1247.191632][T28619] ? __x64_sys_sendmsg+0x80/0x80 [ 1247.196781][T28619] ? lockdep_hardirqs_on+0x98/0x150 [ 1247.202029][T28619] do_syscall_64+0x55/0xb0 [ 1247.206545][T28619] ? clear_bhb_loop+0x40/0x90 [ 1247.211223][T28619] ? clear_bhb_loop+0x40/0x90 [ 1247.215908][T28619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.221815][T28619] RIP: 0033:0x7ff8c639e2d9 [ 1247.226233][T28619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.245855][T28619] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.254485][T28619] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1247.263029][T28619] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1247.277959][T28619] RBP: 00007ff8c72bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.286753][T28619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.294924][T28619] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1247.303126][T28619] [ 1247.324132][T28621] netlink: 134756 bytes leftover after parsing attributes in process `syz.3.7055'. [ 1247.799104][T28633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1247.837984][T28633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.965708][T28639] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7063'. [ 1248.107130][T28642] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1248.520248][T28663] netlink: 'syz.2.7068': attribute type 9 has an invalid length. [ 1248.535274][T28664] netlink: 'syz.1.7070': attribute type 21 has an invalid length. [ 1248.553994][T28664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1248.563837][T28663] netlink: 134756 bytes leftover after parsing attributes in process `syz.2.7068'. [ 1248.763637][T28666] netlink: 'syz.3.7072': attribute type 4 has an invalid length. [ 1248.993784][T28676] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1250.270291][T28713] __nla_validate_parse: 3 callbacks suppressed [ 1250.270311][T28713] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7086'. [ 1250.465841][T28714] delete_channel: no stack [ 1250.721009][T28725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1250.736897][T28725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1250.840947][T28726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1250.979556][T28735] netlink: 'syz.3.7095': attribute type 10 has an invalid length. [ 1251.027633][T28735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.064559][T28735] bond0: (slave team0): Enslaving as an active interface with an up link [ 1251.083530][T28742] FAULT_INJECTION: forcing a failure. [ 1251.083530][T28742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1251.096432][T28738] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7097'. [ 1251.121183][T28742] CPU: 0 PID: 28742 Comm: syz.4.7096 Not tainted syzkaller #0 [ 1251.129233][T28742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1251.139312][T28742] Call Trace: [ 1251.142606][T28742] [ 1251.145598][T28742] dump_stack_lvl+0x18c/0x250 [ 1251.150316][T28742] ? show_regs_print_info+0x20/0x20 [ 1251.155630][T28742] ? load_image+0x420/0x420 [ 1251.160141][T28742] ? __lock_acquire+0x7eb0/0x7eb0 [ 1251.165335][T28742] should_fail_ex+0x394/0x4c0 [ 1251.170062][T28742] prepare_alloc_pages+0x1e1/0x5b0 [ 1251.176036][T28742] __alloc_pages+0x134/0x460 [ 1251.181542][T28742] ? zone_statistics+0x170/0x170 [ 1251.187462][T28742] ? lockdep_hardirqs_on+0x98/0x150 [ 1251.194298][T28742] ? alloc_pages+0x4e1/0x740 [ 1251.199004][T28742] __get_free_pages+0xc/0x30 [ 1251.203834][T28742] kasan_populate_vmalloc_pte+0x35/0x100 [ 1251.209570][T28742] __apply_to_page_range+0x860/0xdd0 [ 1251.215387][T28742] ? kasan_populate_vmalloc+0x70/0x70 [ 1251.220888][T28742] ? apply_to_page_range+0x50/0x50 [ 1251.231372][T28742] ? do_raw_spin_unlock+0x121/0x230 [ 1251.239823][T28742] alloc_vmap_area+0x1d26/0x1e50 [ 1251.245367][T28742] ? vm_map_ram+0xcf0/0xcf0 [ 1251.251526][T28742] ? rcu_is_watching+0x15/0xb0 [ 1251.256407][T28742] __get_vm_area_node+0x162/0x370 [ 1251.261851][T28742] __vmalloc_node_range+0x36f/0x1320 [ 1251.267178][T28742] ? copy_process+0x5a6/0x3da0 [ 1251.272423][T28742] ? __lock_acquire+0x7eb0/0x7eb0 [ 1251.278980][T28742] ? free_vm_area+0x50/0x50 [ 1251.283512][T28742] ? arch_dup_task_struct+0x57/0xd0 [ 1251.288769][T28742] ? __asan_memcpy+0x40/0x70 [ 1251.293476][T28742] dup_task_struct+0x3c8/0x800 [ 1251.298270][T28742] ? copy_process+0x5a6/0x3da0 [ 1251.303055][T28742] ? lockdep_hardirqs_on+0x98/0x150 [ 1251.308280][T28742] copy_process+0x5a6/0x3da0 [ 1251.312887][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.317651][T28742] ? __lock_acquire+0x7eb0/0x7eb0 [ 1251.322683][T28742] ? __pidfd_prepare+0x140/0x140 [ 1251.327620][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.332382][T28742] ? trace_call_bpf+0x5e9/0x6c0 [ 1251.337330][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.342399][T28742] kernel_clone+0x24b/0x8a0 [ 1251.347557][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.352853][T28742] ? create_io_thread+0x190/0x190 [ 1251.357895][T28742] ? perf_trace_preemptirq_template+0x269/0x330 [ 1251.364174][T28742] __x64_sys_clone+0x1b7/0x230 [ 1251.368958][T28742] ? __ia32_sys_vfork+0x140/0x140 [ 1251.374724][T28742] ? 0xffffffffff600000 [ 1251.380232][T28742] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1251.388562][T28742] do_syscall_64+0x55/0xb0 [ 1251.393126][T28742] ? clear_bhb_loop+0x40/0x90 [ 1251.399274][T28742] ? clear_bhb_loop+0x40/0x90 [ 1251.404237][T28742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.413155][T28742] RIP: 0033:0x7f48d639e2d9 [ 1251.417613][T28742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.437612][T28742] RSP: 002b:00007f48d7214fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1251.446337][T28742] RAX: ffffffffffffffda RBX: 00007f48d6626090 RCX: 00007f48d639e2d9 [ 1251.454321][T28742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 1251.462746][T28742] RBP: 00007f48d7215090 R08: ffffffffff600000 R09: ffffffffff600000 [ 1251.470747][T28742] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1251.478718][T28742] R13: 00007f48d6626128 R14: 00007f48d6626090 R15: 00007ffd940a1938 [ 1251.486707][T28742] ? 0xffffffffff600000 [ 1251.490874][T28742] ? 0xffffffffff600000 [ 1251.495035][T28742] [ 1251.540122][T28740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1251.564738][T28742] warn_alloc: 1 callbacks suppressed [ 1251.564769][T28742] syz.4.7096: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1251.694836][T28742] CPU: 0 PID: 28742 Comm: syz.4.7096 Not tainted syzkaller #0 [ 1251.702401][T28742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1251.712484][T28742] Call Trace: [ 1251.715796][T28742] [ 1251.718757][T28742] dump_stack_lvl+0x18c/0x250 [ 1251.723470][T28742] ? show_regs_print_info+0x20/0x20 [ 1251.728703][T28742] ? load_image+0x420/0x420 [ 1251.733243][T28742] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1251.739676][T28742] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1251.746180][T28742] warn_alloc+0x246/0x340 [ 1251.750535][T28742] ? slab_free_freelist_hook+0x130/0x1a0 [ 1251.756168][T28742] ? zone_watermark_ok_safe+0x230/0x230 [ 1251.761730][T28742] ? __get_vm_area_node+0x17b/0x370 [ 1251.767057][T28742] ? __get_vm_area_node+0x17b/0x370 [ 1251.772291][T28742] __vmalloc_node_range+0x394/0x1320 [ 1251.777626][T28742] ? __lock_acquire+0x7eb0/0x7eb0 [ 1251.784679][T28742] ? free_vm_area+0x50/0x50 [ 1251.789199][T28742] ? arch_dup_task_struct+0x57/0xd0 [ 1251.796127][T28742] ? __asan_memcpy+0x40/0x70 [ 1251.801855][T28742] dup_task_struct+0x3c8/0x800 [ 1251.809051][T28742] ? copy_process+0x5a6/0x3da0 [ 1251.814296][T28742] ? lockdep_hardirqs_on+0x98/0x150 [ 1251.820076][T28742] copy_process+0x5a6/0x3da0 [ 1251.824815][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.829618][T28742] ? __lock_acquire+0x7eb0/0x7eb0 [ 1251.834697][T28742] ? __pidfd_prepare+0x140/0x140 [ 1251.839642][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.844408][T28742] ? trace_call_bpf+0x5e9/0x6c0 [ 1251.849268][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.854039][T28742] kernel_clone+0x24b/0x8a0 [ 1251.858641][T28742] ? trace_call_bpf+0xc3/0x6c0 [ 1251.863402][T28742] ? create_io_thread+0x190/0x190 [ 1251.868533][T28742] ? perf_trace_preemptirq_template+0x269/0x330 [ 1251.874800][T28742] __x64_sys_clone+0x1b7/0x230 [ 1251.879568][T28742] ? __ia32_sys_vfork+0x140/0x140 [ 1251.884592][T28742] ? 0xffffffffff600000 [ 1251.888753][T28742] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1251.894828][T28742] do_syscall_64+0x55/0xb0 [ 1251.899244][T28742] ? clear_bhb_loop+0x40/0x90 [ 1251.903927][T28742] ? clear_bhb_loop+0x40/0x90 [ 1251.908603][T28742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.914499][T28742] RIP: 0033:0x7f48d639e2d9 [ 1251.918912][T28742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.938802][T28742] RSP: 002b:00007f48d7214fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1251.947322][T28742] RAX: ffffffffffffffda RBX: 00007f48d6626090 RCX: 00007f48d639e2d9 [ 1251.955999][T28742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 1251.966123][T28742] RBP: 00007f48d7215090 R08: ffffffffff600000 R09: ffffffffff600000 [ 1251.974409][T28742] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1251.982388][T28742] R13: 00007f48d6626128 R14: 00007f48d6626090 R15: 00007ffd940a1938 [ 1251.991004][T28742] ? 0xffffffffff600000 [ 1251.995260][T28742] ? 0xffffffffff600000 [ 1251.999440][T28742] [ 1252.019157][T28742] Mem-Info: [ 1252.022324][T28742] active_anon:11380 inactive_anon:0 isolated_anon:0 [ 1252.022324][T28742] active_file:18360 inactive_file:40420 isolated_file:0 [ 1252.022324][T28742] unevictable:768 dirty:144 writeback:0 [ 1252.022324][T28742] slab_reclaimable:11360 slab_unreclaimable:98425 [ 1252.022324][T28742] mapped:29925 shmem:1361 pagetables:590 [ 1252.022324][T28742] sec_pagetables:0 bounce:0 [ 1252.022324][T28742] kernel_misc_reclaimable:0 [ 1252.022324][T28742] free:1319600 free_pcp:9656 free_cma:0 [ 1252.087449][T28749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7098'. [ 1252.112080][T28748] netlink: 'syz.2.7099': attribute type 4 has an invalid length. [ 1252.117254][T28749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.120610][T28748] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7099'. [ 1252.186420][T28742] Node 0 active_anon:45420kB inactive_anon:0kB active_file:73440kB inactive_file:161480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119600kB dirty:576kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11780kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 1252.257976][T28742] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1252.329211][T28742] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.361162][T28742] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1252.397461][T28742] Node 0 DMA32 free:1369576kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:45384kB inactive_anon:0kB active_file:73440kB inactive_file:160412kB unevictable:1536kB writepending:572kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:21000kB local_pcp:6020kB free_cma:0kB [ 1252.462073][T28742] lowmem_reserve[]: 0 0 1 1 1 [ 1252.480442][T28742] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1068kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1252.516576][T28742] lowmem_reserve[]: 0 0 0 0 0 [ 1252.528323][T28742] Node 1 Normal free:3893228kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18896kB local_pcp:9240kB free_cma:0kB [ 1252.567232][T28742] lowmem_reserve[]: 0 0 0 0 0 [ 1252.572165][T28742] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1252.586420][T28742] Node 0 DMA32: 954*4kB (ME) 708*8kB (ME) 1110*16kB (ME) 1724*32kB (UM) 663*64kB (UM) 429*128kB (UM) 116*256kB (UM) 55*512kB (UME) 29*1024kB (UM) 6*2048kB (UME) 266*4096kB (UM) = 1369128kB [ 1252.605967][T28742] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1252.620010][T28742] Node 1 Normal: 87*4kB (UME) 34*8kB (UE) 16*16kB (UE) 24*32kB (UE) 10*64kB (UM) 4*128kB (UE) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3893228kB [ 1252.656391][T28742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.691901][T28742] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1252.718605][T28742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.751588][T28763] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.7104'. [ 1252.798785][T28764] netlink: 'syz.3.7104': attribute type 17 has an invalid length. [ 1252.809483][T28742] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1252.830050][T28764] netlink: 'syz.3.7104': attribute type 16 has an invalid length. [ 1252.842326][T28742] 60141 total pagecache pages [ 1252.852431][T28742] 0 pages in swap cache [ 1252.857142][T28764] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7104'. [ 1252.867739][T28742] Free swap = 124996kB [ 1252.872128][T28742] Total swap = 124996kB [ 1252.877268][T28742] 2097051 pages RAM [ 1252.882001][T28742] 0 pages HighMem/MovableOnly [ 1252.903977][T28742] 421118 pages reserved [ 1252.953599][T28742] 0 pages cma reserved [ 1253.513542][T28780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.893736][T28796] netlink: 'syz.1.7114': attribute type 10 has an invalid length. [ 1256.856740][T28799] __nla_validate_parse: 3 callbacks suppressed [ 1256.856759][T28799] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7115'. [ 1256.921962][T28803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7117'. [ 1256.949229][T28805] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1257.071900][T28811] FAULT_INJECTION: forcing a failure. [ 1257.071900][T28811] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.093926][T28811] CPU: 0 PID: 28811 Comm: syz.2.7121 Not tainted syzkaller #0 [ 1257.101460][T28811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1257.111819][T28811] Call Trace: [ 1257.115139][T28811] [ 1257.118103][T28811] dump_stack_lvl+0x18c/0x250 [ 1257.122923][T28811] ? show_regs_print_info+0x20/0x20 [ 1257.128255][T28811] ? load_image+0x420/0x420 [ 1257.132925][T28811] ? __might_sleep+0xe0/0xe0 [ 1257.138608][T28811] ? __lock_acquire+0x7eb0/0x7eb0 [ 1257.143875][T28811] should_fail_ex+0x394/0x4c0 [ 1257.149679][T28811] should_failslab+0x9/0x20 [ 1257.154360][T28811] slab_pre_alloc_hook+0x59/0x300 [ 1257.160042][T28811] ? __get_vm_area_node+0x125/0x370 [ 1257.165266][T28811] __kmem_cache_alloc_node+0x53/0x250 [ 1257.170667][T28811] ? __get_vm_area_node+0x125/0x370 [ 1257.175969][T28811] kmalloc_node_trace+0x26/0xe0 [ 1257.180844][T28811] __get_vm_area_node+0x125/0x370 [ 1257.185981][T28811] __vmalloc_node_range+0x36f/0x1320 [ 1257.191284][T28811] ? netlink_sendmsg+0x602/0xbf0 [ 1257.196405][T28811] ? netlink_insert+0x1094/0x1390 [ 1257.201474][T28811] ? netlink_insert+0x2ba/0x1390 [ 1257.206459][T28811] ? free_vm_area+0x50/0x50 [ 1257.211008][T28811] ? netlink_sendmsg+0x602/0xbf0 [ 1257.216047][T28811] vmalloc+0x79/0x90 [ 1257.219957][T28811] ? netlink_sendmsg+0x602/0xbf0 [ 1257.224905][T28811] netlink_sendmsg+0x602/0xbf0 [ 1257.229761][T28811] ? netlink_getsockopt+0x590/0x590 [ 1257.235087][T28811] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1257.240667][T28811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1257.246049][T28811] ? security_socket_sendmsg+0x80/0xa0 [ 1257.251554][T28811] sock_write_iter+0x2dc/0x420 [ 1257.256399][T28811] ? sock_read_iter+0x3f0/0x3f0 [ 1257.261338][T28811] ? common_file_perm+0x198/0x1f0 [ 1257.266771][T28811] vfs_write+0x474/0x9a0 [ 1257.271079][T28811] ? file_end_write+0x250/0x250 [ 1257.276015][T28811] ? __fget_files+0x3fc/0x460 [ 1257.280734][T28811] ? __fdget_pos+0x1d8/0x330 [ 1257.285902][T28811] ? ksys_write+0x74/0x260 [ 1257.290460][T28811] ksys_write+0x151/0x260 [ 1257.295772][T28811] ? __ia32_sys_read+0x90/0x90 [ 1257.300706][T28811] ? lockdep_hardirqs_on+0x98/0x150 [ 1257.305938][T28811] do_syscall_64+0x55/0xb0 [ 1257.310844][T28811] ? clear_bhb_loop+0x40/0x90 [ 1257.315589][T28811] ? clear_bhb_loop+0x40/0x90 [ 1257.320299][T28811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.326217][T28811] RIP: 0033:0x7ff8c639e2d9 [ 1257.331238][T28811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.350972][T28811] RSP: 002b:00007ff8c72bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1257.359409][T28811] RAX: ffffffffffffffda RBX: 00007ff8c6625fa0 RCX: 00007ff8c639e2d9 [ 1257.367914][T28811] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1257.376173][T28811] RBP: 00007ff8c72bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.386013][T28811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.394197][T28811] R13: 00007ff8c6626038 R14: 00007ff8c6625fa0 R15: 00007fffe8de4e88 [ 1257.403040][T28811] [ 1257.695220][T28817] bridge_slave_1: left allmulticast mode [ 1257.706023][T28817] bridge_slave_1: left promiscuous mode [ 1257.739350][T28817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.769533][T28817] bridge_slave_0: left allmulticast mode [ 1257.791164][T28817] bridge_slave_0: left promiscuous mode [ 1257.815222][T28817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.926576][T28824] netlink: 'syz.2.7125': attribute type 10 has an invalid length. [ 1258.009747][T28827] netlink: 'syz.4.7126': attribute type 10 has an invalid length. [ 1258.024935][T28827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7126'. [ 1258.128344][T28831] FAULT_INJECTION: forcing a failure. [ 1258.128344][T28831] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.141436][T28831] CPU: 1 PID: 28831 Comm: syz.1.7127 Not tainted syzkaller #0 [ 1258.149025][T28831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1258.159283][T28831] Call Trace: [ 1258.162599][T28831] [ 1258.166173][T28831] dump_stack_lvl+0x18c/0x250 [ 1258.171031][T28831] ? show_regs_print_info+0x20/0x20 [ 1258.176376][T28831] ? load_image+0x420/0x420 [ 1258.181510][T28831] ? netdev_core_pick_tx+0x370/0x370 [ 1258.186878][T28831] should_fail_ex+0x394/0x4c0 [ 1258.191694][T28831] should_failslab+0x9/0x20 [ 1258.196236][T28831] slab_pre_alloc_hook+0x59/0x300 [ 1258.201494][T28831] kmem_cache_alloc+0x5a/0x2c0 [ 1258.206300][T28831] ? skb_clone+0x1eb/0x370 [ 1258.211050][T28831] skb_clone+0x1eb/0x370 [ 1258.216968][T28831] bpf_clone_redirect+0x16d/0x4a0 [ 1258.223175][T28831] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 1258.228680][T28831] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1258.235167][T28831] ? perf_trace_preemptirq_template+0xac/0x330 [ 1258.243560][T28831] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1258.250017][T28831] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1258.255536][T28831] ? lock_chain_count+0x20/0x20 [ 1258.260433][T28831] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1258.266733][T28831] ? __local_bh_disable_ip+0x108/0x1a0 [ 1258.272935][T28831] ? __cant_sleep+0x220/0x220 [ 1258.278181][T28831] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1258.283596][T28831] ? _local_bh_enable+0xa0/0xa0 [ 1258.288502][T28831] ? bpf_test_timer_continue+0x135/0x380 [ 1258.294178][T28831] ? bpf_test_run+0x174/0x870 [ 1258.298902][T28831] bpf_test_run+0x2df/0x870 [ 1258.303461][T28831] ? bpf_test_run+0x174/0x870 [ 1258.308756][T28831] ? dst_hold+0x70/0x70 [ 1258.312952][T28831] ? eth_get_headlen+0x210/0x210 [ 1258.317902][T28831] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1258.323285][T28831] ? cpu_online+0x60/0x60 [ 1258.327614][T28831] bpf_prog_test_run+0x31f/0x390 [ 1258.332546][T28831] __sys_bpf+0x49d/0x890 [ 1258.336788][T28831] ? bpf_link_show_fdinfo+0x560/0x560 [ 1258.342165][T28831] ? lock_chain_count+0x20/0x20 [ 1258.347028][T28831] __x64_sys_bpf+0x7c/0x90 [ 1258.351483][T28831] do_syscall_64+0x55/0xb0 [ 1258.355935][T28831] ? clear_bhb_loop+0x40/0x90 [ 1258.360643][T28831] ? clear_bhb_loop+0x40/0x90 [ 1258.365363][T28831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.371298][T28831] RIP: 0033:0x7f124879e2d9 [ 1258.375716][T28831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.395422][T28831] RSP: 002b:00007f1249641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.400860][T28830] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7128'. [ 1258.404360][T28831] RAX: ffffffffffffffda RBX: 00007f1248a25fa0 RCX: 00007f124879e2d9 [ 1258.421770][T28831] RDX: 0000000000000028 RSI: 0000200000001700 RDI: 000000000000000a [ 1258.430308][T28831] RBP: 00007f1249641090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.438318][T28831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.446329][T28831] R13: 00007f1248a26038 R14: 00007f1248a25fa0 R15: 00007ffecd517fb8 [ 1258.454357][T28831] [ 1258.579080][T28834] netlink: 'syz.4.7129': attribute type 13 has an invalid length. [ 1258.597361][T28834] netlink: 'syz.4.7129': attribute type 58 has an invalid length. [ 1258.606424][T28834] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1258.616447][T28839] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7130'. [ 1259.226255][T28856] mac80211_hwsim hwsim44 .3ãc¤±: renamed from wlan1 (while UP) [ 1259.359537][T28858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1260.315664][T28886] netlink: 13822 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1260.343083][T28886] netlink: 'syz.3.7146': attribute type 10 has an invalid length. [ 1260.371077][T28886] team0: Device vxcan1 is of different type [ 1260.490731][T28888] syzkaller0: entered promiscuous mode [ 1260.506752][T28888] syzkaller0: entered allmulticast mode [ 1263.676755][T28908] netlink: 'syz.2.7152': attribute type 10 has an invalid length. [ 1263.686272][T28908] team0: Device vxcan1 is of different type [ 1263.893218][T28915] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7156'. [ 1263.934139][T28915] netlink: 'syz.1.7156': attribute type 2 has an invalid length. [ 1264.101017][T28922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1264.119510][T28922] bridge_slave_0: entered allmulticast mode [ 1264.143270][T28922] netlink: 'syz.2.7157': attribute type 1 has an invalid length. [ 1264.174209][T28922] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7157'. [ 1264.541503][T28938] netlink: 'syz.2.7159': attribute type 29 has an invalid length. [ 1264.761088][T28938] netlink: 'syz.2.7159': attribute type 29 has an invalid length. [ 1264.796842][T28941] netlink: 'syz.2.7159': attribute type 29 has an invalid length. [ 1264.830110][T28943] netlink: 'syz.2.7159': attribute type 29 has an invalid length. [ 1265.009122][T28934] netlink: 'syz.2.7159': attribute type 10 has an invalid length. [ 1265.028986][T28934] veth0_vlan: entered allmulticast mode [ 1265.110818][T28934] veth0_vlan: left promiscuous mode [ 1265.162377][T28934] veth0_vlan: entered promiscuous mode [ 1265.180344][T28959] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.7166'. [ 1265.203508][T28934] team0: Device veth0_vlan failed to register rx_handler [ 1265.284991][T28938] netlink: 'syz.2.7159': attribute type 29 has an invalid length. [ 1265.316354][T28941] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1265.351557][T28955] netlink: 'syz.4.7163': attribute type 10 has an invalid length. [ 1265.377047][T28955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7163'. [ 1265.628469][T28970] FAULT_INJECTION: forcing a failure. [ 1265.628469][T28970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.657030][T28970] CPU: 1 PID: 28970 Comm: syz.4.7169 Not tainted syzkaller #0 [ 1265.664920][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1265.675007][T28970] Call Trace: [ 1265.678325][T28970] [ 1265.681275][T28970] dump_stack_lvl+0x18c/0x250 [ 1265.685988][T28970] ? show_regs_print_info+0x20/0x20 [ 1265.691255][T28970] ? load_image+0x420/0x420 [ 1265.695799][T28970] ? __might_fault+0xaa/0x120 [ 1265.700511][T28970] ? __lock_acquire+0x7eb0/0x7eb0 [ 1265.705566][T28970] ? mark_lock+0x94/0x320 [ 1265.709933][T28970] should_fail_ex+0x394/0x4c0 [ 1265.714650][T28970] _copy_from_iter+0x1cd/0x1290 [ 1265.719542][T28970] ? dev_get_by_index+0x22/0x2d0 [ 1265.724513][T28970] ? __lock_acquire+0x7eb0/0x7eb0 [ 1265.729569][T28970] ? copyout_mc+0x70/0x70 [ 1265.733938][T28970] ? perf_trace_lock+0xfc/0x3b0 [ 1265.738817][T28970] ? dev_get_by_index+0x22/0x2d0 [ 1265.743788][T28970] ? dev_get_by_index+0x22/0x2d0 [ 1265.748768][T28970] packet_sendmsg+0x2c7f/0x4a30 [ 1265.759973][T28970] ? aa_sk_perm+0x970/0x970 [ 1265.770650][T28970] ? __might_sleep+0xe0/0xe0 [ 1265.777605][T28970] ? verify_lock_unused+0x140/0x140 [ 1265.786072][T28970] ? aa_sk_perm+0x83c/0x970 [ 1265.795263][T28970] ? packet_getsockopt+0xad0/0xad0 [ 1265.801506][T28970] ? tomoyo_del_acl+0x2a0/0x2f0 [ 1265.806499][T28970] ? aa_sock_msg_perm+0x94/0x150 [ 1265.814041][T28970] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1265.823060][T28970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1265.830603][T28970] ? security_socket_sendmsg+0x80/0xa0 [ 1265.840409][T28970] ? packet_getsockopt+0xad0/0xad0 [ 1265.848478][T28970] ____sys_sendmsg+0x61b/0x980 [ 1265.855763][T28970] ? __asan_memset+0x22/0x40 [ 1265.861366][T28970] ? __sys_sendmsg_sock+0x30/0x30 [ 1265.870497][T28970] ? __import_iovec+0x5f2/0x850 [ 1265.881877][T28970] ? import_iovec+0x73/0xa0 [ 1265.889486][T28970] ___sys_sendmsg+0x2a6/0x360 [ 1265.899559][T28970] ? __sys_sendmsg+0x2b0/0x2b0 [ 1265.911913][T28970] ? __lock_acquire+0x7eb0/0x7eb0 [ 1265.919511][T28970] __se_sys_sendmsg+0x1d0/0x2c0 [ 1265.927510][T28970] ? __x64_sys_sendmsg+0x80/0x80 [ 1265.932617][T28970] ? lockdep_hardirqs_on+0x98/0x150 [ 1265.938127][T28970] do_syscall_64+0x55/0xb0 [ 1265.942603][T28970] ? clear_bhb_loop+0x40/0x90 [ 1265.947500][T28970] ? clear_bhb_loop+0x40/0x90 [ 1265.952227][T28970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.958180][T28970] RIP: 0033:0x7f48d639e2d9 [ 1265.962620][T28970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.982264][T28970] RSP: 002b:00007f48d7236028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.990733][T28970] RAX: ffffffffffffffda RBX: 00007f48d6625fa0 RCX: 00007f48d639e2d9 [ 1265.998758][T28970] RDX: 0000000000000000 RSI: 00002000000022c0 RDI: 0000000000000003 [ 1266.006856][T28970] RBP: 00007f48d7236090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.015036][T28970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.023047][T28970] R13: 00007f48d6626038 R14: 00007f48d6625fa0 R15: 00007ffd940a1938 [ 1266.031076][T28970] [ 1266.811427][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1266.822232][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1266.830951][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1266.852035][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1266.862003][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1266.870803][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1267.322857][T16059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.870514][T16059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.211996][T28998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7177'. [ 1268.328520][T16059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.922402][T16059] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 1268.937907][ T5780] Bluetooth: hci0: command tx timeout [ 1268.942276][T16059] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 1268.970038][T29007] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7179'. [ 1269.090053][T16059] team0: Port device ÿÿÿÿÿÿ removed [ 1269.112936][T16059] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.398953][T29003] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7178'. [ 1269.593548][T29004] validate_nla: 1 callbacks suppressed [ 1269.593560][T29004] netlink: 'syz.1.7178': attribute type 10 has an invalid length. [ 1269.645992][T29004] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link [ 1270.084635][T28980] chnl_net:caif_netlink_parms(): no params data found [ 1270.242004][T29027] netlink: 'syz.1.7183': attribute type 1 has an invalid length. [ 1270.250473][T29027] netlink: 'syz.1.7183': attribute type 3 has an invalid length. [ 1270.261081][T29027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7183'. [ 1270.340744][T29027] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7183'. [ 1270.712708][T29035] FAULT_INJECTION: forcing a failure. [ 1270.712708][T29035] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.763637][T29035] CPU: 1 PID: 29035 Comm: syz.1.7185 Not tainted syzkaller #0 [ 1270.771174][T29035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1270.781268][T29035] Call Trace: [ 1270.784589][T29035] [ 1270.787769][T29035] dump_stack_lvl+0x18c/0x250 [ 1270.792503][T29035] ? show_regs_print_info+0x20/0x20 [ 1270.797746][T29035] ? load_image+0x420/0x420 [ 1270.802299][T29035] ? __might_sleep+0xe0/0xe0 [ 1270.806939][T29035] ? __lock_acquire+0x7eb0/0x7eb0 [ 1270.812107][T29035] should_fail_ex+0x394/0x4c0 [ 1270.816858][T29035] should_failslab+0x9/0x20 [ 1270.821501][T29035] slab_pre_alloc_hook+0x59/0x300 [ 1270.826675][T29035] kmem_cache_alloc+0x5a/0x2c0 [ 1270.831480][T29035] ? __kernfs_new_node+0xe5/0x7f0 [ 1270.836562][T29035] __kernfs_new_node+0xe5/0x7f0 [ 1270.841458][T29035] ? kernfs_new_node+0x260/0x260 [ 1270.846451][T29035] ? up_write+0x1be/0x410 [ 1270.851004][T29035] kernfs_new_node+0x14c/0x260 [ 1270.855821][T29035] __kernfs_create_file+0x4b/0x2e0 [ 1270.861025][T29035] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1270.866450][T29035] internal_create_group+0x431/0xd10 [ 1270.871784][T29035] ? kernfs_add_one+0x149/0x6b0 [ 1270.876697][T29035] ? sysfs_create_group+0x20/0x20 [ 1270.881769][T29035] ? up_write+0x1be/0x410 [ 1270.886138][T29035] sysfs_create_groups+0x59/0x120 [ 1270.891207][T29035] device_add_attrs+0xdf/0x830 [ 1270.896015][T29035] ? device_add_class_symlinks+0x240/0x240 [ 1270.901866][T29035] ? device_add_class_symlinks+0x21f/0x240 [ 1270.908000][T29035] device_add+0x51a/0xc40 [ 1270.912385][T29035] netdev_register_kobject+0x188/0x320 [ 1270.917898][T29035] register_netdevice+0x12aa/0x1ba0 [ 1270.923247][T29035] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1270.928920][T29035] ? netif_stacked_transfer_operstate+0x210/0x210 [ 1270.935924][T29035] ? mutex_unlock+0x10/0x10 [ 1270.941081][T29035] ? vscnprintf+0x80/0x80 [ 1270.945562][T29035] ppp_dev_configure+0x850/0xad0 [ 1270.950921][T29035] ppp_ioctl+0xafb/0x1bc0 [ 1270.955313][T29035] ? ppp_poll+0x250/0x250 [ 1270.959678][T29035] ? __fget_files+0x28/0x460 [ 1270.964850][T29035] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1270.969828][T29035] ? security_file_ioctl+0x80/0xa0 [ 1270.974988][T29035] ? ppp_poll+0x250/0x250 [ 1270.979352][T29035] __se_sys_ioctl+0xfd/0x170 [ 1270.984070][T29035] do_syscall_64+0x55/0xb0 [ 1270.988706][T29035] ? clear_bhb_loop+0x40/0x90 [ 1270.993540][T29035] ? clear_bhb_loop+0x40/0x90 [ 1270.998254][T29035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1271.004726][T29035] RIP: 0033:0x7f124879e2d9 [ 1271.009445][T29035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.036010][T29035] RSP: 002b:00007f1249641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.044479][T29035] RAX: ffffffffffffffda RBX: 00007f1248a25fa0 RCX: 00007f124879e2d9 [ 1271.052587][T29035] RDX: 000000110c230000 RSI: 00000000c004743e RDI: 0000000000000003 [ 1271.060607][T29035] RBP: 00007f1249641090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.068617][T29035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1271.076621][T29035] R13: 00007f1248a26038 R14: 00007f1248a25fa0 R15: 00007ffecd517fb8 [ 1271.084655][T29035] [ 1271.094330][ T5780] Bluetooth: hci0: command tx timeout [ 1271.406365][T28980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.427019][T28980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.434300][T28980] bridge_slave_0: entered allmulticast mode [ 1271.461137][T28980] bridge_slave_0: entered promiscuous mode [ 1271.581373][T28980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.601595][T28980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.614747][T28980] bridge_slave_1: entered allmulticast mode [ 1271.645773][T28980] bridge_slave_1: entered promiscuous mode [ 1271.826838][T29063] netlink: 'syz.1.7191': attribute type 10 has an invalid length. [ 1271.848840][T29063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7191'. [ 1272.093104][T28980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.123127][T28980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.314838][T29087] netlink: 'syz.1.7196': attribute type 9 has an invalid length. [ 1272.332107][T28980] team0: Port device team_slave_0 added [ 1272.347099][T29087] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1272.504377][T28980] team0: Port device team_slave_1 added [ 1272.819149][T29093] netlink: 'syz.1.7196': attribute type 9 has an invalid length. [ 1272.838151][T29093] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1272.886887][T28980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.894210][T28980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.955879][T28980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.071490][T29096] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1273.177140][ T5780] Bluetooth: hci0: command tx timeout [ 1273.186803][T29095] netlink: 'syz.4.7197': attribute type 10 has an invalid length. [ 1273.194714][T29095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1273.307740][T28980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.344776][T28980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.434041][T28980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.668558][T28980] hsr_slave_0: entered promiscuous mode [ 1273.694033][T28980] hsr_slave_1: entered promiscuous mode [ 1273.720286][T28980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.739877][T28980] Cannot create hsr debugfs directory [ 1273.883913][T29110] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7201'. [ 1274.062667][T16059] [ 1274.066744][T16059] ====================================================== [ 1274.081387][T16059] WARNING: possible circular locking dependency detected [ 1274.090972][T16059] syzkaller #0 Not tainted [ 1274.095423][T16059] ------------------------------------------------------ [ 1274.102634][T16059] kworker/u4:4/16059 is trying to acquire lock: [ 1274.108891][T16059] ffff88802dc44d80 (team->team_lock_key#11){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 1274.118919][T16059] [ 1274.118919][T16059] but task is already holding lock: [ 1274.126353][T16059] ffff88804de80768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1274.136746][T16059] [ 1274.136746][T16059] which lock already depends on the new lock. [ 1274.136746][T16059] [ 1274.147191][T16059] [ 1274.147191][T16059] the existing dependency chain (in reverse order) is: [ 1274.156228][T16059] [ 1274.156228][T16059] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1274.164079][T16059] __mutex_lock+0x135/0xc80 [ 1274.169223][T16059] ieee80211_open+0x144/0x200 [ 1274.174502][T16059] __dev_open+0x2cb/0x430 [ 1274.179388][T16059] dev_open+0xab/0x190 [ 1274.184011][T16059] team_add_slave+0x703/0x28a0 [ 1274.189329][T16059] do_setlink+0xcde/0x3f40 [ 1274.194310][T16059] rtnl_newlink+0x1848/0x2170 [ 1274.199622][T16059] rtnetlink_rcv_msg+0x843/0xf90 [ 1274.205110][T16059] netlink_rcv_skb+0x235/0x4c0 [ 1274.210513][T16059] netlink_unicast+0x7b1/0x930 [ 1274.215829][T16059] netlink_sendmsg+0x8d0/0xbf0 [ 1274.221151][T16059] ____sys_sendmsg+0x61b/0x980 [ 1274.226485][T16059] ___sys_sendmsg+0x2a6/0x360 [ 1274.231779][T16059] __se_sys_sendmsg+0x1d0/0x2c0 [ 1274.239139][T16059] do_syscall_64+0x55/0xb0 [ 1274.244079][T16059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1274.250498][T16059] [ 1274.250498][T16059] -> #0 (team->team_lock_key#11){+.+.}-{3:3}: [ 1274.259201][T16059] __lock_acquire+0x3a07/0x7eb0 [ 1274.264861][T16059] lock_acquire+0x19e/0x420 [ 1274.271250][T16059] __mutex_lock+0x135/0xc80 [ 1274.276754][T16059] team_del_slave+0x31/0x1b0 [ 1274.282332][T16059] team_device_event+0x297/0xa30 [ 1274.287885][T16059] notifier_call_chain+0x18f/0x380 [ 1274.293531][T16059] unregister_netdevice_many_notify+0x1037/0x1910 [ 1274.301333][T16059] unregister_netdevice_queue+0x2e9/0x330 [ 1274.307648][T16059] _cfg80211_unregister_wdev+0x16d/0x580 [ 1274.314099][T16059] ieee80211_remove_interfaces+0x4b3/0x690 [ 1274.320446][T16059] ieee80211_unregister_hw+0x5d/0x2a0 [ 1274.326604][T16059] mac80211_hwsim_del_radio+0x289/0x480 [ 1274.332674][T16059] hwsim_exit_net+0x58d/0x650 [ 1274.337888][T16059] cleanup_net+0x6f7/0xb00 [ 1274.342858][T16059] process_scheduled_works+0xa60/0x1600 [ 1274.348944][T16059] worker_thread+0xa5e/0xfe0 [ 1274.354050][T16059] kthread+0x2fa/0x390 [ 1274.358630][T16059] ret_from_fork+0x48/0x80 [ 1274.363585][T16059] ret_from_fork_asm+0x11/0x20 [ 1274.368892][T16059] [ 1274.368892][T16059] other info that might help us debug this: [ 1274.368892][T16059] [ 1274.379122][T16059] Possible unsafe locking scenario: [ 1274.379122][T16059] [ 1274.386836][T16059] CPU0 CPU1 [ 1274.392215][T16059] ---- ---- [ 1274.398296][T16059] lock(&rdev->wiphy.mtx); [ 1274.402804][T16059] lock(team->team_lock_key#11); [ 1274.412619][T16059] lock(&rdev->wiphy.mtx); [ 1274.419669][T16059] lock(team->team_lock_key#11); [ 1274.424696][T16059] [ 1274.424696][T16059] *** DEADLOCK *** [ 1274.424696][T16059] [ 1274.432834][T16059] 5 locks held by kworker/u4:4/16059: [ 1274.438204][T16059] #0: ffff88801ae5d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1274.449096][T16059] #1: ffffc9000d317d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1274.459929][T16059] #2: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 1274.469347][T16059] #3: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1274.479190][T16059] #4: ffff88804de80768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1274.490112][T16059] [ 1274.490112][T16059] stack backtrace: [ 1274.496085][T16059] CPU: 1 PID: 16059 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1274.503716][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1274.514291][T16059] Workqueue: netns cleanup_net [ 1274.519062][T16059] Call Trace: [ 1274.522341][T16059] [ 1274.525273][T16059] dump_stack_lvl+0x18c/0x250 [ 1274.529969][T16059] ? load_image+0x420/0x420 [ 1274.534469][T16059] ? show_regs_print_info+0x20/0x20 [ 1274.539662][T16059] ? print_circular_bug+0x12b/0x1a0 [ 1274.544880][T16059] check_noncircular+0x2fc/0x400 [ 1274.549957][T16059] ? print_deadlock_bug+0x5d0/0x5d0 [ 1274.555534][T16059] ? lockdep_lock+0xf5/0x230 [ 1274.560139][T16059] ? _find_first_zero_bit+0xd6/0x100 [ 1274.565421][T16059] __lock_acquire+0x3a07/0x7eb0 [ 1274.570276][T16059] ? verify_lock_unused+0x140/0x140 [ 1274.575471][T16059] ? verify_lock_unused+0x140/0x140 [ 1274.580666][T16059] ? __up_read+0x2b8/0x6b0 [ 1274.585081][T16059] lock_acquire+0x19e/0x420 [ 1274.589583][T16059] ? team_del_slave+0x31/0x1b0 [ 1274.594346][T16059] ? __might_sleep+0xe0/0xe0 [ 1274.598932][T16059] ? read_lock_is_recursive+0x20/0x20 [ 1274.607820][T16059] __mutex_lock+0x135/0xc80 [ 1274.621687][T16059] ? team_del_slave+0x31/0x1b0 [ 1274.632729][T16059] ? __mutex_lock+0x30d/0xc80 [ 1274.637788][T16059] ? team_del_slave+0x31/0x1b0 [ 1274.644973][T16059] ? mutex_lock_nested+0x20/0x20 [ 1274.652272][T16059] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1274.661072][T16059] team_del_slave+0x31/0x1b0 [ 1274.667022][T16059] team_device_event+0x297/0xa30 [ 1274.675384][T16059] notifier_call_chain+0x18f/0x380 [ 1274.682186][T16059] unregister_netdevice_many_notify+0x1037/0x1910 [ 1274.693033][T16059] ? unregister_netdevice_many+0x20/0x20 [ 1274.703746][T16059] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1274.716381][T16059] ? __lock_acquire+0x7eb0/0x7eb0 [ 1274.725899][T16059] unregister_netdevice_queue+0x2e9/0x330 [ 1274.734250][T16059] ? list_netdevice+0x730/0x730 [ 1274.741537][T16059] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1274.749090][T16059] _cfg80211_unregister_wdev+0x16d/0x580 [ 1274.760599][T16059] ieee80211_remove_interfaces+0x4b3/0x690 [ 1274.769216][T16059] ? ieee80211_do_stop+0x2030/0x2030 [ 1274.774603][T16059] ? rcu_is_watching+0x15/0xb0 [ 1274.779387][T16059] ieee80211_unregister_hw+0x5d/0x2a0 [ 1274.784937][T16059] mac80211_hwsim_del_radio+0x289/0x480 [ 1274.790560][T16059] ? rhashtable_remove_fast+0xc00/0xc00 [ 1274.796154][T16059] hwsim_exit_net+0x58d/0x650 [ 1274.800845][T16059] ? hwsim_init_net+0x90/0x90 [ 1274.805525][T16059] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1274.811336][T16059] cleanup_net+0x6f7/0xb00 [ 1274.815764][T16059] ? ops_free_list+0x3b0/0x3b0 [ 1274.820524][T16059] ? _raw_spin_unlock_irq+0x23/0x50 [ 1274.825805][T16059] ? process_scheduled_works+0x975/0x1600 [ 1274.831519][T16059] ? process_scheduled_works+0x975/0x1600 [ 1274.837237][T16059] process_scheduled_works+0xa60/0x1600 [ 1274.842787][T16059] ? worker_attach_to_pool+0x370/0x370 [ 1274.848245][T16059] ? assign_work+0x3cc/0x5d0 [ 1274.852830][T16059] worker_thread+0xa5e/0xfe0 [ 1274.857430][T16059] kthread+0x2fa/0x390 [ 1274.861490][T16059] ? pr_cont_work+0x550/0x550 [ 1274.866965][T16059] ? kthread_blkcg+0xd0/0xd0 [ 1274.871642][T16059] ret_from_fork+0x48/0x80 [ 1274.876140][T16059] ? kthread_blkcg+0xd0/0xd0 [ 1274.880722][T16059] ret_from_fork_asm+0x11/0x20 [ 1274.885598][T16059] [ 1274.935207][T16059] mac80211_hwsim hwsim42 wlan1 (unregistering): left promiscuous mode [ 1274.981799][T29122] netlink: 'syz.3.7202': attribute type 1 has an invalid length. [ 1274.990759][T29122] netlink: 'syz.3.7202': attribute type 3 has an invalid length. [ 1275.005494][T16059] mac80211_hwsim hwsim42 wlan1 (unregistering): left allmulticast mode [ 1275.018683][T29122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7202'. [ 1275.038730][T16059] team0: Port device wlan1 removed [ 1275.098269][T29115] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7202'. [ 1275.256753][ T5780] Bluetooth: hci0: command tx timeout [ 1275.289466][T16059] hsr_slave_0: left promiscuous mode [ 1275.296174][T16059] hsr_slave_1: left promiscuous mode [ 1275.312309][T16059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.321219][T16059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.340135][T16059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.354263][T16059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.362890][T16059] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1275.372821][T16059] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1275.385490][T16059] veth1_macvtap: left promiscuous mode [ 1275.393211][T16059] veth1_vlan: left promiscuous mode [ 1275.785521][T16059] team_slave_1 (unregistering): left promiscuous mode [ 1275.792857][T16059] team_slave_1 (unregistering): left allmulticast mode [ 1275.802012][T16059] team0 (unregistering): Port device team_slave_1 removed [ 1275.885975][T16059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.922230][T16059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.963024][T16059] veth0_to_bond (unregistering): left promiscuous mode [ 1275.970386][T16059] veth0_to_bond (unregistering): left allmulticast mode [ 1275.979940][T16059] team0 (unregistering): Port device veth0_to_bond removed [ 1276.009146][T16059] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1276.161513][T16059] batadv0 (unregistering): left promiscuous mode [ 1276.169572][T16059] batadv0 (unregistering): left allmulticast mode [ 1276.177928][T16059] team0 (unregistering): Port device batadv0 removed [ 1276.259586][T16059] bond0 (unregistering): Released all slaves [ 1276.785675][T28980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1276.796539][T28980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1276.811906][T28980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1276.829479][T28980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1276.963537][T28980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.985384][T28980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.017149][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.024368][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.041887][T23530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.049369][T23530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.390230][T28980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.439696][T28980] veth0_vlan: entered promiscuous mode [ 1277.454574][T28980] veth1_vlan: entered promiscuous mode [ 1277.497908][T28980] veth0_macvtap: entered promiscuous mode [ 1277.523635][T28980] veth1_macvtap: entered promiscuous mode [ 1277.565680][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.577205][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.587639][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.598480][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.608656][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.621071][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.631676][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.642454][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.658815][T28980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.692739][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.704566][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.715310][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.725863][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.736137][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.748499][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.758534][T28980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.769338][T28980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.781763][T28980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.798123][T28980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.817406][T28980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.826189][T28980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.843436][T28980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.921124][T28980] ieee80211 phy91: Selected rate control algorithm 'minstrel_ht' [ 1277.962402][T23530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.964241][T28980] ieee80211 phy92: Selected rate control algorithm 'minstrel_ht' [ 1277.976369][T23530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.018989][ T8938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.028797][ T8938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50