last executing test programs: 2m41.093564364s ago: executing program 2 (id=3005): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000700)='%pB \x00'}, 0x20) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000000000030060000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000ac"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r4, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x2040}, r5, 0x0, 0xffffffffffffffff, 0x0) 2m40.579242039s ago: executing program 2 (id=3008): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000020090178082956afb1923cfcdfa0fa0a750b680", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0xbc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r3 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r3, 0x10e, 0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="b71f26269390656b5987343f9ec808798954556b93ab041a03d6eb18b97c1bf515182e1649d11a7750b7857c050404f7d5d4d6044f844aeb5c1b540296dd84f3ac5a6daf520d39cb", @ANYRES64=0x0], 0x10) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10057) 2m39.997645348s ago: executing program 2 (id=3013): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) 2m39.808667818s ago: executing program 2 (id=3016): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 8) 2m39.651413775s ago: executing program 2 (id=3019): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000b00000002000000", @ANYRES32, @ANYBLOB="e5ffffffffffffff000ea50700000000005414000000000097f54442a7cec3d707fd147c2e78ab13cd4139982a95bb35ca69c50626831460d287e6fcb31c7bd6e77f95f8f38464740965ed5fd8591003c0ef1b5d6008de90c269fed9dc987d3713ba1617e96d7b757e953457c6a371fcf30a19985cf8bd45dbb61632835ea6fca4e6fea812d1bf2c10ace95a52e4ff596d0da44705573a84e66968fad73b46039d0824066aaff3e6c84f1cfaeeebadcc60211ba8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000faffffffffffffff00000000000000"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) socket$kcm(0x10, 0x2, 0x10) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0x4, &(0x7f0000000980)=ANY=[@ANYRES64=r4, @ANYRESDEC=r6, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r7, @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40efe, 0x4, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0x4, &(0x7f0000000980)=ANY=[@ANYRES64=r4, @ANYRESDEC=r6, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r7, @ANYRES32, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40efe, 0x4, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x5, 0xd, 0x3}, {0x5, 0x4, 0x0, 0x7}], 0x10, 0x7fff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x5, 0xd, 0x3}, {0x5, 0x4, 0x0, 0x7}], 0x10, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000180)={r9}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) 2m39.428614537s ago: executing program 2 (id=3023): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) (fail_nth: 8) 2m23.4912862s ago: executing program 32 (id=3023): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) (fail_nth: 8) 3.502655686s ago: executing program 3 (id=3974): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) 2.773749872s ago: executing program 3 (id=3977): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000fe44eed8"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000d00030000009500000085c99fa3"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000800000000000000006922000000"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3a, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62fb7e4fe", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x4) 2.690580516s ago: executing program 1 (id=3978): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/111, 0x6f}, {0x0}], 0x3}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES8=r2], 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x71, 0x3}, 0xffffff6a, &(0x7f0000000300)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0x28}, {&(0x7f0000000400)="676319b28318e8572b6ef74ab3edec7f851aac03f728583217799616be4083c47f2e37b2a7f8f9c944244d9a13d125629b5817120580be1f7eb2f4ee1644591ff1c4f27e8e1c3e3d7402431a8cf9c0a258a0de0821f33a62a571291335301f220ee3d00ea5574cc9a9db82260a6cc1fb9721ce05ab8c592aca961e7aad23ad7be8a1cde686b8b23670164abbb08c60eaeaa39c0e5496579314dcafb54062d05ad01efbb74727c0c7f7cd30efc930b565604d5efcfff50e89d8e4946b4925c5"}], 0x1}, 0x20040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x3, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) 2.466049567s ago: executing program 4 (id=3980): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x8, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3e5}, 0x800, 0xc8, 0x32a, 0x7, 0x7fffffff, 0xfffffff5, 0x2, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x80000000000000a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001000000000000006", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1140fc0b10000300adf74a8372e87e7802ec1ecb669ef1ae97be13a571e3aaae1721c88bb3f617fdc5c29a62", 0x52}], 0x1}, 0x810) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) 2.427231399s ago: executing program 1 (id=3981): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328", 0x20, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 2.161584972s ago: executing program 4 (id=3982): socket$kcm(0xa, 0x2, 0x73) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ae00af6a676c7618761add000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xff, 0x0, 0x80, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffeffffffffffffc, r1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) 2.161287413s ago: executing program 3 (id=3983): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.089303466s ago: executing program 1 (id=3984): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000fe44eed8"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000d00030000009500000085c99fa3"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000800000000000000006922000000"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3a, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62fb7e4fe", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x4) 1.902235555s ago: executing program 3 (id=3986): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 1.834946948s ago: executing program 1 (id=3987): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000020090178082956afb1923cfcdfa0fa0a750b680", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0xbc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10057) 1.831083948s ago: executing program 4 (id=3988): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) 1.684808136s ago: executing program 4 (id=3989): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000020090178082956afb1923cfcdfa0fa0a750b680", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0xbc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10057) 1.147118373s ago: executing program 3 (id=3990): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x8, 0x2, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3e5}, 0x800, 0xc8, 0x32a, 0x7, 0x7fffffff, 0xfffffff5, 0x2, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0x80000000000000a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001000000000000006", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1140fc0b10000300adf74a8372e87e7802ec1ecb669ef1ae97be13a571e3aaae1721c88bb3f617fdc5c29a62", 0x52}], 0x1}, 0x810) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) 1.123657344s ago: executing program 0 (id=3991): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x3, @multicast1}, 0x10, 0x0, 0x700, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) 1.026891039s ago: executing program 0 (id=3992): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328", 0x20, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 1.025443069s ago: executing program 3 (id=3993): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x25, 0x1, 0x3, 0xfffffffe}, {0x28}, {0x6, 0x6}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0xff7b) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x222200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) close(0x4) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000010500000010000000000054a9c076d167c77a9d1c5570ffe43d7033526078ede0eb6bd39c98450786cfcc91ba9c30da4787a57b8255cfa19854472b409e927834b5a39bb6ddda890000000000000000"], 0x0, 0x2a}, 0x28) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 889.435256ms ago: executing program 0 (id=3994): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000800) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 801.43286ms ago: executing program 1 (id=3995): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328", 0x20, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 689.042386ms ago: executing program 0 (id=3996): r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="4f22d6b35dddf79f10956025685d4505ce12e44c1df1dbf15b35b8ffd39657d5d969cfcd091bf286ffbd884d0f334e6d247eef9787691f8f5f9a1ce6d550278cd86f34a7cf6bc188dd8cf374a6d291b8510471646bea78e16b0f5c19ee", 0x5d}, {&(0x7f00000000c0)="f0032dfb8b2aff5e2da1a9a8eb60c1927403beec39f16fd245a4acad420fa1b7e56323f72d73a7226395ee19ea52ae1d89b0ef2ae239cffbe772894f208710f998a6123a140dae6712f396", 0x4b}, {&(0x7f0000000140)="dc9d9b9f88e890f91ba4e28fc1e42324cdd924d61bdb148bcb8704bc456201c0ad5dd4d3e490aad27b5ded3a3691d6e2f69898ddbaa8bcc37fda225b74fb495cf02a0c61360c668ff6cd8d1890f261a710cad52d0a599010a5471bbfd83798f1257211d4d860ed763f2af04f7f161cb78b7b85a5ecbd052aaa614899b80213300c1a177bfee3352af1410fc2cd8391f92ef19afa3837ecd5b95f67e475a3bb0cbc6de176912f90", 0xa7}, {&(0x7f0000000200)="b1575fa70127a48c279f44157f91a8817777a319e9b571807192041b8578a3bec4592bbfc00b49a04bc73667f3122d1952d9a8", 0x33}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000240)="c02a33a98221c837f416012ecb7e0a5894f56c30178afc08aeb41ac5af5db38f5ddcef4a4e5181b9edcdf329fe1a14385bb324259f0a94a0136faa9011ea90c458514ac5315234ac53b512592ffed27e0d5f47fc7c9d60d13b341dfac42b15a7208bfd0df954f135eb5dc9895275d83d96d2b464dc2628a72b26c05f743a9e4e3e508e01ff426839ddae8d2139161c10fa810b095a48c6b91fb14b30029ca946d7d5990ccc25274416b2e55ddc01bcdbb9611850e8060eac3e140438901f352de4e1a98a7d615f6695b8", 0xca}, {&(0x7f0000000340)}], 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x13f8}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) 631.491848ms ago: executing program 4 (id=3997): socket$kcm(0xa, 0x2, 0x73) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ae00af6a676c7618761add000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xff, 0x0, 0x80, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffeffffffffffffc, r1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) 359.615402ms ago: executing program 0 (id=3998): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 326.809664ms ago: executing program 1 (id=3999): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe8000000000"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x3, @empty, 0xff}, 0x80, 0x0}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 178.271541ms ago: executing program 4 (id=4000): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa, 0x7fffffff}, 0x10c101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000000)=r8, 0x4) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000100000550901000000000095002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r9, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=4001): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x3, @empty, 0xff}, 0x80, 0x0}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): nnel: no stack [ 650.440062][T15150] FAULT_INJECTION: forcing a failure. [ 650.440062][T15150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.486186][T15150] CPU: 0 PID: 15150 Comm: syz.2.3023 Not tainted syzkaller #0 [ 650.494144][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.504833][T15150] Call Trace: [ 650.508131][T15150] [ 650.511171][T15150] dump_stack_lvl+0x18c/0x250 [ 650.515890][T15150] ? show_regs_print_info+0x20/0x20 [ 650.521207][T15150] ? load_image+0x400/0x400 [ 650.525778][T15150] ? __lock_acquire+0x7d40/0x7d40 [ 650.530821][T15150] ? snprintf+0xe9/0x140 [ 650.535091][T15150] should_fail_ex+0x39d/0x4d0 [ 650.540064][T15150] _copy_to_user+0x2f/0xa0 [ 650.544509][T15150] simple_read_from_buffer+0xe7/0x150 [ 650.550457][T15150] proc_fail_nth_read+0x1e8/0x260 [ 650.555777][T15150] ? proc_fault_inject_write+0x360/0x360 [ 650.561714][T15150] ? fsnotify_perm+0x271/0x5e0 [ 650.566582][T15150] ? proc_fault_inject_write+0x360/0x360 [ 650.572435][T15150] vfs_read+0x28b/0x970 [ 650.576984][T15150] ? kernel_read+0x1e0/0x1e0 [ 650.581790][T15150] ? __fget_files+0x28/0x4b0 [ 650.586676][T15150] ? __fget_files+0x28/0x4b0 [ 650.591656][T15150] ? __fget_files+0x43d/0x4b0 [ 650.596455][T15150] ? __fdget_pos+0x2a3/0x330 [ 650.601059][T15150] ? ksys_read+0x75/0x260 [ 650.605558][T15150] ksys_read+0x150/0x260 [ 650.610076][T15150] ? vfs_write+0x990/0x990 [ 650.614704][T15150] ? lockdep_hardirqs_on+0x98/0x150 [ 650.619922][T15150] do_syscall_64+0x55/0xa0 [ 650.624448][T15150] ? clear_bhb_loop+0x40/0x90 [ 650.629138][T15150] ? clear_bhb_loop+0x40/0x90 [ 650.633842][T15150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.640267][T15150] RIP: 0033:0x7fb2e8f5cfce [ 650.644808][T15150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 650.664521][T15150] RSP: 002b:00007fb2e9e8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.672949][T15150] RAX: ffffffffffffffda RBX: 00007fb2e9e8f6c0 RCX: 00007fb2e8f5cfce [ 650.680923][T15150] RDX: 000000000000000f RSI: 00007fb2e9e8f0a0 RDI: 0000000000000006 [ 650.688900][T15150] RBP: 00007fb2e9e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 650.696888][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.705040][T15150] R13: 00007fb2e9216038 R14: 00007fb2e9215fa0 R15: 00007ffd536947c8 [ 650.713121][T15150] [ 651.786557][T15173] netlink: 'syz.1.3032': attribute type 9 has an invalid length. [ 651.808956][T15173] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3032'. [ 652.052162][T15176] delete_channel: no stack [ 652.154430][T15181] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.3035'. [ 652.390069][T15184] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 652.408632][T15184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3034'. [ 652.435627][T15188] netlink: 'syz.1.3036': attribute type 10 has an invalid length. [ 652.753560][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.768361][T15188] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 652.773090][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 652.899324][T15192] ÿ: renamed from bond_slave_0 (while UP) [ 654.150099][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3047'. [ 654.162813][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3047'. [ 655.428401][T15227] netlink: 'syz.0.3049': attribute type 10 has an invalid length. [ 655.470603][T15227] __nla_validate_parse: 2 callbacks suppressed [ 655.470624][T15227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3049'. [ 655.689774][T15232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3050'. [ 655.809118][T15236] delete_channel: no stack [ 656.442630][T15245] netlink: 'syz.3.3055': attribute type 10 has an invalid length. [ 656.477670][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.491165][T15245] batadv0: entered promiscuous mode [ 656.498353][T15245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 656.509614][T15246] netlink: 'syz.0.3056': attribute type 4 has an invalid length. [ 656.517830][T15246] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3056'. [ 656.618181][T15246] .`: renamed from bond0 (while UP) [ 656.645229][T15246] bridge0: port 3(.`) entered disabled state [ 656.673770][T15250] ÿ: renamed from bond_slave_0 (while UP) [ 656.774161][T15255] netlink: 'syz.0.3058': attribute type 9 has an invalid length. [ 656.782178][T15255] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3058'. [ 656.954171][T15260] netlink: 'syz.0.3058': attribute type 9 has an invalid length. [ 656.971232][T15260] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3058'. [ 657.044558][T15259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3060'. [ 657.110073][T15254] delete_channel: no stack [ 657.244826][T15269] FAULT_INJECTION: forcing a failure. [ 657.244826][T15269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.259609][T15269] CPU: 0 PID: 15269 Comm: syz.3.3064 Not tainted syzkaller #0 [ 657.267135][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.277418][T15269] Call Trace: [ 657.280744][T15269] [ 657.283742][T15269] dump_stack_lvl+0x18c/0x250 [ 657.288584][T15269] ? show_regs_print_info+0x20/0x20 [ 657.293843][T15269] ? load_image+0x400/0x400 [ 657.298541][T15269] ? __might_fault+0xaa/0x120 [ 657.303363][T15269] ? __lock_acquire+0x7d40/0x7d40 [ 657.308457][T15269] should_fail_ex+0x39d/0x4d0 [ 657.313191][T15269] _copy_from_user+0x2f/0xe0 [ 657.317832][T15269] ___sys_sendmsg+0x1c7/0x360 [ 657.322671][T15269] ? __sys_sendmsg+0x2a0/0x2a0 [ 657.323345][T15266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3063'. [ 657.327494][T15269] ? __lock_acquire+0x7d40/0x7d40 [ 657.327566][T15269] __se_sys_sendmsg+0x1c2/0x2b0 [ 657.346483][T15269] ? __x64_sys_sendmsg+0x80/0x80 [ 657.351584][T15269] ? lockdep_hardirqs_on+0x98/0x150 [ 657.356936][T15269] do_syscall_64+0x55/0xa0 [ 657.361405][T15269] ? clear_bhb_loop+0x40/0x90 [ 657.366215][T15269] ? clear_bhb_loop+0x40/0x90 [ 657.371031][T15269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.377076][T15269] RIP: 0033:0x7efdf499c799 [ 657.381546][T15269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.401995][T15269] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.410546][T15269] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 657.418583][T15269] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 657.426677][T15269] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 657.434764][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.442934][T15269] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 657.450959][T15269] [ 657.555123][T15273] netlink: 'syz.0.3065': attribute type 10 has an invalid length. [ 657.836473][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.845323][T15273] batadv0: entered promiscuous mode [ 657.855724][T15273] batadv0: entered allmulticast mode [ 657.861941][T15273] .`: (slave batadv0): Enslaving as an active interface with an up link [ 658.013509][ T2955] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 658.022977][ T2955] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 658.265895][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3071'. [ 658.591666][T15293] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3074'. [ 658.676856][T15297] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3076'. [ 658.854016][T15304] netlink: 'syz.0.3079': attribute type 25 has an invalid length. [ 658.863731][T15304] netlink: 'syz.0.3079': attribute type 9 has an invalid length. [ 659.349769][T15317] FAULT_INJECTION: forcing a failure. [ 659.349769][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 659.369349][T15317] CPU: 1 PID: 15317 Comm: syz.3.3084 Not tainted syzkaller #0 [ 659.376952][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.387821][T15317] Call Trace: [ 659.391130][T15317] [ 659.394075][T15317] dump_stack_lvl+0x18c/0x250 [ 659.399058][T15317] ? show_regs_print_info+0x20/0x20 [ 659.404385][T15317] ? load_image+0x400/0x400 [ 659.409141][T15317] ? __might_sleep+0xe0/0xe0 [ 659.413766][T15317] ? __lock_acquire+0x7d40/0x7d40 [ 659.419019][T15317] should_fail_ex+0x39d/0x4d0 [ 659.423739][T15317] should_failslab+0x9/0x20 [ 659.428346][T15317] slab_pre_alloc_hook+0x59/0x310 [ 659.433396][T15317] ? kasan_set_track+0x5f/0x70 [ 659.438278][T15317] kmem_cache_alloc_node+0x60/0x320 [ 659.443516][T15317] ? genl_rcv+0x28/0x40 [ 659.447759][T15317] ? __alloc_skb+0x103/0x2c0 [ 659.452345][T15317] __alloc_skb+0x103/0x2c0 [ 659.456756][T15317] netlink_dump+0x1ec/0xe50 [ 659.461264][T15317] ? netlink_lookup+0x200/0x200 [ 659.466127][T15317] ? __asan_memset+0x22/0x40 [ 659.470888][T15317] ? genl_start+0x493/0x6b0 [ 659.475500][T15317] __netlink_dump_start+0x5f1/0x810 [ 659.480708][T15317] genl_family_rcv_msg_dumpit+0x214/0x310 [ 659.486516][T15317] ? genl_rcv_msg+0x7a0/0x7a0 [ 659.491267][T15317] ? genl_get_cmd+0x7f1/0x920 [ 659.495934][T15317] ? genl_family_rcv_msg_doit+0x310/0x310 [ 659.501647][T15317] ? genl_start+0x6b0/0x6b0 [ 659.506144][T15317] ? genl_dumpit+0x1a0/0x1a0 [ 659.510723][T15317] ? bpf_lsm_capable+0x9/0x10 [ 659.515437][T15317] ? security_capable+0x89/0xb0 [ 659.520297][T15317] genl_rcv_msg+0x5e5/0x7a0 [ 659.524804][T15317] ? genl_bind+0x360/0x360 [ 659.529296][T15317] ? batadv_dat_free+0x380/0x380 [ 659.534230][T15317] ? ref_tracker_free+0x690/0x840 [ 659.539437][T15317] netlink_rcv_skb+0x241/0x4d0 [ 659.544202][T15317] ? genl_bind+0x360/0x360 [ 659.548609][T15317] ? netlink_ack+0x1180/0x1180 [ 659.553457][T15317] ? __lock_acquire+0x7d40/0x7d40 [ 659.558537][T15317] ? down_read+0x1ac/0x2e0 [ 659.563146][T15317] genl_rcv+0x28/0x40 [ 659.567172][T15317] netlink_unicast+0x751/0x8d0 [ 659.572124][T15317] netlink_sendmsg+0x8d0/0xbf0 [ 659.576891][T15317] ? netlink_getsockopt+0x590/0x590 [ 659.582222][T15317] ? aa_sock_msg_perm+0x94/0x150 [ 659.587173][T15317] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 659.592500][T15317] ? security_socket_sendmsg+0x80/0xa0 [ 659.597973][T15317] ? netlink_getsockopt+0x590/0x590 [ 659.603194][T15317] ____sys_sendmsg+0x5ba/0x960 [ 659.607999][T15317] ? __asan_memset+0x22/0x40 [ 659.612695][T15317] ? __sys_sendmsg_sock+0x30/0x30 [ 659.617827][T15317] ? __import_iovec+0x5f2/0x850 [ 659.622688][T15317] ? import_iovec+0x73/0xa0 [ 659.627275][T15317] ___sys_sendmsg+0x2a6/0x360 [ 659.632035][T15317] ? __sys_sendmsg+0x2a0/0x2a0 [ 659.636809][T15317] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 659.643503][T15317] __se_sys_sendmsg+0x1c2/0x2b0 [ 659.648503][T15317] ? __x64_sys_sendmsg+0x80/0x80 [ 659.653448][T15317] ? lockdep_hardirqs_on+0x98/0x150 [ 659.658655][T15317] do_syscall_64+0x55/0xa0 [ 659.663154][T15317] ? clear_bhb_loop+0x40/0x90 [ 659.667909][T15317] ? clear_bhb_loop+0x40/0x90 [ 659.672587][T15317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.678492][T15317] RIP: 0033:0x7efdf499c799 [ 659.683018][T15317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.702699][T15317] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.711212][T15317] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 659.719193][T15317] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 659.727157][T15317] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 659.735212][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.743292][T15317] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 659.751281][T15317] [ 659.854038][T15321] netlink: 'syz.1.3086': attribute type 4 has an invalid length. [ 667.247402][T15349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.258423][T15349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.267223][T15349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 667.277824][T15349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 667.287066][T15349] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 667.296255][T15349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 667.398433][T15346] netlink: 'syz.1.3090': attribute type 10 has an invalid length. [ 667.409705][T15346] __nla_validate_parse: 2 callbacks suppressed [ 667.409723][T15346] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3090'. [ 667.969971][T15360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3093'. [ 668.045099][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 668.107637][T15366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.314129][T15347] chnl_net:caif_netlink_parms(): no params data found [ 669.345634][T15378] netlink: 'syz.1.3098': attribute type 4 has an invalid length. [ 669.354391][T15378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3098'. [ 669.369006][T15378] .`: renamed from bond0 [ 669.400441][T13100] Bluetooth: hci3: command tx timeout [ 669.499425][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.532364][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.539754][T15347] bridge_slave_0: entered allmulticast mode [ 669.567787][T15347] bridge_slave_0: entered promiscuous mode [ 669.649339][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.656769][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.664674][T15347] bridge_slave_1: entered allmulticast mode [ 669.672690][T15347] bridge_slave_1: entered promiscuous mode [ 669.796446][T15347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.834367][T15347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.967810][T15347] team0: Port device team_slave_0 added [ 670.121915][T15347] team0: Port device team_slave_1 added [ 670.422344][T15347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.446864][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.493257][T15347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.531262][T15410] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3108'. [ 670.575019][T15347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.586557][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.614451][T15347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.707152][T15347] hsr_slave_0: entered promiscuous mode [ 670.731926][T15347] hsr_slave_1: entered promiscuous mode [ 670.742293][T15347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.753039][T15347] Cannot create hsr debugfs directory [ 670.759456][T15410] IPv6: Can't replace route, no match found [ 671.049612][T15417] netlink: 'syz.3.3110': attribute type 4 has an invalid length. [ 671.067719][T15417] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3110'. [ 671.096598][T15417] .`: renamed from bond0 (while UP) [ 671.493068][T13100] Bluetooth: hci3: command tx timeout [ 671.768611][T15347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.780152][T15347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.790017][T15347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.814402][T15347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 672.093856][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.161483][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.225479][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.232754][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.318144][T15426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3118'. [ 672.347951][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.355559][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.470617][T15347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.481520][T15347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.105889][T15438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.328719][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.572109][T13100] Bluetooth: hci3: command tx timeout [ 673.806631][T15347] veth0_vlan: entered promiscuous mode [ 673.853175][T15347] veth1_vlan: entered promiscuous mode [ 673.979883][T15347] veth0_macvtap: entered promiscuous mode [ 674.030694][T15347] veth1_macvtap: entered promiscuous mode [ 674.098489][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.120526][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.150487][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.165532][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.173358][T15462] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3121'. [ 674.176896][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.197715][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.208170][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.219509][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.232488][T15347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.241320][T15464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3122'. [ 674.253435][T15462] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3121'. [ 674.265375][T15462] tipc: Started in network mode [ 674.272955][T15462] tipc: Node identity d, cluster identity 56 [ 674.279057][T15462] tipc: Node number set to 13 [ 674.299337][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.312245][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.322729][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.333779][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.344248][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.355382][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.366082][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.377048][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.396246][T15347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.408388][T15347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.420188][T15347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.431256][T15347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.444078][T15347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.606092][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.627674][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.665676][T15470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3131'. [ 674.703667][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.727601][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.805579][T15473] netlink: 'syz.0.3124': attribute type 4 has an invalid length. [ 674.817426][T15473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3124'. [ 675.645517][T13100] Bluetooth: hci3: command tx timeout [ 676.841300][T15492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.436017][T15505] FAULT_INJECTION: forcing a failure. [ 677.436017][T15505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.643238][T15505] CPU: 1 PID: 15505 Comm: syz.1.3130 Not tainted syzkaller #0 [ 677.651126][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.661210][T15505] Call Trace: [ 677.664499][T15505] [ 677.667442][T15505] dump_stack_lvl+0x18c/0x250 [ 677.672144][T15505] ? show_regs_print_info+0x20/0x20 [ 677.677357][T15505] ? load_image+0x400/0x400 [ 677.681886][T15505] ? __lock_acquire+0x7d40/0x7d40 [ 677.687109][T15505] ? snprintf+0xe9/0x140 [ 677.691369][T15505] should_fail_ex+0x39d/0x4d0 [ 677.696065][T15505] _copy_to_user+0x2f/0xa0 [ 677.700491][T15505] simple_read_from_buffer+0xe7/0x150 [ 677.705898][T15505] proc_fail_nth_read+0x1e8/0x260 [ 677.710945][T15505] ? proc_fault_inject_write+0x360/0x360 [ 677.716579][T15505] ? fsnotify_perm+0x271/0x5e0 [ 677.721336][T15505] ? proc_fault_inject_write+0x360/0x360 [ 677.727079][T15505] vfs_read+0x28b/0x970 [ 677.731250][T15505] ? kernel_read+0x1e0/0x1e0 [ 677.735929][T15505] ? __fget_files+0x28/0x4b0 [ 677.740516][T15505] ? __fget_files+0x28/0x4b0 [ 677.745194][T15505] ? __fget_files+0x43d/0x4b0 [ 677.749870][T15505] ? __fdget_pos+0x2a3/0x330 [ 677.754551][T15505] ? ksys_read+0x75/0x260 [ 677.758912][T15505] ksys_read+0x150/0x260 [ 677.763261][T15505] ? vfs_write+0x990/0x990 [ 677.767685][T15505] ? lockdep_hardirqs_on+0x98/0x150 [ 677.772985][T15505] do_syscall_64+0x55/0xa0 [ 677.777398][T15505] ? clear_bhb_loop+0x40/0x90 [ 677.782155][T15505] ? clear_bhb_loop+0x40/0x90 [ 677.786840][T15505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.792743][T15505] RIP: 0033:0x7f3ce915cfce [ 677.797155][T15505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.816849][T15505] RSP: 002b:00007f3cea06cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.825343][T15505] RAX: ffffffffffffffda RBX: 00007f3cea06d6c0 RCX: 00007f3ce915cfce [ 677.833393][T15505] RDX: 000000000000000f RSI: 00007f3cea06d0a0 RDI: 0000000000000004 [ 677.841350][T15505] RBP: 00007f3cea06d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.849309][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.857274][T15505] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 677.865266][T15505] [ 678.501050][T15520] netlink: 'syz.0.3134': attribute type 4 has an invalid length. [ 678.536726][T15520] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3134'. [ 678.873286][T15530] netlink: 'syz.0.3148': attribute type 4 has an invalid length. [ 678.885295][T15530] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3148'. [ 679.026183][T15532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.161111][T15541] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3143'. [ 679.188681][T15539] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3141'. [ 679.217171][T15539] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.3141'. [ 679.238333][T15539] tipc: Started in network mode [ 679.248886][T15539] tipc: Node identity d, cluster identity 56 [ 679.272163][T15539] tipc: Node number set to 13 [ 679.396553][T15547] FAULT_INJECTION: forcing a failure. [ 679.396553][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 679.476968][T15547] CPU: 1 PID: 15547 Comm: syz.3.3145 Not tainted syzkaller #0 [ 679.484594][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.494700][T15547] Call Trace: [ 679.498024][T15547] [ 679.500981][T15547] dump_stack_lvl+0x18c/0x250 [ 679.505805][T15547] ? show_regs_print_info+0x20/0x20 [ 679.511138][T15547] ? load_image+0x400/0x400 [ 679.515729][T15547] should_fail_ex+0x39d/0x4d0 [ 679.520895][T15547] should_failslab+0x9/0x20 [ 679.525626][T15547] slab_pre_alloc_hook+0x59/0x310 [ 679.530694][T15547] ? nf_ct_ext_add+0x1ab/0x440 [ 679.535515][T15547] ? nf_ct_ext_add+0x1ab/0x440 [ 679.540321][T15547] __kmem_cache_alloc_node+0x53/0x250 [ 679.545771][T15547] ? nf_ct_ext_add+0x1ab/0x440 [ 679.550774][T15547] __kmalloc_node_track_caller+0xa2/0x230 [ 679.556576][T15547] krealloc+0x86/0x120 [ 679.560878][T15547] nf_ct_ext_add+0x1ab/0x440 [ 679.565612][T15547] init_conntrack+0x69c/0xf10 [ 679.570429][T15547] ? early_drop+0x7f0/0x7f0 [ 679.575075][T15547] ? nf_conntrack_find_get+0x650/0x650 [ 679.580566][T15547] ? __local_bh_enable_ip+0x13a/0x1c0 [ 679.585947][T15547] ? __siphash_unaligned+0x22e/0x3a0 [ 679.591250][T15547] nf_conntrack_in+0xc06/0x15c0 [ 679.596147][T15547] ? nf_ct_pernet+0x270/0x270 [ 679.600854][T15547] ? ipt_do_table+0x2c1/0x15e0 [ 679.605761][T15547] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 679.611394][T15547] ? ipv4_conntrack_local+0x123/0x200 [ 679.616793][T15547] ? ipv4_conntrack_in+0x20/0x20 [ 679.621766][T15547] nf_hook_slow+0xbd/0x200 [ 679.626292][T15547] ? nf_hook+0x390/0x390 [ 679.630532][T15547] nf_hook+0x228/0x390 [ 679.634601][T15547] ? nf_hook+0xa2/0x390 [ 679.639026][T15547] ? __ip_local_out+0x5f0/0x5f0 [ 679.644068][T15547] ? nf_hook+0x390/0x390 [ 679.648521][T15547] ? __lock_acquire+0x7d40/0x7d40 [ 679.653562][T15547] ? __asan_memset+0x22/0x40 [ 679.658268][T15547] ? read_lock_is_recursive+0x20/0x20 [ 679.663759][T15547] ? xfrm_lookup_with_ifid+0x17b2/0x1aa0 [ 679.669529][T15547] ? ip_fast_csum+0x1ee/0x2b0 [ 679.674419][T15547] __ip_local_out+0x4db/0x5f0 [ 679.679107][T15547] ? nf_hook+0x390/0x390 [ 679.683532][T15547] ? __ip_queue_xmit+0x5d/0x1950 [ 679.688474][T15547] __ip_queue_xmit+0xf7c/0x1950 [ 679.693345][T15547] ? __ip_queue_xmit+0x5d/0x1950 [ 679.698293][T15547] l2tp_ip_sendmsg+0x591/0x14f0 [ 679.703160][T15547] ? l2tp_ip_sendmsg+0x3b5/0x14f0 [ 679.708369][T15547] ? inet_send_prepare+0x260/0x260 [ 679.713573][T15547] ____sys_sendmsg+0x5ba/0x960 [ 679.718599][T15547] ? __lock_acquire+0x7d40/0x7d40 [ 679.723649][T15547] ? __asan_memset+0x22/0x40 [ 679.728258][T15547] ? __sys_sendmsg_sock+0x30/0x30 [ 679.733390][T15547] ? __import_iovec+0x3fa/0x850 [ 679.738607][T15547] ? import_iovec+0x73/0xa0 [ 679.743112][T15547] ___sys_sendmsg+0x2a6/0x360 [ 679.747785][T15547] ? get_pid_task+0x20/0x1e0 [ 679.752495][T15547] ? __sys_sendmsg+0x2a0/0x2a0 [ 679.757461][T15547] ? __lock_acquire+0x7d40/0x7d40 [ 679.762533][T15547] __se_sys_sendmsg+0x1c2/0x2b0 [ 679.767478][T15547] ? __x64_sys_sendmsg+0x80/0x80 [ 679.772442][T15547] ? lockdep_hardirqs_on+0x98/0x150 [ 679.777738][T15547] do_syscall_64+0x55/0xa0 [ 679.782501][T15547] ? clear_bhb_loop+0x40/0x90 [ 679.787193][T15547] ? clear_bhb_loop+0x40/0x90 [ 679.791877][T15547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.797962][T15547] RIP: 0033:0x7efdf499c799 [ 679.802471][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.822188][T15547] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.830617][T15547] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 679.838594][T15547] RDX: 000000000400c080 RSI: 0000200000000340 RDI: 0000000000000003 [ 679.846877][T15547] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 679.855158][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.863231][T15547] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 679.871230][T15547] [ 680.695049][T15565] netlink: 'syz.3.3151': attribute type 9 has an invalid length. [ 680.717453][T15565] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3151'. [ 681.030712][T15567] netlink: 'syz.4.3152': attribute type 4 has an invalid length. [ 681.039212][T15567] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3152'. [ 682.193976][T15597] netlink: 'syz.0.3162': attribute type 9 has an invalid length. [ 682.215266][T15597] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3162'. [ 682.248778][T15592] netlink: 'syz.4.3160': attribute type 4 has an invalid length. [ 682.257551][T15592] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3160'. [ 682.267722][T15594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3161'. [ 682.535158][T15603] netlink: 'syz.3.3164': attribute type 21 has an invalid length. [ 682.705981][T15611] netlink: 'syz.0.3168': attribute type 4 has an invalid length. [ 682.717494][T15611] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3168'. [ 683.504425][T15625] netlink: 'syz.4.3172': attribute type 4 has an invalid length. [ 683.528115][T15625] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3172'. [ 683.552856][T15622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3171'. [ 683.757058][T15627] netlink: 'syz.3.3173': attribute type 29 has an invalid length. [ 683.791903][T15627] netlink: 'syz.3.3173': attribute type 29 has an invalid length. [ 683.821457][T15628] netlink: 'syz.3.3173': attribute type 29 has an invalid length. [ 683.913104][T15636] FAULT_INJECTION: forcing a failure. [ 683.913104][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.943245][T15636] CPU: 0 PID: 15636 Comm: syz.1.3176 Not tainted syzkaller #0 [ 683.950792][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.961166][T15636] Call Trace: [ 683.964482][T15636] [ 683.967484][T15636] dump_stack_lvl+0x18c/0x250 [ 683.972298][T15636] ? show_regs_print_info+0x20/0x20 [ 683.977537][T15636] ? load_image+0x400/0x400 [ 683.982102][T15636] ? __might_fault+0xaa/0x120 [ 683.986808][T15636] ? __lock_acquire+0x7d40/0x7d40 [ 683.991976][T15636] should_fail_ex+0x39d/0x4d0 [ 683.996851][T15636] _copy_from_user+0x2f/0xe0 [ 684.001455][T15636] sctp_setsockopt+0x19e/0x11e0 [ 684.006541][T15636] ? sock_common_recvmsg+0x190/0x190 [ 684.011950][T15636] do_sock_setsockopt+0x175/0x1a0 [ 684.017270][T15636] ? __fdget+0x180/0x210 [ 684.021715][T15636] __x64_sys_setsockopt+0x182/0x200 [ 684.027037][T15636] do_syscall_64+0x55/0xa0 [ 684.031474][T15636] ? clear_bhb_loop+0x40/0x90 [ 684.036242][T15636] ? clear_bhb_loop+0x40/0x90 [ 684.041124][T15636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.047069][T15636] RIP: 0033:0x7f3ce919c799 [ 684.051520][T15636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.071502][T15636] RSP: 002b:00007f3cea06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.080292][T15636] RAX: ffffffffffffffda RBX: 00007f3ce9415fa0 RCX: 00007f3ce919c799 [ 684.088270][T15636] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 684.096325][T15636] RBP: 00007f3cea06d090 R08: 0000000000000004 R09: 0000000000000000 [ 684.104394][T15636] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.112590][T15636] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 684.120820][T15636] [ 684.825808][T15649] __nla_validate_parse: 1 callbacks suppressed [ 684.825848][T15649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3181'. [ 685.215900][T15661] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3182'. [ 685.250185][T15664] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3183'. [ 685.961350][T15677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3186'. [ 686.220459][T15686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3190'. [ 686.464250][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.472360][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.676096][T15698] validate_nla: 4 callbacks suppressed [ 686.676115][T15698] netlink: 'syz.1.3194': attribute type 4 has an invalid length. [ 686.699191][T15698] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3194'. [ 686.816234][T15705] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 686.824698][T15705] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3197'. [ 687.769495][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3201'. [ 687.812676][T15726] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3203'. [ 687.850716][T15726] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 687.958752][T15731] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 687.967328][T15731] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3205'. [ 688.263050][T15738] netlink: 'syz.4.3207': attribute type 4 has an invalid length. [ 689.386934][T15753] netlink: 'syz.0.3210': attribute type 10 has an invalid length. [ 689.492457][T15762] netlink: 'syz.4.3214': attribute type 4 has an invalid length. [ 689.873669][T15776] FAULT_INJECTION: forcing a failure. [ 689.873669][T15776] name failslab, interval 1, probability 0, space 0, times 0 [ 689.909851][T15776] CPU: 1 PID: 15776 Comm: syz.0.3219 Not tainted syzkaller #0 [ 689.918300][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.929257][T15776] Call Trace: [ 689.932562][T15776] [ 689.935588][T15776] dump_stack_lvl+0x18c/0x250 [ 689.940287][T15776] ? show_regs_print_info+0x20/0x20 [ 689.945493][T15776] ? load_image+0x400/0x400 [ 689.950004][T15776] ? __might_sleep+0xe0/0xe0 [ 689.954682][T15776] ? __lock_acquire+0x7d40/0x7d40 [ 689.959906][T15776] should_fail_ex+0x39d/0x4d0 [ 689.964612][T15776] should_failslab+0x9/0x20 [ 689.969134][T15776] slab_pre_alloc_hook+0x59/0x310 [ 689.974203][T15776] kmem_cache_alloc_node+0x60/0x320 [ 689.979454][T15776] ? kmem_cache_free+0xf8/0x270 [ 689.984328][T15776] ? __alloc_skb+0x103/0x2c0 [ 689.988939][T15776] __alloc_skb+0x103/0x2c0 [ 689.993452][T15776] pfkey_sendmsg+0xd61/0x10e0 [ 689.998337][T15776] ? pfkey_release+0x320/0x320 [ 690.003111][T15776] ? aa_sock_msg_perm+0x94/0x150 [ 690.008227][T15776] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 690.013689][T15776] ? security_socket_sendmsg+0x80/0xa0 [ 690.019141][T15776] ? pfkey_release+0x320/0x320 [ 690.024248][T15776] ____sys_sendmsg+0x5ba/0x960 [ 690.029102][T15776] ? __asan_memset+0x22/0x40 [ 690.034302][T15776] ? __sys_sendmsg_sock+0x30/0x30 [ 690.039400][T15776] ? __import_iovec+0x5f2/0x850 [ 690.044445][T15776] ? import_iovec+0x73/0xa0 [ 690.050440][T15776] ___sys_sendmsg+0x2a6/0x360 [ 690.055117][T15776] ? get_pid_task+0x20/0x1e0 [ 690.059974][T15776] ? __sys_sendmsg+0x2a0/0x2a0 [ 690.064750][T15776] ? __lock_acquire+0x7d40/0x7d40 [ 690.070075][T15776] __se_sys_sendmsg+0x1c2/0x2b0 [ 690.074924][T15776] ? __x64_sys_sendmsg+0x80/0x80 [ 690.079861][T15776] ? lockdep_hardirqs_on+0x98/0x150 [ 690.085144][T15776] do_syscall_64+0x55/0xa0 [ 690.089574][T15776] ? clear_bhb_loop+0x40/0x90 [ 690.094338][T15776] ? clear_bhb_loop+0x40/0x90 [ 690.099006][T15776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.104913][T15776] RIP: 0033:0x7fdf1959c799 [ 690.109463][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.129560][T15776] RSP: 002b:00007fdf1a3e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.138327][T15776] RAX: ffffffffffffffda RBX: 00007fdf19815fa0 RCX: 00007fdf1959c799 [ 690.146516][T15776] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 690.154776][T15776] RBP: 00007fdf1a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 690.162869][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.171049][T15776] R13: 00007fdf19816038 R14: 00007fdf19815fa0 R15: 00007ffd74819088 [ 690.179113][T15776] [ 690.362988][T15784] netlink: 'syz.0.3221': attribute type 4 has an invalid length. [ 690.372112][T15784] __nla_validate_parse: 4 callbacks suppressed [ 690.372128][T15784] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3221'. [ 690.786016][T15793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3223'. [ 690.798482][T15798] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3224'. [ 690.821165][T15797] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3225'. [ 690.838853][T15798] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3224'. [ 690.848990][T15797] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3225'. [ 691.002375][T15808] netlink: 'syz.0.3227': attribute type 4 has an invalid length. [ 691.020383][T15808] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3227'. [ 691.419550][T15821] netlink: 'syz.4.3231': attribute type 9 has an invalid length. [ 691.432020][T15821] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3231'. [ 691.786906][T15831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3235'. [ 692.002278][T15839] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3238'. [ 692.041163][T15836] @ÿ: renamed from bond_slave_0 (while UP) [ 692.134933][T15843] netlink: 'syz.3.3240': attribute type 4 has an invalid length. [ 692.388084][T15850] netlink: 'syz.0.3242': attribute type 9 has an invalid length. [ 695.582044][T15861] __nla_validate_parse: 3 callbacks suppressed [ 695.582082][T15861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3246'. [ 695.922819][T15877] netlink: 'syz.3.3253': attribute type 9 has an invalid length. [ 695.930817][T15875] netlink: 'syz.4.3252': attribute type 4 has an invalid length. [ 695.933427][T15877] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3253'. [ 695.938743][T15875] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3252'. [ 696.069628][T15879] netlink: 'syz.1.3254': attribute type 10 has an invalid length. [ 696.106156][T15879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.109437][T15883] netlink: 'syz.4.3256': attribute type 29 has an invalid length. [ 696.145854][T15885] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3257'. [ 696.179338][T15879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.196074][T15879] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 696.226711][T15883] netlink: 'syz.4.3256': attribute type 29 has an invalid length. [ 696.289972][T15888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3258'. [ 696.837760][T15899] netlink: 'syz.4.3259': attribute type 10 has an invalid length. [ 696.858010][T15899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.881730][T15899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.925126][T15899] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 697.003087][T15907] netlink: 'syz.3.3264': attribute type 9 has an invalid length. [ 697.020551][T15907] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3264'. [ 697.042000][T15909] netlink: 'syz.1.3265': attribute type 4 has an invalid length. [ 697.053748][T15909] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3265'. [ 697.160036][T15914] netlink: 'syz.0.3266': attribute type 4 has an invalid length. [ 697.182490][T15914] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3266'. [ 697.507586][T15921] FAULT_INJECTION: forcing a failure. [ 697.507586][T15921] name failslab, interval 1, probability 0, space 0, times 0 [ 697.528581][T15921] CPU: 1 PID: 15921 Comm: syz.3.3270 Not tainted syzkaller #0 [ 697.536105][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.536884][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3269'. [ 697.546254][T15921] Call Trace: [ 697.546271][T15921] [ 697.546281][T15921] dump_stack_lvl+0x18c/0x250 [ 697.546312][T15921] ? show_regs_print_info+0x20/0x20 [ 697.546333][T15921] ? load_image+0x400/0x400 [ 697.546356][T15921] ? __might_sleep+0xe0/0xe0 [ 697.546376][T15921] ? __lock_acquire+0x7d40/0x7d40 [ 697.546395][T15921] ? __lock_acquire+0x1273/0x7d40 [ 697.546418][T15921] should_fail_ex+0x39d/0x4d0 [ 697.546447][T15921] should_failslab+0x9/0x20 [ 697.546470][T15921] slab_pre_alloc_hook+0x59/0x310 [ 697.564079][T15923] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 697.566536][T15921] kmem_cache_alloc_node+0x60/0x320 [ 697.566570][T15921] ? __alloc_skb+0x103/0x2c0 [ 697.572716][T15923] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3271'. [ 697.576375][T15921] __alloc_skb+0x103/0x2c0 [ 697.636552][T15921] alloc_skb_with_frags+0xca/0x7b0 [ 697.641763][T15921] ? trace_event_raw_event_lock+0x250/0x250 [ 697.647840][T15921] ? __ipv6_dev_get_saddr+0x404/0x430 [ 697.653209][T15921] sock_alloc_send_pskb+0x883/0x9a0 [ 697.658705][T15921] ? sock_kzfree_s+0x50/0x50 [ 697.663323][T15921] ? ip6_dst_lookup_tail+0xbf9/0x1530 [ 697.668877][T15921] rawv6_send_hdrinc+0x2fc/0x1640 [ 697.673931][T15921] ? txopt_get+0x7a/0x3f0 [ 697.678343][T15921] ? txopt_get+0x3f0/0x3f0 [ 697.682756][T15921] ? txopt_get+0x344/0x3f0 [ 697.687192][T15921] ? fl6_sock_lookup+0xc0/0xc0 [ 697.692085][T15921] rawv6_sendmsg+0x12cc/0x1770 [ 697.696890][T15921] ? compat_rawv6_ioctl+0x70/0x70 [ 697.701931][T15921] ? aa_sk_perm+0x83c/0x970 [ 697.706472][T15921] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 697.712989][T15921] ? inet_sendmsg+0x7c/0x2f0 [ 697.717573][T15921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 697.722872][T15921] ? security_socket_sendmsg+0x80/0xa0 [ 697.728514][T15921] ? inet_send_prepare+0x260/0x260 [ 697.733631][T15921] ____sys_sendmsg+0x5ba/0x960 [ 697.738389][T15921] ? __lock_acquire+0x7d40/0x7d40 [ 697.743496][T15921] ? __asan_memset+0x22/0x40 [ 697.748080][T15921] ? __sys_sendmsg_sock+0x30/0x30 [ 697.753093][T15921] ? __import_iovec+0x5f2/0x850 [ 697.758055][T15921] ? import_iovec+0x73/0xa0 [ 697.762656][T15921] ___sys_sendmsg+0x2a6/0x360 [ 697.767455][T15921] ? __sys_sendmsg+0x2a0/0x2a0 [ 697.772245][T15921] ? __lock_acquire+0x7d40/0x7d40 [ 697.777514][T15921] __se_sys_sendmsg+0x1c2/0x2b0 [ 697.782486][T15921] ? __x64_sys_sendmsg+0x80/0x80 [ 697.787672][T15921] ? lockdep_hardirqs_on+0x98/0x150 [ 697.793059][T15921] do_syscall_64+0x55/0xa0 [ 697.797679][T15921] ? clear_bhb_loop+0x40/0x90 [ 697.802536][T15921] ? clear_bhb_loop+0x40/0x90 [ 697.807230][T15921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.813412][T15921] RIP: 0033:0x7efdf499c799 [ 697.817863][T15921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.838191][T15921] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.846823][T15921] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 697.855600][T15921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 697.863687][T15921] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 697.872373][T15921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.880524][T15921] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 697.888580][T15921] [ 698.352279][T15936] netlink: 'syz.3.3276': attribute type 9 has an invalid length. [ 698.397425][T15938] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 699.046304][T15949] netlink: 'syz.1.3281': attribute type 10 has an invalid length. [ 699.068993][T15949] team0: Device ipvlan1 failed to register rx_handler [ 699.202703][T15953] netlink: 'syz.3.3283': attribute type 4 has an invalid length. [ 699.525837][T15963] netlink: 'syz.0.3287': attribute type 9 has an invalid length. [ 699.547752][T15964] netlink: 'syz.4.3288': attribute type 1 has an invalid length. [ 699.998350][T15973] netlink: 'syz.4.3289': attribute type 4 has an invalid length. [ 700.066554][T15975] FAULT_INJECTION: forcing a failure. [ 700.066554][T15975] name failslab, interval 1, probability 0, space 0, times 0 [ 700.111264][T15975] CPU: 1 PID: 15975 Comm: syz.1.3291 Not tainted syzkaller #0 [ 700.118879][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.129229][T15975] Call Trace: [ 700.132545][T15975] [ 700.135672][T15975] dump_stack_lvl+0x18c/0x250 [ 700.140386][T15975] ? show_regs_print_info+0x20/0x20 [ 700.145596][T15975] ? load_image+0x400/0x400 [ 700.150115][T15975] ? __might_sleep+0xe0/0xe0 [ 700.154925][T15975] ? __lock_acquire+0x7d40/0x7d40 [ 700.160304][T15975] should_fail_ex+0x39d/0x4d0 [ 700.165084][T15975] should_failslab+0x9/0x20 [ 700.169583][T15975] slab_pre_alloc_hook+0x59/0x310 [ 700.174708][T15975] ? page_pool_create+0x71/0x5c0 [ 700.179663][T15975] __kmem_cache_alloc_node+0x53/0x250 [ 700.185049][T15975] ? page_pool_create+0x71/0x5c0 [ 700.190092][T15975] kmalloc_node_trace+0x26/0xe0 [ 700.194976][T15975] page_pool_create+0x71/0x5c0 [ 700.199830][T15975] bpf_test_run_xdp_live+0x203/0x1b20 [ 700.205212][T15975] ? 0xffffffffa00044c0 [ 700.209385][T15975] ? 0xffffffffa00044c0 [ 700.213620][T15975] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 700.219749][T15975] ? 0xffffffffa00044c0 [ 700.224023][T15975] ? xdp_convert_md_to_buff+0x330/0x330 [ 700.229726][T15975] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 700.236089][T15975] ? _copy_from_user+0xa5/0xe0 [ 700.241221][T15975] ? bpf_test_init+0x119/0x140 [ 700.246244][T15975] ? xdp_convert_md_to_buff+0x5b/0x330 [ 700.251917][T15975] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 700.257479][T15975] ? dev_put+0x80/0x80 [ 700.261675][T15975] ? dev_put+0x80/0x80 [ 700.265756][T15975] bpf_prog_test_run+0x321/0x390 [ 700.270788][T15975] __sys_bpf+0x49d/0x890 [ 700.275050][T15975] ? bpf_link_show_fdinfo+0x390/0x390 [ 700.280437][T15975] ? lock_chain_count+0x20/0x20 [ 700.285298][T15975] __x64_sys_bpf+0x7c/0x90 [ 700.289830][T15975] do_syscall_64+0x55/0xa0 [ 700.294284][T15975] ? clear_bhb_loop+0x40/0x90 [ 700.299329][T15975] ? clear_bhb_loop+0x40/0x90 [ 700.304012][T15975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.309907][T15975] RIP: 0033:0x7f3ce919c799 [ 700.314355][T15975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.334001][T15975] RSP: 002b:00007f3cea06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.342418][T15975] RAX: ffffffffffffffda RBX: 00007f3ce9415fa0 RCX: 00007f3ce919c799 [ 700.350925][T15975] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 700.358993][T15975] RBP: 00007f3cea06d090 R08: 0000000000000000 R09: 0000000000000000 [ 700.367143][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.375422][T15975] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 700.383441][T15975] [ 700.454300][T15980] netlink: 'syz.3.3292': attribute type 21 has an invalid length. [ 700.619340][T15981] __nla_validate_parse: 8 callbacks suppressed [ 700.619402][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3293'. [ 701.228389][T15991] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3298'. [ 701.459847][T16001] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3301'. [ 702.087911][T16007] FAULT_INJECTION: forcing a failure. [ 702.087911][T16007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.126347][T16007] CPU: 1 PID: 16007 Comm: syz.3.3304 Not tainted syzkaller #0 [ 702.134046][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.144220][T16007] Call Trace: [ 702.147537][T16007] [ 702.150674][T16007] dump_stack_lvl+0x18c/0x250 [ 702.155587][T16007] ? show_regs_print_info+0x20/0x20 [ 702.161143][T16007] ? load_image+0x400/0x400 [ 702.165875][T16007] ? __might_fault+0xaa/0x120 [ 702.170875][T16007] ? __lock_acquire+0x7d40/0x7d40 [ 702.175950][T16007] should_fail_ex+0x39d/0x4d0 [ 702.180772][T16007] _copy_from_iter+0x1d9/0x12e0 [ 702.185659][T16007] ? rep_movs_alternative+0x4a/0x90 [ 702.191422][T16007] ? _copy_from_iter+0x24e/0x12e0 [ 702.196568][T16007] ? __virt_addr_valid+0x18c/0x540 [ 702.201693][T16007] ? __lock_acquire+0x7d40/0x7d40 [ 702.206895][T16007] ? copyout_mc+0x70/0x70 [ 702.211225][T16007] ? copyout_mc+0x70/0x70 [ 702.215720][T16007] ? __virt_addr_valid+0x18c/0x540 [ 702.220923][T16007] ? page_copy_sane+0x16a/0x270 [ 702.225979][T16007] copy_page_from_iter+0x7b/0x100 [ 702.231020][T16007] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 702.236835][T16007] tun_get_user+0x15db/0x3ca0 [ 702.241692][T16007] ? aa_file_perm+0x11b/0xee0 [ 702.246383][T16007] ? rcu_read_unlock+0xa0/0xa0 [ 702.251168][T16007] ? tun_get+0x1c/0x2e0 [ 702.255589][T16007] ? __lock_acquire+0x7d40/0x7d40 [ 702.260624][T16007] ? tun_get+0x1c/0x2e0 [ 702.264778][T16007] tun_chr_write_iter+0x119/0x200 [ 702.269808][T16007] vfs_write+0x46c/0x990 [ 702.274143][T16007] ? file_end_write+0x250/0x250 [ 702.279080][T16007] ? __fget_files+0x43d/0x4b0 [ 702.283770][T16007] ? __fdget_pos+0x1d8/0x330 [ 702.288532][T16007] ? ksys_write+0x75/0x260 [ 702.292942][T16007] ksys_write+0x150/0x260 [ 702.297307][T16007] ? __ia32_sys_read+0x90/0x90 [ 702.302154][T16007] ? lockdep_hardirqs_on+0x98/0x150 [ 702.307458][T16007] do_syscall_64+0x55/0xa0 [ 702.311896][T16007] ? clear_bhb_loop+0x40/0x90 [ 702.316579][T16007] ? clear_bhb_loop+0x40/0x90 [ 702.321359][T16007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.327248][T16007] RIP: 0033:0x7efdf499c799 [ 702.331661][T16007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.351707][T16007] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.360157][T16007] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 702.368217][T16007] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 702.376313][T16007] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.384547][T16007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.392507][T16007] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 702.400659][T16007] [ 702.704978][T16009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3305'. [ 702.906661][T16022] validate_nla: 2 callbacks suppressed [ 702.906685][T16022] netlink: 'syz.0.3310': attribute type 9 has an invalid length. [ 703.001113][T16022] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3310'. [ 703.884533][T16031] netlink: 'syz.0.3313': attribute type 9 has an invalid length. [ 703.899379][T16031] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3313'. [ 704.121418][T16034] netlink: 'syz.3.3316': attribute type 4 has an invalid length. [ 704.129236][T16034] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3316'. [ 704.747628][T16044] netlink: 'syz.0.3318': attribute type 4 has an invalid length. [ 704.786720][T16044] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3318'. [ 704.940570][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3319'. [ 704.992657][T16048] netlink: 'syz.1.3320': attribute type 8 has an invalid length. [ 705.010980][T16048] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3320'. [ 706.131098][T16071] netlink: 'syz.3.3329': attribute type 4 has an invalid length. [ 706.155949][T16071] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3329'. [ 706.344212][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3330'. [ 706.361839][T16076] netlink: 'syz.4.3328': attribute type 9 has an invalid length. [ 706.374632][T16076] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3328'. [ 707.190111][T16089] netlink: 'syz.4.3333': attribute type 8 has an invalid length. [ 707.206145][T16089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3333'. [ 707.865650][T16108] netlink: 'syz.1.3340': attribute type 4 has an invalid length. [ 707.887818][T16108] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3340'. [ 707.971260][T16110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3341'. [ 708.080629][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.171761][T16135] netlink: 'syz.0.3348': attribute type 8 has an invalid length. [ 709.179689][T16135] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3348'. [ 709.422457][T16149] netlink: 'syz.0.3353': attribute type 4 has an invalid length. [ 709.442911][T16149] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3353'. [ 709.500070][T16151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3352'. [ 710.139845][T16168] IPv6: pim6reg1: Disabled Multicast RS [ 710.629004][T16178] netlink: 'syz.3.3364': attribute type 4 has an invalid length. [ 710.638664][T16178] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3364'. [ 712.161529][T16208] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 712.190387][T16208] __nla_validate_parse: 1 callbacks suppressed [ 712.190412][T16208] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3374'. [ 712.354982][T16211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3375'. [ 712.947658][T13100] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 713.399668][T16247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3391'. [ 713.903501][T16243] FAULT_INJECTION: forcing a failure. [ 713.903501][T16243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.920508][T16243] CPU: 1 PID: 16243 Comm: syz.0.3389 Not tainted syzkaller #0 [ 713.928112][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.938422][T16243] Call Trace: [ 713.941724][T16243] [ 713.944662][T16243] dump_stack_lvl+0x18c/0x250 [ 713.949522][T16243] ? show_regs_print_info+0x20/0x20 [ 713.954804][T16243] ? load_image+0x400/0x400 [ 713.959388][T16243] ? __might_fault+0xaa/0x120 [ 713.964070][T16243] ? __lock_acquire+0x7d40/0x7d40 [ 713.969190][T16243] should_fail_ex+0x39d/0x4d0 [ 713.973885][T16243] _copy_to_user+0x2f/0xa0 [ 713.978521][T16243] bpf_test_finish+0x19f/0x650 [ 713.983337][T16243] ? convert___skb_to_skb+0x590/0x590 [ 713.988905][T16243] ? convert_skb_to___skb+0x420/0x420 [ 713.994463][T16243] ? bpf_test_init+0x119/0x140 [ 713.999404][T16243] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 714.004788][T16243] ? dev_put+0x80/0x80 [ 714.008983][T16243] ? dev_put+0x80/0x80 [ 714.013056][T16243] bpf_prog_test_run+0x321/0x390 [ 714.018011][T16243] __sys_bpf+0x49d/0x890 [ 714.022247][T16243] ? bpf_link_show_fdinfo+0x390/0x390 [ 714.027622][T16243] ? lock_chain_count+0x20/0x20 [ 714.032488][T16243] __x64_sys_bpf+0x7c/0x90 [ 714.037113][T16243] do_syscall_64+0x55/0xa0 [ 714.041660][T16243] ? clear_bhb_loop+0x40/0x90 [ 714.046633][T16243] ? clear_bhb_loop+0x40/0x90 [ 714.051428][T16243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.057602][T16243] RIP: 0033:0x7fdf1959c799 [ 714.062314][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.082021][T16243] RSP: 002b:00007fdf1a3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.090653][T16243] RAX: ffffffffffffffda RBX: 00007fdf19815fa0 RCX: 00007fdf1959c799 [ 714.098799][T16243] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 714.106763][T16243] RBP: 00007fdf1a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 714.115118][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.123610][T16243] R13: 00007fdf19816038 R14: 00007fdf19815fa0 R15: 00007ffd74819088 [ 714.131600][T16243] [ 714.732387][T16275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3401'. [ 714.767697][T16278] netlink: 'syz.4.3402': attribute type 4 has an invalid length. [ 714.792933][T16278] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3402'. [ 714.831500][T16280] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 714.881070][T16282] FAULT_INJECTION: forcing a failure. [ 714.881070][T16282] name failslab, interval 1, probability 0, space 0, times 0 [ 714.940753][T16282] CPU: 1 PID: 16282 Comm: syz.0.3404 Not tainted syzkaller #0 [ 714.948287][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.958370][T16282] Call Trace: [ 714.961780][T16282] [ 714.964808][T16282] dump_stack_lvl+0x18c/0x250 [ 714.969558][T16282] ? show_regs_print_info+0x20/0x20 [ 714.974772][T16282] ? load_image+0x400/0x400 [ 714.979279][T16282] ? __lock_acquire+0x7d40/0x7d40 [ 714.984316][T16282] should_fail_ex+0x39d/0x4d0 [ 714.989023][T16282] should_failslab+0x9/0x20 [ 714.993644][T16282] slab_pre_alloc_hook+0x59/0x310 [ 714.998947][T16282] ? apparmor_sk_alloc_security+0x77/0x100 [ 715.004820][T16282] __kmem_cache_alloc_node+0x53/0x250 [ 715.010417][T16282] ? apparmor_sk_alloc_security+0x77/0x100 [ 715.016540][T16282] kmalloc_trace+0x2a/0xe0 [ 715.021012][T16282] apparmor_sk_alloc_security+0x77/0x100 [ 715.026694][T16282] security_sk_alloc+0x6e/0xa0 [ 715.031597][T16282] sk_prot_alloc+0x101/0x210 [ 715.036228][T16282] sk_alloc+0x3a/0x360 [ 715.040507][T16282] rxrpc_create+0xd9/0x680 [ 715.045045][T16282] __sock_create+0x4a6/0x940 [ 715.049753][T16282] __sys_socketpair+0x236/0x550 [ 715.054771][T16282] __x64_sys_socketpair+0x9b/0xb0 [ 715.059841][T16282] do_syscall_64+0x55/0xa0 [ 715.064293][T16282] ? clear_bhb_loop+0x40/0x90 [ 715.069083][T16282] ? clear_bhb_loop+0x40/0x90 [ 715.073788][T16282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.079712][T16282] RIP: 0033:0x7fdf1959c799 [ 715.084243][T16282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.104058][T16282] RSP: 002b:00007fdf1a3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 715.112506][T16282] RAX: ffffffffffffffda RBX: 00007fdf19815fa0 RCX: 00007fdf1959c799 [ 715.120600][T16282] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 715.128695][T16282] RBP: 00007fdf1a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 715.136881][T16282] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 715.144982][T16282] R13: 00007fdf19816038 R14: 00007fdf19815fa0 R15: 00007ffd74819088 [ 715.153104][T16282] [ 715.157392][T13100] Bluetooth: hci1: command 0x0406 tx timeout [ 715.560055][T16295] netlink: 'syz.0.3407': attribute type 39 has an invalid length. [ 715.661842][T16300] FAULT_INJECTION: forcing a failure. [ 715.661842][T16300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.698830][T16300] CPU: 1 PID: 16300 Comm: syz.1.3409 Not tainted syzkaller #0 [ 715.706482][T16300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.716863][T16300] Call Trace: [ 715.720266][T16300] [ 715.723253][T16300] dump_stack_lvl+0x18c/0x250 [ 715.728911][T16300] ? show_regs_print_info+0x20/0x20 [ 715.734275][T16300] ? load_image+0x400/0x400 [ 715.738950][T16300] ? __might_fault+0xaa/0x120 [ 715.743708][T16300] ? __lock_acquire+0x7d40/0x7d40 [ 715.748893][T16300] should_fail_ex+0x39d/0x4d0 [ 715.753622][T16300] _copy_from_user+0x2f/0xe0 [ 715.758417][T16300] ___sys_sendmsg+0x1c7/0x360 [ 715.763124][T16300] ? __sys_sendmsg+0x2a0/0x2a0 [ 715.768032][T16300] ? __lock_acquire+0x7d40/0x7d40 [ 715.773221][T16300] __se_sys_sendmsg+0x1c2/0x2b0 [ 715.778177][T16300] ? __x64_sys_sendmsg+0x80/0x80 [ 715.783166][T16300] ? lockdep_hardirqs_on+0x98/0x150 [ 715.788476][T16300] do_syscall_64+0x55/0xa0 [ 715.792993][T16300] ? clear_bhb_loop+0x40/0x90 [ 715.797732][T16300] ? clear_bhb_loop+0x40/0x90 [ 715.802620][T16300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.808623][T16300] RIP: 0033:0x7f3ce919c799 [ 715.813226][T16300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.832850][T16300] RSP: 002b:00007f3cea02b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.841289][T16300] RAX: ffffffffffffffda RBX: 00007f3ce9416180 RCX: 00007f3ce919c799 [ 715.849364][T16300] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000e [ 715.857434][T16300] RBP: 00007f3cea02b090 R08: 0000000000000000 R09: 0000000000000000 [ 715.865510][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.873503][T16300] R13: 00007f3ce9416218 R14: 00007f3ce9416180 R15: 00007ffdcad6a198 [ 715.881686][T16300] [ 716.431751][T16304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3412'. [ 716.571100][T16309] netlink: 'syz.0.3413': attribute type 4 has an invalid length. [ 716.602714][T16309] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3413'. [ 717.183918][T16329] netlink: 'syz.3.3420': attribute type 9 has an invalid length. [ 717.194853][T16329] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3420'. [ 717.251174][T16331] netlink: 'syz.1.3421': attribute type 4 has an invalid length. [ 717.259507][T16331] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3421'. [ 717.398096][T16335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3423'. [ 717.458980][T16339] netlink: 'syz.1.3425': attribute type 4 has an invalid length. [ 717.468363][T16339] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3425'. [ 717.917472][T16352] netlink: 'syz.0.3430': attribute type 9 has an invalid length. [ 717.926528][T16352] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3430'. [ 717.979624][T16354] netlink: 'syz.4.3431': attribute type 4 has an invalid length. [ 717.988284][T16354] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3431'. [ 718.055718][T16356] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 718.149408][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3433'. [ 718.281429][T16363] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3435'. [ 718.542258][T16375] syzkaller0: entered promiscuous mode [ 718.548671][T16375] syzkaller0: entered allmulticast mode [ 718.747235][T16377] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3441'. [ 718.908904][T16380] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3442'. [ 719.063228][T16386] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3443'. [ 719.074399][T16386] bridge_slave_1: default FDB implementation only supports local addresses [ 719.816895][T16404] validate_nla: 4 callbacks suppressed [ 719.816917][T16404] netlink: 'syz.3.3451': attribute type 4 has an invalid length. [ 719.911441][T16407] netlink: 'syz.4.3452': attribute type 4 has an invalid length. [ 719.931758][T16408] netlink: 'syz.1.3453': attribute type 4 has an invalid length. [ 720.861633][T16432] netlink: 'syz.4.3461': attribute type 9 has an invalid length. [ 720.967423][T16434] netlink: 'syz.1.3463': attribute type 4 has an invalid length. [ 721.565428][T16451] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 721.594824][T16451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 721.824951][T16456] netlink: 'syz.0.3471': attribute type 4 has an invalid length. [ 722.201872][T16461] netlink: 'syz.4.3473': attribute type 4 has an invalid length. [ 722.233990][T16462] netlink: 'syz.3.3472': attribute type 9 has an invalid length. [ 723.643870][T16488] netlink: 'syz.1.3483': attribute type 4 has an invalid length. [ 723.653959][T16488] __nla_validate_parse: 13 callbacks suppressed [ 723.653978][T16488] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3483'. [ 723.809586][T16490] netlink: 'syz.3.3484': attribute type 9 has an invalid length. [ 723.827952][T16490] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3484'. [ 723.909536][T16496] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3487'. [ 723.925290][T16494] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3486'. [ 724.521068][T16515] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3494'. [ 724.580856][T16514] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.587769][T16517] FAULT_INJECTION: forcing a failure. [ 724.587769][T16517] name failslab, interval 1, probability 0, space 0, times 0 [ 724.599319][T16514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.608941][T16514] IPv6: NLM_F_CREATE should be set when creating new route [ 724.614389][T16517] CPU: 1 PID: 16517 Comm: syz.3.3495 Not tainted syzkaller #0 [ 724.616283][T16514] IPv6: NLM_F_CREATE should be set when creating new route [ 724.623605][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.623625][T16517] Call Trace: [ 724.623635][T16517] [ 724.623645][T16517] dump_stack_lvl+0x18c/0x250 [ 724.623679][T16517] ? show_regs_print_info+0x20/0x20 [ 724.630987][T16514] IPv6: NLM_F_CREATE should be set when creating new route [ 724.641034][T16517] ? load_image+0x400/0x400 [ 724.641075][T16517] ? __might_sleep+0xe0/0xe0 [ 724.641095][T16517] ? __lock_acquire+0x7d40/0x7d40 [ 724.641118][T16517] should_fail_ex+0x39d/0x4d0 [ 724.683758][T16517] should_failslab+0x9/0x20 [ 724.688307][T16517] slab_pre_alloc_hook+0x59/0x310 [ 724.693513][T16517] ? trace_event_raw_event_lock+0x250/0x250 [ 724.699410][T16517] ? sock_kmalloc+0x96/0xf0 [ 724.704226][T16517] ? sock_kmalloc+0x96/0xf0 [ 724.708837][T16517] __kmem_cache_alloc_node+0x53/0x250 [ 724.714437][T16517] ? sock_kmalloc+0x96/0xf0 [ 724.719053][T16517] __kmalloc+0xa4/0x230 [ 724.723344][T16517] sock_kmalloc+0x96/0xf0 [ 724.727734][T16517] ____sys_sendmsg+0x1be/0x960 [ 724.732591][T16517] ? __lock_acquire+0x7d40/0x7d40 [ 724.737651][T16517] ? __asan_memset+0x22/0x40 [ 724.742253][T16517] ? __sys_sendmsg_sock+0x30/0x30 [ 724.747448][T16517] ? __import_iovec+0x5f2/0x850 [ 724.752338][T16517] ? import_iovec+0x73/0xa0 [ 724.756954][T16517] ___sys_sendmsg+0x2a6/0x360 [ 724.761838][T16517] ? __sys_sendmsg+0x2a0/0x2a0 [ 724.766646][T16517] ? __lock_acquire+0x7d40/0x7d40 [ 724.771754][T16517] __se_sys_sendmsg+0x1c2/0x2b0 [ 724.776871][T16517] ? __x64_sys_sendmsg+0x80/0x80 [ 724.781815][T16517] ? lockdep_hardirqs_on+0x98/0x150 [ 724.787274][T16517] do_syscall_64+0x55/0xa0 [ 724.791701][T16517] ? clear_bhb_loop+0x40/0x90 [ 724.796419][T16517] ? clear_bhb_loop+0x40/0x90 [ 724.801091][T16517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.806993][T16517] RIP: 0033:0x7efdf499c799 [ 724.811495][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.831379][T16517] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.839878][T16517] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 724.848103][T16517] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 724.856207][T16517] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 724.864203][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.872287][T16517] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 724.880279][T16517] [ 724.905465][T16518] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 724.914035][T16514] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3493'. [ 725.002052][T16520] validate_nla: 4 callbacks suppressed [ 725.002073][T16520] netlink: 'syz.3.3497': attribute type 4 has an invalid length. [ 725.016441][T16520] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3497'. [ 725.035793][T16522] netlink: 'syz.0.3496': attribute type 9 has an invalid length. [ 725.048471][T16522] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3496'. [ 725.195730][T16527] netlink: 'syz.4.3499': attribute type 4 has an invalid length. [ 725.213956][T16527] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3499'. [ 725.660036][T16544] netlink: 'syz.0.3506': attribute type 4 has an invalid length. [ 725.675659][T16544] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3506'. [ 725.761651][T16549] netlink: 'syz.0.3508': attribute type 9 has an invalid length. [ 725.833458][T16552] netlink: 'syz.0.3509': attribute type 4 has an invalid length. [ 725.992388][T16557] netlink: 'syz.0.3511': attribute type 4 has an invalid length. [ 726.370296][T16569] netlink: 'syz.1.3517': attribute type 9 has an invalid length. [ 726.400823][T16567] netlink: 'syz.0.3516': attribute type 4 has an invalid length. [ 726.742984][T16574] netlink: 'syz.1.3519': attribute type 4 has an invalid length. [ 727.087540][T16588] team0: Device wg1 is of different type [ 727.124057][T16590] bridge_slave_1: default FDB implementation only supports local addresses [ 727.647587][T16617] FAULT_INJECTION: forcing a failure. [ 727.647587][T16617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.748565][T16617] CPU: 0 PID: 16617 Comm: syz.4.3537 Not tainted syzkaller #0 [ 727.756279][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.766450][T16617] Call Trace: [ 727.769925][T16617] [ 727.773035][T16617] dump_stack_lvl+0x18c/0x250 [ 727.777813][T16617] ? show_regs_print_info+0x20/0x20 [ 727.783031][T16617] ? load_image+0x400/0x400 [ 727.787571][T16617] ? __might_fault+0xaa/0x120 [ 727.792270][T16617] ? __lock_acquire+0x7d40/0x7d40 [ 727.797378][T16617] should_fail_ex+0x39d/0x4d0 [ 727.802420][T16617] _copy_from_iter+0x1d9/0x12e0 [ 727.807325][T16617] ? __might_fault+0xaa/0x120 [ 727.812119][T16617] ? _copy_from_iter+0x24e/0x12e0 [ 727.817174][T16617] ? __virt_addr_valid+0x18c/0x540 [ 727.822329][T16617] ? __lock_acquire+0x7d40/0x7d40 [ 727.827383][T16617] ? copyout_mc+0x70/0x70 [ 727.831746][T16617] ? copyout_mc+0x70/0x70 [ 727.836099][T16617] ? __virt_addr_valid+0x18c/0x540 [ 727.841252][T16617] ? page_copy_sane+0x16a/0x270 [ 727.846502][T16617] copy_page_from_iter+0x7b/0x100 [ 727.851745][T16617] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 727.857854][T16617] tun_get_user+0x15db/0x3ca0 [ 727.862578][T16617] ? aa_file_perm+0x11b/0xee0 [ 727.867384][T16617] ? rcu_read_unlock+0xa0/0xa0 [ 727.872267][T16617] ? tun_get+0x1c/0x2e0 [ 727.876429][T16617] ? __lock_acquire+0x7d40/0x7d40 [ 727.881548][T16617] ? tun_get+0x1c/0x2e0 [ 727.885719][T16617] tun_chr_write_iter+0x119/0x200 [ 727.890746][T16617] vfs_write+0x46c/0x990 [ 727.895009][T16617] ? file_end_write+0x250/0x250 [ 727.899928][T16617] ? __fget_files+0x43d/0x4b0 [ 727.904620][T16617] ? __fdget_pos+0x1d8/0x330 [ 727.909294][T16617] ? ksys_write+0x75/0x260 [ 727.913710][T16617] ksys_write+0x150/0x260 [ 727.918052][T16617] ? __ia32_sys_read+0x90/0x90 [ 727.923000][T16617] ? lockdep_hardirqs_on+0x98/0x150 [ 727.928293][T16617] do_syscall_64+0x55/0xa0 [ 727.932807][T16617] ? clear_bhb_loop+0x40/0x90 [ 727.937564][T16617] ? clear_bhb_loop+0x40/0x90 [ 727.942246][T16617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.948224][T16617] RIP: 0033:0x7fed3bf9c799 [ 727.952641][T16617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.972473][T16617] RSP: 002b:00007fed3cefe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.980981][T16617] RAX: ffffffffffffffda RBX: 00007fed3c215fa0 RCX: 00007fed3bf9c799 [ 727.989157][T16617] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 727.997239][T16617] RBP: 00007fed3cefe090 R08: 0000000000000000 R09: 0000000000000000 [ 728.005305][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.013358][T16617] R13: 00007fed3c216038 R14: 00007fed3c215fa0 R15: 00007ffeb3c1e038 [ 728.021535][T16617] [ 729.405432][T16666] __nla_validate_parse: 20 callbacks suppressed [ 729.405457][T16666] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3552'. [ 729.660432][T16666] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 729.721292][T16670] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3554'. [ 729.744898][T16666] openvswitch: netlink: Message has 1 unknown bytes. [ 729.759599][T16672] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3555'. [ 730.093333][T16677] validate_nla: 12 callbacks suppressed [ 730.093351][T16677] netlink: 'syz.0.3558': attribute type 4 has an invalid length. [ 730.121119][T16677] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3558'. [ 730.463597][T16695] netlink: 'syz.0.3564': attribute type 4 has an invalid length. [ 730.472010][T16695] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3564'. [ 730.618579][T16698] netlink: 'syz.4.3565': attribute type 4 has an invalid length. [ 730.640405][T16698] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3565'. [ 730.937184][T16704] netlink: 'syz.0.3567': attribute type 10 has an invalid length. [ 730.969837][T16704] hsr_slave_0: left promiscuous mode [ 731.007913][T16704] hsr_slave_1: left promiscuous mode [ 731.449643][T16711] netlink: 'syz.1.3569': attribute type 4 has an invalid length. [ 731.480566][T16711] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3569'. [ 733.391102][T16742] netlink: 'syz.1.3580': attribute type 4 has an invalid length. [ 733.410178][T16742] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3580'. [ 733.535343][T16749] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3582'. [ 733.555673][T16749] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 733.796945][T16757] netlink: 'syz.3.3586': attribute type 4 has an invalid length. [ 733.820471][T16757] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3586'. [ 734.840446][T16778] netlink: 'syz.0.3592': attribute type 4 has an invalid length. [ 734.848335][T16778] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3592'. [ 735.565524][T16806] netlink: 'syz.1.3599': attribute type 4 has an invalid length. [ 735.574344][T16806] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3599'. [ 736.014543][T16819] netlink: 'syz.1.3604': attribute type 4 has an invalid length. [ 736.028417][T16819] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3604'. [ 736.237530][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3605'. [ 736.256441][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3605'. [ 736.269808][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3605'. [ 736.608597][T16827] netlink: 'syz.1.3607': attribute type 4 has an invalid length. [ 736.630350][T16827] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3607'. [ 736.688619][T16829] netlink: 'syz.3.3608': attribute type 4 has an invalid length. [ 736.696985][T16829] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3608'. [ 737.060925][T16841] netlink: 'syz.0.3615': attribute type 4 has an invalid length. [ 737.086395][T16841] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3615'. [ 737.257045][T16850] netlink: 'syz.3.3618': attribute type 4 has an invalid length. [ 737.266032][T16850] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3618'. [ 737.280113][T16853] netlink: 'syz.0.3619': attribute type 4 has an invalid length. [ 737.504375][T16862] netlink: 'syz.0.3621': attribute type 4 has an invalid length. [ 738.034496][T16874] netlink: 'syz.3.3628': attribute type 4 has an invalid length. [ 738.337379][T16877] netlink: 'syz.4.3629': attribute type 4 has an invalid length. [ 738.599625][T16885] tap0: tun_chr_ioctl cmd 1074025677 [ 738.638442][T16885] tap0: linktype set to 778 [ 739.100361][T16888] FAULT_INJECTION: forcing a failure. [ 739.100361][T16888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.114130][T16888] CPU: 0 PID: 16888 Comm: syz.4.3634 Not tainted syzkaller #0 [ 739.121629][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.131702][T16888] Call Trace: [ 739.134977][T16888] [ 739.137900][T16888] dump_stack_lvl+0x18c/0x250 [ 739.142585][T16888] ? show_regs_print_info+0x20/0x20 [ 739.147796][T16888] ? load_image+0x400/0x400 [ 739.152407][T16888] ? __might_fault+0xaa/0x120 [ 739.157084][T16888] ? __lock_acquire+0x7d40/0x7d40 [ 739.162119][T16888] should_fail_ex+0x39d/0x4d0 [ 739.166807][T16888] _copy_to_user+0x2f/0xa0 [ 739.171231][T16888] bpf_test_finish+0x19f/0x650 [ 739.176282][T16888] ? convert___skb_to_skb+0x590/0x590 [ 739.181647][T16888] ? convert_skb_to___skb+0x420/0x420 [ 739.187025][T16888] ? bpf_test_init+0x119/0x140 [ 739.191963][T16888] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 739.197592][T16888] ? lock_chain_count+0x20/0x20 [ 739.202526][T16888] ? dev_put+0x80/0x80 [ 739.206599][T16888] ? dev_put+0x80/0x80 [ 739.210661][T16888] bpf_prog_test_run+0x321/0x390 [ 739.215684][T16888] __sys_bpf+0x49d/0x890 [ 739.219925][T16888] ? bpf_link_show_fdinfo+0x390/0x390 [ 739.225474][T16888] ? lock_chain_count+0x20/0x20 [ 739.230410][T16888] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 739.236530][T16888] __x64_sys_bpf+0x7c/0x90 [ 739.241055][T16888] do_syscall_64+0x55/0xa0 [ 739.245572][T16888] ? clear_bhb_loop+0x40/0x90 [ 739.250310][T16888] ? clear_bhb_loop+0x40/0x90 [ 739.255161][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.261090][T16888] RIP: 0033:0x7fed3bf9c799 [ 739.265693][T16888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.285471][T16888] RSP: 002b:00007fed3cefe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.293885][T16888] RAX: ffffffffffffffda RBX: 00007fed3c215fa0 RCX: 00007fed3bf9c799 [ 739.301849][T16888] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 739.309808][T16888] RBP: 00007fed3cefe090 R08: 0000000000000000 R09: 0000000000000000 [ 739.317770][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.325739][T16888] R13: 00007fed3c216038 R14: 00007fed3c215fa0 R15: 00007ffeb3c1e038 [ 739.333809][T16888] [ 739.851800][T16908] .` (unregistering): left allmulticast mode [ 739.860667][T16908] bond_slave_0: left allmulticast mode [ 739.869952][T16908] bond_slave_1: left allmulticast mode [ 739.880776][T16908] bridge_slave_1: left allmulticast mode [ 739.891873][T16908] batadv0: left allmulticast mode [ 739.899866][T16908] bridge0: port 3(.`) entered disabled state [ 739.933554][T16908] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.947736][T16908] bond_slave_0: left promiscuous mode [ 739.989699][T16908] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.005690][T16908] bond_slave_1: left promiscuous mode [ 740.040691][T16908] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 740.052610][T16908] bridge_slave_1: left promiscuous mode [ 740.070618][T16908] .` (unregistering): (slave batadv0): Releasing backup interface [ 740.083712][T16908] batadv0: left promiscuous mode [ 740.094570][T16908] .` (unregistering): Released all slaves [ 740.140384][T16911] __nla_validate_parse: 7 callbacks suppressed [ 740.140407][T16911] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3639'. [ 740.728151][T16928] validate_nla: 4 callbacks suppressed [ 740.728177][T16928] netlink: 'syz.0.3642': attribute type 4 has an invalid length. [ 740.790746][T16928] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3642'. [ 741.112771][T16935] tap0: tun_chr_ioctl cmd 1074025677 [ 741.136848][T16935] tap0: linktype set to 778 [ 741.453663][T16940] FAULT_INJECTION: forcing a failure. [ 741.453663][T16940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.496926][T16940] CPU: 1 PID: 16940 Comm: syz.1.3648 Not tainted syzkaller #0 [ 741.504553][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.514746][T16940] Call Trace: [ 741.518060][T16940] [ 741.521100][T16940] dump_stack_lvl+0x18c/0x250 [ 741.525925][T16940] ? show_regs_print_info+0x20/0x20 [ 741.531263][T16940] ? load_image+0x400/0x400 [ 741.535809][T16940] ? __lock_acquire+0x7d40/0x7d40 [ 741.540884][T16940] ? __virt_addr_valid+0x18c/0x540 [ 741.546064][T16940] should_fail_ex+0x39d/0x4d0 [ 741.550866][T16940] _copy_from_user+0x2f/0xe0 [ 741.555486][T16940] bpf_test_init+0xde/0x140 [ 741.560015][T16940] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 741.565494][T16940] ? dev_put+0x80/0x80 [ 741.569657][T16940] ? dev_put+0x80/0x80 [ 741.573725][T16940] bpf_prog_test_run+0x321/0x390 [ 741.578751][T16940] __sys_bpf+0x49d/0x890 [ 741.583088][T16940] ? bpf_link_show_fdinfo+0x390/0x390 [ 741.588469][T16940] ? lock_chain_count+0x20/0x20 [ 741.593317][T16940] __x64_sys_bpf+0x7c/0x90 [ 741.597812][T16940] do_syscall_64+0x55/0xa0 [ 741.602237][T16940] ? clear_bhb_loop+0x40/0x90 [ 741.606912][T16940] ? clear_bhb_loop+0x40/0x90 [ 741.611596][T16940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.617586][T16940] RIP: 0033:0x7f3ce919c799 [ 741.622080][T16940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.641779][T16940] RSP: 002b:00007f3cea06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.650279][T16940] RAX: ffffffffffffffda RBX: 00007f3ce9415fa0 RCX: 00007f3ce919c799 [ 741.658280][T16940] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 741.666254][T16940] RBP: 00007f3cea06d090 R08: 0000000000000000 R09: 0000000000000000 [ 741.674340][T16940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.682329][T16940] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 741.690485][T16940] [ 741.732218][T16941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3649'. [ 741.797438][T16945] netlink: 'syz.1.3651': attribute type 4 has an invalid length. [ 741.816846][T16945] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3651'. [ 741.963177][T16950] netlink: 'syz.3.3653': attribute type 3 has an invalid length. [ 742.004270][T16950] netlink: 'syz.3.3653': attribute type 1 has an invalid length. [ 742.021934][T16950] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3653'. [ 742.060564][T16952] netlink: 'syz.1.3654': attribute type 9 has an invalid length. [ 742.077906][T16952] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3654'. [ 742.302389][T16962] netlink: 'syz.4.3658': attribute type 4 has an invalid length. [ 742.311338][T16962] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3658'. [ 743.004537][T16977] netlink: 'syz.1.3659': attribute type 4 has an invalid length. [ 743.032855][T16977] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3659'. [ 743.356207][T16980] netlink: 'syz.3.3662': attribute type 4 has an invalid length. [ 743.380930][T16980] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3662'. [ 743.834914][T16987] netlink: 'syz.1.3665': attribute type 9 has an invalid length. [ 743.848679][T16987] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3665'. [ 743.860115][T16992] FAULT_INJECTION: forcing a failure. [ 743.860115][T16992] name failslab, interval 1, probability 0, space 0, times 0 [ 743.878172][T16992] CPU: 1 PID: 16992 Comm: syz.4.3667 Not tainted syzkaller #0 [ 743.885883][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 743.895967][T16992] Call Trace: [ 743.899353][T16992] [ 743.902299][T16992] dump_stack_lvl+0x18c/0x250 [ 743.907034][T16992] ? asm_common_interrupt+0x26/0x40 [ 743.912257][T16992] ? show_regs_print_info+0x20/0x20 [ 743.917557][T16992] ? load_image+0x400/0x400 [ 743.922179][T16992] should_fail_ex+0x39d/0x4d0 [ 743.927338][T16992] should_failslab+0x9/0x20 [ 743.931877][T16992] slab_pre_alloc_hook+0x59/0x310 [ 743.936986][T16992] ? find_exception+0x175/0xa30 [ 743.941945][T16992] kmem_cache_alloc+0x5a/0x2d0 [ 743.946897][T16992] ? dst_alloc+0x105/0x170 [ 743.951315][T16992] dst_alloc+0x105/0x170 [ 743.955595][T16992] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 743.961941][T16992] ? ip_route_output_key_hash_rcu+0x1291/0x2370 [ 743.968357][T16992] ? ip_route_output_key_hash+0x13d/0x330 [ 743.974070][T16992] ip_route_output_key_hash+0x1f3/0x330 [ 743.979655][T16992] ? ip_route_input_rcu+0x30f0/0x30f0 [ 743.985049][T16992] ? __lock_acquire+0x7d40/0x7d40 [ 743.990086][T16992] ip_route_output_flow+0x2a/0x150 [ 743.995237][T16992] ? security_sk_classify_flow+0x7b/0x90 [ 744.000890][T16992] raw_sendmsg+0x129a/0x1c00 [ 744.005492][T16992] ? compat_raw_ioctl+0x70/0x70 [ 744.010553][T16992] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 744.017065][T16992] ? sock_rps_record_flow+0x19/0x3f0 [ 744.022455][T16992] ? inet_sendmsg+0x7c/0x2f0 [ 744.027160][T16992] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 744.032628][T16992] ? security_socket_sendmsg+0x80/0xa0 [ 744.038296][T16992] ? inet_send_prepare+0x260/0x260 [ 744.043590][T16992] ____sys_sendmsg+0x5ba/0x960 [ 744.048457][T16992] ? __lock_acquire+0x7d40/0x7d40 [ 744.053606][T16992] ? __asan_memset+0x22/0x40 [ 744.058307][T16992] ? __sys_sendmsg_sock+0x30/0x30 [ 744.063522][T16992] ? __import_iovec+0x3fa/0x850 [ 744.068556][T16992] ? import_iovec+0x73/0xa0 [ 744.073159][T16992] ___sys_sendmsg+0x2a6/0x360 [ 744.077919][T16992] ? get_pid_task+0x20/0x1e0 [ 744.082646][T16992] ? __sys_sendmsg+0x2a0/0x2a0 [ 744.087422][T16992] ? __lock_acquire+0x7d40/0x7d40 [ 744.092558][T16992] __se_sys_sendmsg+0x1c2/0x2b0 [ 744.097435][T16992] ? __x64_sys_sendmsg+0x80/0x80 [ 744.102457][T16992] ? lockdep_hardirqs_on+0x98/0x150 [ 744.107651][T16992] do_syscall_64+0x55/0xa0 [ 744.112156][T16992] ? clear_bhb_loop+0x40/0x90 [ 744.116828][T16992] ? clear_bhb_loop+0x40/0x90 [ 744.121507][T16992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.127480][T16992] RIP: 0033:0x7fed3bf9c799 [ 744.131889][T16992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.152290][T16992] RSP: 002b:00007fed3cefe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.160879][T16992] RAX: ffffffffffffffda RBX: 00007fed3c215fa0 RCX: 00007fed3bf9c799 [ 744.169397][T16992] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 744.177567][T16992] RBP: 00007fed3cefe090 R08: 0000000000000000 R09: 0000000000000000 [ 744.185907][T16992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.193966][T16992] R13: 00007fed3c216038 R14: 00007fed3c215fa0 R15: 00007ffeb3c1e038 [ 744.202415][T16992] [ 744.526381][T17001] netlink: 'syz.3.3670': attribute type 2 has an invalid length. [ 745.133203][T17016] tap0: tun_chr_ioctl cmd 1074025677 [ 745.139446][T17016] tap0: linktype set to 778 [ 745.234593][T17019] FAULT_INJECTION: forcing a failure. [ 745.234593][T17019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.280398][T17019] CPU: 1 PID: 17019 Comm: syz.4.3676 Not tainted syzkaller #0 [ 745.288127][T17019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.298381][T17019] Call Trace: [ 745.301673][T17019] [ 745.304625][T17019] dump_stack_lvl+0x18c/0x250 [ 745.309344][T17019] ? show_regs_print_info+0x20/0x20 [ 745.314572][T17019] ? load_image+0x400/0x400 [ 745.319109][T17019] ? __might_fault+0xaa/0x120 [ 745.323910][T17019] ? __lock_acquire+0x7d40/0x7d40 [ 745.328965][T17019] should_fail_ex+0x39d/0x4d0 [ 745.333668][T17019] _copy_from_user+0x2f/0xe0 [ 745.338273][T17019] kstrtouint_from_user+0xde/0x170 [ 745.343396][T17019] ? kstrtol_from_user+0x190/0x190 [ 745.348570][T17019] proc_fail_nth_write+0x8f/0x250 [ 745.353608][T17019] ? proc_fail_nth_read+0x260/0x260 [ 745.358835][T17019] ? proc_fail_nth_read+0x260/0x260 [ 745.364032][T17019] vfs_write+0x296/0x990 [ 745.368284][T17019] ? file_end_write+0x250/0x250 [ 745.373304][T17019] ? __fget_files+0x28/0x4b0 [ 745.377977][T17019] ? __fget_files+0x28/0x4b0 [ 745.382607][T17019] ? __fget_files+0x43d/0x4b0 [ 745.387319][T17019] ? __fdget_pos+0x2a3/0x330 [ 745.392008][T17019] ? ksys_write+0x75/0x260 [ 745.396430][T17019] ksys_write+0x150/0x260 [ 745.400862][T17019] ? __ia32_sys_read+0x90/0x90 [ 745.405632][T17019] ? lockdep_hardirqs_on+0x98/0x150 [ 745.410839][T17019] do_syscall_64+0x55/0xa0 [ 745.415263][T17019] ? clear_bhb_loop+0x40/0x90 [ 745.420117][T17019] ? clear_bhb_loop+0x40/0x90 [ 745.424800][T17019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.430690][T17019] RIP: 0033:0x7fed3bf5cfce [ 745.435100][T17019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.454970][T17019] RSP: 002b:00007fed3cefdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.463383][T17019] RAX: ffffffffffffffda RBX: 00007fed3cefe6c0 RCX: 00007fed3bf5cfce [ 745.471353][T17019] RDX: 0000000000000001 RSI: 00007fed3cefe0a0 RDI: 0000000000000004 [ 745.479504][T17019] RBP: 00007fed3cefe090 R08: 0000000000000000 R09: 0000000000000000 [ 745.487562][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.495536][T17019] R13: 00007fed3c216038 R14: 00007fed3c215fa0 R15: 00007ffeb3c1e038 [ 745.503547][T17019] [ 745.651115][T17025] __nla_validate_parse: 3 callbacks suppressed [ 745.651138][T17025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3678'. [ 745.680023][T17027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3678'. [ 745.698743][T17029] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3679'. [ 746.062680][T17033] validate_nla: 7 callbacks suppressed [ 746.062705][T17033] netlink: 'syz.0.3681': attribute type 4 has an invalid length. [ 746.100377][T17033] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3681'. [ 746.272091][T17038] netlink: 'syz.4.3683': attribute type 4 has an invalid length. [ 746.310524][T17038] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3683'. [ 746.593683][T17043] netlink: 'syz.4.3685': attribute type 2 has an invalid length. [ 746.602349][T17043] netlink: 'syz.4.3685': attribute type 8 has an invalid length. [ 746.610187][T17043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3685'. [ 746.629851][T17043] netlink: 'syz.4.3685': attribute type 11 has an invalid length. [ 746.780062][T17047] netlink: 'syz.4.3686': attribute type 4 has an invalid length. [ 746.790063][T17047] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3686'. [ 747.061349][T17057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3688'. [ 747.194605][T17057] .` (unregistering): (slave 73ÿ): Releasing backup interface [ 747.254233][T17057] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.306755][T17057] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 747.451447][T17057] .` (unregistering): (slave batadv0): Releasing backup interface [ 747.469985][T17062] netlink: 'syz.3.3690': attribute type 9 has an invalid length. [ 747.514271][T17059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.530692][T17062] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3690'. [ 747.664317][T17057] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 747.879915][T17057] .` (unregistering): Released all slaves [ 747.893285][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.893672][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.168671][T17069] FAULT_INJECTION: forcing a failure. [ 748.168671][T17069] name failslab, interval 1, probability 0, space 0, times 0 [ 748.203829][T17069] CPU: 1 PID: 17069 Comm: syz.1.3692 Not tainted syzkaller #0 [ 748.211459][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.221553][T17069] Call Trace: [ 748.224863][T17069] [ 748.228089][T17069] dump_stack_lvl+0x18c/0x250 [ 748.232828][T17069] ? show_regs_print_info+0x20/0x20 [ 748.238076][T17069] ? load_image+0x400/0x400 [ 748.242818][T17069] ? __might_sleep+0xe0/0xe0 [ 748.247506][T17069] ? __lock_acquire+0x7d40/0x7d40 [ 748.252539][T17069] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 748.258806][T17069] should_fail_ex+0x39d/0x4d0 [ 748.263529][T17069] should_failslab+0x9/0x20 [ 748.268177][T17069] slab_pre_alloc_hook+0x59/0x310 [ 748.273269][T17069] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 748.278940][T17069] __kmem_cache_alloc_node+0x53/0x250 [ 748.284467][T17069] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 748.289777][T17069] kmalloc_trace+0x2a/0xe0 [ 748.294253][T17069] inet6_rtm_newroute+0xa0d/0x1c90 [ 748.299440][T17069] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 748.305464][T17069] ? rcu_is_watching+0x15/0xb0 [ 748.310239][T17069] ? trace_contention_end+0x39/0xe0 [ 748.315526][T17069] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 748.320653][T17069] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 748.325789][T17069] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 748.331871][T17069] rtnetlink_rcv_msg+0x869/0xfa0 [ 748.336825][T17069] ? rtnetlink_bind+0x80/0x80 [ 748.341671][T17069] ? mark_lock+0x94/0x320 [ 748.345997][T17069] ? __lock_acquire+0x1273/0x7d40 [ 748.351112][T17069] ? mark_lock+0x94/0x320 [ 748.355438][T17069] ? mark_lock+0x94/0x320 [ 748.359768][T17069] ? __lock_acquire+0x1273/0x7d40 [ 748.364890][T17069] ? verify_lock_unused+0x140/0x140 [ 748.370171][T17069] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 748.376323][T17069] ? verify_lock_unused+0x140/0x140 [ 748.381612][T17069] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 748.387548][T17069] netlink_rcv_skb+0x241/0x4d0 [ 748.392572][T17069] ? rtnetlink_bind+0x80/0x80 [ 748.397239][T17069] ? netlink_ack+0x1180/0x1180 [ 748.402010][T17069] ? __lock_acquire+0x7d40/0x7d40 [ 748.407025][T17069] ? net_generic+0x1e/0x240 [ 748.411560][T17069] ? netlink_deliver_tap+0x2e/0x1b0 [ 748.416966][T17069] netlink_unicast+0x751/0x8d0 [ 748.421772][T17069] netlink_sendmsg+0x8d0/0xbf0 [ 748.426549][T17069] ? __sanitizer_cov_trace_switch+0x8e/0x120 [ 748.432536][T17069] ? netlink_getsockopt+0x590/0x590 [ 748.437736][T17069] ? aa_sock_msg_perm+0x94/0x150 [ 748.442669][T17069] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 748.448213][T17069] ? security_socket_sendmsg+0x80/0xa0 [ 748.453665][T17069] ? netlink_getsockopt+0x590/0x590 [ 748.458859][T17069] ____sys_sendmsg+0x5ba/0x960 [ 748.463707][T17069] ? __asan_memset+0x22/0x40 [ 748.468380][T17069] ? __sys_sendmsg_sock+0x30/0x30 [ 748.473398][T17069] ? __import_iovec+0x5f2/0x850 [ 748.478332][T17069] ? import_iovec+0x73/0xa0 [ 748.482999][T17069] ___sys_sendmsg+0x2a6/0x360 [ 748.487688][T17069] ? __sys_sendmsg+0x2a0/0x2a0 [ 748.492474][T17069] __se_sys_sendmsg+0x1c2/0x2b0 [ 748.497326][T17069] ? __x64_sys_sendmsg+0x80/0x80 [ 748.502263][T17069] ? syscall_enter_from_user_mode+0x2e/0x80 [ 748.508419][T17069] do_syscall_64+0x55/0xa0 [ 748.512928][T17069] ? clear_bhb_loop+0x40/0x90 [ 748.517605][T17069] ? clear_bhb_loop+0x40/0x90 [ 748.522288][T17069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.528175][T17069] RIP: 0033:0x7f3ce919c799 [ 748.532670][T17069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.552741][T17069] RSP: 002b:00007f3cea06d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.561245][T17069] RAX: ffffffffffffffda RBX: 00007f3ce9415fa0 RCX: 00007f3ce919c799 [ 748.569344][T17069] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 748.577326][T17069] RBP: 00007f3cea06d090 R08: 0000000000000000 R09: 0000000000000000 [ 748.585297][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.593353][T17069] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 748.601509][T17069] [ 748.640041][T17077] netlink: 'syz.4.3695': attribute type 4 has an invalid length. [ 748.656177][T17077] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3695'. [ 748.810845][T17082] netlink: 'syz.0.3696': attribute type 7 has an invalid length. [ 749.511484][T17098] netlink: 'syz.0.3698': attribute type 4 has an invalid length. [ 751.992861][T17112] netlink: 'syz.4.3704': attribute type 4 has an invalid length. [ 752.001972][T17112] __nla_validate_parse: 2 callbacks suppressed [ 752.001988][T17112] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3704'. [ 752.035159][T17113] netlink: 'syz.3.3702': attribute type 9 has an invalid length. [ 752.080500][T17113] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3702'. [ 752.334517][T17124] netlink: 'syz.3.3708': attribute type 4 has an invalid length. [ 752.358291][T17124] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3708'. [ 752.529466][T17130] netlink: 'syz.0.3709': attribute type 4 has an invalid length. [ 752.564810][T17130] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3709'. [ 753.044983][T17139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3712'. [ 753.273305][T17150] netlink: 'syz.1.3715': attribute type 4 has an invalid length. [ 753.284035][T17150] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3715'. [ 753.302528][T17153] netlink: 'syz.4.3717': attribute type 9 has an invalid length. [ 753.311904][T17153] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3717'. [ 753.732158][T17160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3719'. [ 754.491704][T17182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3725'. [ 754.525882][T17187] netlink: 'syz.3.3726': attribute type 4 has an invalid length. [ 754.561465][T17187] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3726'. [ 754.768279][T17193] netlink: 'syz.4.3729': attribute type 9 has an invalid length. [ 754.862413][T17196] netlink: 'syz.0.3731': attribute type 4 has an invalid length. [ 754.959954][T17198] netlink: 'syz.3.3732': attribute type 4 has an invalid length. [ 758.619043][T17229] netlink: 'syz.1.3740': attribute type 4 has an invalid length. [ 758.639203][T17229] __nla_validate_parse: 3 callbacks suppressed [ 758.639222][T17229] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3740'. [ 758.725971][T17232] netlink: 'syz.4.3742': attribute type 4 has an invalid length. [ 758.755358][T17232] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3742'. [ 759.311343][T17247] netlink: 'syz.4.3747': attribute type 4 has an invalid length. [ 759.321615][T17247] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3747'. [ 760.761614][T17269] netlink: 'syz.0.3753': attribute type 4 has an invalid length. [ 760.790947][T17269] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3753'. [ 760.867163][T17273] netlink: 'syz.3.3754': attribute type 4 has an invalid length. [ 760.875504][T17273] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3754'. [ 761.524107][T17290] FAULT_INJECTION: forcing a failure. [ 761.524107][T17290] name failslab, interval 1, probability 0, space 0, times 0 [ 761.537276][T17290] CPU: 1 PID: 17290 Comm: syz.4.3765 Not tainted syzkaller #0 [ 761.544782][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.555214][T17290] Call Trace: [ 761.558922][T17290] [ 761.561910][T17290] dump_stack_lvl+0x18c/0x250 [ 761.566725][T17290] ? show_regs_print_info+0x20/0x20 [ 761.571956][T17290] ? load_image+0x400/0x400 [ 761.576620][T17290] ? __might_sleep+0xe0/0xe0 [ 761.581227][T17290] ? __lock_acquire+0x7d40/0x7d40 [ 761.586276][T17290] should_fail_ex+0x39d/0x4d0 [ 761.591004][T17290] should_failslab+0x9/0x20 [ 761.595552][T17290] slab_pre_alloc_hook+0x59/0x310 [ 761.600590][T17290] ? trace_event_raw_event_lock+0x250/0x250 [ 761.606591][T17290] ? sock_kmalloc+0x96/0xf0 [ 761.611109][T17290] ? sock_kmalloc+0x96/0xf0 [ 761.615704][T17290] __kmem_cache_alloc_node+0x53/0x250 [ 761.621098][T17290] ? sock_kmalloc+0x96/0xf0 [ 761.625613][T17290] __kmalloc+0xa4/0x230 [ 761.629894][T17290] sock_kmalloc+0x96/0xf0 [ 761.634239][T17290] ____sys_sendmsg+0x1be/0x960 [ 761.639013][T17290] ? __lock_acquire+0x7d40/0x7d40 [ 761.644319][T17290] ? __asan_memset+0x22/0x40 [ 761.649104][T17290] ? __sys_sendmsg_sock+0x30/0x30 [ 761.654224][T17290] ? __import_iovec+0x5f2/0x850 [ 761.659193][T17290] ? import_iovec+0x73/0xa0 [ 761.663710][T17290] ___sys_sendmsg+0x2a6/0x360 [ 761.668406][T17290] ? __sys_sendmsg+0x2a0/0x2a0 [ 761.673414][T17290] ? __lock_acquire+0x7d40/0x7d40 [ 761.678500][T17290] __se_sys_sendmsg+0x1c2/0x2b0 [ 761.683363][T17290] ? __x64_sys_sendmsg+0x80/0x80 [ 761.688383][T17290] ? lockdep_hardirqs_on+0x98/0x150 [ 761.693766][T17290] do_syscall_64+0x55/0xa0 [ 761.698196][T17290] ? clear_bhb_loop+0x40/0x90 [ 761.703020][T17290] ? clear_bhb_loop+0x40/0x90 [ 761.707890][T17290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.713877][T17290] RIP: 0033:0x7fed3bf9c799 [ 761.718389][T17290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.738018][T17290] RSP: 002b:00007fed3cefe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.746443][T17290] RAX: ffffffffffffffda RBX: 00007fed3c215fa0 RCX: 00007fed3bf9c799 [ 761.754423][T17290] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 761.762491][T17290] RBP: 00007fed3cefe090 R08: 0000000000000000 R09: 0000000000000000 [ 761.770555][T17290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.778529][T17290] R13: 00007fed3c216038 R14: 00007fed3c215fa0 R15: 00007ffeb3c1e038 [ 761.786577][T17290] [ 762.165325][T17296] netlink: 'syz.0.3767': attribute type 4 has an invalid length. [ 762.190649][T17296] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3767'. [ 765.455787][T17311] netlink: 'syz.1.3770': attribute type 4 has an invalid length. [ 765.479845][T17311] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3770'. [ 766.624326][T17337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3780'. [ 767.330037][T17357] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3786'. [ 767.426529][T17363] netlink: 'syz.1.3791': attribute type 4 has an invalid length. [ 767.450527][T17363] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3791'. [ 767.718288][T17369] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 767.730513][T17369] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3792'. [ 768.804548][T17393] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3799'. [ 768.930852][T17395] netlink: 'syz.4.3799': attribute type 29 has an invalid length. [ 769.049223][T17393] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 769.092741][T17393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.143396][T17400] FAULT_INJECTION: forcing a failure. [ 769.143396][T17400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.162922][T17400] CPU: 0 PID: 17400 Comm: syz.0.3802 Not tainted syzkaller #0 [ 769.170883][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.181152][T17400] Call Trace: [ 769.184455][T17400] [ 769.187423][T17400] dump_stack_lvl+0x18c/0x250 [ 769.192236][T17400] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 769.198439][T17400] ? show_regs_print_info+0x20/0x20 [ 769.203795][T17400] ? load_image+0x400/0x400 [ 769.208447][T17400] should_fail_ex+0x39d/0x4d0 [ 769.213255][T17400] _copy_from_iter+0x1d9/0x12e0 [ 769.218222][T17400] ? copyout_mc+0x70/0x70 [ 769.222587][T17400] ? strlen+0x43/0x70 [ 769.226695][T17400] ? release_sock+0x2f/0x1c0 [ 769.231409][T17400] ? reacquire_held_locks+0x30e/0x5b0 [ 769.236919][T17400] ? __check_object_size+0x8d/0xa20 [ 769.242170][T17400] ping_common_sendmsg+0xbc/0x2a0 [ 769.247496][T17400] ping_v6_sendmsg+0x20b/0x11f0 [ 769.252407][T17400] ? ping_v6_pre_connect+0x30/0x30 [ 769.257547][T17400] ? inet_sendmsg+0x14b/0x2f0 [ 769.262242][T17400] ? __local_bh_enable_ip+0x13a/0x1c0 [ 769.267725][T17400] ? lockdep_hardirqs_on+0x98/0x150 [ 769.272970][T17400] ? _local_bh_enable+0xa0/0xa0 [ 769.277843][T17400] ? do_raw_spin_unlock+0x121/0x230 [ 769.283066][T17400] ? inet_sendmsg+0x14b/0x2f0 [ 769.287878][T17400] ? inet_sendmsg+0x14b/0x2f0 [ 769.292606][T17400] ? inet_send_prepare+0x260/0x260 [ 769.297855][T17400] ____sys_sendmsg+0x5ba/0x960 [ 769.302743][T17400] ? __asan_memset+0x22/0x40 [ 769.307357][T17400] ? __sys_sendmsg_sock+0x30/0x30 [ 769.312494][T17400] ? __import_iovec+0x5f2/0x850 [ 769.317465][T17400] ? import_iovec+0x73/0xa0 [ 769.321975][T17400] ___sys_sendmsg+0x2a6/0x360 [ 769.326749][T17400] ? __sys_sendmsg+0x2a0/0x2a0 [ 769.331655][T17400] __se_sys_sendmsg+0x1c2/0x2b0 [ 769.336613][T17400] ? hrtimer_interrupt+0x7bb/0x9c0 [ 769.341829][T17400] ? __x64_sys_sendmsg+0x80/0x80 [ 769.346895][T17400] ? lockdep_hardirqs_on+0x98/0x150 [ 769.352458][T17400] do_syscall_64+0x55/0xa0 [ 769.356963][T17400] ? clear_bhb_loop+0x40/0x90 [ 769.361639][T17400] ? clear_bhb_loop+0x40/0x90 [ 769.366402][T17400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.372464][T17400] RIP: 0033:0x7fdf1959c799 [ 769.377164][T17400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.396888][T17400] RSP: 002b:00007fdf1a3e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.405397][T17400] RAX: ffffffffffffffda RBX: 00007fdf19815fa0 RCX: 00007fdf1959c799 [ 769.413365][T17400] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 769.421328][T17400] RBP: 00007fdf1a3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 769.429303][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.437273][T17400] R13: 00007fdf19816038 R14: 00007fdf19815fa0 R15: 00007ffd74819088 [ 769.445423][T17400] [ 769.475244][T17393] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 769.528525][T17393] bond0 (unregistering): Released all slaves [ 769.569704][T17395] netlink: 'syz.4.3799': attribute type 29 has an invalid length. [ 769.616544][T17402] netlink: 'syz.3.3801': attribute type 4 has an invalid length. [ 769.624757][T17402] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3801'. [ 769.786868][T17415] netlink: 'syz.1.3808': attribute type 4 has an invalid length. [ 769.820654][T17415] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3808'. [ 770.004837][T17421] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3810'. [ 773.363680][T17445] netlink: 'syz.4.3818': attribute type 4 has an invalid length. [ 773.387188][T17445] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3818'. [ 774.993978][T17465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3824'. [ 775.136558][T17475] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3827'. [ 775.194730][T17475] netlink: 'syz.0.3827': attribute type 29 has an invalid length. [ 775.205078][T17475] netlink: 'syz.0.3827': attribute type 29 has an invalid length. [ 775.219632][T17475] netlink: 'syz.0.3827': attribute type 29 has an invalid length. [ 775.241317][T17475] netlink: 'syz.0.3827': attribute type 29 has an invalid length. [ 775.943022][T17483] netlink: 'syz.1.3839': attribute type 4 has an invalid length. [ 775.951950][T17483] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3839'. [ 775.970395][T17486] netlink: 'syz.0.3830': attribute type 4 has an invalid length. [ 775.989318][T17486] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3830'. [ 778.456329][T17523] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3841'. [ 778.514900][T17521] netlink: 'syz.3.3841': attribute type 29 has an invalid length. [ 778.580165][T17523] .` (unregistering): (slave 73ÿ): Releasing backup interface [ 778.605943][T17523] ÿ: left promiscuous mode [ 778.642920][T17523] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.667717][T17523] bond_slave_1: left promiscuous mode [ 778.703449][T17523] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 778.715437][T17523] bridge_slave_1: left promiscuous mode [ 778.741269][T17523] .` (unregistering): (slave batadv0): Releasing backup interface [ 778.754084][T17523] batadv0: left promiscuous mode [ 778.766099][T17523] .` (unregistering): Released all slaves [ 778.795279][T17521] netlink: 'syz.3.3841': attribute type 29 has an invalid length. [ 778.803535][T17527] netlink: 'syz.0.3842': attribute type 4 has an invalid length. [ 778.813598][T17527] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3842'. [ 778.829036][T17528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3844'. [ 778.858714][T17526] netlink: 'syz.3.3841': attribute type 29 has an invalid length. [ 778.896196][T17530] netlink: 'syz.3.3841': attribute type 29 has an invalid length. [ 779.051305][T17533] netlink: 'syz.1.3845': attribute type 33 has an invalid length. [ 779.061203][T17533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3845'. [ 779.071179][T17533] `: renamed from team0 (while UP) [ 780.283547][T17562] netlink: 'syz.4.3855': attribute type 4 has an invalid length. [ 780.317554][T17562] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3855'. [ 781.089889][T17568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3857'. [ 781.669293][T17579] netlink: 'syz.4.3860': attribute type 33 has an invalid length. [ 781.678094][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3860'. [ 781.687586][T17579] `: renamed from team0 (while UP) [ 782.813281][T17590] netlink: 'syz.0.3864': attribute type 4 has an invalid length. [ 782.829048][T17590] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3864'. [ 782.926433][T17592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3865'. [ 783.067801][T17597] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3867'. [ 783.114182][T17597] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 783.142982][T17597] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 783.844728][T17613] netlink: 'syz.1.3872': attribute type 9 has an invalid length. [ 783.881165][T17613] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3872'. [ 785.268275][T17626] netlink: 'syz.0.3875': attribute type 4 has an invalid length. [ 785.276991][T17626] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3875'. [ 785.518440][T17634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3878'. [ 785.617838][T17639] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3880'. [ 785.642676][T17642] netlink: 'syz.0.3882': attribute type 9 has an invalid length. [ 785.650785][T17642] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3882'. [ 786.131620][T17651] netlink: 'syz.1.3886': attribute type 4 has an invalid length. [ 786.140040][T17651] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3886'. [ 789.290046][T17667] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3889'. [ 789.319958][T17667] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 789.342231][T17667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 789.372389][T17671] FAULT_INJECTION: forcing a failure. [ 789.372389][T17671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.420253][T17671] CPU: 1 PID: 17671 Comm: syz.1.3890 Not tainted syzkaller #0 [ 789.427786][T17671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.437959][T17671] Call Trace: [ 789.441267][T17671] [ 789.444220][T17671] dump_stack_lvl+0x18c/0x250 [ 789.449007][T17671] ? show_regs_print_info+0x20/0x20 [ 789.454208][T17671] ? load_image+0x400/0x400 [ 789.458710][T17671] ? __might_fault+0xaa/0x120 [ 789.463378][T17671] ? __lock_acquire+0x7d40/0x7d40 [ 789.468406][T17671] should_fail_ex+0x39d/0x4d0 [ 789.473084][T17671] _copy_to_user+0x2f/0xa0 [ 789.477521][T17671] bpf_verifier_vlog+0x2fa/0x870 [ 789.482570][T17671] __btf_verifier_log+0xe3/0x140 [ 789.487625][T17671] ? btf_check_sec_info+0x350/0x350 [ 789.492835][T17671] ? __lock_acquire+0x7d40/0x7d40 [ 789.497860][T17671] ? btf_parse_hdr+0x1f5/0x710 [ 789.502647][T17671] btf_parse_hdr+0x2fe/0x710 [ 789.507258][T17671] btf_new_fd+0x397/0x9f0 [ 789.511598][T17671] ? bpf_btf_show_fdinfo+0x80/0x80 [ 789.516789][T17671] ? capable+0x88/0xe0 [ 789.520868][T17671] __sys_bpf+0x670/0x890 [ 789.525113][T17671] ? bpf_link_show_fdinfo+0x390/0x390 [ 789.530490][T17671] ? lock_chain_count+0x20/0x20 [ 789.535424][T17671] __x64_sys_bpf+0x7c/0x90 [ 789.539832][T17671] do_syscall_64+0x55/0xa0 [ 789.544269][T17671] ? clear_bhb_loop+0x40/0x90 [ 789.549121][T17671] ? clear_bhb_loop+0x40/0x90 [ 789.553821][T17671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.559857][T17671] RIP: 0033:0x7f3ce919c799 [ 789.564299][T17671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.583932][T17671] RSP: 002b:00007f3cea06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 789.592550][T17671] RAX: ffffffffffffffda RBX: 00007f3ce9415fa0 RCX: 00007f3ce919c799 [ 789.600528][T17671] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 789.608504][T17671] RBP: 00007f3cea06d090 R08: 0000000000000000 R09: 0000000000000000 [ 789.616475][T17671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.624529][T17671] R13: 00007f3ce9416038 R14: 00007f3ce9415fa0 R15: 00007ffdcad6a198 [ 789.632532][T17671] [ 789.666488][T17675] netlink: 'syz.0.3892': attribute type 9 has an invalid length. [ 789.678947][T17674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3891'. [ 789.699863][T17675] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3892'. [ 789.926278][T17684] netlink: 'syz.1.3895': attribute type 4 has an invalid length. [ 789.944755][T17684] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3895'. [ 790.117673][T17678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3893'. [ 790.920643][T13100] Bluetooth: hci3: command 0x0406 tx timeout [ 793.684414][T17707] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3903'. [ 793.725394][T17707] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 793.749218][T17713] netlink: 'syz.3.3904': attribute type 9 has an invalid length. [ 793.758024][T17707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 793.764893][T17713] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3904'. [ 793.795770][T17709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3902'. [ 793.959685][T17718] netlink: 'syz.3.3905': attribute type 4 has an invalid length. [ 793.976221][T17718] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3905'. [ 794.608504][T17724] €Â0: renamed from batadv_slave_1 (while UP) [ 795.487201][T17749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3914'. [ 795.547484][T17751] netlink: 'syz.3.3915': attribute type 9 has an invalid length. [ 795.564386][T17751] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3915'. [ 795.643244][T17753] netlink: 'syz.3.3916': attribute type 4 has an invalid length. [ 795.654384][T17753] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3916'. [ 795.768740][T17755] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3917'. [ 795.781547][T17755] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 795.793011][T17755] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 795.982925][T17759] €Â0: renamed from batadv_slave_1 (while UP) [ 796.293041][T17769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3923'. [ 796.394119][T17775] netlink: 'syz.4.3925': attribute type 9 has an invalid length. [ 796.455946][T17775] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3925'. [ 797.296783][T17788] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3928'. [ 797.316516][T17788] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 797.325548][T17788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 797.917787][T17802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3934'. [ 798.060168][T17811] netlink: 'syz.0.3936': attribute type 9 has an invalid length. [ 798.079256][T17811] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3936'. [ 798.104762][T17807] €Â0: renamed from batadv_slave_1 (while UP) [ 798.392362][T17820] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3940'. [ 798.401927][T17820] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 798.410754][T17820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 800.666478][T17851] €Â0: renamed from batadv_slave_1 (while UP) [ 802.727375][T17861] __nla_validate_parse: 1 callbacks suppressed [ 802.727396][T17861] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3952'. [ 802.787299][T17861] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 802.802654][T17861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 803.929178][T17870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3955'. [ 804.032949][T17879] FAULT_INJECTION: forcing a failure. [ 804.032949][T17879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.048887][T17879] CPU: 0 PID: 17879 Comm: syz.3.3959 Not tainted syzkaller #0 [ 804.056476][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.066737][T17879] Call Trace: [ 804.070034][T17879] [ 804.072976][T17879] dump_stack_lvl+0x18c/0x250 [ 804.077692][T17879] ? show_regs_print_info+0x20/0x20 [ 804.082907][T17879] ? load_image+0x400/0x400 [ 804.087513][T17879] ? __lock_acquire+0x7d40/0x7d40 [ 804.092553][T17879] ? __virt_addr_valid+0x18c/0x540 [ 804.097703][T17879] should_fail_ex+0x39d/0x4d0 [ 804.102411][T17879] _copy_from_user+0x2f/0xe0 [ 804.107029][T17879] bpf_test_init+0xde/0x140 [ 804.111550][T17879] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 804.116944][T17879] ? dev_put+0x80/0x80 [ 804.121027][T17879] ? dev_put+0x80/0x80 [ 804.125100][T17879] bpf_prog_test_run+0x321/0x390 [ 804.130060][T17879] __sys_bpf+0x49d/0x890 [ 804.134324][T17879] ? bpf_link_show_fdinfo+0x390/0x390 [ 804.139720][T17879] ? lock_chain_count+0x20/0x20 [ 804.144764][T17879] __x64_sys_bpf+0x7c/0x90 [ 804.149274][T17879] do_syscall_64+0x55/0xa0 [ 804.154072][T17879] ? clear_bhb_loop+0x40/0x90 [ 804.158781][T17879] ? clear_bhb_loop+0x40/0x90 [ 804.163471][T17879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.169373][T17879] RIP: 0033:0x7efdf499c799 [ 804.173885][T17879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.193682][T17879] RSP: 002b:00007efdf584f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 804.202289][T17879] RAX: ffffffffffffffda RBX: 00007efdf4c15fa0 RCX: 00007efdf499c799 [ 804.210511][T17879] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 804.219142][T17879] RBP: 00007efdf584f090 R08: 0000000000000000 R09: 0000000000000000 [ 804.227143][T17879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.235142][T17879] R13: 00007efdf4c16038 R14: 00007efdf4c15fa0 R15: 00007ffdf3cd52e8 [ 804.243146][T17879] [ 804.518358][T17885] netlink: 'syz.3.3961': attribute type 9 has an invalid length. [ 804.622658][T17885] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3961'. [ 805.452969][T17894] netlink: 'syz.3.3962': attribute type 4 has an invalid length. [ 805.465506][T17894] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3962'. [ 805.857107][T17904] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3965'. [ 805.880557][T17904] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 805.889360][T17904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 806.159566][T17910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3968'. [ 806.196597][T17913] netlink: 'syz.1.3970': attribute type 9 has an invalid length. [ 806.206146][T17913] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3970'. [ 806.542266][T17925] netlink: 'syz.3.3974': attribute type 4 has an invalid length. [ 806.553046][T17925] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3974'. [ 807.569613][T17943] netlink: 'syz.4.3980': attribute type 9 has an invalid length. [ 807.577608][T17943] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3980'. [ 807.621113][T17940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3981'. [ 807.867363][T17946] netlink: 668 bytes leftover after parsing attributes in process `syz.4.3982'. [ 807.881104][T17946] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 807.890680][T17946] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 808.090926][T17958] netlink: 668 bytes leftover after parsing attributes in process `syz.4.3988'. [ 808.100490][T17958] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 808.109139][T17958] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 808.752147][T17967] netlink: 'syz.3.3990': attribute type 9 has an invalid length. [ 808.761573][T17967] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3990'. [ 808.888582][T17971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3992'. [ 809.309484][T17978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3995'. [ 809.340361][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.349893][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.448324][T17982] netlink: 668 bytes leftover after parsing attributes in process `syz.4.3997'. [ 809.495501][T17982] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 809.536614][T17982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 809.981638][ T29] INFO: task syz.2.3023:15150 blocked for more than 143 seconds. [ 809.989903][ T29] Not tainted syzkaller #0 [ 809.995013][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.037121][ T29] task:syz.2.3023 state:D stack:26856 pid:15150 ppid:13099 flags:0x00004002 [ 810.051357][ T29] Call Trace: [ 810.055269][ T29] [ 810.059248][ T29] __schedule+0x1553/0x45a0 [ 810.065369][ T29] ? rcu_is_watching+0x15/0xb0 [ 810.070964][ T29] ? asan.module_dtor+0x20/0x20 [ 810.076214][ T29] ? trace_contention_end+0x39/0xe0 [ 810.207351][ T29] ? task_work_cancel+0xa5/0x220 [ 810.295828][ T29] ? task_work_cancel_func+0x210/0x210 [ 810.301582][ T29] schedule+0xbd/0x170 [ 810.305819][ T29] ? _free_event+0xfe/0xf30 [ 810.350321][ T29] _free_event+0x174/0xf30 [ 810.355165][ T29] perf_event_release_kernel+0x842/0x8d0 [ 810.371115][ T29] ? __might_sleep+0xe0/0xe0 [ 810.381679][ T29] ? calc_timer_values+0x400/0x400 [ 810.395328][ T29] ? __fput+0x61c/0x970 [ 810.406588][ T29] ? perf_mmap+0x15c0/0x15c0 [ 810.419392][ T29] perf_release+0x3b/0x40 [ 810.438570][ T29] __fput+0x234/0x970 [ 810.463501][ T29] task_work_run+0x1d4/0x260 [ 810.482212][ T29] ? task_work_cancel+0x220/0x220 [ 810.494452][ T29] do_exit+0x95a/0x2460 [ 810.507183][ T29] ? preempt_schedule+0xc0/0xd0 [ 810.520697][ T29] ? put_task_struct+0xc0/0xc0 [ 810.529332][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 810.549928][ T29] ? lock_chain_count+0x20/0x20 [ 810.563809][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 810.577900][ T29] do_group_exit+0x21b/0x2d0 [ 810.594016][ T29] __x64_sys_exit_group+0x3f/0x40 [ 810.608045][ T29] do_syscall_64+0x55/0xa0 [ 810.619628][ T29] ? clear_bhb_loop+0x40/0x90 [ 810.634406][ T29] ? clear_bhb_loop+0x40/0x90 [ 810.649738][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.667803][ T29] RIP: 0033:0x7fb2e8f9c799 [ 810.682076][ T29] RSP: 002b:00007fb2e9e8ef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 810.714592][ T29] RAX: ffffffffffffffda RBX: 00007fb2e90093e8 RCX: 00007fb2e8f9c799 [ 810.733926][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 810.753128][ T29] RBP: 000000000000000e R08: 0000000000000000 R09: 00007fb2e9216038 [ 810.792165][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.822856][ T29] R13: 00007fb2e9216038 R14: 00007fb2e9215fa0 R15: 00007ffd536947c8 [ 810.842724][ T29] [ 810.849563][ T29] [ 810.849563][ T29] Showing all locks held in the system: [ 810.869312][ T29] 2 locks held by kworker/u4:1/12: [ 810.883271][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 810.912402][ T29] #1: ffffc90000117d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 810.944090][ T29] 2 locks held by rcu_tasks_trace/15: [ 810.956570][ T29] #0: ffffffff8d132dd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 810.979649][ T29] #1: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 811.006126][ T29] 1 lock held by khungtaskd/29: [ 811.018807][ T29] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 811.045500][ T29] 2 locks held by kworker/u4:5/1008: [ 811.059061][ T29] 2 locks held by getty/5523: [ 811.070328][ T29] #0: ffff88814cd8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 811.094946][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 811.120845][ T29] 2 locks held by kworker/1:5/5908: [ 811.134586][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 811.159293][ T29] #1: ffffc9000483fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 811.191135][ T29] 1 lock held by syz.3.3993/17972: [ 811.199835][ T29] #0: ffffffff8d1922a8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 811.222909][ T29] 1 lock held by syz.1.3999/17985: [ 811.235839][ T29] #0: ffffffff8d1922a8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 811.262322][ T29] 5 locks held by syz.1.3999/17986: [ 811.273813][ T29] 1 lock held by syz.4.4000/17987: [ 811.290361][ T29] #0: ffffffff8d1922a8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 811.314995][ T29] 1 lock held by syz.0.4001/17990: [ 811.329740][ T29] #0: ffffffff8d1922a8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 811.356142][ T29] 2 locks held by syz.0.4001/17991: [ 811.369231][ T29] #0: ffffffff8e3c4708 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xcc/0xf10 [ 811.413144][ T29] #1: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 811.425090][ T29] 1 lock held by syz.3.3993/17992: [ 811.440263][ T29] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 811.449717][ T29] [ 811.452635][ T29] ============================================= [ 811.452635][ T29] [ 811.461773][ T29] NMI backtrace for cpu 0 [ 811.466287][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 811.473906][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.484083][ T29] Call Trace: [ 811.487367][ T29] [ 811.490297][ T29] dump_stack_lvl+0x18c/0x250 [ 811.495085][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 811.500278][ T29] ? show_regs_print_info+0x20/0x20 [ 811.505583][ T29] ? load_image+0x400/0x400 [ 811.510240][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 811.515221][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 811.521468][ T29] ? _printk+0xde/0x130 [ 811.525744][ T29] ? load_image+0x400/0x400 [ 811.530263][ T29] ? load_image+0x400/0x400 [ 811.534848][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 811.540980][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 811.547046][ T29] watchdog+0xf3d/0xf80 [ 811.551221][ T29] ? watchdog+0x1e1/0xf80 [ 811.555546][ T29] kthread+0x2fa/0x390 [ 811.559615][ T29] ? hungtask_pm_notify+0x90/0x90 [ 811.564635][ T29] ? kthread_blkcg+0xd0/0xd0 [ 811.569313][ T29] ret_from_fork+0x48/0x80 [ 811.573744][ T29] ? kthread_blkcg+0xd0/0xd0 [ 811.578330][ T29] ret_from_fork_asm+0x11/0x20 [ 811.583146][ T29] [ 811.586656][ T29] Sending NMI from CPU 0 to CPUs 1: [ 811.591956][ C1] NMI backtrace for cpu 1 [ 811.591969][ C1] CPU: 1 PID: 1008 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 811.591985][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.591996][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 811.592020][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x6c/0x120 [ 811.592045][ C1] Code: 83 f9 07 0f 85 cb 00 00 00 b9 07 00 00 00 48 85 c0 75 13 e9 bc 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 <41> 54 53 48 8b 54 24 20 65 4c 8b 05 64 90 7c 7e 45 31 c9 eb 08 49 [ 811.592059][ C1] RSP: 0018:ffffc9000472fa68 EFLAGS: 00000206 [ 811.592071][ C1] RAX: 0000000000000003 RBX: 0000000000c63300 RCX: 0000000000000001 [ 811.592081][ C1] RDX: 0000000000000000 RSI: ffffffff8e3c3ea0 RDI: 0000000000000030 [ 811.592091][ C1] RBP: 0000000000000030 R08: ffff888023048000 R09: 0000000000000003 [ 811.592102][ C1] R10: 000000000000002e R11: 0000000000000000 R12: 0000000000000007 [ 811.592111][ C1] R13: ffffffff8b690ee3 R14: ffffffff8b690ee2 R15: 0000000000000030 [ 811.592122][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 811.592135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.592146][ C1] CR2: 00007efdf4be92f8 CR3: 000000007e654000 CR4: 00000000003506e0 [ 811.592164][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 811.592174][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 811.592184][ C1] Call Trace: [ 811.592190][ C1] [ 811.592198][ C1] in_aton+0x249/0x430 [ 811.592221][ C1] nsim_dev_trap_report_work+0x4ca/0xb00 [ 811.592251][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 811.592272][ C1] process_scheduled_works+0xa5d/0x15d0 [ 811.592307][ C1] ? worker_attach_to_pool+0x380/0x380 [ 811.592330][ C1] ? assign_work+0x3d2/0x5d0 [ 811.592351][ C1] worker_thread+0xa55/0xfc0 [ 811.592385][ C1] kthread+0x2fa/0x390 [ 811.592399][ C1] ? pr_cont_work+0x560/0x560 [ 811.592417][ C1] ? kthread_blkcg+0xd0/0xd0 [ 811.592431][ C1] ret_from_fork+0x48/0x80 [ 811.592450][ C1] ? kthread_blkcg+0xd0/0xd0 [ 811.592464][ C1] ret_from_fork_asm+0x11/0x20 [ 811.592493][ C1] [ 811.596947][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 811.819483][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 811.826703][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.837046][ T29] Call Trace: [ 811.840337][ T29] [ 811.843374][ T29] dump_stack_lvl+0x18c/0x250 [ 811.848169][ T29] ? show_regs_print_info+0x20/0x20 [ 811.853386][ T29] ? load_image+0x400/0x400 [ 811.857926][ T29] panic+0x2dc/0x730 [ 811.861931][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 811.867681][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 811.872376][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 811.878204][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 811.884384][ T29] watchdog+0xf7c/0xf80 [ 811.888565][ T29] ? watchdog+0x1e1/0xf80 [ 811.892919][ T29] kthread+0x2fa/0x390 [ 811.897008][ T29] ? hungtask_pm_notify+0x90/0x90 [ 811.902170][ T29] ? kthread_blkcg+0xd0/0xd0 [ 811.906949][ T29] ret_from_fork+0x48/0x80 [ 811.911380][ T29] ? kthread_blkcg+0xd0/0xd0 [ 811.916072][ T29] ret_from_fork_asm+0x11/0x20 [ 811.921143][ T29] [ 811.924758][ T29] Kernel Offset: disabled [ 811.929206][ T29] Rebooting in 86400 seconds..