last executing test programs: 12.124927336s ago: executing program 3 (id=1448): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x1c, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x1, 0x0, 0x7, 0xffffffffffffffe0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x400}, @jmp={0x5, 0x0, 0x2, 0x0, 0x7, 0x1, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xd, 0x7, 0x0, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0xd, 0x2, 0x9, 0x0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xdd60, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[r0, r0], &(0x7f0000000500)=[{0x5, 0x4, 0x5, 0x1}, {0x4, 0x3, 0x2ca2, 0x5}, {0x3, 0x5, 0x2, 0x1}, {0x5, 0x4, 0x1, 0x4}, {0x4, 0x1, 0x0, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0x1, 0x4, 0xd, 0xb}, {0x4, 0x3, 0x2, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex, 0x26, 0x1, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000002cc0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r4, r2, 0x1a, 0x2000, 0x0, @value=r6, @void, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0xf0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.280989396s ago: executing program 3 (id=1452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1080}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="650000000500001de3ffffffffffffff000003000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085", @ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 11.086791289s ago: executing program 3 (id=1455): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = syz_clone(0x80000100, &(0x7f00000001c0)="a31dd23142002807c89491b4ef373f43b414d3dbb0ee58b92bd479261bfc8c08660b6d667f6f6842d7f712e7a46b7b314b7a6eac2a9fc1df821a85f855e2e93cf3022b9618f115aee1a120c09fd5911c74bb8176428fed513c9c633f75d2175ccfce5693723c3a0e481c3b9c9fe5dfc99ca2cbd7d378d9d1c0ef7fa47c0da5c25c1f8f7f4aeab65b6b75ba48cbe1f34cc663d674e110ba88de94dbadac58e1b3d1e985fe2e6bb6", 0xa7, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="fb0b063e611b097f3022bfb1530d1b5d13b20af738c8df55cef82b0aef5ebb96dddbbb01d30310a3cd8372ab4955") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @fwd={0x10}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000480)=""/179, 0x40, 0xb3, 0x1, 0x8}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x5, 0x1b}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0], 0x0, 0x77, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r5, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0, 0x71, &(0x7f0000000cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x23, 0x9, &(0x7f00000006c0)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf917}}, @alu={0x3, 0x1, 0x9, 0x8, 0x4f7bfc774a2e5bf7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000740)='GPL\x00', 0x1, 0xef, &(0x7f0000000780)=""/239, 0x41000, 0x4, '\x00', r6, @fallback=0x1e, r4, 0x8, &(0x7f0000000b80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0xe, 0x2, 0x4}, 0x10, r9, r5, 0x5, &(0x7f0000000f00)=[r0], &(0x7f0000000f40)=[{0x4, 0x4, 0xe, 0x7}, {0x0, 0x3, 0x9, 0xc}, {0x1, 0x3, 0x4, 0x3}, {0x4, 0x1, 0xb, 0xc}, {0x3, 0x3, 0x4, 0x2}], 0x10, 0xb9e}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0x30, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25c, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcfa7, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x26}, @ldst={0x3, 0x1, 0x4, 0x8, 0x7, 0x4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001240)='GPL\x00', 0xfffffffb, 0x80, &(0x7f0000001280)=""/128, 0x41000, 0x49, '\x00', r1, 0x0, r4, 0x8, &(0x7f0000001300)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001340)=[r2], &(0x7f0000001380)=[{0x4, 0x2, 0xe, 0x7}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x1, 0xb, 0xa}, {0x1, 0x2, 0x7}, {0x3, 0x1, 0xa, 0x4}], 0x10, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000014c0)=r11}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001680)={r0, &(0x7f0000001540)="c070d7337453c5976191a568773fdd6c6839d7da11b8b9f233dcd52ce8bf8f49d47aae985bbb94dccca6f77ff4a3f831a72a22c41a06cee691874f13b00b271681b83430a86101028964cde9f1d651e1f2d80ed866fe7747d0d6e95bfceaad4a81adedc844882ee9f2a76fc344c5d40865d3d6a727d273dfc7d1b051a5cf93ec649dfede26743ddbe2710d2c8dbd25a748a68d92d12e8240616c84597b201f35d95cbebd9eac56b70ea96d85480223e369af759192e13df5e3b4e3d7", &(0x7f0000001600)=""/86}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1a, 0x1d, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0x5, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x8, 0x8, 0xfffffffffffffff0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000017c0)='GPL\x00', 0x0, 0x7, &(0x7f0000001800)=""/7, 0x41000, 0x10, '\x00', r1, @fallback=0x1, r10, 0x8, &(0x7f0000001840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x0, 0x4, 0xff, 0xf49}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f00000018c0)=[r0], &(0x7f0000001900)=[{0x5, 0x1, 0x6, 0x7}, {0x2, 0x1, 0xe, 0x3}, {0x5, 0x1, 0xd, 0x4}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@cgroup, 0x33, 0x0, 0x10, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b40)={@ifindex=r6, r13, 0x25, 0x8, 0x0, @void, @value=r10, @void, @void, r14}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001b80)={0x2}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001bc0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001c00)={r15, r11}) r16 = socket$kcm(0x29, 0x2, 0x0) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x15, 0x13, &(0x7f0000001c40)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x7, 0x0, 0x0, 0xa, 0x5, 0x80, 0xffffffffffffffef}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r12}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @generic={0x4, 0x2, 0x1, 0x81d5, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000001d00)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @sk_reuseport=0x28, r4, 0x8, &(0x7f0000001d40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r11, 0x5, &(0x7f0000001d80)=[r2, r2, r2, r12], &(0x7f0000001dc0)=[{0x3, 0x4, 0x4, 0x1}, {0x5, 0x2, 0x10, 0x5}, {0x0, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x2, 0x3}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000001f00)=r17, 0x4) sendmsg$sock(r15, &(0x7f00000025c0)={&(0x7f0000001f40)=@generic={0x10, "5a4f76fe2ddce7c3e69bb1b76ae61082487d83712e868a9da2fb1cf9bed09de888fc29d5e4c1301eb67f1394a277112249b83afad1a6d482179747bd7140023b94dd841c183e3c34503fc4d006828aac967e86c685421c59b44dca3f4e928fc5ae8f3efc205d37b06cc404e12bf593ae6a270e5552e490295e82936892ad"}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001fc0)="5f0de3cd9697cd033d1b5dedb974b7ad4c21924e3822", 0x16}, {&(0x7f0000002000)="3bdacaf5238a5d4346", 0x9}, {&(0x7f0000002040)="41efaa1fac44897151fd79794ebfd4506419efc7ce4f7275f3782202cc7fbf29ec1e47a67d", 0x25}, {&(0x7f0000002080)="af21c8c0df769e54d33b36779d2a60ab35c05b88c7dc087caa7c92de3c0f4f88a6358db6d56e9e1ff1847edef66f2da0983ff55849f4f7da6ee066b46f4c0438126bbf7d5be2cc7765a73eda77f5e139663cb1465886a803983f60eef6e64ffbadad3c563b29da759f563d0ccbc5b624409a32ba006486142f2b0a1b24550cb5c95ab9f33b5c8f801545642d7c9e35830eb1d8a43d0f8e9f91a21c928c62159ed0183645321ec3d5668b89143aaa1f8cb4fe7c80e1aef94c9ed21b1d0f57db8c899b29eb64b1543fa6dc9e3b68958875c693ff2456c291e49d3f54a9974ab940963ffe0fd238148ca15cca569e", 0xed}, {&(0x7f0000002180)="15d55d26828e4b0a7cb12e52b5033ef0c6095254f42eff3382bf47914994b44868bb56ee4baff0131bbc3ac2f1ab5f3f2a625b1425b637d27edb05758a36342660880b42054ed83d4dd039a62301f3f5d1ec43472bed95243cc625062f7bc791428bd9d8cfc7b9cd19fd0fddf49083ee0410348d2ac5077d13244ed570004c134cf3771fa64d82791b04fe0cd26a90cf956182327097e3622b572822c9104067044059e7cf221f761bc6fcce148c207e019123072bc8ac309aad9cdb632a4a9e9af9ee1b06623c7a54", 0xc9}, {&(0x7f0000002280)="8b4bcc6945eef84e27b63010e3e6908d5d12936f690db74129a1e6a57e6aada4bdf3421ef44d598566731c46", 0x2c}, {&(0x7f00000022c0)="a33c260f68cfd53b1f6c09e88051a63ef54c325779f0232ab00a12b7a98c101ac1ffd86410afdc686038c1c4960185fc63ee364e29ff1607778199e7122923c6759dbca083c988a6a103d3dc79c129fbb2ba14a78524da025a01da9f3d573d9708f69576e66df3ef10c6ea168242846da366396877b20b4bb94f6d1c8c084f", 0x7f}, {&(0x7f0000002340)="543bb8af5f99fb", 0x7}, {&(0x7f0000002380)="b2faa5028be5bf88f249d9aa4c8e456c73fd9ae2f57c000a290e8bbacc2668725242910b986fcd4952d2c4beb4c99c9a851d5aa173c4f5c587bab2d77b8ed4cb4570", 0x42}, {&(0x7f0000002400)="c1b226f74cd7502a45e1d8dcd09287ebf142700c0477a9f9b2adca603cee02b5e26ac75dca2200f29eb921fbeae3972942f27650d0ccf29694f512aee84dfa0b0552c4e081061a6d3d30de4f0bdbba79a06cbf0b786da30b5f045f557ca72d2918da64eeabd8c8cd118c016b739fc065f876ac15bcff3b5e3a137d84517ecd5dc057fc37c2c79878d9175f7dd68b7f9a5acadd", 0x93}], 0xa, &(0x7f0000002580)=[@mark={{0x14, 0x1, 0x24, 0x10000}}], 0x18}, 0x5) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003940)=@generic={&(0x7f0000003900)='./file0\x00'}, 0x18) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003980)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, r4, 0x2, 0x4, 0x1}, 0x50) r20 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r21 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003a80)={0x0, r10}, 0x8) sendmsg$unix(r15, &(0x7f0000003b80)={&(0x7f0000002600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="8eeeb6cdcfeb904270759759971eab81df74728e645a3fccad806ef30a011484db3e1880fddeaa52f30b36a8cdf084b7c72795beb74d67dacc555efd67c21fe5ed673e8faf95bd934089a61284763f99ee2d55894457c91136dbb37ee2a2842f1ed031619cea1ea1910fc6ffeaf33d1a9d2eb8fb20f2407a3c34f8c3a565f0e7dc7ff44f2f2f8d2443b0341eb6dd110c73d268435521ebf53ab58c0910f482c2", 0xa0}, {&(0x7f0000003740)="5c7a14db7cdb30b48fd5f2536425ba44cc590c0e682eff28a032260da2e6627d2da01df618ce645135cea3c9cf08e4bbf6812045ae2c950efc15c54819779a2b1483cdde90379b31fc1bff74c430993db2700c339137a3047c1c91ff3d5ee59729be65a26f948f849303a86632f96a1221511fbd34541f11d26a0df01c9456e2e52feee882d27b07becfd00650e9d9cdc39b8ef717c5acd488aad33023083d78221b687fcf304a8c54f64020cb6151c3afb0da19e125ab1d95a41b7908a82e5218352fe2c3a239a9c410e88483bf4ca1c4d5d5d4b1bcffc68c", 0xd9}, {&(0x7f0000003840)="33f4a8c315989cf7a10448bc880ab04ae49718285dfc58d29fc2dd4e4bdf4b6a9c79e6ead2ff1df85aeba23068dc28188f298043165d707f4b6782cf91ef6461d265e826cbc8142f9812642c520b3e66b8095f640008197041cbd58c2a126a325175579dc20fe09c079cbddef5b18a4826e3b4a04d0d3ab54f0fd98adf", 0x7d}], 0x4, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r18, r19, r17, r13, r20, r15, r21, r5, r17]}}], 0x98}, 0x40040) sendmsg$kcm(r15, &(0x7f0000003d80)={&(0x7f0000003bc0)=@l2={0x1f, 0x5, @any, 0xa, 0x2}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c40)="e7a65e0c8dd268df6331fa8fe51783021eb7b4d52dce1021ba9b5b02", 0x1c}, {&(0x7f0000003c80)="c4327ce2b5aa92b58993338102e0bd5b5f5baaeb01360191414bd38d72c0f08c0eb09a10dc55c179ed91a21803c475b3f6d26e8be1351e134e5558c43244f400bfd6750df6753466a9c8f43d5578a293a19eb34d5fe95545ff318931d0f1867abd9efc9f3af55429a37824021fbaf64248d6eca1fb19fa007c89db8724c2bee254d69a7a20ab4efa011bd7c0b5637c31c3e2b8cd472708dd1b9aea76cb8dd5d05849e279f286", 0xa6}], 0x2}, 0x4048880) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003e80)={r18, &(0x7f0000003dc0)="132366ea76ea293f8ca2be441baf0ea7a11f9acf95f2cec4fcb2e38a94a3a8", &(0x7f0000003e00)=""/91}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004180)=@bpf_lsm={0x1d, 0x22, &(0x7f0000003ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r20}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @jmp={0x5, 0x1, 0x6, 0xb, 0x8, 0xfffffffffffffff0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r18, 0x0, 0x0, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004000)='syzkaller\x00', 0x9, 0x4b, &(0x7f0000004040)=""/75, 0x40f00, 0x78, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000040c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000004100)={0x5, 0x0, 0xfffffffe, 0x2}, 0x10, r7, 0x0, 0x0, &(0x7f0000004140)=[r18], 0x0, 0x10, 0x1}, 0x94) 10.714241306s ago: executing program 3 (id=1458): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffc48, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000001100b703000000000000850000000c000000b700000000000000850000000000000071d47522455a9391733696f11cbf3756500fed1ef0ed52aa7fcae3afc336d01aeac5e4f9d4a3a0ff5e0ece66c1d56cd74e"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)="ad4b", 0x2}], 0x1}, 0xc0895) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/145, 0x91}], 0x1}, 0x2) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000085100000010000009500007b00000000850096f6760000009500000000000000d45e6810559ac2c5f008000000f09da1a9d1e1f15b12aac468ca541bddeff0f276d6593c"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712b3ef00000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r10 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 5.669901151s ago: executing program 3 (id=1463): syz_clone(0x100, &(0x7f0000000000)="82cf78a58afd983f9dcb5730a4b7e0ea57df9f4fe51b3b02690f5081c8fefc52329a2e4dd32968c0e1647571871331af60b8048e8e48d5d84ad8becaab743017fed849f6b8c8eb09380711acfb91732c8fd509f63270a197b595336c2e0239e736c716f0443af5148a18eb2a69b3e7d4a209a6e9f1bb06378027a8537765d15e05", 0x81, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="ce7ea12a06eb06aef04722c3c18f00ad5d65c1742d45cf663f888ba327765786bf802bf05188a9e8d603a0e560bb962f658e549aa8932964002182d61dffafb8fed5a59dfde6edcccfe7a04c2136056529e3e799bcbb559b913f600a997f30030d01c5") r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000200)=0xffffffffffffffff, 0x12) syz_clone(0xb01d1480, &(0x7f0000000240)="45d96455ed56ff", 0x7, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="706ebd405a7c499572c711e65f66b1c7c2957bbc62123a5579e47031f0c1b19a22bb4cd1c2d3201d748d42715a1794fe9f483d77a07628c9d1741efd44d45b04ad6415515d4eb9c7816771c071b343d56e1845a3a13a84a13067c0e0abef10d8aca51520241c6f61445e5a3c57384ec8afad81593d311bde945a0df70bfe393f41758b5df23e6fb5b7a6d36afebb7ff4f0c8df2a0325ddfbde5d2caa24504e1abdefe6249c0832dcaef55f2f12a52983bc2029cc8e0b3338ed3c209607450d00cf15ea85d0579189a6b42a3e9d9f8f6de56cca63f4e5cb612ca749395300e34269087060143f30de") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x39ac00}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0xb9, &(0x7f00000005c0)=""/185, 0x40e00, 0x0, '\x00', 0x0, @sched_cls=0x2e, r2, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0x3346, 0x2}, 0x10, 0x0, r2, 0x5, &(0x7f0000000700)=[r2, r2, r2, r2, r2], &(0x7f0000000740)=[{0x3, 0x3, 0x1, 0xa}, {0x3, 0x5, 0xd, 0xb}, {0x0, 0x1, 0xb, 0xc}, {0x0, 0x5, 0xa}, {0x4, 0x4, 0x6, 0x6}], 0x10, 0x3}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000880)=r3) r4 = syz_clone(0x480c0000, &(0x7f00000008c0)="f4e91a9a8753ce06d81b3dad252b7eda6413ff6db62cdc7fbacb1d9627f3f543c6151f58c1e8c6eae99a492c4de2c08a0b008a325b6b85fb3eeaac30405cf185fd3b7c403237fa59e8adee", 0x4b, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="0b32b72301783a733293473415bf3eaed73dca99f008fefacc3b023072d83cdd7f0f3673c09896124bf23f2fc40e7361c68de3a805dc5ab05eb58d779e68e104c84c39211c776c4debaca7bc4c1516edc215b9ab506bdd95f7dd3ca337463b792e50b05451fd86f38e") ioctl$TUNSETLINK(r2, 0x400454cd, 0x322) syz_open_procfs$namespace(r4, &(0x7f0000000a40)='ns/net\x00') write$cgroup_int(r2, &(0x7f0000000a80)=0xfffffffffffffffa, 0x12) recvmsg$unix(r3, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/35, 0x23}, {&(0x7f0000000b80)=""/8, 0x8}], 0x2, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r10, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r13, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xc, [@const={0xc, 0x0, 0x0, 0xa, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0x7, 0x4}, {0xc, 0x7ff}, {0x8, 0x3}]}]}, {0x0, [0x2e, 0x30, 0x2e, 0x4f, 0x30, 0x0, 0x2e, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000f00)=""/180, 0x68, 0xb4, 0x1, 0x40}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={r15, 0x20, &(0x7f0000001200)={&(0x7f0000001000)=""/248, 0xf8, 0x0, &(0x7f0000001100)=""/253, 0xfd}}, 0x10) recvmsg$unix(r9, &(0x7f0000001a40)={&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000001400)=""/111, 0x6f}, {&(0x7f0000001480)=""/156, 0x9c}, {&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001680)=""/145, 0x91}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/111, 0x6f}, {&(0x7f0000001880)=""/95, 0x5f}], 0x9, &(0x7f00000019c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x2000) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x17, 0x8, 0xb, 0x9, 0x10000, r17, 0xffffffff, '\x00', r13, r5, 0x5, 0x2, 0x1, 0x0, @void, @value, @value=r16}, 0x50) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x9, &(0x7f0000001a80)=@raw=[@alu={0x4, 0x0, 0x7, 0x2, 0xa, 0x100}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0x9, 0x1, 0x5, 0x100}], &(0x7f0000001b00)='syzkaller\x00', 0x9ad, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, r7, 0x8, &(0x7f0000001b40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0x5, 0x9, 0x3ff}, 0x10, 0xffffffffffffffff, r11, 0x0, &(0x7f0000001c40)=[r18, r7, r6, r14, r11], 0x0, 0x10, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000001d40)={'veth1_to_bond\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={r14}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001e00)={0x40, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001dc0)={@fallback=r15, r5, 0x33, 0xb3dfa308b107f7a2, 0x0, @void, @void, @value=r20}, 0x20) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x40000, 0x0) ioctl$TUNGETVNETLE(r21, 0x800454dd, &(0x7f0000001e80)) r22 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, r17, 0x3ff, '\x00', 0x0, r8, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002240)={&(0x7f0000001ec0)="4fad4238eb9d8b9658be8a7b1f1181161aeafe3bf060b594aca879744141bd06868726a16741e74edb11de19b3c4702a222e9b566310b4bed596885602bf00888122ba43337fd5ced41dd6a809b3e5260eec797aa25e2ec9f15b347d1dfa28c46e2ceb48584f2566811f3ba1940add26a17c77a4ad6da25e8718c07636643febf1644d89c5fc7626fc0d50cb66fc217e411982ec0e75cfc3418bd477efcda7f50266b005fd3c73efa353ab3f1dd087344198a5ce14bc506d42039883369a9ae86646e5061b762c16583b5ac7b63868b4d4315f9b", &(0x7f0000001fc0)=""/187, &(0x7f0000002080)="2947506f611e2ecc0d8cf2a5404421bfda89fd2aeaf5d878fbf7a44eb73e76f2681e93c346c59f35dba8b7dcdcb2bbda443fd1827f50093de8572697dc7432f9d67fc40c2608f7908cad5534692cb6922d2ecf98c904eba165b6955fe30a0b8539005c3dbe91afe1a38c4cff95a258311ae5022815ffd2f7c75a01c55a4fad18cb6935deff5289f6fe55ead9b5302f40c2", &(0x7f0000002140)="a57a7bd97a9001853e4f7c67bdfa80d1f9532f767068990b42b7c666180ff47db1c210788d0a46fdd8785cacbf8c9010df87c286a40b030bd2b006c764ab166cdfc917d81611bfa97f67d4f787155798eaf21314", 0x10000, r22, 0x4}, 0x38) write$cgroup_pressure(r9, &(0x7f0000002280)={'full', 0x20, 0x7, 0x20, 0xfff}, 0x2f) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002300)=@o_path={&(0x7f00000022c0)='./file0\x00', r16, 0x4000, r19}, 0x18) 5.226251452s ago: executing program 0 (id=1466): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000200)="71c3863f384378fa7207a36e94747fafd3a2aeac8e1687b2440ce268aeef85869703a22cb162382ba656fa5b5ae9d06e47d1d29334941c4d1adba4b791c2fdf2e29d48025a5092fea5425dd202356f6ff85431521a73050cafc5453dac780bbe78a31467d70eb39c36e3f4", &(0x7f0000000280)=""/23}, 0x20) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f0080073", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.902921705s ago: executing program 0 (id=1467): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x100}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async, rerun: 64) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x80000001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xecb}, @ldst={0x1, 0x3, 0x1, 0x2, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x2df6, 0xb0fb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2, r3], &(0x7f0000000440)=[{0x0, 0x1}], 0x10, 0x80000001}, 0x94) 4.700388739s ago: executing program 0 (id=1468): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000780)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @private1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0xc, 0x0, 0xd3, 0x0, 0x9, 0x80318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="c58c515aab52a872d9967a21cf2c2b395f73bc67f767200da009a721ef594e19b81b9c75f314a43c2865fac010599141a61e2bfe4403ab739a310be2c98741f21fe415e45e1d4c89b32fd43dd10d6762d7d6a023c244fdeb45f96d5d83057f3751dc31bca6ae82520d8b544e35aad1bc1bfe967686305800c7ccf3b95cafc9cb31a9ed5d72dab23c7afbaa16a5f17a722752ece4c6ac9028e32d89276570faee30ea49eedacd96aa9b21d8885f4c87dcc0a9047cc3d33345f72f5cbbac8874acaee74efec107cf0624dc87aeab64ec3bc98496dc9b9d5fb51726e125cab903800c748641", 0xe4}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65"], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) (rerun: 64) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)="8e8605c8d79fc1145748553dc840d02319c6ad3c459aaec4d128b1997187b87e1e689addd069e454225831edaf4f31a19acba3874a64bce7d088cf1024de674669885243667a1a9f6f4ab49aa73e961c01fe877bf4b9d1f0eb454410edbaba6373006e1d342e9d155d5c3a83af1050da8a8608dd78c20c4e70fed0527abd4a02381381", &(0x7f0000000240)=""/51, 0x4}, 0x20) 4.296676888s ago: executing program 0 (id=1470): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10b0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x1000}, 0x8801, 0x5, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000680), 0x6e, 0x0}, 0x20) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0a02, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x85, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf101}) (async) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000004448ecea41e5d3ca0000"], 0x10}, 0x0) (async) recvmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000300)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/21, 0x15}], 0x2, &(0x7f0000000580)=""/41, 0x29}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) r6 = socket$kcm(0xf, 0x3, 0x2) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0xcdf, 0x9, 0xf, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0xb, &(0x7f0000000040), 0x2) (async) sendmsg$inet(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) (async) recvmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10002) (async) sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f00000021c0)="e4", 0x1}], 0x1}, 0x10) (async) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) (async) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) close(0x3) 3.984244959s ago: executing program 3 (id=1473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000007000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.658986522s ago: executing program 0 (id=1474): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4515, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1}, 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000000c800", @ANYRES32=0x1], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000540)="285721e398eb878998b230fd2cee38b29bad7a6c54") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0xd, 0x12) 3.180215536s ago: executing program 0 (id=1478): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r2) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x801e, 0x0, r1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x21000000, &(0x7f0000000300)="96027d0e2b7b553a3fedfed7424613f816c06f1761eb100efa99e1a9c2d0890263be0485af50b22bcc049fc77377592bcf6a8710dcf1ddbbf0638934cdaeae9c9f0747d570dd67485eb3bd5d31cfb02c363e4d9dc200ceb1d19c85601a3a60d747b6f15a388bb1ab944559f51cf123f3354adf2a4d29b969e08b8e79afa69b233641252bd2adeda92cd4720b146284b779e9ddfdfc84029967c8007dde43d25443edf603a9e754a40f1903cb13ecb429", 0xb0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="c6eb3f2c7ec1b6247eb53379a96c775e2fd515a58179") write$cgroup_pid(r6, &(0x7f0000000480)=r7, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1d, 0x20, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x17, '\x00', r4, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0xa, 0x20000000, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000016c0)=[r3, r1, r1], &(0x7f0000001700)=[{0x2, 0x3, 0x10, 0xb}, {0x2, 0x5, 0x2, 0x3}, {0x4, 0x4, 0x2, 0xb}], 0x10, 0x8000}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0x13, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000001900)=""/156, 0x41000, 0x0, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[r3, r3], &(0x7f0000001a40)=[{0x1, 0x5, 0x8, 0x7}, {0x5, 0x5, 0x6, 0x5}], 0x10, 0xf919}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c40)={@fallback=r2, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0], 0x0}, 0x40) r12 = openat$cgroup_ro(r5, &(0x7f0000001cc0)='cpuacct.usage_all\x00', 0x0, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x16, &(0x7f0000001d00)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4613}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x61e5e169}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001dc0)='syzkaller\x00', 0xd, 0xda, &(0x7f0000001e00)=""/218, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f00)={0x5, 0xf, 0xfffffffa, 0x543a}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001f40)=[{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0xb, 0x4}, {0x0, 0x5, 0xf}, {0x5, 0x3, 0x2, 0x4}, {0x4, 0x5, 0x4, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c80)={@map=r12, r8, 0x16, 0x0, r9, @void, @value=r13, @void, @void, r11}, 0x20) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r4, r10, 0x5, 0x3, 0x5}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000002100), 0x4) openat$cgroup_procs(r12, &(0x7f0000002140)='tasks\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000002180)={0xffffffffffffffff}) close(r15) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x5, [@func={0x9, 0x0, 0x0, 0xc, 0x3}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x1c00000, [{0xd, 0x3, 0x4}, {0x2, 0x3, 0xc7}, {0x2, 0x1, 0x8e}]}, @fwd={0x10}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x14}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @volatile={0xf}, @float={0xb, 0x0, 0x0, 0x10, 0x56b525ce564616f5}, @enum64={0x1, 0x2, 0x0, 0x13, 0x0, 0x6, [{0x6, 0x3, 0x817}, {0xc, 0x9, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f00000023c0)=""/7, 0xbd, 0x7, 0x1, 0x6, 0x10000, @value=r12}, 0x28) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002480)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1000, '\x00', 0x0, r12, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x12, 0xa, &(0x7f00000021c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2ae950c7}}], &(0x7f0000002240)='syzkaller\x00', 0xc, 0x64, &(0x7f0000002280)=""/100, 0x41100, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1d, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x1, 0x10, 0xbdd, 0x3}, 0x10, 0xffffffffffffffff, r13, 0x1, &(0x7f0000002500)=[r17, r12, r3, r1, r14, r14], &(0x7f0000002540)=[{0x0, 0x3, 0xd, 0x2}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000002640)={0x5, 0x80, 0x9, 0x9, 0x8, 0x7f, 0x0, 0x8, 0x1084, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x7}, 0x10000, 0x3, 0x0, 0x8, 0x6, 0x0, 0x36, 0x0, 0x5, 0x0, 0x800}, r7, 0x0, r10, 0xa) recvmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f00000026c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002740)=""/163, 0xa3}, {&(0x7f0000002800)=""/155, 0x9b}, {&(0x7f00000028c0)=""/93, 0x5d}, {&(0x7f0000002940)=""/225, 0xe1}], 0x4, &(0x7f0000002a80)=""/100, 0x64}, 0x40000040) syz_clone(0x44000000, &(0x7f0000002b40)="7824254f3271b047d28edae41821535b4ee5d5d8a9fdbfecfd91e5c936589d2ba7fed811362f709db580d835322c8cb5ccd1aea75889b7b0b22b219631598f", 0x3f, &(0x7f0000002b80), &(0x7f0000002bc0), &(0x7f0000002c00)="3fd872d7918b13f85fcd9813535618cb05215590e936e95a061bd5") bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002c40)={0x20}, 0x8) 2.796626883s ago: executing program 2 (id=1479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1beb41e0ff28c51002579a261075", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="1048000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000200)='.[-!\x00', 0x0}, 0x30) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000240)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0), 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000a40)="232545fc19d6dc9db5f937788482360d4e3f67b445ef03fa72544f05423fd2b6a45d60badd6036a0f1d83ad36adf1d7d017c7bb199e6951fb9693220e74d48544c858b8ea155f1af8b000000000000000000000000000026367b7f6a6b8b7cf76f3de00b26e53279d0d64474868b9a160e4e0ec5bcef4aad9e0c5b265a236bec8110e1bdca8b9c7900ba026f8d1025989a0ec3492b1530a6717b5016449a5e9d2584050c7da3125c02891646d184", 0xae}, {&(0x7f0000000c40)="140d078a913ee60b6ed51b97b7962ca8a6b2849e8fa7ff574560c0dcf045186fb09b577790056e0d29e30300000000000000ae85748df400da6a8dea4a0a87fa51669d599a9fb6a2bf3bb92eb220359454609d4d3c827badd1d8680f820f23124fa6c162ab5c12ecb28b68e77585c97b2eebba920490353ea2a72fcd04ccf7c39ef230f33c70b1cba49118486e9e861acdca8ce201ffb68703daf9a27475366210af18b32a7bd9b39a37e225200e4cdc018790129bd126083c82ad3c8252e52c8eacea2add3be6ef84c0a5ac3a13f52b5883b729d8e4c3f46d24b8abde42ce91233df4574452e8cf505e92e224cb8e402c2e4bffaac70b000000000000000000000000000000006c079489491d8caac718392b3ac96fba1db41285a6dcb7427e0aa1de44d714f446a361eb599422fe9bad6d382d076d276fb0ddb80cbe0d4c458c47a95cf3e036e64fe3ea0381dc36b950fd8b0d90ccfeb4ac8321485fc9f3f07da82d441a4082dc90ee1d2f8c48309598948866bc2892cec12fa1b74c330d4b31b8d9e0360eaff23cc596b3021c701d51d1e62529dd7b8788fee0fb86d6", 0x19e}, {&(0x7f0000000e00)="02fcdfe234bbffdbc47c242287be59e80e19bbd9d389a6dc54143c11f55116b1b4053528c1d2004c32fc1b088136058f51f16a9f8c20b93d938e0279172489e8d6fd53f4e6569e2b7aa2ce0d5534e4c3bd942906f591954d03311d964dc8007ada0b6f6bf2225921cb61f6a6f0aac68975319692136aab2dee82584f2b3aba7ea0cbc5b1e18370784ad30c8c4d693cee824446a9ca66365328846a463e8e4b79da01a6f4a5db9c836dc286ecf8f918b27a8b8ea6193ad199927cb4b38c0eb918fc1c78d35a1e659f1528f924", 0xcc}], 0x3, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r5, @ANYBLOB="e0000001ffffffff0000000038000000000000000000000007000000890b14ffffffffac1414bb940401004418f290000000000000b1920000000200000200fffffff9001400000000000000000000000200000000020000000000001c000000000000000000000008000000", @ANYRES16=r11, @ANYBLOB="ac1414aaac1414bb00000000", @ANYRESDEC=r9], 0xc0}, 0x20000080) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r11, r12, 0x1, 0x3}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000100)=r15, 0x4) (async) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150001003c09ab945e292b5f080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcc563951f215ce3bb9ad809d5e1cace81c99d7a75e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x5}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r2, r4, 0x0, 0x20, 0x0, @void, @void, @void, @value=r6}, 0x20) 2.323363426s ago: executing program 2 (id=1481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x3) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macvlan0\x00', @local}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) unlink(&(0x7f0000000100)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)}], 0x4, &(0x7f0000000340)=""/69, 0x45}, 0x40000000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000400)={'bond_slave_0\x00', @local}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x5, 0x45, &(0x7f0000000580)=""/69, 0x40f00, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x3, 0x10001, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x8, 0xa}, {0x5, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x1}, {0x5, 0x2, 0x9, 0x1}, {0x1, 0x4, 0x9, 0xb}, {0x5, 0x4, 0x2, 0x5}, {0x0, 0x4, 0x2, 0x4}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0x9d, 0x9, &(0x7f0000000800)="2bed75cd7507b2f94e1e51dc3e860e3896e473781e9085ff43b9686d41da92ed286f2f0247b2d159341f0c9510102fdcbbff781bfc57d156d7f38cb6df8a153bc8be79c8542a5724728396e980de9bc21ced8367217d1f2f032e6e0e6c99876507b96e4ea98375c62c564eb3ff95883f33e9c1ae71918a202a597bd0dca5863bf06bf496cd5f3abec882ebf55dc5af0e5a54e318b2adbc552815a210ea", &(0x7f00000008c0)=""/9, 0x9, 0x0, 0x33, 0x7b, &(0x7f0000000900)="55e6318e4766a8acca441f229bd98b09f68a2e776df77ba59bdbb99b051c87df44c3d722c6d24ff8b4648e9aeacfbe864c1b07", &(0x7f0000000940)="3aa7805f6c957925ef9a2770310de4c5fc8fd741aad4da5e36e49b1d4e9d8d05ef7b19cbed03a35ba74a03bd882477e9821954e25d6b4e4ffa56d7205817b32856c2d211643e0753679895ab9dbd9a04219b6938c363773f46cc302c70a57258749b5eba9cee848ba849c1196109815c47f319cd6f2206c36f2289", 0x1, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r4, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0], 0x0, 0x48, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=r6, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x1, 0x9, 0xf2, 0x14008, r7, 0x67c, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r7, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)=r4}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0x3, 0x2, 0x7, 0x709b0, r7, 0x9, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xf5de}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000e40)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000ec0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[r9, r7, r7, r7, r10, r7, r7, r11, r7], &(0x7f0000001100)=[{0x4, 0x5, 0xf, 0xa}, {0x2, 0x4, 0x3, 0x1}, {0x3, 0x1, 0x0, 0x2}, {0x4, 0x2, 0x1, 0x3}, {0x1, 0xe, 0x7, 0x7}, {0x1, 0x3, 0x2, 0xa}], 0x10, 0x8}, 0x94) (async) r12 = socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r9, 0x58, &(0x7f0000001240)}, 0x10) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001300)=0x9, 0x12) gettid() (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001380)=@o_path={&(0x7f0000001340)='./file0\x00', 0x0, 0x10}, 0x18) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000013c0)={'veth0_macvtap\x00', @broadcast}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$TUNSETPERSIST(r12, 0x400454cb, 0x1) (async) socket$kcm(0x29, 0x2, 0x0) 1.84268858s ago: executing program 2 (id=1484): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000002d0081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f0000", 0x27}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="0778b1ef7031cd1f41ca4c05cd6b1e4597ae3de295c51c9e84a784c9f4aa2d3a0a9374b57a7e244ac975b4760c9bfea01ff91375cdefc2b255b547fcf436c39b19e4c6de990317762f3978bc164da6297d6e93ae7f12b4c88b4b939d1663ca6734d1d4bcfa1380f3fa35c5900c73f1369c4a80be46cdd1a7abea881a64f29ae86fff0913c356fcf872", 0x89}, {&(0x7f00000001c0)="ffcc9d5ec4bd4b05df1e60c22231e2363cc5c92dc2174ff6b0a414e0cc4e7b94a399a5b6d8d7458df500966fd625ad453c600200908adf416ecc1d770ef95c377d22a51407f10b81393c8d1468e9f92179c8f76e181ff9dfc1f3e870c5422e7d424f8e3645717b204993aec29e01431252dc16c47789595206f8e0b9e580867878875b7fdbbbd0effd", 0x89}, {&(0x7f0000000280)="8f93ffce193870b8d4b98329ae6943b9b0663c3a260fc4a6cbc0b8e0f54f9eccb9e849118ea8e4ceb1995c62d9df3248f33fcfcd28a18cc1002a595f33b0bb53bc27a5f9cd0837df38cce169c55b6f6264754a5f9d73c59cc30d80eb1a28332321fbdfdcb364ca1ff4f3876fcec03728e2dfbda7ab43969514d6c58cc3b62e95f4b152c30d415192e7f1115401ae679199bc9c30bcab2787a18ec7045d505fb9ab3048fd2dc17a9d436b74eecbdb1f21779f37e11c48f65dc304010b71607a369fe34bce51b76680321074b4df39", 0xce}], 0x3, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.792267214s ago: executing program 1 (id=1485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.532024183s ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004280)=[{&(0x7f0000000040)="979288771267d15ea4036ad3c5d27043ca0635f3c90a281974f22cf3312f1d4e940032e713274e028f409f5590a26213d392142df00e4b3ab300d8a8c4743b776f3c73c713584542c353996c3c502e6db29d75619accb33dee544c2a27c6f2e4f25c388a3a", 0x65}, {&(0x7f00000000c0)="2db7ca616988f5219f5ee2b861f7a87edc50a33c64a82221e10591d796b238ac7b8fd45a51e5529fe61436176c0fb44535715ee3bde66c897f7768860ac7326e8a58fbe4462c0a52daef9e8dce8f694c377af2856056a87f773ef26e2a3f012e33da0e26c52591a1e309daa02f336e12e18445fc26506f9490e98132d638927a43bf4ec7f591b6c5337ed762ae8fdc3b7c50482200acfe8b17784c67435cab99021006c93f309a9509ef296752b25d239e9b2e7e6bf040edfe26cf8a12239fef11", 0xc1}, {&(0x7f0000002e40)="f49cbcfa4800e25782d6ceda3f5ea34db82fc50e2f542c32d98e9bb5cd0685b620d3728c554c5149a81569e80a04fe26acb8e46ef55c6ddc7c3cd732be1fcb006dde75eb588528eba347066fe62b7b6cbe3dfd64c903c4dcfc4475eac4c71307ff2640e38079f5bfaecc9cc23489055ec7aa3dbeeaa1b8d1d74d2f0ea62bdc584967ffe7b755ca067eccf51f0a7494b0b8351b833964e70a7f7be78e8ef9f439f7f6da3be0e9088d4b3066cba190285af77c42d4bcdb3e416094882a31856462f4d128d63b26dab958af573dedafa333d9ce5a7b28d1d0304ba2930e34d693498ebe7363e6e377b349e4db48c825d468111dd106fa1fc0972189dc5a3f84271fc90f8221da507b32d7b4a17913bb4735fb3bfe20e0d68b34cd4252e8a318ab11919058e689ec90d2fce219f1c866447c6c6839091fddc463b17a740dec75d7c3f91cfbaf752a5037e6a5564b25eb13fd308a2c0aec8a6d3c12f14a96af86800b0e2150d1f7de30b5ea477e28eb9d6fd87b3b9eaf20f3400918f30f6016cef541aff518f05c5f03529d8a8b1d63f255031e3b4cf243efe004e1918d23d6d4d5fe39ae57bae11c1c480127f9c4df313559e21918bb4072c19e3f83dce15b76ea7a404a1c28e9f2f2ab5115dabd9c90692248605aa84da4ade5808a1de195e894e960e320346bc65f9ebfb5efcb88265bf4a0373deba1d952a2f34b120f23d64c9a8ea2beb510d4bfefca8f9cbedf85804d6f38a4130b5c83526a6a2fe53861823dc7b101319eb7393ac4aa7ecf39ec3babbe901c705fd654d32fa87b1b02cf2f84ac06fe43f9484416150e9d12a81bf343b43909fad545b5635a859567b7a85c0799ed85750acee1f012e0cb89f452d3393bd32f802624100a4486fd4c2e705490acedc7f3fc713de91e81dc196414f5a2fa93640d4cca3b7f8f74bd493d2ef3c2e29427a4776cda834ce800744e5241933b361321bea6f9188d7612be8bf339357f22fd983436326f6adb46116b60d4b1247e0806caa1c4caf8802480e878e9b289484711fd17aa2bb175a928562a994c1e7c675a9852d1df1aa7437ec47d6052ea7a721ed4a9669dd25a17b49f4b314316d0777a914e15208452bace4343e7751e970fdf39e615db02c2a71c95dc955c0b212c29036ee884dd58b9b2a5cc36c96a32f30254d68a9eb80bf04340d63841a27e0df962badf66a0f269dd97d03abc52365be44b51778d18fcfea823ffde5743970d664b9503af3265c96fa2a06465c993bab96db6f60ced5d78c5b273ecc0f9e5f7e6d0c0d4ee63928ec88e3bd8eebef643da389c012225e5c0e335502c244d0f9e132fe5a8ec75977eb0face5d4fb58c080bffee5ce45f0b9ffd5cfbcbb4701dd21d8c74404a63793b5cdf60a183a63c6e6566cdf36155839e87733d7c08eed63a8b01de1c8bbd3e9880fd2b28d2fb76374876b49bd207136c22b0f9d6426c0335b3909647a520af3c722b8ac6718d33f9606d84fa66365e0f565ead6630d5793f5c83e6cb956620a43d0529c5f5402c5597f0630da73acc2341d800c1d600a71d94dba6797deacb1a131a8c70c6e460341ecd22a9aaf53db14862181ea9f5f7496740cea4e2f747e2370aa63da60844c9ac1d84d0c75ab134025bdd4b22f5e604198fc18a25b469797a95e2f899c7f728f02f15d7eafd01a537e3817e8c27c8f1181fedff5ba8ba4d788b9158c612d384a8e211d5bacd40217302cd089923e40d2e2f0ff9a16a5d57ce6eb08c78a23710ce8eca5d5fcb3f939f71d4029c170b4abb2fa14d83d612cddbb667005e9c157ab2f7dc616973bdb3e6d23ebf64090e97f5ef70cd284919d2f815e92e5665699c69eac206b28167c1a7d2ff3beaef9639c301314ef3e75adff7ce4760ef781d8b3d742e127d0b1048fa679e76e471a787eeeac142274f7d4ae7bf3853ab5073c6f23e42444bd80180b95f4bd087975bdbc56de3432efcaf0bf48c4a8d3c4004d7834d55aaa6a59f6377139f0248c7356ecd1b0609ad201363d9cf91a7b654e9e858f0195f4330a5acba51cd239a17d5f08bab0f7b77dd67de3d071e3ed1c383ac3c6a977b1758a76270786ae89c5d1f39d03ee5c0081f97b0c4136632d22ddd9d7ae5261ce6ffe3220a425b71855d9a1ee18f63b8c1f2590821db49c3c1925ae5825830c4726896f5022ce28c4e6d3a29aa979fc9d701f26eadb5308d74f1111996e44c542d33e9172ef4e19e9e73378628de2b0d692cbdc3a1087483e2275efb9f90f593a37785e152354b4f4ec6b2a88d1b91b9cfbca49045269070715ba8f0fea28594493bbba0fae1967bbfae8627578886e865fb1473ab4325bc5eba91bb4949674a798c0c0669a2f27b63b680615b6919eb11c649dc68a1d99542751dcd5f3028ad437a43553cda9068a85d717ec4fe69974a0e4bb8c747c29407fb4bf3beae54b971b48eaf415525c733c80deaed0b0e7a725f3ade6d17b511f1e127cc57550ead1bb953990ba25f8928b831f62c3c704cd04f785eb8ec3af4387d868b4df7664eb6c29790eca35ad6eb8983730470588c6c2cb60f819485a89e21f2e30bbb6c5a96182365707abdc9b159fe4049a6ddedbf8a8bb886de805941d6840614f23c8ad8a9bf5d35760a109bed71192b41dd7869b6446197ba36a9ec6440659f697dfb2d8d6f8a6283e5f5797ff29ddf6e6fadde630db3b6e310ece0284bef11198e3869ccbcbb46aa7f10acf4f454bd7b975a31d36b04d4b102e2f38042bdd5897c96f6210e43440717be06eafc0cb7217250fcc1c42b15742d3cb91b2364bc0642b56f4b8e041812174a2b62d71160a1f182b620c0833c8be3620838a0903742b5b51f12c3b2f20d19fed9274ff4e75d5fbccd2e1c2d689d4a15dd11a189e7469cb37d76fc32b0850fd40b0d6e12365c72de2b1ea1d5980ae12b996e36bfde9ceb70e4138f2787ec7d2106be5ac221f07b747a2ec8e778d7ad8ff68ef679266fc2c3eca2ad95fae14f05b7dbf5669578abfd7c31b1e1387e39cca2f6d3f4725b0650e100ab478d7a468417268debfc3f3254fc20fb1c4093115ae68b9989812cc29de1c77b3ca79882af6018ae73ce3c26f76527905dc3ba2e62370af094e5b20e3bd1b7b5be3a1f0051a8a628cfd867434b529ab1546ad577881aafdafbaf3cb5bc8cb862bf0dabf0edeb3f437aec42eea7b184bf39483ecf7505bc1e205ac7ec6b0fc22629252e0646198899fbfa512dc67b68ef2c53cca25c73f6f4af25100aa33611835807f906f2724f8f668850dee6c1c82fc379721a17cf57012cc08b16e393bacde22abdd115f4a65923caec165ecf1ff2fc3e3cfd6f022d8ab118309d972dcec7d38ad760d648288523b596bb93126401658234d588833d66435dfbc662c014c29e8592552456266ad864cae8737d970f2ddc1322e4a5090998a6689ac96c20856c97fe5cc2b3e5cbe2305e1981276d7f011b27f1c385e51ec3660ac7ffa12584c5d3cecbca50a9241bd6c32b78f116194c7970c9edb6e90bc839566271d9c22514d84fcaf1080c4dba691fea93209a6b19a31d98d015362f54947a7b58746d3f06e4c84e7b6af911db9bf2211e3f7ac7fbdb2811fac75b466f8476e724e78aac33336a8ba9467003abd098610764fb3c99cd3535bf0e96b34c6dcb064e3150cd47d691bc467aa76861ceb20ecc04533d0a6e0e20da4d9436906680a2357092d1e509583ad6965222720e77ec6bc54afb3071d4ed3ee8e9b16c6a514939090e97b1eb9209e196f1509da0d0daf18061e95aa867beee938de64874503bcd860cbf961a593428a200cc2b8922dc14f73408fe44458e5351aa5ef151f2220524d4037ae26b2da99e7b4bb33c120843315306bd440d9b6ec0239d9777dc130c789d5da7c6bff5e01343d407076caa5f91d4de66a8e9aab17ca196cfe62bbccb5b9bd613b125ccf8e8c4a9fd91bb72e07f04cb03c1132a86865b8ef78eaa2df3d5f439011bdc79b9a1ef2b1fd6c7c13abf99de1609abf3a558206bb2e78554edc0c7ba4944bd2220ff5111a08f5c73b7d2f1891585a507c10299c7c229ba1e1d8f2b7d633874553963e69030e294471d9e5fbe25b1acb5aecd8a014782191a227c49a3022977c6608e774f3abc48370b0138d2112305a9d938971d1028b6b46dac4e4314187a7cb394ecb1b1358baf0aec7909fdd317c837562db1e55b27b90ae2bf0892d6a41bd67bd6cd13870d86356a253a85afb8f3b0e605bea9af0275c857f3f18c4f9931f1942afb0262604f90a487cb3abae9a49bea1ddc7a70a13616801641756404ac5e974883c62effade339db9cf13ba2e852de0788100758bb130504c99fd28cdd7a30ab7764bab9221f09ef41b272e4c92fa3acb8657539389bfce4aeb666d49cfbb2a5dad5d1d11974872be05e67dc8e37562ea6a61a0ab4e72512f76eded42171bb147563b54bd95d985626588b4a6f1c95a95514a6c9b92ea84a93f2903c55fb1fd035d1dfe3217f1eb8e271375f36d5f741c4bc05c396695bcf80a8a2e04b2480a1f9ecc33683b9c1e958b1223854c947cb7d1731d7c01f9dbe5e13560eee5e89789fc05c48927e54ddef7966c3e303c02d423864d1468f4402d62517b89989a137a25e7a8af4f529414e9af30e88c57e7b7370529d2dd69d631ee593ef12479bb749659c4db62d4b881485baf258fe08f63ad5b95005d1b83c567f5c684b86cd29bac423109bec670cc10dac6dfa9d9dcd42ef40cec69bbd6796087267c5dc7377b4c0d11f99c96fdb4a57a01086199d4874c1008d9d750f5e3f918334d577fc002c37628deb34ebf015b881085ba8cd490b030ee33eaf52d15842340403100bc1c82cdc680478c886609c9d83e2ad1c8b831c5734d1e147d902272e597f362608e15319797a695ae5e5054ea9a14ebd486423a6e15312e43e4d91267772b8b0d7fc5fac78f45f7f5ce310bf0bbdbbe98ac021da776b0ec8f7e019f02d23717b0f68ff809cdc48c81613fa2bc192d221bf47ca142ef8a0446d5566146fc11cb12f2ca8fb02a71a4fa661f2fd5c2668744d9ca58c555798ed531aea2ad6c8d3d4d609c1e33f8570f6f2c205385019328c8cd36ac698d8f3e0589810a7dd5e8fc899d0a44f905f6b2289a150f21702b0fa4ff22561073619e0b150af5c4d6f1d61200ea2c0ad70d650ac507a346c87b37e841134901da1f138b48fe7455e828b5345adc6bd3002479e9384ca26fd34a6bdc4263d661503015d773dc770397f9453f76054ee70a8590d27376a04bd91d664cdaffc5dcd60a07b5253c3da6f1b5d6332ac196e803fec690a97d8db9593076106eca32965a79da9134e734d1407dc8c1e5ca005fcf789c7aa69177827031ab33fcc6ec31705371748bfb6da77e613741bab0b0198e7b98a9d1f779f693909e82e475e7fbc2245d8aebab800ebbbafe1140df9ed1fd4ac75ddcc81ae0dd98901170e6e9329cec973cc17d9bed2dabb692eea4df4bb8e02342ef38b1f2fa3dd0a3b0923427c66fccf416e3540045e9d6744b58e72183581a2f5360ba1b44b77139bf6c8f3c67f2913a62cace380f355dd394934442c0a08fef9c23c5540fc1f599634ee9484cbc0ae349cf632ecdaa71e7284f85d00de73dca8cfddd8f6521ddcc8b861e18be6b8b74db8bb9eda348dd69105118a49014b91910bd5cb3517e9a66e36bafcac2f91bdc14cccdddfa69fc92932c80b2edd70230ab0ebf72fc223680f3bb3d4d7dd3e62c9d29871f85d29239592e5e73e80601cfc4e0d607cc5a35b", 0x1000}, {&(0x7f0000003e40)="ec55aaccf8d72f45ef1121e9e1e48ef4d6741ba1a1bcbe79c3bea7a43aa236e870582d9ca456f7bdafd17e559869178f0a6f7296e086c6439b50a5fb7bb1f9ff7bec5bd26f899507fbe04c540d37e40425ea", 0x52}, {&(0x7f0000003ec0)="31336b91666dd3eb03e942e4cab023d4bddf61e16a881f4e1d5dd9077836751bd5ac65fdfdb37fe1b0a30fcd1c20ea61970a6a1ab4d0c5b8293b837ef3efee494f858e0d349cd5f61097e6009319bf242d572b2a4714b43eeb6a790f5262376507c7ed27268eb312e7c5952f2b3b3a00217950334dc16b2e5334f3ebfff4cd24418c73c911866363f06799de0f2f3be861d2202577c3161bc8642a247d30eb669934d6", 0xa3}, {&(0x7f0000003f80)="c2f7d391f0b347defcb270bf287c7bd928d607f1acd22c4114d68fb00bdb821983efcd88b7597e11c5b5ef300c8eca9a34c397433be468e1f4470d6d6fe5b2ec329465d7daa610a78ade9f3da1ba8164191727bdfa9763a6e66f8e01357134ea3583559564c1472f6f655ee934564c164fe7f8fcd661b9762600a13f8e6ebbf389375c8cf003d642a94233af6a37d7b91daeccfe98cb5b1e54195423299abd91db01c24d7d00e5f0be30b885c5926cd20419ac9f09fe3614bcb45b39f9df76bf274f34b35d3f8e7b75dd92b4ab6d", 0xce}, {&(0x7f0000004080)="ec5b1c09c239333933c35dce91306d1a026342c977b7bfa202c038be60a4b9a4d5e7e8c499bd830ce3b73eaa177894a0ded32946b60a36e7381e55d2b08a91a554fce51c39b5936f8dbe458a5e94657f970dc2ee5901bdfed6235b8dea8122e3ad229693e537ef35cf65db", 0x6b}, {&(0x7f0000004100)="ee0343fe4a1713c1a743be19a5df6843dc10c7274bbe182770c4872dad9d1d8025c0f15579aa4f422f9ebd9fd4f047931ecb1911496cd8dce9d12b24d8acf2fef151f11ee16d2e8e561a7cf75fee60ed11", 0x51}, {&(0x7f0000004180)="eb9660766c233009764abbdcd334cfa7cb7985262e8edeaf5c1e0ae6119f12e5c77268979c94ef6423162cff40bd0702ee83d4ae59e97994bc1a6467950d45ad0ebbd67604974a8af7b1a8219a5d", 0x4e}, {&(0x7f0000004200)="e926e22495d03d2e778261f626443ee7c0bd67a609f2884e46f3fd7ab0b46dcde958b37ca8393ae269f12b2cd28c494d399818419cee000c7cf93e3da38d1992144775ef9490060e79d81f0093d3cc00aded4dcfe1406297259f71e585d314bc74a31572d796a186009fff", 0x6b}], 0xa, &(0x7f0000004340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x3a, 0x1, [{0x7, 0xd, "024cd69056062e6eaaaf73"}, {0x5, 0x7, "ebeaa19ec0"}, {0x1, 0x2}, {0x1, 0x5, "9e27ea"}, {0x0, 0x3, "ca"}, {0x3d31c89263b983b3, 0x11, "c26eaa31cc1ff6ea5b8ca163dd2b0c"}, {0x2, 0x5, "1b95f4"}]}, @timestamp={0x44, 0x28, 0x62, 0x0, 0x0, [0x1, 0x400, 0x4, 0x0, 0xf, 0x17400, 0x9d, 0x5, 0x401]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x6, [@loopback, @empty]}, @rr={0x7, 0x17, 0x35, [@loopback, @private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast]}, @cipso={0x86, 0x19, 0x2, [{0x0, 0x8, "65adf0d1a279"}, {0x0, 0xb, "bcd955322621568fd5"}]}, @rr={0x7, 0x1f, 0xec, [@remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @empty, @multicast2]}, @lsrr={0x83, 0x1b, 0x7b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @remote, @broadcast, @local]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x7e, [@broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010101, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp={0x44, 0x18, 0xae, 0x0, 0x1, [0x401, 0x400, 0xaa, 0x6, 0x0]}, @cipso={0x86, 0x17, 0xfffffffffffffffe, [{0x1, 0x11, "73d415ed451272ae46b44fddaf0424"}]}, @generic={0x82, 0x10, "e1f28308964bd74b7a7856e8c5c0"}, @timestamp={0x44, 0x1c, 0xb8, 0x0, 0x0, [0x3, 0x20f16e84, 0x41, 0x9, 0xfffffffb, 0xd1a7]}, @ssrr={0x89, 0x7, 0x2a, [@private=0xa010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x230}, 0x4010) 1.531078412s ago: executing program 2 (id=1487): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x3, 0x80, 0x4, 0x7, 0x6, 0x0, 0x0, 0x1, 0x44004, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x112700, 0x1, 0x1, 0x6, 0x5, 0x41a, 0x7, 0x0, 0x1, 0x0, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r9, 0x6, 0x3, &(0x7f00000000c0), 0x4) socket$kcm(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.225500814s ago: executing program 1 (id=1488): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x400}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffffffffff98}, 0x28) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000b40)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20008810) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000008000000850000001c000000b7080000000000007b8af8ff00000000b708000034f2c2864ab1883827000000bf82d51e6cf1091ca100000200000007010000f8ffffffbfa400000000000007040000f0ffffffb702010100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r0, @ANYBLOB="000000000400000085100000ffffffff9500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x3d, &(0x7f0000000280)=""/61, 0x41100, 0x4, '\x00', 0x0, @tracing=0x19, r1, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x204, 0x6, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xb, 0x2}, {0x3, 0x4, 0x1, 0xd}, {0x5, 0x1, 0x10, 0x9}, {0x7, 0x3, 0x10000006, 0xc}, {0x2, 0x3, 0x4, 0x7}, {0x5, 0x1, 0x4, 0x9}, {0x2, 0x5, 0xf, 0x1}, {0x0, 0x1, 0x9, 0x1}, {0x0, 0x4, 0x1, 0x9}]}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x8, 0x0, 0x80000000, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0xa, 0x3, 0x73) r4 = socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) (async) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x29, 0x32, 0xfffffffe}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x70}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x21) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400", 0x36}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043", 0x2d}], 0x1}, 0x20000880) 1.020616788s ago: executing program 2 (id=1489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x8000}, 0x41) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0xfe33) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f00000001c0), 0x0}, 0x20) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r6}, 0x18) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 696.208661ms ago: executing program 1 (id=1490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x2d, 0x0, 0x88) (async) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x5, 0x4, 0x9, 0x2, 0x0, 0x95, 0x40000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0xb}, 0x1, 0x80000001, 0xfff, 0x1, 0x8, 0x2, 0x9, 0x0, 0x4331, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xf2, 0x4, 0xb, 0x40, 0x0, 0xaaa, 0x82581, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x29391d191514529c, @perf_bp={&(0x7f0000000480), 0x9}, 0x10100, 0x8ab, 0x4, 0x4, 0x7fffffff, 0x80000001, 0x6, 0x0, 0x3, 0x0, 0x771}, 0xffffffffffffffff, 0x2, r4, 0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x17, 0x9, 0x80, 0x0, 0x1, 0x408, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x53d5, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x10000, 0x2, 0x3, 0x0, 0x27ea000f, 0x5, 0x1, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0x0, r4, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 390.442143ms ago: executing program 1 (id=1491): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r5, 0x10) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x7e, 0x2}, @union={0x6, 0x3, 0x0, 0x5, 0x0, 0x4, [{0x7, 0x4, 0x2}, {0xe, 0x0, 0x40}, {0x6, 0x1, 0xf}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x17, 0x6}, @typedef={0x1}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x8}, @enum={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x4}}, @var={0xe, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x0]}}, &(0x7f0000000840)=""/25, 0xca, 0x19, 0x0, 0x8001, 0x10000, @value=r6}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db44b904021d080406007c09e8fe55a10a0015000400142603600e1208000f0000000401a8000900080002400300000a080010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbece8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10e, 0xb, &(0x7f0000000180), 0x4) socketpair(0x1a, 0x80000, 0x401, &(0x7f0000000900)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d80)={0xffffffffffffffff, r0, 0x0, 0x4, &(0x7f0000000d40)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000dc0)={r11}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000ff070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001e0000008500000083000000bf09000000000000550901000000000095000000000000009328f0ff01000000bf910000000000000000008500000084000000b7000000000000009500000000000000000000000038f94945e20ed927570290759d79960baa40ee72e16a8bae492971c78fd0edca8e1133bd5e97b34095db5863ea4fb9dba22f5c432c5e1ccc0385bfeaf06fb0ce133825f746964a86f1756a46a40b8f91de59f87ba705267df326cb70bd7beb29874c8ca3e0e55ed97e55c4ffc652f6e470863e7900ee9983325bfc06aa8d6354661c"], &(0x7f0000000a00)='GPL\x00', 0x4aa, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000a40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x4, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=[r6, r5, 0xffffffffffffffff, r5], &(0x7f0000000c00)=[{0x3, 0x4, 0x10, 0x4}, {0x0, 0x1, 0x0, 0x3}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000d00)=r13, 0x4) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080)}, 0x24008814) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0x8001, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 216.579855ms ago: executing program 2 (id=1492): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0x6, [@datasec={0x8, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x6}], "dd"}, @struct={0x2, 0x6, 0x0, 0x4, 0x0, 0x9, [{0xa, 0x0, 0x9}, {0xf, 0x2, 0xfaef}, {0xd, 0x0, 0x5}, {0xf, 0x5, 0x8ba}, {0x3, 0x4, 0x9}, {0xc, 0x4, 0x400}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @fwd={0x7}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x2b}]}, {0x0, [0x0, 0x47c4771fa71ca07b, 0x5f, 0x0]}}, &(0x7f0000002800)=""/189, 0xb6, 0xbd, 0x0, 0xfffffff8, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002980)={r2, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x4, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000003d40)={&(0x7f00000000c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="8dcfd4f246c3b2ba0ebea7f01978b928bb0823a8791e827fbfbd99ff8bf0da", 0x1f}, {&(0x7f0000000280)="98519fa178f827f82856a801ff1d28e087eeda0b16d4eee1d1dee0358a23ad91", 0x20}, {&(0x7f00000003c0)="babb61d0288591a3910d778c7e0dd2715ad917fdf3bf8e76fa9d9d9818033d1584473bb3cc56cc921905af96ed6f61a3b11459b1fdf6ad4b510b10ba3d532be26da6f1f9a04394f0eee47f539ada7ca54886e7c4c0da47a2ccc87edae10fc9f3", 0x60}], 0x3, &(0x7f0000002b80)=[{0x70, 0x112, 0xfffffffb, "6a16d0f5dae1ed1d81e674d6e6919fb0ccd44f50e4893cbf45b2e4ed9c4e02fb08d3098e394ba677f1e942496ed9c7cf4a8c8dc35f8cd75a4a765cc5e4e7952d95446d7d9336c28385abf87b41b59b810fa9df68995865e991ae5d93d0fd"}, {0x108, 0x3a, 0x1000, "d5dcde3560cbfad2be53829fae89b24bb56dd696d5557a1a4649e2437dceb675bc30a6e689751b9c0e37510bbc0e8d49eb0ae262e3999d25862f6cb8399c189cea182419c929ec585b4c0e0b2965abed34a6bf11b19db7cf55c0c77b4f13d4c9fd287969fda3eb70995213a0cdda5ca31d0df279b8b9ef9ce26f88c6af9e453ccca3d8ae4a1d25716381c29c76557b79596f0c593bdb5466e9d53eebbe618ac1e435773978a125bb75b153803c363c8e8a03c660df9c4b34e71882ddacb31df2a4929c7a657a3f6bbe5df37dcae01d3dc9bb9cab369d67a69e92e386b6145d409b78232e08a15489d1c188db576dbb15b2"}, {0x1010, 0x3a, 0x2, "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"}], 0x1188}, 0x4008011) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@base={0x1c, 0x2, 0x6, 0xffff, 0x265ce, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000140)='./cgroup\x00', 0x0, 0x4010, r7}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={&(0x7f00000002c0)='./cgroup\x00', r6}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./cgroup/file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ac0)={0x6, 0xb, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001740)=""/4096, 0x41100, 0x41, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000002900)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002940)={0x0, 0x8, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002a40)=[r2, r2, r4, r6, r2, r2], &(0x7f0000002a80)=[{0x4, 0x3, 0x8}, {0x4, 0x3, 0xf, 0x9}], 0x10, 0x2}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, &(0x7f0000000740)=""/4096, &(0x7f0000000640), &(0x7f0000000480), 0x2, r2}, 0x38) 0s ago: executing program 1 (id=1493): socketpair(0x1, 0x803, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@struct={0x1, 0x8, 0x0, 0x4, 0x1, 0x3, [{0x6, 0x1}, {0xc, 0x3, 0x1}, {0x9, 0x3, 0x3}, {0x1, 0x1, 0x5}, {0x6, 0x2, 0x266}, {0x5, 0x3, 0x7}, {0x4, 0x2, 0x80}, {0x5, 0x2, 0x9}]}, @volatile={0x4}, @fwd={0x3}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000180)=""/195, 0xa0, 0xc3, 0x1, 0x9}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 366.767787][ T5798] cgroup: Unknown subsys name 'net' [ 366.905977][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 368.658669][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 370.221404][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.224606][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.230674][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.236710][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.245316][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.252316][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.258244][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.265273][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.274174][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.280907][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.287130][ T5818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.295694][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.300387][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.308093][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.321219][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.326998][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.336960][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.344813][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.352721][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.357276][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.378032][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.387240][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 370.402972][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.410496][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.834739][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 370.901132][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 371.022935][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.031112][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.041402][ T5809] bridge_slave_0: entered allmulticast mode [ 371.049172][ T5809] bridge_slave_0: entered promiscuous mode [ 371.060051][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 371.072008][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.079293][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.086635][ T5809] bridge_slave_1: entered allmulticast mode [ 371.093891][ T5809] bridge_slave_1: entered promiscuous mode [ 371.145644][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.153024][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.160976][ T5810] bridge_slave_0: entered allmulticast mode [ 371.167922][ T5810] bridge_slave_0: entered promiscuous mode [ 371.196631][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.205930][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 371.225579][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.233115][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.240438][ T5810] bridge_slave_1: entered allmulticast mode [ 371.248806][ T5810] bridge_slave_1: entered promiscuous mode [ 371.257597][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.355728][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.369564][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.381649][ T5809] team0: Port device team_slave_0 added [ 371.416176][ T5809] team0: Port device team_slave_1 added [ 371.452801][ T5810] team0: Port device team_slave_0 added [ 371.471430][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.478676][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.486221][ T5811] bridge_slave_0: entered allmulticast mode [ 371.493641][ T5811] bridge_slave_0: entered promiscuous mode [ 371.512432][ T5810] team0: Port device team_slave_1 added [ 371.539862][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.547101][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.573218][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.585341][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.593753][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.601637][ T5811] bridge_slave_1: entered allmulticast mode [ 371.609205][ T5811] bridge_slave_1: entered promiscuous mode [ 371.630027][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.639237][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.646673][ T5812] bridge_slave_0: entered allmulticast mode [ 371.653538][ T5812] bridge_slave_0: entered promiscuous mode [ 371.662960][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.670416][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.677773][ T5812] bridge_slave_1: entered allmulticast mode [ 371.684938][ T5812] bridge_slave_1: entered promiscuous mode [ 371.692260][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.699373][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.725604][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.803526][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.816592][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.826198][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.835736][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.862347][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.877531][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.910391][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.917981][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.944178][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.958337][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.030036][ T5809] hsr_slave_0: entered promiscuous mode [ 372.037087][ T5809] hsr_slave_1: entered promiscuous mode [ 372.047448][ T5811] team0: Port device team_slave_0 added [ 372.067576][ T5812] team0: Port device team_slave_0 added [ 372.090615][ T5810] hsr_slave_0: entered promiscuous mode [ 372.097604][ T5810] hsr_slave_1: entered promiscuous mode [ 372.104198][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.112673][ T5810] Cannot create hsr debugfs directory [ 372.119760][ T5811] team0: Port device team_slave_1 added [ 372.127823][ T5812] team0: Port device team_slave_1 added [ 372.205556][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.212717][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.239514][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.251543][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.259021][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.285376][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.300116][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.307345][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.336188][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.363790][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.370868][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.397787][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.409213][ T5815] Bluetooth: hci2: command tx timeout [ 372.482036][ T5820] Bluetooth: hci1: command tx timeout [ 372.488003][ T5821] Bluetooth: hci3: command tx timeout [ 372.494234][ T5815] Bluetooth: hci0: command tx timeout [ 372.542042][ T5812] hsr_slave_0: entered promiscuous mode [ 372.549073][ T5812] hsr_slave_1: entered promiscuous mode [ 372.555273][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.563615][ T5812] Cannot create hsr debugfs directory [ 372.597102][ T5811] hsr_slave_0: entered promiscuous mode [ 372.603529][ T5811] hsr_slave_1: entered promiscuous mode [ 372.610438][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.618158][ T5811] Cannot create hsr debugfs directory [ 372.932317][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.963409][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.974104][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.987238][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.055384][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.078723][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.091041][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.119857][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.194904][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.207511][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.227736][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.265759][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.324940][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.340046][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.352159][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.381654][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.439004][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.518345][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.561050][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.573490][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.580915][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.599977][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.607376][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.669635][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.693522][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.725570][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.732800][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.755613][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.762897][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.824955][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.851517][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.897713][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.905061][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.934413][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.941731][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.048705][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.134679][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.142075][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.160032][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.167501][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.260352][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.410425][ T5809] veth0_vlan: entered promiscuous mode [ 374.432049][ T5809] veth1_vlan: entered promiscuous mode [ 374.476886][ T5815] Bluetooth: hci2: command tx timeout [ 374.508772][ T5809] veth0_macvtap: entered promiscuous mode [ 374.545400][ T5809] veth1_macvtap: entered promiscuous mode [ 374.556969][ T5815] Bluetooth: hci0: command tx timeout [ 374.562550][ T5815] Bluetooth: hci3: command tx timeout [ 374.569776][ T5821] Bluetooth: hci1: command tx timeout [ 374.585975][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.642859][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.659431][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.671160][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.680736][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.692843][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.701864][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.827149][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.871339][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.925510][ T5811] veth0_vlan: entered promiscuous mode [ 374.940401][ T5811] veth1_vlan: entered promiscuous mode [ 374.958215][ T5810] veth0_vlan: entered promiscuous mode [ 374.983632][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.998266][ T5810] veth1_vlan: entered promiscuous mode [ 375.006134][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.068836][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.081212][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.150510][ T5811] veth0_macvtap: entered promiscuous mode [ 375.168618][ T5812] veth0_vlan: entered promiscuous mode [ 375.175261][ T5810] veth0_macvtap: entered promiscuous mode [ 375.203175][ T5811] veth1_macvtap: entered promiscuous mode [ 375.224461][ T5810] veth1_macvtap: entered promiscuous mode [ 375.285630][ T5812] veth1_vlan: entered promiscuous mode [ 375.309568][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.322671][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.343280][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.391899][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.414567][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.428270][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.443886][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.455190][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.465974][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.482265][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.494697][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.503639][ T5876] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 375.642368][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.653092][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.664350][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.675213][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.690636][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.702844][ T5877] netlink: 'syz.1.2': attribute type 15 has an invalid length. [ 375.711864][ T5877] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 375.723317][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.732720][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.741707][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.750762][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.774361][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.783713][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.793200][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.802912][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.945896][ T5812] veth0_macvtap: entered promiscuous mode [ 375.975754][ T5812] veth1_macvtap: entered promiscuous mode [ 376.096856][ T5833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.109227][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.123460][ T5833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.125185][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.142179][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.152963][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.165173][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.185642][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.197049][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.214548][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.229611][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.240073][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.251725][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.261927][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.273425][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.285936][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.307832][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.322939][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.339330][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.352012][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.361643][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.370749][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.410874][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.438290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.477403][ T5851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.485274][ T5851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.557327][ T5815] Bluetooth: hci2: command tx timeout [ 376.574463][ T5833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.582705][ T5833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.636982][ T5815] Bluetooth: hci3: command tx timeout [ 376.642982][ T5815] Bluetooth: hci1: command tx timeout [ 376.649755][ T5820] Bluetooth: hci0: command tx timeout [ 376.693301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.725235][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.170231][ C0] hrtimer: interrupt took 133456 ns [ 377.181240][ T5895] Zero length message leads to an empty skb [ 377.190661][ T5897] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 377.224388][ T5898] netlink: 'syz.2.7': attribute type 3 has an invalid length. [ 377.254089][ T5898] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 377.317669][ T5898] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.7'. [ 377.394891][ T5897] team0: Device vxcan1 is of different type [ 377.580916][ T5904] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 377.610577][ T5897] syz.2.7 (5897) used greatest stack depth: 20456 bytes left [ 378.643194][ T5821] Bluetooth: hci2: command tx timeout [ 378.720351][ T5821] Bluetooth: hci1: command tx timeout [ 378.726068][ T5815] Bluetooth: hci0: command tx timeout [ 378.732156][ T5820] Bluetooth: hci3: command tx timeout [ 378.963641][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976401][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.586591][ T5935] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 381.700640][ T5935] netlink: 'syz.0.20': attribute type 8 has an invalid length. [ 381.709857][ T5935] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.20'. [ 382.929874][ T5983] C: renamed from team_slave_0 (while UP) [ 383.059890][ T5983] netlink: 'syz.1.34': attribute type 4 has an invalid length. [ 383.094328][ T5983] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 383.125333][ T5974] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 383.631666][ T5996] netlink: 'syz.2.37': attribute type 6 has an invalid length. [ 384.074561][ T6016] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 384.314192][ T6023] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.48'. [ 386.315463][ T6040] tap0: tun_chr_ioctl cmd 1074025677 [ 386.344567][ T6040] tap0: linktype set to 6 [ 386.488034][ T6036] syz.1.53 (6036) used greatest stack depth: 20072 bytes left [ 386.716993][ T5851] failed to send hello msg [ 386.743339][ T5851] failed while handling packet from 1:16384 [ 387.111603][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.258978][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.664658][ T5833] failed to send hello msg [ 387.676591][ T5833] failed while handling packet from 1:16384 [ 388.941720][ T6133] delete_channel: no stack [ 388.979603][ T6133] delete_channel: no stack [ 389.321431][ T6144] FAULT_INJECTION: forcing a failure. [ 389.321431][ T6144] name failslab, interval 1, probability 0, space 0, times 1 [ 389.356057][ T6144] CPU: 1 PID: 6144 Comm: syz.3.89 Not tainted syzkaller #0 [ 389.363354][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.373638][ T6144] Call Trace: [ 389.376961][ T6144] [ 389.380095][ T6144] dump_stack_lvl+0x18c/0x250 [ 389.384851][ T6144] ? show_regs_print_info+0x20/0x20 [ 389.390115][ T6144] ? load_image+0x420/0x420 [ 389.394676][ T6144] ? __might_sleep+0xe0/0xe0 [ 389.399351][ T6144] ? __lock_acquire+0x7d40/0x7d40 [ 389.404431][ T6144] should_fail_ex+0x39d/0x4d0 [ 389.409356][ T6144] should_failslab+0x9/0x20 [ 389.414002][ T6144] slab_pre_alloc_hook+0x59/0x310 [ 389.419362][ T6144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 389.425223][ T6144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 389.430995][ T6144] __kmem_cache_alloc_node+0x53/0x250 [ 389.436431][ T6144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 389.442206][ T6144] __kmalloc+0xa4/0x230 [ 389.446446][ T6144] tomoyo_realpath_from_path+0xe3/0x5d0 [ 389.452139][ T6144] tomoyo_path_number_perm+0x248/0x620 [ 389.457660][ T6144] ? tomoyo_path_number_perm+0x217/0x620 [ 389.463494][ T6144] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 389.469273][ T6144] ? ksys_write+0x1c4/0x260 [ 389.473823][ T6144] ? __fget_files+0x28/0x4b0 [ 389.478697][ T6144] ? __fget_files+0x28/0x4b0 [ 389.483492][ T6144] security_file_ioctl+0x70/0xa0 [ 389.488477][ T6144] __se_sys_ioctl+0x48/0x170 [ 389.493431][ T6144] do_syscall_64+0x55/0xa0 [ 389.498103][ T6144] ? clear_bhb_loop+0x40/0x90 [ 389.502826][ T6144] ? clear_bhb_loop+0x40/0x90 [ 389.507533][ T6144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.513503][ T6144] RIP: 0033:0x7fe8fa99c819 [ 389.517941][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.537757][ T6144] RSP: 002b:00007fe8fb7da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.546543][ T6144] RAX: ffffffffffffffda RBX: 00007fe8fac15fa0 RCX: 00007fe8fa99c819 [ 389.554701][ T6144] RDX: 0000200000000040 RSI: 00000000c008240a RDI: 0000000000000003 [ 389.562800][ T6144] RBP: 00007fe8fb7da090 R08: 0000000000000000 R09: 0000000000000000 [ 389.570876][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.578952][ T6144] R13: 00007fe8fac16038 R14: 00007fe8fac15fa0 R15: 00007ffe55d669c8 [ 389.587044][ T6144] [ 389.595229][ T6144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.594356][ T6170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.313363][ T6183] syzkaller0: entered promiscuous mode [ 391.323439][ T6183] syzkaller0: entered allmulticast mode [ 391.411829][ T6191] FAULT_INJECTION: forcing a failure. [ 391.411829][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 391.427283][ T6191] CPU: 1 PID: 6191 Comm: syz.0.105 Not tainted syzkaller #0 [ 391.435190][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.445465][ T6191] Call Trace: [ 391.448807][ T6191] [ 391.452196][ T6191] dump_stack_lvl+0x18c/0x250 [ 391.456998][ T6191] ? show_regs_print_info+0x20/0x20 [ 391.462232][ T6191] ? load_image+0x420/0x420 [ 391.466853][ T6191] ? __might_fault+0xaa/0x120 [ 391.471546][ T6191] ? __lock_acquire+0x7d40/0x7d40 [ 391.476594][ T6191] should_fail_ex+0x39d/0x4d0 [ 391.481295][ T6191] _copy_from_user+0x2f/0xe0 [ 391.485910][ T6191] kstrtouint_from_user+0xde/0x170 [ 391.491041][ T6191] ? kstrtol_from_user+0x190/0x190 [ 391.496274][ T6191] proc_fail_nth_write+0x8f/0x250 [ 391.501330][ T6191] ? proc_fail_nth_read+0x260/0x260 [ 391.506553][ T6191] ? proc_fail_nth_read+0x260/0x260 [ 391.511854][ T6191] vfs_write+0x296/0x990 [ 391.516120][ T6191] ? file_end_write+0x250/0x250 [ 391.521087][ T6191] ? __fget_files+0x28/0x4b0 [ 391.525691][ T6191] ? __fget_files+0x28/0x4b0 [ 391.530296][ T6191] ? __fget_files+0x43d/0x4b0 [ 391.535006][ T6191] ? __fdget_pos+0x2a3/0x330 [ 391.539631][ T6191] ? ksys_write+0x75/0x260 [ 391.544188][ T6191] ksys_write+0x150/0x260 [ 391.548690][ T6191] ? __ia32_sys_read+0x90/0x90 [ 391.553490][ T6191] ? lockdep_hardirqs_on+0x98/0x150 [ 391.558737][ T6191] do_syscall_64+0x55/0xa0 [ 391.563271][ T6191] ? clear_bhb_loop+0x40/0x90 [ 391.567991][ T6191] ? clear_bhb_loop+0x40/0x90 [ 391.572716][ T6191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.578821][ T6191] RIP: 0033:0x7f08d2d5d04e [ 391.583343][ T6191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.602971][ T6191] RSP: 002b:00007f08d3c3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.611497][ T6191] RAX: ffffffffffffffda RBX: 00007f08d3c3f6c0 RCX: 00007f08d2d5d04e [ 391.619656][ T6191] RDX: 0000000000000001 RSI: 00007f08d3c3f0a0 RDI: 0000000000000004 [ 391.627644][ T6191] RBP: 00007f08d3c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.635625][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.643809][ T6191] R13: 00007f08d3016128 R14: 00007f08d3016090 R15: 00007ffcb726e118 [ 391.651853][ T6191] [ 391.671039][ T6192] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 391.681067][ T6192] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 391.701272][ T6194] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 393.023547][ T6213] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.114'. [ 394.411295][ T6222] netlink: 'syz.2.116': attribute type 153 has an invalid length. [ 394.486794][ T6222] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.116'. [ 395.757299][ T6245] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 395.782552][ T6245] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.124'. [ 396.121736][ T6248] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.126'. [ 396.162452][ T6248] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.126'. [ 396.204579][ T6248] netlink: 2 bytes leftover after parsing attributes in process `syz.0.126'. [ 397.619338][ T6258] syzkaller0: entered promiscuous mode [ 397.701233][ T6258] syzkaller0: entered allmulticast mode [ 403.549117][ T6272] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 403.565443][ T6272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.133'. [ 403.589048][ T6265] netlink: 'syz.0.132': attribute type 2 has an invalid length. [ 403.603720][ T6265] netlink: 'syz.0.132': attribute type 8 has an invalid length. [ 403.617482][ T6265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 404.172573][ T6281] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 404.337842][ T6286] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 404.366591][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.531104][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.711802][ T6287] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.138'. [ 405.273751][ T6286] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 405.511038][ T6284] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.136'. [ 405.997853][ T6317] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.147'. [ 409.010522][ T6377] hsr_slave_0: left promiscuous mode [ 409.054503][ T6377] hsr_slave_1: left promiscuous mode [ 409.256264][ T6388] netlink: 188 bytes leftover after parsing attributes in process `syz.1.169'. [ 409.468663][ T6395] netlink: 'syz.0.171': attribute type 4 has an invalid length. [ 410.044483][ T6410] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 410.089842][ T6410] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 410.165627][ T6415] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 410.206678][ T6412] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 410.229948][ T6411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.286875][ T6410] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 410.608780][ T6425] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 410.666037][ T6425] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 410.681361][ T6426] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 410.709056][ T6425] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 410.819818][ T6428] netlink: 152 bytes leftover after parsing attributes in process `syz.2.183'. [ 410.838234][ T6428] tc_dump_action: action bad kind [ 411.728126][ T6455] netlink: 156 bytes leftover after parsing attributes in process `syz.0.190'. [ 411.922608][ T6450] tun0: tun_chr_ioctl cmd 1074025677 [ 411.936610][ T6450] tun0: linktype set to 776 [ 411.956194][ T6450] tun0: tun_chr_ioctl cmd 35108 [ 413.860981][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.215'. [ 417.212937][ T6590] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 417.270712][ T6590] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 418.207841][ T6618] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.247'. [ 418.491831][ T6615] syzkaller0: entered promiscuous mode [ 418.499649][ T6615] syzkaller0: entered allmulticast mode [ 419.135579][ T6636] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.252'. [ 421.136213][ T6644] FAULT_INJECTION: forcing a failure. [ 421.136213][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.216460][ T6644] CPU: 0 PID: 6644 Comm: syz.1.255 Not tainted syzkaller #0 [ 421.224073][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.234262][ T6644] Call Trace: [ 421.237623][ T6644] [ 421.240598][ T6644] dump_stack_lvl+0x18c/0x250 [ 421.245337][ T6644] ? show_regs_print_info+0x20/0x20 [ 421.250603][ T6644] ? load_image+0x420/0x420 [ 421.256144][ T6644] ? __might_fault+0xaa/0x120 [ 421.260849][ T6644] ? __lock_acquire+0x7d40/0x7d40 [ 421.265938][ T6644] should_fail_ex+0x39d/0x4d0 [ 421.270695][ T6644] _copy_from_user+0x2f/0xe0 [ 421.275819][ T6644] ___sys_sendmsg+0x1c7/0x360 [ 421.280511][ T6644] ? get_pid_task+0x20/0x1e0 [ 421.285114][ T6644] ? __sys_sendmsg+0x2a0/0x2a0 [ 421.289918][ T6644] ? __lock_acquire+0x7d40/0x7d40 [ 421.295511][ T6644] __se_sys_sendmsg+0x1c2/0x2b0 [ 421.300381][ T6644] ? __x64_sys_sendmsg+0x80/0x80 [ 421.305385][ T6644] ? lockdep_hardirqs_on+0x98/0x150 [ 421.310724][ T6644] do_syscall_64+0x55/0xa0 [ 421.315265][ T6644] ? clear_bhb_loop+0x40/0x90 [ 421.320032][ T6644] ? clear_bhb_loop+0x40/0x90 [ 421.324749][ T6644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.330759][ T6644] RIP: 0033:0x7f823ad9c819 [ 421.335568][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.355479][ T6644] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.364103][ T6644] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 421.372217][ T6644] RDX: 0000000004000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 421.380233][ T6644] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.388338][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.397469][ T6644] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 421.405477][ T6644] [ 421.664988][ T6658] validate_nla: 2 callbacks suppressed [ 421.665005][ T6658] netlink: 'syz.3.262': attribute type 2 has an invalid length. [ 421.725268][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 421.871996][ T6667] netlink: 'syz.2.265': attribute type 13 has an invalid length. [ 421.884642][ T6667] netlink: 160 bytes leftover after parsing attributes in process `syz.2.265'. [ 422.388513][ T6677] FAULT_INJECTION: forcing a failure. [ 422.388513][ T6677] name failslab, interval 1, probability 0, space 0, times 0 [ 422.406681][ T6677] CPU: 0 PID: 6677 Comm: syz.2.269 Not tainted syzkaller #0 [ 422.414048][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.424145][ T6677] Call Trace: [ 422.427468][ T6677] [ 422.430434][ T6677] dump_stack_lvl+0x18c/0x250 [ 422.435261][ T6677] ? show_regs_print_info+0x20/0x20 [ 422.440607][ T6677] ? load_image+0x420/0x420 [ 422.445267][ T6677] ? __might_sleep+0xe0/0xe0 [ 422.450083][ T6677] ? __lock_acquire+0x7d40/0x7d40 [ 422.455244][ T6677] should_fail_ex+0x39d/0x4d0 [ 422.459989][ T6677] should_failslab+0x9/0x20 [ 422.464535][ T6677] slab_pre_alloc_hook+0x59/0x310 [ 422.470204][ T6677] ? sock_kmalloc+0x96/0xf0 [ 422.474818][ T6677] ? sock_kmalloc+0x96/0xf0 [ 422.479353][ T6677] __kmem_cache_alloc_node+0x53/0x250 [ 422.484864][ T6677] ? sock_kmalloc+0x96/0xf0 [ 422.489399][ T6677] __kmalloc+0xa4/0x230 [ 422.493591][ T6677] sock_kmalloc+0x96/0xf0 [ 422.498044][ T6677] ____sys_sendmsg+0x1be/0x960 [ 422.502913][ T6677] ? __asan_memset+0x22/0x40 [ 422.507542][ T6677] ? __sys_sendmsg_sock+0x30/0x30 [ 422.512665][ T6677] ? __import_iovec+0x5f2/0x850 [ 422.517645][ T6677] ? import_iovec+0x73/0xa0 [ 422.522255][ T6677] ___sys_sendmsg+0x2a6/0x360 [ 422.526944][ T6677] ? get_pid_task+0x20/0x1e0 [ 422.531570][ T6677] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.536360][ T6677] ? __lock_acquire+0x7d40/0x7d40 [ 422.541416][ T6677] __se_sys_sendmsg+0x1c2/0x2b0 [ 422.546280][ T6677] ? __x64_sys_sendmsg+0x80/0x80 [ 422.551337][ T6677] ? lockdep_hardirqs_on+0x98/0x150 [ 422.556741][ T6677] do_syscall_64+0x55/0xa0 [ 422.561258][ T6677] ? clear_bhb_loop+0x40/0x90 [ 422.566057][ T6677] ? clear_bhb_loop+0x40/0x90 [ 422.570954][ T6677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.577074][ T6677] RIP: 0033:0x7f7eb5b9c819 [ 422.581535][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.601337][ T6677] RSP: 002b:00007f7eb6b24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.609969][ T6677] RAX: ffffffffffffffda RBX: 00007f7eb5e15fa0 RCX: 00007f7eb5b9c819 [ 422.618065][ T6677] RDX: 0000000004000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 422.626147][ T6677] RBP: 00007f7eb6b24090 R08: 0000000000000000 R09: 0000000000000000 [ 422.634135][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.642140][ T6677] R13: 00007f7eb5e16038 R14: 00007f7eb5e15fa0 R15: 00007ffd23f89218 [ 422.650336][ T6677] [ 423.161632][ T6665] delete_channel: no stack [ 423.549737][ T6703] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 423.576261][ T6703] syz_tun: entered promiscuous mode [ 423.631797][ T6703] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 423.679924][ T6707] sctp: [Deprecated]: syz.0.280 (pid 6707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.679924][ T6707] Use struct sctp_sack_info instead [ 423.729542][ T6703] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 423.754811][ T6703] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.278'. [ 424.285370][ T6718] netlink: 'syz.3.283': attribute type 21 has an invalid length. [ 425.540713][ T6752] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.299'. [ 425.764158][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 425.789441][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 425.809036][ T6759] netlink: 33 bytes leftover after parsing attributes in process `syz.1.301'. [ 425.818327][ T6763] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.303'. [ 425.828925][ T6763] netlink: zone id is out of range [ 425.834539][ T6763] netlink: zone id is out of range [ 425.850675][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 425.861123][ T6763] netlink: zone id is out of range [ 425.870977][ T6763] netlink: zone id is out of range [ 425.876645][ T6759] netlink: 33 bytes leftover after parsing attributes in process `syz.1.301'. [ 425.886747][ T6763] netlink: zone id is out of range [ 425.892050][ T6763] netlink: zone id is out of range [ 425.907577][ T6763] netlink: zone id is out of range [ 425.912999][ T6763] netlink: zone id is out of range [ 425.920844][ T6763] netlink: zone id is out of range [ 425.926249][ T6763] netlink: zone id is out of range [ 426.693682][ T6783] netlink: 'syz.0.311': attribute type 9 has an invalid length. [ 426.709936][ T6783] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.311'. [ 427.395559][ T6790] netlink: 'syz.2.313': attribute type 13 has an invalid length. [ 427.417439][ T6790] netlink: 160 bytes leftover after parsing attributes in process `syz.2.313'. [ 427.492513][ T6794] netlink: 'syz.1.314': attribute type 39 has an invalid length. [ 427.516925][ T6795] netlink: 'syz.1.314': attribute type 39 has an invalid length. [ 427.700927][ T6794] syzkaller0: entered promiscuous mode [ 427.707042][ T6794] syzkaller0: entered allmulticast mode [ 430.310308][ T6825] netlink: 'syz.0.324': attribute type 8 has an invalid length. [ 430.342696][ T6825] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 430.362726][ T6825] __nla_validate_parse: 1 callbacks suppressed [ 430.362766][ T6825] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.324'. [ 430.470465][ T6825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.324'. [ 430.992858][ T6858] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 431.172850][ T6857] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.336'. [ 433.659865][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 435.345548][ T6917] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.357'. [ 435.416698][ T6917] net_ratelimit: 618 callbacks suppressed [ 435.416715][ T6917] openvswitch: netlink: IP tunnel dst address not specified [ 436.387943][ T6933] netlink: 'syz.0.363': attribute type 4 has an invalid length. [ 440.017401][ T6966] netlink: 'syz.0.370': attribute type 27 has an invalid length. [ 440.019863][ T6967] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.371'. [ 440.042057][ T6966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.370'. [ 440.057740][ T6966] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 440.411223][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.424910][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.574772][ T7061] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.399'. [ 449.642267][ T7077] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 449.680547][ T7077] netlink: 'syz.3.404': attribute type 8 has an invalid length. [ 449.689720][ T7077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 449.994677][ T7083] netlink: 'syz.0.407': attribute type 21 has an invalid length. [ 450.014770][ T7081] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 450.031412][ T7083] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.043426][ T7081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.406'. [ 450.265266][ T7089] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.409'. [ 450.717237][ T7103] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 450.822549][ T5820] Bluetooth: hci1: ISO packet for unknown connection handle 2097 [ 451.581809][ T7111] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 452.609286][ T7125] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.426'. [ 453.556640][ T7159] netlink: 'syz.1.436': attribute type 21 has an invalid length. [ 453.670858][ T7159] netlink: 164 bytes leftover after parsing attributes in process `syz.1.436'. [ 454.801746][ T7191] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 454.862080][ T7191] netlink: 2 bytes leftover after parsing attributes in process `syz.3.444'. [ 454.925906][ T7191] hsr0: entered promiscuous mode [ 454.957431][ T7191] bridge0: port 3(hsr0) entered blocking state [ 454.991199][ T7191] bridge0: port 3(hsr0) entered disabled state [ 455.039192][ T7191] hsr0: entered allmulticast mode [ 455.046456][ T7191] hsr_slave_0: entered allmulticast mode [ 455.081845][ T7191] hsr_slave_1: entered allmulticast mode [ 455.113920][ T7191] bridge0: port 3(hsr0) entered blocking state [ 455.121188][ T7191] bridge0: port 3(hsr0) entered forwarding state [ 455.320968][ T7210] FAULT_INJECTION: forcing a failure. [ 455.320968][ T7210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.347275][ T7210] CPU: 0 PID: 7210 Comm: syz.2.450 Not tainted syzkaller #0 [ 455.354769][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.365034][ T7210] Call Trace: [ 455.368444][ T7210] [ 455.371554][ T7210] dump_stack_lvl+0x18c/0x250 [ 455.376504][ T7210] ? show_regs_print_info+0x20/0x20 [ 455.381850][ T7210] ? load_image+0x420/0x420 [ 455.386530][ T7210] ? __might_fault+0xaa/0x120 [ 455.391812][ T7210] ? __lock_acquire+0x7d40/0x7d40 [ 455.397081][ T7210] should_fail_ex+0x39d/0x4d0 [ 455.402050][ T7210] _copy_from_user+0x2f/0xe0 [ 455.406789][ T7210] ___sys_sendmsg+0x1c7/0x360 [ 455.411680][ T7210] ? get_pid_task+0x20/0x1e0 [ 455.416455][ T7210] ? __sys_sendmsg+0x2a0/0x2a0 [ 455.421747][ T7210] ? __lock_acquire+0x7d40/0x7d40 [ 455.427233][ T7210] __se_sys_sendmsg+0x1c2/0x2b0 [ 455.432241][ T7210] ? __x64_sys_sendmsg+0x80/0x80 [ 455.437474][ T7210] ? lockdep_hardirqs_on+0x98/0x150 [ 455.443009][ T7210] do_syscall_64+0x55/0xa0 [ 455.447717][ T7210] ? clear_bhb_loop+0x40/0x90 [ 455.452507][ T7210] ? clear_bhb_loop+0x40/0x90 [ 455.457283][ T7210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.463265][ T7210] RIP: 0033:0x7f7eb5b9c819 [ 455.467767][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.487710][ T7210] RSP: 002b:00007f7eb6b24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.496246][ T7210] RAX: ffffffffffffffda RBX: 00007f7eb5e15fa0 RCX: 00007f7eb5b9c819 [ 455.504312][ T7210] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 455.512537][ T7210] RBP: 00007f7eb6b24090 R08: 0000000000000000 R09: 0000000000000000 [ 455.520694][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.528770][ T7210] R13: 00007f7eb5e16038 R14: 00007f7eb5e15fa0 R15: 00007ffd23f89218 [ 455.537024][ T7210] [ 455.590775][ T7208] syz.1.449 (7208) used greatest stack depth: 19304 bytes left [ 456.556151][ T7227] netlink: 'syz.1.457': attribute type 29 has an invalid length. [ 456.630898][ T7227] netlink: 'syz.1.457': attribute type 29 has an invalid length. [ 458.099963][ T7253] FAULT_INJECTION: forcing a failure. [ 458.099963][ T7253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.155407][ T7253] CPU: 0 PID: 7253 Comm: syz.1.465 Not tainted syzkaller #0 [ 458.162881][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.173185][ T7253] Call Trace: [ 458.176621][ T7253] [ 458.179696][ T7253] dump_stack_lvl+0x18c/0x250 [ 458.184579][ T7253] ? show_regs_print_info+0x20/0x20 [ 458.189938][ T7253] ? load_image+0x420/0x420 [ 458.194617][ T7253] ? __lock_acquire+0x7d40/0x7d40 [ 458.199870][ T7253] should_fail_ex+0x39d/0x4d0 [ 458.204837][ T7253] _copy_from_user+0x2f/0xe0 [ 458.209596][ T7253] __copy_msghdr+0x3bb/0x580 [ 458.214390][ T7253] ___sys_sendmsg+0x214/0x360 [ 458.219195][ T7253] ? get_pid_task+0x20/0x1e0 [ 458.223984][ T7253] ? __sys_sendmsg+0x2a0/0x2a0 [ 458.229091][ T7253] ? __lock_acquire+0x7d40/0x7d40 [ 458.234493][ T7253] __se_sys_sendmsg+0x1c2/0x2b0 [ 458.239519][ T7253] ? __x64_sys_sendmsg+0x80/0x80 [ 458.244736][ T7253] ? lockdep_hardirqs_on+0x98/0x150 [ 458.250109][ T7253] do_syscall_64+0x55/0xa0 [ 458.254650][ T7253] ? clear_bhb_loop+0x40/0x90 [ 458.259475][ T7253] ? clear_bhb_loop+0x40/0x90 [ 458.264393][ T7253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.270467][ T7253] RIP: 0033:0x7f823ad9c819 [ 458.275032][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.294774][ T7253] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.303495][ T7253] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 458.311681][ T7253] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 458.319943][ T7253] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 458.328043][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.336137][ T7253] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 458.344468][ T7253] [ 458.350706][ T7258] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.466'. [ 459.195366][ T7259] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.466'. [ 459.284205][ T7265] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.468'. [ 459.331702][ T7265] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.468'. [ 459.452354][ T7270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.468'. [ 459.532594][ T7269] Q'Y]cÊRݘOC‰ÿ: renamed from lo (while UP) [ 459.652152][ T7270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.468'. [ 460.280990][ T7284] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 460.753933][ T7291] FAULT_INJECTION: forcing a failure. [ 460.753933][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 460.778759][ T7291] CPU: 1 PID: 7291 Comm: syz.1.477 Not tainted syzkaller #0 [ 460.786222][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.796422][ T7291] Call Trace: [ 460.799830][ T7291] [ 460.802903][ T7291] dump_stack_lvl+0x18c/0x250 [ 460.807874][ T7291] ? show_regs_print_info+0x20/0x20 [ 460.813378][ T7291] ? load_image+0x420/0x420 [ 460.818181][ T7291] ? __might_sleep+0xe0/0xe0 [ 460.822948][ T7291] ? __lock_acquire+0x7d40/0x7d40 [ 460.828565][ T7291] should_fail_ex+0x39d/0x4d0 [ 460.833537][ T7291] should_failslab+0x9/0x20 [ 460.838290][ T7291] slab_pre_alloc_hook+0x59/0x310 [ 460.843585][ T7291] ? __lock_acquire+0x1347/0x7d40 [ 460.848733][ T7291] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 460.854218][ T7291] __kmem_cache_alloc_node+0x53/0x250 [ 460.860244][ T7291] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 460.865974][ T7291] kmalloc_trace+0x2a/0xe0 [ 460.870672][ T7291] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 460.876013][ T7291] tcp_sendmsg_locked+0x4621/0x4bd0 [ 460.881564][ T7291] ? verify_lock_unused+0x140/0x140 [ 460.887005][ T7291] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 460.893744][ T7291] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 460.899832][ T7291] ? mark_lock+0x94/0x320 [ 460.904514][ T7291] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 460.910856][ T7291] ? lock_chain_count+0x20/0x20 [ 460.915866][ T7291] ? tcp_set_state+0x680/0x680 [ 460.920924][ T7291] tcp_sendmsg+0x2f/0x50 [ 460.925515][ T7291] ? inet_send_prepare+0x260/0x260 [ 460.930980][ T7291] ____sys_sendmsg+0x5ba/0x960 [ 460.935832][ T7291] ? __lock_acquire+0x7d40/0x7d40 [ 460.941061][ T7291] ? __asan_memset+0x22/0x40 [ 460.945739][ T7291] ? __sys_sendmsg_sock+0x30/0x30 [ 460.950961][ T7291] ? __import_iovec+0x3fa/0x850 [ 460.955959][ T7291] ? import_iovec+0x73/0xa0 [ 460.960582][ T7291] ___sys_sendmsg+0x2a6/0x360 [ 460.965342][ T7291] ? get_pid_task+0x20/0x1e0 [ 460.970316][ T7291] ? __sys_sendmsg+0x2a0/0x2a0 [ 460.975317][ T7291] ? __lock_acquire+0x7d40/0x7d40 [ 460.980702][ T7291] __se_sys_sendmsg+0x1c2/0x2b0 [ 460.985669][ T7291] ? __x64_sys_sendmsg+0x80/0x80 [ 460.990808][ T7291] ? lockdep_hardirqs_on+0x98/0x150 [ 460.996412][ T7291] do_syscall_64+0x55/0xa0 [ 461.000944][ T7291] ? clear_bhb_loop+0x40/0x90 [ 461.005785][ T7291] ? clear_bhb_loop+0x40/0x90 [ 461.010731][ T7291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.016714][ T7291] RIP: 0033:0x7f823ad9c819 [ 461.021304][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.041182][ T7291] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.049953][ T7291] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 461.058120][ T7291] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 461.066418][ T7291] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 461.074666][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.082845][ T7291] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 461.091107][ T7291] [ 461.846402][ T7311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.483'. [ 461.906515][ T7311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.483'. [ 461.992264][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.1.483'. [ 462.147934][ T7304] netlink: 164 bytes leftover after parsing attributes in process `syz.0.482'. [ 462.434403][ T7304] syz.0.482 (7304) used greatest stack depth: 18280 bytes left [ 462.927026][ T7327] FAULT_INJECTION: forcing a failure. [ 462.927026][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 462.966792][ T7327] CPU: 1 PID: 7327 Comm: syz.1.489 Not tainted syzkaller #0 [ 462.974511][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.985463][ T7327] Call Trace: [ 462.989263][ T7327] [ 462.992626][ T7327] dump_stack_lvl+0x18c/0x250 [ 462.997579][ T7327] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 463.004847][ T7327] ? show_regs_print_info+0x20/0x20 [ 463.011204][ T7327] ? load_image+0x420/0x420 [ 463.016210][ T7327] should_fail_ex+0x39d/0x4d0 [ 463.021932][ T7327] should_failslab+0x9/0x20 [ 463.027323][ T7327] slab_pre_alloc_hook+0x59/0x310 [ 463.032570][ T7327] kmem_cache_alloc+0x5a/0x2d0 [ 463.037791][ T7327] ? dst_alloc+0x105/0x170 [ 463.042541][ T7327] dst_alloc+0x105/0x170 [ 463.046973][ T7327] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 463.053347][ T7327] ? ip_route_output_key_hash+0x13d/0x330 [ 463.059821][ T7327] ip_route_output_key_hash+0x1f3/0x330 [ 463.065502][ T7327] ? stack_trace_save+0x100/0x100 [ 463.070931][ T7327] ? ip_route_input_rcu+0x30f0/0x30f0 [ 463.076726][ T7327] tcp_v4_connect+0x6ec/0x18e0 [ 463.081592][ T7327] ? __stack_depot_save+0x1f/0x630 [ 463.087025][ T7327] ? tcp_twsk_unique+0x990/0x990 [ 463.092313][ T7327] __inet_stream_connect+0x254/0xdc0 [ 463.097860][ T7327] ? inet_dgram_connect+0x360/0x360 [ 463.103563][ T7327] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 463.109315][ T7327] tcp_sendmsg_locked+0x4621/0x4bd0 [ 463.115009][ T7327] ? verify_lock_unused+0x140/0x140 [ 463.120572][ T7327] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 463.127921][ T7327] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 463.133843][ T7327] ? mark_lock+0x94/0x320 [ 463.138779][ T7327] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 463.145177][ T7327] ? lock_chain_count+0x20/0x20 [ 463.150277][ T7327] ? tcp_set_state+0x680/0x680 [ 463.155379][ T7327] tcp_sendmsg+0x2f/0x50 [ 463.159984][ T7327] ? inet_send_prepare+0x260/0x260 [ 463.165560][ T7327] ____sys_sendmsg+0x5ba/0x960 [ 463.170594][ T7327] ? __lock_acquire+0x7d40/0x7d40 [ 463.175913][ T7327] ? __asan_memset+0x22/0x40 [ 463.180768][ T7327] ? __sys_sendmsg_sock+0x30/0x30 [ 463.185882][ T7327] ? __import_iovec+0x3fa/0x850 [ 463.191421][ T7327] ? import_iovec+0x73/0xa0 [ 463.197100][ T7327] ___sys_sendmsg+0x2a6/0x360 [ 463.202062][ T7327] ? get_pid_task+0x20/0x1e0 [ 463.207334][ T7327] ? __sys_sendmsg+0x2a0/0x2a0 [ 463.212406][ T7327] ? __lock_acquire+0x7d40/0x7d40 [ 463.217814][ T7327] __se_sys_sendmsg+0x1c2/0x2b0 [ 463.222873][ T7327] ? __x64_sys_sendmsg+0x80/0x80 [ 463.228191][ T7327] ? lockdep_hardirqs_on+0x98/0x150 [ 463.233974][ T7327] do_syscall_64+0x55/0xa0 [ 463.238521][ T7327] ? clear_bhb_loop+0x40/0x90 [ 463.243405][ T7327] ? clear_bhb_loop+0x40/0x90 [ 463.248196][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.254257][ T7327] RIP: 0033:0x7f823ad9c819 [ 463.258932][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.279315][ T7327] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.287923][ T7327] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 463.295978][ T7327] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 463.304021][ T7327] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 463.312071][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.320115][ T7327] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 463.328631][ T7327] [ 464.308820][ T7349] __nla_validate_parse: 1 callbacks suppressed [ 464.308838][ T7349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.495'. [ 464.367567][ T7349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.495'. [ 464.444309][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.495'. [ 464.468005][ T7346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.495'. [ 465.481571][ T7372] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 467.178607][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.510'. [ 467.335213][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.510'. [ 467.696949][ T7389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.510'. [ 467.754920][ T7390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.510'. [ 470.844847][ T7426] FAULT_INJECTION: forcing a failure. [ 470.844847][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 470.935060][ T7426] CPU: 0 PID: 7426 Comm: syz.0.520 Not tainted syzkaller #0 [ 470.943209][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.953746][ T7426] Call Trace: [ 470.957273][ T7426] [ 470.960333][ T7426] dump_stack_lvl+0x18c/0x250 [ 470.965189][ T7426] ? show_regs_print_info+0x20/0x20 [ 470.970549][ T7426] ? load_image+0x420/0x420 [ 470.975341][ T7426] should_fail_ex+0x39d/0x4d0 [ 470.980337][ T7426] should_failslab+0x9/0x20 [ 470.985061][ T7426] slab_pre_alloc_hook+0x59/0x310 [ 470.990286][ T7426] kmem_cache_alloc+0x5a/0x2d0 [ 470.995262][ T7426] ? dst_alloc+0x105/0x170 [ 470.999874][ T7426] dst_alloc+0x105/0x170 [ 471.004569][ T7426] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 471.011336][ T7426] ? ip_route_output_key_hash+0x13d/0x330 [ 471.017243][ T7426] ip_route_output_key_hash+0x1f3/0x330 [ 471.023059][ T7426] ? ip_route_input_rcu+0x30f0/0x30f0 [ 471.028668][ T7426] ? rcu_force_quiescent_state+0x230/0x230 [ 471.034789][ T7426] ip_route_output_flow+0x2a/0x150 [ 471.040026][ T7426] ? security_sk_classify_flow+0x7b/0x90 [ 471.046009][ T7426] tcp_v4_connect+0x7ad/0x18e0 [ 471.051352][ T7426] ? __stack_depot_save+0x1f/0x630 [ 471.056819][ T7426] ? tcp_twsk_unique+0x990/0x990 [ 471.062040][ T7426] __inet_stream_connect+0x254/0xdc0 [ 471.067885][ T7426] ? inet_dgram_connect+0x360/0x360 [ 471.073416][ T7426] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 471.078845][ T7426] tcp_sendmsg_locked+0x4621/0x4bd0 [ 471.084185][ T7426] ? verify_lock_unused+0x140/0x140 [ 471.089641][ T7426] ? perf_trace_lock+0xfc/0x3b0 [ 471.094756][ T7426] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 471.101094][ T7426] ? mark_lock+0x94/0x320 [ 471.105628][ T7426] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 471.111779][ T7426] ? lock_chain_count+0x20/0x20 [ 471.117019][ T7426] ? tcp_set_state+0x680/0x680 [ 471.122290][ T7426] tcp_sendmsg+0x2f/0x50 [ 471.126819][ T7426] ? inet_send_prepare+0x260/0x260 [ 471.132454][ T7426] ____sys_sendmsg+0x5ba/0x960 [ 471.137498][ T7426] ? __lock_acquire+0x7d40/0x7d40 [ 471.142726][ T7426] ? __asan_memset+0x22/0x40 [ 471.147759][ T7426] ? __sys_sendmsg_sock+0x30/0x30 [ 471.153092][ T7426] ? __import_iovec+0x3fa/0x850 [ 471.158197][ T7426] ? import_iovec+0x73/0xa0 [ 471.162889][ T7426] ___sys_sendmsg+0x2a6/0x360 [ 471.167769][ T7426] ? __sys_sendmsg+0x2a0/0x2a0 [ 471.172904][ T7426] ? __lock_acquire+0x7d40/0x7d40 [ 471.178388][ T7426] __se_sys_sendmsg+0x1c2/0x2b0 [ 471.183972][ T7426] ? __x64_sys_sendmsg+0x80/0x80 [ 471.189257][ T7426] ? lockdep_hardirqs_on+0x98/0x150 [ 471.195110][ T7426] do_syscall_64+0x55/0xa0 [ 471.199762][ T7426] ? clear_bhb_loop+0x40/0x90 [ 471.204568][ T7426] ? clear_bhb_loop+0x40/0x90 [ 471.209431][ T7426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.215562][ T7426] RIP: 0033:0x7f08d2d9c819 [ 471.220214][ T7426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.240049][ T7426] RSP: 002b:00007f08d3c60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.248901][ T7426] RAX: ffffffffffffffda RBX: 00007f08d3015fa0 RCX: 00007f08d2d9c819 [ 471.257085][ T7426] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 471.265188][ T7426] RBP: 00007f08d3c60090 R08: 0000000000000000 R09: 0000000000000000 [ 471.273297][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.281402][ T7426] R13: 00007f08d3016038 R14: 00007f08d3015fa0 R15: 00007ffcb726e118 [ 471.289801][ T7426] [ 471.700719][ T7435] netlink: 'syz.2.522': attribute type 3 has an invalid length. [ 471.722835][ T7435] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.522'. [ 471.825332][ T7437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 471.876571][ T7437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 471.902681][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 471.982167][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 473.108970][ T7470] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 473.198383][ T7473] netlink: 'syz.0.536': attribute type 9 has an invalid length. [ 473.271069][ T7473] netlink: 181676 bytes leftover after parsing attributes in process `syz.0.536'. [ 473.677084][ T7475] netlink: 'syz.0.536': attribute type 9 has an invalid length. [ 473.692814][ T7475] netlink: 187864 bytes leftover after parsing attributes in process `syz.0.536'. [ 474.262923][ T7495] FAULT_INJECTION: forcing a failure. [ 474.262923][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 474.276472][ T7495] CPU: 1 PID: 7495 Comm: syz.1.544 Not tainted syzkaller #0 [ 474.284050][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 474.294405][ T7495] Call Trace: [ 474.297801][ T7495] [ 474.300889][ T7495] dump_stack_lvl+0x18c/0x250 [ 474.305913][ T7495] ? lock_chain_count+0x20/0x20 [ 474.310924][ T7495] ? show_regs_print_info+0x20/0x20 [ 474.316288][ T7495] ? load_image+0x420/0x420 [ 474.321106][ T7495] should_fail_ex+0x39d/0x4d0 [ 474.326007][ T7495] should_failslab+0x9/0x20 [ 474.330656][ T7495] slab_pre_alloc_hook+0x59/0x310 [ 474.335891][ T7495] kmem_cache_alloc+0x5a/0x2d0 [ 474.340790][ T7495] ? __inet_hash_connect+0x836/0x1870 [ 474.346369][ T7495] __inet_hash_connect+0x836/0x1870 [ 474.351778][ T7495] ? inet_hash_connect+0x130/0x130 [ 474.357169][ T7495] ? inet_bhash2_reset_saddr+0x80/0x80 [ 474.363113][ T7495] tcp_v4_connect+0xcac/0x18e0 [ 474.366094][ T7501] netlink: 1 bytes leftover after parsing attributes in process `syz.0.548'. [ 474.367971][ T7495] ? __stack_depot_save+0x1f/0x630 [ 474.368215][ T7495] ? tcp_twsk_unique+0x990/0x990 [ 474.387593][ T7495] __inet_stream_connect+0x254/0xdc0 [ 474.393192][ T7495] ? inet_dgram_connect+0x360/0x360 [ 474.398618][ T7495] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 474.403982][ T7495] tcp_sendmsg_locked+0x4621/0x4bd0 [ 474.409336][ T7495] ? verify_lock_unused+0x140/0x140 [ 474.414867][ T7495] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 474.421604][ T7495] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 474.427643][ T7495] ? mark_lock+0x94/0x320 [ 474.432180][ T7495] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 474.438281][ T7495] ? lock_chain_count+0x20/0x20 [ 474.443278][ T7495] ? tcp_set_state+0x680/0x680 [ 474.448258][ T7495] tcp_sendmsg+0x2f/0x50 [ 474.452665][ T7495] ? inet_send_prepare+0x260/0x260 [ 474.457863][ T7495] ____sys_sendmsg+0x5ba/0x960 [ 474.463149][ T7495] ? __lock_acquire+0x7d40/0x7d40 [ 474.468305][ T7495] ? __asan_memset+0x22/0x40 [ 474.473064][ T7495] ? __sys_sendmsg_sock+0x30/0x30 [ 474.478169][ T7495] ? __import_iovec+0x3fa/0x850 [ 474.483439][ T7495] ? import_iovec+0x73/0xa0 [ 474.488059][ T7495] ___sys_sendmsg+0x2a6/0x360 [ 474.492940][ T7495] ? get_pid_task+0x20/0x1e0 [ 474.497831][ T7495] ? __sys_sendmsg+0x2a0/0x2a0 [ 474.502835][ T7495] ? __lock_acquire+0x7d40/0x7d40 [ 474.508131][ T7495] __se_sys_sendmsg+0x1c2/0x2b0 [ 474.513095][ T7495] ? __x64_sys_sendmsg+0x80/0x80 [ 474.518243][ T7495] ? lockdep_hardirqs_on+0x98/0x150 [ 474.523736][ T7495] do_syscall_64+0x55/0xa0 [ 474.528417][ T7495] ? clear_bhb_loop+0x40/0x90 [ 474.533331][ T7495] ? clear_bhb_loop+0x40/0x90 [ 474.538120][ T7495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.544179][ T7495] RIP: 0033:0x7f823ad9c819 [ 474.548696][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.568704][ T7495] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.577223][ T7495] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 474.585461][ T7495] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 474.593593][ T7495] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 474.601821][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.610040][ T7495] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 474.618305][ T7495] [ 475.163251][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 475.282703][ T7514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 475.349554][ T7514] netlink: 'syz.0.550': attribute type 12 has an invalid length. [ 476.894771][ T7549] FAULT_INJECTION: forcing a failure. [ 476.894771][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 476.909049][ T7549] CPU: 1 PID: 7549 Comm: syz.1.563 Not tainted syzkaller #0 [ 476.916758][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.927234][ T7549] Call Trace: [ 476.930659][ T7549] [ 476.933963][ T7549] dump_stack_lvl+0x18c/0x250 [ 476.938781][ T7549] ? show_regs_print_info+0x20/0x20 [ 476.944182][ T7549] ? load_image+0x420/0x420 [ 476.948895][ T7549] should_fail_ex+0x39d/0x4d0 [ 476.953706][ T7549] should_failslab+0x9/0x20 [ 476.958301][ T7549] slab_pre_alloc_hook+0x59/0x310 [ 476.963515][ T7549] ? inet_bind2_bucket_find+0x62/0x620 [ 476.969993][ T7549] kmem_cache_alloc+0x5a/0x2d0 [ 476.974874][ T7549] ? __inet_hash_connect+0xbe4/0x1870 [ 476.980395][ T7549] __inet_hash_connect+0xbe4/0x1870 [ 476.986158][ T7549] ? inet_bhash2_reset_saddr+0x80/0x80 [ 476.992152][ T7549] tcp_v4_connect+0xcac/0x18e0 [ 476.997165][ T7549] ? __stack_depot_save+0x1f/0x630 [ 477.002675][ T7549] ? tcp_twsk_unique+0x990/0x990 [ 477.008050][ T7549] __inet_stream_connect+0x254/0xdc0 [ 477.014080][ T7549] ? inet_dgram_connect+0x360/0x360 [ 477.019701][ T7549] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 477.025214][ T7549] tcp_sendmsg_locked+0x4621/0x4bd0 [ 477.030842][ T7549] ? verify_lock_unused+0x140/0x140 [ 477.036520][ T7549] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 477.043519][ T7549] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 477.049408][ T7549] ? mark_lock+0x94/0x320 [ 477.053902][ T7549] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 477.060133][ T7549] ? lock_chain_count+0x20/0x20 [ 477.066390][ T7549] ? tcp_set_state+0x680/0x680 [ 477.071513][ T7549] tcp_sendmsg+0x2f/0x50 [ 477.075845][ T7549] ? inet_send_prepare+0x260/0x260 [ 477.081070][ T7549] ____sys_sendmsg+0x5ba/0x960 [ 477.086011][ T7549] ? __lock_acquire+0x7d40/0x7d40 [ 477.091176][ T7549] ? __asan_memset+0x22/0x40 [ 477.096394][ T7549] ? __sys_sendmsg_sock+0x30/0x30 [ 477.101559][ T7549] ? __import_iovec+0x3fa/0x850 [ 477.106602][ T7549] ? import_iovec+0x73/0xa0 [ 477.111547][ T7549] ___sys_sendmsg+0x2a6/0x360 [ 477.116331][ T7549] ? get_pid_task+0x20/0x1e0 [ 477.121194][ T7549] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.126231][ T7549] ? __lock_acquire+0x7d40/0x7d40 [ 477.131550][ T7549] __se_sys_sendmsg+0x1c2/0x2b0 [ 477.136610][ T7549] ? __x64_sys_sendmsg+0x80/0x80 [ 477.141760][ T7549] ? lockdep_hardirqs_on+0x98/0x150 [ 477.147165][ T7549] do_syscall_64+0x55/0xa0 [ 477.151678][ T7549] ? clear_bhb_loop+0x40/0x90 [ 477.156442][ T7549] ? clear_bhb_loop+0x40/0x90 [ 477.161401][ T7549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.167374][ T7549] RIP: 0033:0x7f823ad9c819 [ 477.171880][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.191919][ T7549] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.200608][ T7549] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 477.208827][ T7549] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 477.216873][ T7549] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 477.224922][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.233056][ T7549] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 477.241314][ T7549] [ 477.864658][ T7559] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 477.881623][ T7559] batman_adv: batadv0: Adding interface: netdevsim0 [ 477.892130][ T7559] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.928525][ T7559] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 478.180980][ T7578] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 478.221971][ T7578] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 478.229972][ T7578] netlink: 'syz.2.572': attribute type 8 has an invalid length. [ 478.243337][ T7578] __nla_validate_parse: 2 callbacks suppressed [ 478.243353][ T7578] netlink: 64 bytes leftover after parsing attributes in process `syz.2.572'. [ 478.372188][ T7583] syzkaller0: entered promiscuous mode [ 478.425829][ T7583] syzkaller0: entered allmulticast mode [ 478.599642][ T7588] FAULT_INJECTION: forcing a failure. [ 478.599642][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 478.651893][ T7588] CPU: 0 PID: 7588 Comm: syz.2.576 Not tainted syzkaller #0 [ 478.659356][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.669723][ T7588] Call Trace: [ 478.673365][ T7588] [ 478.676459][ T7588] dump_stack_lvl+0x18c/0x250 [ 478.681534][ T7588] ? fib_rules_lookup+0x9c/0xb40 [ 478.686753][ T7588] ? show_regs_print_info+0x20/0x20 [ 478.692215][ T7588] ? load_image+0x420/0x420 [ 478.697481][ T7588] ? fib_rules_lookup+0x9c/0xb40 [ 478.702653][ T7588] ? fib_rules_unregister+0x340/0x340 [ 478.708241][ T7588] should_fail_ex+0x39d/0x4d0 [ 478.713163][ T7588] should_failslab+0x9/0x20 [ 478.717898][ T7588] slab_pre_alloc_hook+0x59/0x310 [ 478.723095][ T7588] kmem_cache_alloc+0x5a/0x2d0 [ 478.728075][ T7588] ? dst_alloc+0x105/0x170 [ 478.732725][ T7588] dst_alloc+0x105/0x170 [ 478.737353][ T7588] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 478.743641][ T7588] ? ip_route_output_key_hash+0x13d/0x330 [ 478.749472][ T7588] ip_route_output_key_hash+0x1f3/0x330 [ 478.755127][ T7588] ? ip_route_input_rcu+0x30f0/0x30f0 [ 478.760670][ T7588] ? dst_release+0x121/0x1a0 [ 478.765463][ T7588] ip_route_output_flow+0x2a/0x150 [ 478.770691][ T7588] tcp_v4_connect+0xd4c/0x18e0 [ 478.775541][ T7588] ? __stack_depot_save+0x1f/0x630 [ 478.780863][ T7588] ? tcp_twsk_unique+0x990/0x990 [ 478.786159][ T7588] __inet_stream_connect+0x254/0xdc0 [ 478.791622][ T7588] ? inet_dgram_connect+0x360/0x360 [ 478.797157][ T7588] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 478.802537][ T7588] tcp_sendmsg_locked+0x4621/0x4bd0 [ 478.807847][ T7588] ? verify_lock_unused+0x140/0x140 [ 478.813348][ T7588] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 478.820328][ T7588] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 478.826192][ T7588] ? mark_lock+0x94/0x320 [ 478.830641][ T7588] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.836727][ T7588] ? lock_chain_count+0x20/0x20 [ 478.841802][ T7588] ? tcp_set_state+0x680/0x680 [ 478.846771][ T7588] tcp_sendmsg+0x2f/0x50 [ 478.851158][ T7588] ? inet_send_prepare+0x260/0x260 [ 478.856417][ T7588] ____sys_sendmsg+0x5ba/0x960 [ 478.861530][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 478.867152][ T7588] ? __asan_memset+0x22/0x40 [ 478.872333][ T7588] ? __sys_sendmsg_sock+0x30/0x30 [ 478.877629][ T7588] ? __import_iovec+0x3fa/0x850 [ 478.882759][ T7588] ? import_iovec+0x73/0xa0 [ 478.887408][ T7588] ___sys_sendmsg+0x2a6/0x360 [ 478.892268][ T7588] ? get_pid_task+0x20/0x1e0 [ 478.897249][ T7588] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.902291][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 478.907621][ T7588] __se_sys_sendmsg+0x1c2/0x2b0 [ 478.912622][ T7588] ? __x64_sys_sendmsg+0x80/0x80 [ 478.917884][ T7588] ? lockdep_hardirqs_on+0x98/0x150 [ 478.923340][ T7588] do_syscall_64+0x55/0xa0 [ 478.927862][ T7588] ? clear_bhb_loop+0x40/0x90 [ 478.932650][ T7588] ? clear_bhb_loop+0x40/0x90 [ 478.937475][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.943562][ T7588] RIP: 0033:0x7f7eb5b9c819 [ 478.948072][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.967962][ T7588] RSP: 002b:00007f7eb6b24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.976655][ T7588] RAX: ffffffffffffffda RBX: 00007f7eb5e15fa0 RCX: 00007f7eb5b9c819 [ 478.984788][ T7588] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 478.993012][ T7588] RBP: 00007f7eb6b24090 R08: 0000000000000000 R09: 0000000000000000 [ 479.001054][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.009284][ T7588] R13: 00007f7eb5e16038 R14: 00007f7eb5e15fa0 R15: 00007ffd23f89218 [ 479.017704][ T7588] [ 482.424302][ T5820] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 482.424392][ T5820] Bluetooth: hci3: Malformed LE Event: 0x02 [ 483.948561][ T7678] netlink: 'syz.3.610': attribute type 3 has an invalid length. [ 483.957793][ T7678] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.610'. [ 485.229558][ T7718] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 486.032802][ T7706] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.628'. [ 486.062701][ T7706] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 487.515920][ T7753] FAULT_INJECTION: forcing a failure. [ 487.515920][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 487.536433][ T7753] CPU: 1 PID: 7753 Comm: syz.1.638 Not tainted syzkaller #0 [ 487.543875][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.554262][ T7753] Call Trace: [ 487.557673][ T7753] [ 487.560727][ T7753] dump_stack_lvl+0x18c/0x250 [ 487.565608][ T7753] ? show_regs_print_info+0x20/0x20 [ 487.570958][ T7753] ? load_image+0x420/0x420 [ 487.575628][ T7753] ? __might_sleep+0xe0/0xe0 [ 487.580438][ T7753] ? __lock_acquire+0x7d40/0x7d40 [ 487.585573][ T7753] ? ipv4_dst_check+0x5b/0x80 [ 487.590511][ T7753] should_fail_ex+0x39d/0x4d0 [ 487.595551][ T7753] should_failslab+0x9/0x20 [ 487.600259][ T7753] slab_pre_alloc_hook+0x59/0x310 [ 487.605485][ T7753] kmem_cache_alloc_node+0x60/0x320 [ 487.610810][ T7753] ? __alloc_skb+0x103/0x2c0 [ 487.615658][ T7753] __alloc_skb+0x103/0x2c0 [ 487.620330][ T7753] tcp_stream_alloc_skb+0x3d/0x330 [ 487.625954][ T7753] tcp_connect+0x16a5/0x5190 [ 487.630817][ T7753] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 487.636873][ T7753] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 487.643122][ T7753] ? tcp_options_write+0xc70/0xc70 [ 487.648572][ T7753] ? get_random_u16+0x4ac/0x970 [ 487.653649][ T7753] ? lockdep_hardirqs_on+0x98/0x150 [ 487.659149][ T7753] ? get_random_u16+0x16e/0x970 [ 487.664208][ T7753] ? get_random_u16+0x513/0x970 [ 487.669373][ T7753] ? __asan_memset+0x22/0x40 [ 487.674242][ T7753] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 487.681167][ T7753] ? sk_setup_caps+0x7dc/0xa10 [ 487.686157][ T7753] ? dst_release+0x72/0x1a0 [ 487.690909][ T7753] tcp_v4_connect+0xfee/0x18e0 [ 487.695797][ T7753] ? __stack_depot_save+0x1f/0x630 [ 487.701206][ T7753] ? tcp_twsk_unique+0x990/0x990 [ 487.706384][ T7753] __inet_stream_connect+0x254/0xdc0 [ 487.711997][ T7753] ? inet_dgram_connect+0x360/0x360 [ 487.717483][ T7753] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 487.722871][ T7753] tcp_sendmsg_locked+0x4621/0x4bd0 [ 487.728197][ T7753] ? verify_lock_unused+0x140/0x140 [ 487.733616][ T7753] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 487.740373][ T7753] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 487.746550][ T7753] ? mark_lock+0x94/0x320 [ 487.751038][ T7753] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 487.757269][ T7753] ? lock_chain_count+0x20/0x20 [ 487.762333][ T7753] ? tcp_set_state+0x680/0x680 [ 487.767484][ T7753] tcp_sendmsg+0x2f/0x50 [ 487.771937][ T7753] ? inet_send_prepare+0x260/0x260 [ 487.777271][ T7753] ____sys_sendmsg+0x5ba/0x960 [ 487.782167][ T7753] ? __lock_acquire+0x7d40/0x7d40 [ 487.787530][ T7753] ? __asan_memset+0x22/0x40 [ 487.792278][ T7753] ? __sys_sendmsg_sock+0x30/0x30 [ 487.797817][ T7753] ? __import_iovec+0x3fa/0x850 [ 487.803196][ T7753] ? import_iovec+0x73/0xa0 [ 487.808122][ T7753] ___sys_sendmsg+0x2a6/0x360 [ 487.812922][ T7753] ? get_pid_task+0x20/0x1e0 [ 487.817775][ T7753] ? __sys_sendmsg+0x2a0/0x2a0 [ 487.822870][ T7753] ? __lock_acquire+0x7d40/0x7d40 [ 487.828369][ T7753] __se_sys_sendmsg+0x1c2/0x2b0 [ 487.833414][ T7753] ? __x64_sys_sendmsg+0x80/0x80 [ 487.838630][ T7753] ? lockdep_hardirqs_on+0x98/0x150 [ 487.844001][ T7753] do_syscall_64+0x55/0xa0 [ 487.848619][ T7753] ? clear_bhb_loop+0x40/0x90 [ 487.853956][ T7753] ? clear_bhb_loop+0x40/0x90 [ 487.858869][ T7753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.865046][ T7753] RIP: 0033:0x7f823ad9c819 [ 487.869670][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.889587][ T7753] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.898447][ T7753] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 487.906641][ T7753] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 487.914724][ T7753] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 487.923506][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.931763][ T7753] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 487.940526][ T7753] [ 487.960883][ T7754] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 488.452540][ T7760] netlink: 'syz.1.639': attribute type 3 has an invalid length. [ 488.545813][ T7760] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.639'. [ 488.608300][ T7762] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 488.650259][ T7766] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 488.680963][ T7762] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 488.706353][ T7762] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.640'. [ 488.782031][ T7762] openvswitch: netlink: Message has 4 unknown bytes. [ 489.323427][ T7773] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 489.345160][ T7770] netlink: 'syz.3.642': attribute type 21 has an invalid length. [ 489.361953][ T7773] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.643'. [ 489.411977][ T7770] netlink: 164 bytes leftover after parsing attributes in process `syz.3.642'. [ 490.549910][ T7788] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 491.588336][ T7815] netlink: 144 bytes leftover after parsing attributes in process `syz.2.659'. [ 491.871858][ T7815] team0: Port device team_slave_0 removed [ 491.888787][ T7815] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 491.899363][ T7820] FAULT_INJECTION: forcing a failure. [ 491.899363][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 491.922698][ T7820] CPU: 0 PID: 7820 Comm: syz.0.660 Not tainted syzkaller #0 [ 491.930572][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.941061][ T7820] Call Trace: [ 491.944419][ T7820] [ 491.947418][ T7820] dump_stack_lvl+0x18c/0x250 [ 491.952204][ T7820] ? show_regs_print_info+0x20/0x20 [ 491.957555][ T7820] ? load_image+0x420/0x420 [ 491.962287][ T7820] should_fail_ex+0x39d/0x4d0 [ 491.967109][ T7820] should_failslab+0x9/0x20 [ 491.971667][ T7820] slab_pre_alloc_hook+0x59/0x310 [ 491.976855][ T7820] kmem_cache_alloc+0x5a/0x2d0 [ 491.981761][ T7820] ? __nf_conntrack_alloc+0x99/0x380 [ 491.987190][ T7820] __nf_conntrack_alloc+0x99/0x380 [ 491.992401][ T7820] init_conntrack+0x177/0xf10 [ 491.997373][ T7820] ? early_drop+0x7f0/0x7f0 [ 492.002044][ T7820] ? nf_conntrack_find_get+0x650/0x650 [ 492.007588][ T7820] ? __local_bh_enable_ip+0x13a/0x1c0 [ 492.013322][ T7820] ? __siphash_unaligned+0x22e/0x3a0 [ 492.018900][ T7820] nf_conntrack_in+0xc06/0x15c0 [ 492.024136][ T7820] ? nf_ct_pernet+0x270/0x270 [ 492.029051][ T7820] ? ipt_do_table+0x2c1/0x15e0 [ 492.034222][ T7820] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 492.039781][ T7820] ? ipv4_conntrack_local+0x123/0x200 [ 492.045365][ T7820] ? ipv4_conntrack_in+0x20/0x20 [ 492.050405][ T7820] nf_hook_slow+0xbd/0x200 [ 492.054932][ T7820] ? nf_hook+0x390/0x390 [ 492.059264][ T7820] nf_hook+0x228/0x390 [ 492.063423][ T7820] ? nf_hook+0xa2/0x390 [ 492.067678][ T7820] ? __ip_local_out+0x5f0/0x5f0 [ 492.072680][ T7820] ? nf_hook+0x390/0x390 [ 492.077136][ T7820] ? __lock_acquire+0x7d40/0x7d40 [ 492.082419][ T7820] __ip_local_out+0x4db/0x5f0 [ 492.087224][ T7820] ? nf_hook+0x390/0x390 [ 492.091569][ T7820] ? __ip_queue_xmit+0x5d/0x1950 [ 492.096775][ T7820] __ip_queue_xmit+0xf7c/0x1950 [ 492.101862][ T7820] ? __ip_queue_xmit+0x5d/0x1950 [ 492.107365][ T7820] __tcp_transmit_skb+0x1d6b/0x33f0 [ 492.112684][ T7820] ? __tcp_get_metrics+0x7db/0x870 [ 492.118182][ T7820] ? __tcp_send_ack+0x5a0/0x5a0 [ 492.123302][ T7820] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 492.129276][ T7820] tcp_connect+0x327a/0x5190 [ 492.134224][ T7820] ? tcp_options_write+0xc70/0xc70 [ 492.139461][ T7820] ? get_random_u16+0x16e/0x970 [ 492.144491][ T7820] ? get_random_u16+0x513/0x970 [ 492.149491][ T7820] ? __asan_memset+0x22/0x40 [ 492.154220][ T7820] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 492.161235][ T7820] ? sk_setup_caps+0x7dc/0xa10 [ 492.166192][ T7820] ? dst_release+0x72/0x1a0 [ 492.171001][ T7820] tcp_v4_connect+0xfee/0x18e0 [ 492.175912][ T7820] ? __stack_depot_save+0x1f/0x630 [ 492.181506][ T7820] ? tcp_twsk_unique+0x990/0x990 [ 492.186649][ T7820] __inet_stream_connect+0x254/0xdc0 [ 492.192153][ T7820] ? inet_dgram_connect+0x360/0x360 [ 492.197601][ T7820] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 492.203091][ T7820] tcp_sendmsg_locked+0x4621/0x4bd0 [ 492.208799][ T7820] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 492.215142][ T7820] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 492.221838][ T7820] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 492.227860][ T7820] ? mark_lock+0x94/0x320 [ 492.232338][ T7820] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 492.238508][ T7820] ? lock_chain_count+0x20/0x20 [ 492.243471][ T7820] ? tcp_set_state+0x680/0x680 [ 492.248585][ T7820] tcp_sendmsg+0x2f/0x50 [ 492.252890][ T7820] ? inet_send_prepare+0x260/0x260 [ 492.258148][ T7820] ____sys_sendmsg+0x5ba/0x960 [ 492.263004][ T7820] ? __lock_acquire+0x7d40/0x7d40 [ 492.268142][ T7820] ? __asan_memset+0x22/0x40 [ 492.272834][ T7820] ? __sys_sendmsg_sock+0x30/0x30 [ 492.277976][ T7820] ? __import_iovec+0x3fa/0x850 [ 492.283053][ T7820] ? import_iovec+0x73/0xa0 [ 492.287658][ T7820] ___sys_sendmsg+0x2a6/0x360 [ 492.292575][ T7820] ? __sys_sendmsg+0x2a0/0x2a0 [ 492.297529][ T7820] ? trace_call_bpf+0xc3/0x6c0 [ 492.302814][ T7820] __se_sys_sendmsg+0x1c2/0x2b0 [ 492.307764][ T7820] ? __x64_sys_sendmsg+0x80/0x80 [ 492.312941][ T7820] ? lockdep_hardirqs_on+0x98/0x150 [ 492.318402][ T7820] do_syscall_64+0x55/0xa0 [ 492.322890][ T7820] ? clear_bhb_loop+0x40/0x90 [ 492.327787][ T7820] ? clear_bhb_loop+0x40/0x90 [ 492.332630][ T7820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.338658][ T7820] RIP: 0033:0x7f08d2d9c819 [ 492.343206][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.363352][ T7820] RSP: 002b:00007f08d3c60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.372024][ T7820] RAX: ffffffffffffffda RBX: 00007f08d3015fa0 RCX: 00007f08d2d9c819 [ 492.380170][ T7820] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 492.388325][ T7820] RBP: 00007f08d3c60090 R08: 0000000000000000 R09: 0000000000000000 [ 492.396434][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.404461][ T7820] R13: 00007f08d3016038 R14: 00007f08d3015fa0 R15: 00007ffcb726e118 [ 492.413199][ T7820] [ 492.745165][ T7832] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 492.865449][ T7838] netlink: 'syz.0.665': attribute type 3 has an invalid length. [ 492.902739][ T7838] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 492.934282][ T7838] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.665'. [ 492.938472][ T7832] team0: Device vxcan1 is of different type [ 493.758297][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 493.765437][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 493.771848][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 493.779180][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 493.855304][ T7851] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 493.865402][ T7851] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 493.883019][ T7851] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 494.637347][ T7860] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 494.645894][ T7860] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 494.656587][ T7860] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 494.866608][ T7864] FAULT_INJECTION: forcing a failure. [ 494.866608][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 494.913065][ T7864] CPU: 1 PID: 7864 Comm: syz.1.673 Not tainted syzkaller #0 [ 494.921795][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.932798][ T7864] Call Trace: [ 494.936577][ T7864] [ 494.939945][ T7864] dump_stack_lvl+0x18c/0x250 [ 494.945048][ T7864] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 494.950810][ T7864] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.957442][ T7864] ? show_regs_print_info+0x20/0x20 [ 494.963086][ T7864] ? load_image+0x420/0x420 [ 494.968845][ T7864] should_fail_ex+0x39d/0x4d0 [ 494.974223][ T7864] should_failslab+0x9/0x20 [ 494.979053][ T7864] slab_pre_alloc_hook+0x59/0x310 [ 494.984321][ T7864] ? nf_ct_ext_add+0x1ab/0x440 [ 494.989596][ T7864] ? nf_ct_ext_add+0x1ab/0x440 [ 494.994487][ T7864] __kmem_cache_alloc_node+0x53/0x250 [ 495.000565][ T7864] ? nf_ct_ext_add+0x1ab/0x440 [ 495.005787][ T7864] __kmalloc_node_track_caller+0xa2/0x230 [ 495.012725][ T7864] krealloc+0x86/0x120 [ 495.017193][ T7864] nf_ct_ext_add+0x1ab/0x440 [ 495.022148][ T7864] init_conntrack+0x69c/0xf10 [ 495.027161][ T7864] ? early_drop+0x7f0/0x7f0 [ 495.031877][ T7864] ? nf_conntrack_find_get+0x650/0x650 [ 495.037517][ T7864] ? __local_bh_enable_ip+0x13a/0x1c0 [ 495.043052][ T7864] ? __siphash_unaligned+0x22e/0x3a0 [ 495.048605][ T7864] nf_conntrack_in+0xc06/0x15c0 [ 495.053851][ T7864] ? nf_ct_pernet+0x270/0x270 [ 495.058955][ T7864] ? ipt_do_table+0x2c1/0x15e0 [ 495.064053][ T7864] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 495.069903][ T7864] ? ipv4_conntrack_local+0x123/0x200 [ 495.075511][ T7864] ? ipv4_conntrack_in+0x20/0x20 [ 495.080658][ T7864] nf_hook_slow+0xbd/0x200 [ 495.085230][ T7864] ? nf_hook+0x390/0x390 [ 495.089680][ T7864] nf_hook+0x228/0x390 [ 495.094208][ T7864] ? nf_hook+0xa2/0x390 [ 495.098711][ T7864] ? __ip_local_out+0x5f0/0x5f0 [ 495.103802][ T7864] ? nf_hook+0x390/0x390 [ 495.108151][ T7864] ? __lock_acquire+0x7d40/0x7d40 [ 495.113387][ T7864] __ip_local_out+0x4db/0x5f0 [ 495.118295][ T7864] ? nf_hook+0x390/0x390 [ 495.122939][ T7864] ? __ip_queue_xmit+0x5d/0x1950 [ 495.129109][ T7864] __ip_queue_xmit+0xf7c/0x1950 [ 495.134292][ T7864] ? __ip_queue_xmit+0x5d/0x1950 [ 495.140260][ T7864] __tcp_transmit_skb+0x1d6b/0x33f0 [ 495.145765][ T7864] ? __tcp_get_metrics+0x7db/0x870 [ 495.151442][ T7864] ? __tcp_send_ack+0x5a0/0x5a0 [ 495.156797][ T7864] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 495.163012][ T7864] tcp_connect+0x327a/0x5190 [ 495.168295][ T7864] ? tcp_options_write+0xc70/0xc70 [ 495.173573][ T7864] ? get_random_u16+0x16e/0x970 [ 495.178981][ T7864] ? get_random_u16+0x513/0x970 [ 495.184121][ T7864] ? __asan_memset+0x22/0x40 [ 495.188878][ T7864] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 495.195746][ T7864] ? sk_setup_caps+0x7dc/0xa10 [ 495.200931][ T7864] ? dst_release+0x72/0x1a0 [ 495.205610][ T7864] tcp_v4_connect+0xfee/0x18e0 [ 495.211266][ T7864] ? __stack_depot_save+0x1f/0x630 [ 495.216612][ T7864] ? tcp_twsk_unique+0x990/0x990 [ 495.221727][ T7864] __inet_stream_connect+0x254/0xdc0 [ 495.227293][ T7864] ? inet_dgram_connect+0x360/0x360 [ 495.233123][ T7864] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 495.238498][ T7864] tcp_sendmsg_locked+0x4621/0x4bd0 [ 495.244395][ T7864] ? verify_lock_unused+0x140/0x140 [ 495.250032][ T7864] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 495.256964][ T7864] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 495.262956][ T7864] ? mark_lock+0x94/0x320 [ 495.267414][ T7864] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 495.273871][ T7864] ? lock_chain_count+0x20/0x20 [ 495.278970][ T7864] ? tcp_set_state+0x680/0x680 [ 495.284244][ T7864] tcp_sendmsg+0x2f/0x50 [ 495.288601][ T7864] ? inet_send_prepare+0x260/0x260 [ 495.293920][ T7864] ____sys_sendmsg+0x5ba/0x960 [ 495.298790][ T7864] ? __lock_acquire+0x7d40/0x7d40 [ 495.303990][ T7864] ? __asan_memset+0x22/0x40 [ 495.308861][ T7864] ? __sys_sendmsg_sock+0x30/0x30 [ 495.314044][ T7864] ? __import_iovec+0x3fa/0x850 [ 495.319046][ T7864] ? import_iovec+0x73/0xa0 [ 495.323769][ T7864] ___sys_sendmsg+0x2a6/0x360 [ 495.328543][ T7864] ? get_pid_task+0x20/0x1e0 [ 495.333316][ T7864] ? __sys_sendmsg+0x2a0/0x2a0 [ 495.338335][ T7864] ? __lock_acquire+0x7d40/0x7d40 [ 495.343719][ T7864] __se_sys_sendmsg+0x1c2/0x2b0 [ 495.348698][ T7864] ? __x64_sys_sendmsg+0x80/0x80 [ 495.354150][ T7864] ? lockdep_hardirqs_on+0x98/0x150 [ 495.359472][ T7864] do_syscall_64+0x55/0xa0 [ 495.363966][ T7864] ? clear_bhb_loop+0x40/0x90 [ 495.368723][ T7864] ? clear_bhb_loop+0x40/0x90 [ 495.373499][ T7864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.379477][ T7864] RIP: 0033:0x7f823ad9c819 [ 495.383982][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.403858][ T7864] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.412549][ T7864] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 495.420684][ T7864] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 495.428819][ T7864] RBP: 00007f823bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 495.437310][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.445624][ T7864] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 495.453876][ T7864] [ 495.791923][ T7884] netlink: 'syz.0.680': attribute type 21 has an invalid length. [ 496.328640][ T7905] FAULT_INJECTION: forcing a failure. [ 496.328640][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 496.342500][ T7905] CPU: 1 PID: 7905 Comm: syz.0.688 Not tainted syzkaller #0 [ 496.349932][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.360473][ T7905] Call Trace: [ 496.363868][ T7905] [ 496.367062][ T7905] dump_stack_lvl+0x18c/0x250 [ 496.371831][ T7905] ? show_regs_print_info+0x20/0x20 [ 496.377318][ T7905] ? load_image+0x420/0x420 [ 496.381945][ T7905] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 496.388133][ T7905] ? lockdep_hardirqs_on+0x98/0x150 [ 496.393452][ T7905] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 496.399506][ T7905] should_fail_ex+0x39d/0x4d0 [ 496.404333][ T7905] should_failslab+0x9/0x20 [ 496.408931][ T7905] slab_pre_alloc_hook+0x59/0x310 [ 496.414068][ T7905] ? __mod_timer+0x984/0xdb0 [ 496.418895][ T7905] kmem_cache_alloc+0x5a/0x2d0 [ 496.423965][ T7905] ? skb_clone+0x1eb/0x370 [ 496.428519][ T7905] skb_clone+0x1eb/0x370 [ 496.432846][ T7905] ? __neigh_event_send+0xe56/0x1440 [ 496.438304][ T7905] __neigh_event_send+0xe63/0x1440 [ 496.443664][ T7905] neigh_resolve_output+0x19b/0x730 [ 496.449125][ T7905] ? ip_finish_output2+0x11e0/0x11e0 [ 496.454678][ T7905] ? ip_finish_output2+0x457/0x11e0 [ 496.460243][ T7905] ip_finish_output2+0xd3a/0x11e0 [ 496.465459][ T7905] ? ip_finish_output2+0x457/0x11e0 [ 496.471309][ T7905] ? ip_fragment+0x210/0x210 [ 496.476129][ T7905] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 496.481170][ T7905] ? ip_finish_output+0x3ef/0x4c0 [ 496.486446][ T7905] ip_output+0x2a1/0x3b0 [ 496.490823][ T7905] ? ip_output+0x60/0x3b0 [ 496.495275][ T7905] ? __ip_queue_xmit+0x5d/0x1950 [ 496.500345][ T7905] __ip_queue_xmit+0x1049/0x1950 [ 496.505623][ T7905] ? __ip_queue_xmit+0x5d/0x1950 [ 496.510708][ T7905] __tcp_transmit_skb+0x1d6b/0x33f0 [ 496.516161][ T7905] ? __tcp_get_metrics+0x7db/0x870 [ 496.521661][ T7905] ? __tcp_send_ack+0x5a0/0x5a0 [ 496.526830][ T7905] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 496.532773][ T7905] tcp_connect+0x327a/0x5190 [ 496.537850][ T7905] ? tcp_options_write+0xc70/0xc70 [ 496.543160][ T7905] ? get_random_u16+0x16e/0x970 [ 496.548231][ T7905] ? get_random_u16+0x513/0x970 [ 496.553286][ T7905] ? __asan_memset+0x22/0x40 [ 496.558394][ T7905] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 496.565336][ T7905] ? sk_setup_caps+0x7dc/0xa10 [ 496.570320][ T7905] ? dst_release+0x72/0x1a0 [ 496.575116][ T7905] tcp_v4_connect+0xfee/0x18e0 [ 496.579997][ T7905] ? __stack_depot_save+0x1f/0x630 [ 496.585427][ T7905] ? tcp_twsk_unique+0x990/0x990 [ 496.590577][ T7905] __inet_stream_connect+0x254/0xdc0 [ 496.596296][ T7905] ? inet_dgram_connect+0x360/0x360 [ 496.601927][ T7905] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 496.607441][ T7905] tcp_sendmsg_locked+0x4621/0x4bd0 [ 496.612860][ T7905] ? verify_lock_unused+0x140/0x140 [ 496.618363][ T7905] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 496.625241][ T7905] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 496.631123][ T7905] ? mark_lock+0x94/0x320 [ 496.635665][ T7905] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 496.641989][ T7905] ? lock_chain_count+0x20/0x20 [ 496.647029][ T7905] ? tcp_set_state+0x680/0x680 [ 496.652276][ T7905] tcp_sendmsg+0x2f/0x50 [ 496.657054][ T7905] ? inet_send_prepare+0x260/0x260 [ 496.662348][ T7905] ____sys_sendmsg+0x5ba/0x960 [ 496.667294][ T7905] ? __lock_acquire+0x7d40/0x7d40 [ 496.672727][ T7905] ? __asan_memset+0x22/0x40 [ 496.678345][ T7905] ? __sys_sendmsg_sock+0x30/0x30 [ 496.683856][ T7905] ? __import_iovec+0x3fa/0x850 [ 496.689164][ T7905] ? import_iovec+0x73/0xa0 [ 496.693830][ T7905] ___sys_sendmsg+0x2a6/0x360 [ 496.698797][ T7905] ? get_pid_task+0x20/0x1e0 [ 496.703694][ T7905] ? __sys_sendmsg+0x2a0/0x2a0 [ 496.709341][ T7905] ? __lock_acquire+0x7d40/0x7d40 [ 496.714962][ T7905] __se_sys_sendmsg+0x1c2/0x2b0 [ 496.720526][ T7905] ? __x64_sys_sendmsg+0x80/0x80 [ 496.725733][ T7905] ? lockdep_hardirqs_on+0x98/0x150 [ 496.731270][ T7905] do_syscall_64+0x55/0xa0 [ 496.735783][ T7905] ? clear_bhb_loop+0x40/0x90 [ 496.740665][ T7905] ? clear_bhb_loop+0x40/0x90 [ 496.745485][ T7905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.751661][ T7905] RIP: 0033:0x7f08d2d9c819 [ 496.756205][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.776097][ T7905] RSP: 002b:00007f08d3c60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.784719][ T7905] RAX: ffffffffffffffda RBX: 00007f08d3015fa0 RCX: 00007f08d2d9c819 [ 496.792862][ T7905] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000015 [ 496.801038][ T7905] RBP: 00007f08d3c60090 R08: 0000000000000000 R09: 0000000000000000 [ 496.809129][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.817566][ T7905] R13: 00007f08d3016038 R14: 00007f08d3015fa0 R15: 00007ffcb726e118 [ 496.825746][ T7905] [ 498.517619][ T7936] netlink: 'syz.2.698': attribute type 10 has an invalid length. [ 498.526976][ T7936] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 498.696781][ T7943] netlink: 'syz.0.700': attribute type 46 has an invalid length. [ 498.915625][ T7945] netlink: 'syz.2.701': attribute type 21 has an invalid length. [ 498.935715][ T7945] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.701'. [ 499.313225][ T7955] delete_channel: no stack [ 499.372056][ T7955] delete_channel: no stack [ 499.505694][ T7960] netlink: 'syz.2.706': attribute type 29 has an invalid length. [ 499.543769][ T7960] netlink: 'syz.2.706': attribute type 29 has an invalid length. [ 499.575678][ T7962] netlink: 'syz.2.706': attribute type 29 has an invalid length. [ 499.830843][ T5822] Bluetooth: hci3: ACL packet too small [ 499.840125][ T7968] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 501.433401][ T7968] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.454892][ T7968] bond0: (slave team0): Enslaving as an active interface with an up link [ 501.909300][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.915894][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.028297][ T7992] FAULT_INJECTION: forcing a failure. [ 502.028297][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 502.042031][ T7992] CPU: 1 PID: 7992 Comm: syz.0.717 Not tainted syzkaller #0 [ 502.049461][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.059641][ T7992] Call Trace: [ 502.062954][ T7992] [ 502.066058][ T7992] dump_stack_lvl+0x18c/0x250 [ 502.070872][ T7992] ? show_regs_print_info+0x20/0x20 [ 502.076129][ T7992] ? load_image+0x420/0x420 [ 502.080851][ T7992] ? __might_sleep+0xe0/0xe0 [ 502.085525][ T7992] ? __lock_acquire+0x7d40/0x7d40 [ 502.090671][ T7992] should_fail_ex+0x39d/0x4d0 [ 502.095472][ T7992] should_failslab+0x9/0x20 [ 502.100110][ T7992] slab_pre_alloc_hook+0x59/0x310 [ 502.105170][ T7992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 502.111194][ T7992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 502.117132][ T7992] __kmem_cache_alloc_node+0x53/0x250 [ 502.122834][ T7992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 502.128900][ T7992] __kmalloc+0xa4/0x230 [ 502.133130][ T7992] tomoyo_realpath_from_path+0xe3/0x5d0 [ 502.139094][ T7992] tomoyo_path_number_perm+0x248/0x620 [ 502.144766][ T7992] ? tomoyo_path_number_perm+0x217/0x620 [ 502.150424][ T7992] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 502.155905][ T7992] ? ksys_write+0x1c4/0x260 [ 502.161284][ T7992] ? __fget_files+0x28/0x4b0 [ 502.165972][ T7992] ? __fget_files+0x28/0x4b0 [ 502.170621][ T7992] security_file_ioctl+0x70/0xa0 [ 502.175603][ T7992] __se_sys_ioctl+0x48/0x170 [ 502.180341][ T7992] do_syscall_64+0x55/0xa0 [ 502.184880][ T7992] ? clear_bhb_loop+0x40/0x90 [ 502.189617][ T7992] ? clear_bhb_loop+0x40/0x90 [ 502.194356][ T7992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.200544][ T7992] RIP: 0033:0x7f08d2d9c819 [ 502.204983][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.224717][ T7992] RSP: 002b:00007f08d3c60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.233522][ T7992] RAX: ffffffffffffffda RBX: 00007f08d3015fa0 RCX: 00007f08d2d9c819 [ 502.241700][ T7992] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000003 [ 502.249777][ T7992] RBP: 00007f08d3c60090 R08: 0000000000000000 R09: 0000000000000000 [ 502.257761][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.265780][ T7992] R13: 00007f08d3016038 R14: 00007f08d3015fa0 R15: 00007ffcb726e118 [ 502.274008][ T7992] [ 502.301409][ T7992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.273356][ T8006] delete_channel: no stack [ 503.412437][ T8014] netlink: 'syz.3.724': attribute type 11 has an invalid length. [ 503.466964][ T8017] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 503.501909][ T8017] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 503.529156][ T8020] netlink: 'syz.1.722': attribute type 29 has an invalid length. [ 503.735574][ T8026] FAULT_INJECTION: forcing a failure. [ 503.735574][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 503.753646][ T8026] CPU: 0 PID: 8026 Comm: syz.3.727 Not tainted syzkaller #0 [ 503.761056][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.771247][ T8026] Call Trace: [ 503.774566][ T8026] [ 503.777627][ T8026] dump_stack_lvl+0x18c/0x250 [ 503.782358][ T8026] ? show_regs_print_info+0x20/0x20 [ 503.787709][ T8026] ? load_image+0x420/0x420 [ 503.792260][ T8026] ? __might_sleep+0xe0/0xe0 [ 503.796897][ T8026] ? __lock_acquire+0x7d40/0x7d40 [ 503.802140][ T8026] should_fail_ex+0x39d/0x4d0 [ 503.806965][ T8026] should_failslab+0x9/0x20 [ 503.811605][ T8026] slab_pre_alloc_hook+0x59/0x310 [ 503.816687][ T8026] ? tomoyo_encode+0x28b/0x540 [ 503.821600][ T8026] ? tomoyo_encode+0x28b/0x540 [ 503.826822][ T8026] __kmem_cache_alloc_node+0x53/0x250 [ 503.832605][ T8026] ? tomoyo_encode+0x28b/0x540 [ 503.837435][ T8026] __kmalloc+0xa4/0x230 [ 503.841738][ T8026] tomoyo_encode+0x28b/0x540 [ 503.846398][ T8026] tomoyo_realpath_from_path+0x592/0x5d0 [ 503.852176][ T8026] tomoyo_path_number_perm+0x248/0x620 [ 503.857674][ T8026] ? tomoyo_path_number_perm+0x217/0x620 [ 503.863526][ T8026] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 503.869033][ T8026] ? ksys_write+0x1c4/0x260 [ 503.873902][ T8026] ? __fget_files+0x28/0x4b0 [ 503.878550][ T8026] ? __fget_files+0x28/0x4b0 [ 503.883202][ T8026] security_file_ioctl+0x70/0xa0 [ 503.888354][ T8026] __se_sys_ioctl+0x48/0x170 [ 503.893162][ T8026] do_syscall_64+0x55/0xa0 [ 503.897613][ T8026] ? clear_bhb_loop+0x40/0x90 [ 503.902426][ T8026] ? clear_bhb_loop+0x40/0x90 [ 503.907317][ T8026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.913419][ T8026] RIP: 0033:0x7fe8fa99c819 [ 503.918059][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.937870][ T8026] RSP: 002b:00007fe8fb7da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.946417][ T8026] RAX: ffffffffffffffda RBX: 00007fe8fac15fa0 RCX: 00007fe8fa99c819 [ 503.954433][ T8026] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000003 [ 503.962785][ T8026] RBP: 00007fe8fb7da090 R08: 0000000000000000 R09: 0000000000000000 [ 503.970789][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.978961][ T8026] R13: 00007fe8fac16038 R14: 00007fe8fac15fa0 R15: 00007ffe55d669c8 [ 503.987040][ T8026] [ 504.018960][ T8024] syzkaller0: entered promiscuous mode [ 504.026912][ T8026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.039522][ T8024] syzkaller0: entered allmulticast mode [ 504.623837][ T8043] syz.2.731[8043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.938987][ T8050] syzkaller0: entered promiscuous mode [ 504.961039][ T8050] syzkaller0: entered allmulticast mode [ 505.031018][ T8058] netlink: 'syz.2.734': attribute type 46 has an invalid length. [ 505.083934][ T8053] netlink: 'syz.3.732': attribute type 4 has an invalid length. [ 505.111536][ T8053] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.732'. [ 508.025194][ T8076] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.738'. [ 510.066859][ T8070] netlink: 'syz.2.736': attribute type 10 has an invalid length. [ 510.081021][ T8070] team0: Port device hsr_slave_0 added [ 510.350579][ T8091] syzkaller0: entered promiscuous mode [ 510.356136][ T8091] syzkaller0: entered allmulticast mode [ 510.730060][ T8104] tap1: tun_chr_ioctl cmd 1074025677 [ 510.786715][ T8104] tap1: linktype set to 778 [ 513.531817][ T8159] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 513.548656][ T8159] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.764'. [ 513.802816][ T8165] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.765'. [ 514.283401][ T8172] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 514.307070][ T8172] team0: Device hsr0 is up. Set it down before adding it as a team port [ 514.325511][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.767'. [ 514.340174][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.767'. [ 514.368343][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.767'. [ 514.517994][ T8179] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.770'. [ 514.733875][ T8189] syz.3.773 (8189) used obsolete PPPIOCDETACH ioctl [ 516.374994][ T8215] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 516.710678][ T8225] netlink: 176 bytes leftover after parsing attributes in process `syz.1.783'. [ 516.752795][ T8225] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 516.778848][ T8225] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.783'. [ 517.188260][ T8241] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.787'. [ 517.690968][ T8257] pim6reg1: entered promiscuous mode [ 517.706622][ T8257] pim6reg1: entered allmulticast mode [ 518.306191][ T8271] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.793'. [ 519.058794][ T8283] netlink: 'syz.2.800': attribute type 21 has an invalid length. [ 519.079781][ T8283] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 519.096987][ T8283] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.800'. [ 519.229349][ T8283] syzkaller0: entered allmulticast mode [ 519.602546][ T8292] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 522.191628][ T8328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.813'. [ 526.281436][ T8352] netlink: 763 bytes leftover after parsing attributes in process `syz.1.820'. [ 528.259299][ T8360] tap0: tun_chr_ioctl cmd 1074025675 [ 528.264887][ T8360] tap0: persist enabled [ 528.275729][ T8367] tap1: tun_chr_ioctl cmd 1074025677 [ 528.281725][ T8367] tap1: linktype set to 778 [ 528.292560][ T8368] tap0: tun_chr_ioctl cmd 1074025675 [ 528.299679][ T8368] tap0: persist enabled [ 529.487395][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.415152][ T8411] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.835'. [ 530.815888][ T8422] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 530.850739][ T8422] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.865476][ T8422] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.876656][ T8422] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.894692][ T8422] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.965352][ T8422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.978107][ T8422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.991176][ T8422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.004960][ T8422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.038265][ T8422] team0: Port device geneve1 added [ 531.058917][ T8426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.838'. [ 531.147315][ T8426] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 531.155722][ T8426] CPU: 0 PID: 8426 Comm: syz.3.838 Not tainted syzkaller #0 [ 531.163078][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.173359][ T8426] Call Trace: [ 531.176686][ T8426] [ 531.179664][ T8426] dump_stack_lvl+0x18c/0x250 [ 531.184417][ T8426] ? show_regs_print_info+0x20/0x20 [ 531.189849][ T8426] ? load_image+0x420/0x420 [ 531.194613][ T8426] sysfs_warn_dup+0x8e/0xa0 [ 531.199273][ T8426] sysfs_do_create_link_sd+0xc0/0x110 [ 531.204719][ T8426] device_add_class_symlinks+0x1cf/0x240 [ 531.210418][ T8426] device_add+0x507/0xc20 [ 531.214796][ T8426] wiphy_register+0x1dad/0x2ae0 [ 531.219798][ T8426] ? cfg80211_event_work+0x40/0x40 [ 531.224931][ T8426] ? minstrel_ht_alloc+0x88a/0x990 [ 531.230254][ T8426] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 531.236438][ T8426] ieee80211_register_hw+0x3464/0x4250 [ 531.242029][ T8426] ? ieee80211_tasklet_handler+0x20/0x20 [ 531.247682][ T8426] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 531.253636][ T8426] ? __debug_object_init+0xec/0x450 [ 531.258873][ T8426] ? __asan_memset+0x22/0x40 [ 531.263487][ T8426] ? __hrtimer_init+0x186/0x270 [ 531.268452][ T8426] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 531.274322][ T8426] ? mac80211_hwsim_free+0x220/0x220 [ 531.279631][ T8426] ? rcu_is_watching+0x15/0xb0 [ 531.284417][ T8426] ? kstrndup+0xbd/0x140 [ 531.288696][ T8426] hwsim_new_radio_nl+0xdc9/0x1a90 [ 531.293846][ T8426] ? __nla_validate+0x50/0x50 [ 531.298580][ T8426] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 531.304940][ T8426] ? __nla_parse+0x40/0x50 [ 531.309467][ T8426] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 531.315909][ T8426] genl_family_rcv_msg_doit+0x211/0x310 [ 531.321702][ T8426] ? end_current_label_crit_section+0x170/0x170 [ 531.328069][ T8426] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 531.333995][ T8426] ? bpf_lsm_capable+0x9/0x10 [ 531.338694][ T8426] ? security_capable+0x89/0xb0 [ 531.343581][ T8426] genl_rcv_msg+0x619/0x7a0 [ 531.348110][ T8426] ? genl_bind+0x360/0x360 [ 531.352545][ T8426] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 531.358978][ T8426] ? perf_trace_lock+0x304/0x3b0 [ 531.363942][ T8426] netlink_rcv_skb+0x241/0x4d0 [ 531.368765][ T8426] ? genl_bind+0x360/0x360 [ 531.373465][ T8426] ? netlink_ack+0x1180/0x1180 [ 531.378268][ T8426] ? __lock_acquire+0x7d40/0x7d40 [ 531.383325][ T8426] ? down_read+0x1ac/0x2e0 [ 531.387857][ T8426] genl_rcv+0x28/0x40 [ 531.391893][ T8426] netlink_unicast+0x751/0x8d0 [ 531.396733][ T8426] netlink_sendmsg+0x8d0/0xbf0 [ 531.401535][ T8426] ? perf_trace_lock+0x304/0x3b0 [ 531.406500][ T8426] ? netlink_getsockopt+0x590/0x590 [ 531.411818][ T8426] ? aa_sock_msg_perm+0x94/0x150 [ 531.416878][ T8426] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 531.422366][ T8426] ? security_socket_sendmsg+0x80/0xa0 [ 531.427936][ T8426] ? netlink_getsockopt+0x590/0x590 [ 531.433336][ T8426] ____sys_sendmsg+0x5ba/0x960 [ 531.438125][ T8426] ? __asan_memset+0x22/0x40 [ 531.442750][ T8426] ? __sys_sendmsg_sock+0x30/0x30 [ 531.447807][ T8426] ? __import_iovec+0x5f2/0x850 [ 531.452753][ T8426] ? import_iovec+0x73/0xa0 [ 531.457279][ T8426] ___sys_sendmsg+0x2a6/0x360 [ 531.461978][ T8426] ? __sys_sendmsg+0x2a0/0x2a0 [ 531.466832][ T8426] __se_sys_sendmsg+0x1c2/0x2b0 [ 531.471703][ T8426] ? __x64_sys_sendmsg+0x80/0x80 [ 531.476761][ T8426] ? lockdep_hardirqs_on+0x98/0x150 [ 531.482000][ T8426] do_syscall_64+0x55/0xa0 [ 531.486436][ T8426] ? clear_bhb_loop+0x40/0x90 [ 531.491139][ T8426] ? clear_bhb_loop+0x40/0x90 [ 531.495843][ T8426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.501763][ T8426] RIP: 0033:0x7fe8fa99c819 [ 531.506195][ T8426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.525909][ T8426] RSP: 002b:00007fe8fb7b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.534341][ T8426] RAX: ffffffffffffffda RBX: 00007fe8fac16090 RCX: 00007fe8fa99c819 [ 531.542333][ T8426] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 531.550408][ T8426] RBP: 00007fe8faa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 531.558668][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.566745][ T8426] R13: 00007fe8fac16128 R14: 00007fe8fac16090 R15: 00007ffe55d669c8 [ 531.574938][ T8426] [ 532.401634][ T8455] netlink: 168 bytes leftover after parsing attributes in process `syz.3.846'. [ 532.564599][ T5822] Bluetooth: hci3: ISO packet for unknown connection handle 6 [ 532.652084][ T8455] netlink: 168 bytes leftover after parsing attributes in process `syz.3.846'. [ 533.003409][ T8462] tap0: tun_chr_ioctl cmd 1074025673 [ 533.985394][ T8481] syzkaller0: entered promiscuous mode [ 533.997551][ T8481] syzkaller0: entered allmulticast mode [ 538.437802][ T8554] netlink: 'syz.0.871': attribute type 2 has an invalid length. [ 538.452616][ T8554] netlink: 'syz.0.871': attribute type 8 has an invalid length. [ 538.463911][ T8554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.871'. [ 539.925028][ T8570] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 539.933463][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'. [ 539.943815][ T8570] batadv0: entered promiscuous mode [ 539.949504][ T8570] batadv0: entered allmulticast mode [ 539.955827][ T8570] bridge0: port 3(batadv0) entered blocking state [ 539.984048][ T8570] bridge0: port 3(batadv0) entered disabled state [ 539.998974][ T8570] bridge0: port 3(batadv0) entered blocking state [ 540.005659][ T8570] bridge0: port 3(batadv0) entered forwarding state [ 540.185318][ T8582] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.879'. [ 540.208521][ T5861] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 540.218853][ T5861] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 540.325473][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.882'. [ 541.069274][ T8585] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 541.093362][ T8585] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 541.102337][ T8589] netlink: 'syz.1.883': attribute type 21 has an invalid length. [ 541.115616][ T8589] netlink: 168 bytes leftover after parsing attributes in process `syz.1.883'. [ 541.752053][ T8611] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.890'. [ 543.591176][ T8631] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 543.669988][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.709272][ T8631] team0: Port device bond0 added [ 545.156550][ T8640] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 545.175708][ T8640] netlink: 55 bytes leftover after parsing attributes in process `syz.2.898'. [ 545.629684][ T8641] netlink: 'syz.2.898': attribute type 13 has an invalid length. [ 545.637931][ T8641] netlink: 160 bytes leftover after parsing attributes in process `syz.2.898'. [ 545.682057][ T8644] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 545.705424][ T8645] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 545.758774][ T8645] team0: Port device geneve1 added [ 548.606103][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 549.101598][ T8684] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 549.129265][ T8684] bond0: (slave bond_slave_0): Releasing backup interface [ 549.225136][ T8681] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.909'. [ 550.350816][ T8709] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.917'. [ 550.664538][ T8722] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 550.685823][ T8722] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.923'. [ 550.715064][ T8722] openvswitch: netlink: Flow key attr not present in new flow. [ 550.942202][ T8732] netlink: 'syz.1.924': attribute type 12 has an invalid length. [ 550.966420][ T8732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.924'. [ 551.512349][ T8764] IPv6: NLM_F_CREATE should be specified when creating new route [ 551.798060][ T8767] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 551.815352][ T8767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.931'. [ 551.831341][ T8767] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 551.852270][ T8767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.437314][ T8782] netlink: 'syz.1.935': attribute type 51 has an invalid length. [ 554.385419][ T8827] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.946'. [ 554.452006][ T8817] delete_channel: no stack [ 554.604173][ T8836] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 554.608407][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.951'. [ 554.631901][ T8836] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 554.671136][ T8839] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 554.720953][ T8836] netlink: 'syz.2.949': attribute type 2 has an invalid length. [ 554.728870][ T8847] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 554.730458][ T8836] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.949'. [ 556.143753][ T8883] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 556.161120][ T8883] netlink: 'syz.1.963': attribute type 6 has an invalid length. [ 556.175900][ T8883] netlink: 171000 bytes leftover after parsing attributes in process `syz.1.963'. [ 556.465695][ T8896] netlink: 'syz.3.968': attribute type 8 has an invalid length. [ 556.478685][ T8896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.968'. [ 556.502130][ T5822] Bluetooth: hci1: ACL packet for unknown connection handle 97 [ 556.510132][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.969'. [ 557.028941][ T8915] netlink: 'syz.0.973': attribute type 33 has an invalid length. [ 557.049851][ T8915] netlink: 152 bytes leftover after parsing attributes in process `syz.0.973'. [ 557.067155][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 558.021256][ T8935] À: port 1(veth1_virt_wifi) entered blocking state [ 558.029489][ T8935] À: port 1(veth1_virt_wifi) entered disabled state [ 558.041447][ T8935] veth1_virt_wifi: entered allmulticast mode [ 558.054462][ T8935] veth1_virt_wifi: left allmulticast mode [ 558.686735][ T5851] tipc: Subscription rejected, illegal request [ 558.764922][ T8947] netlink: 'syz.3.985': attribute type 41 has an invalid length. [ 559.006561][ T8945] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.984'. [ 560.116894][ T8981] raw_sendmsg: syz.2.993 forgot to set AF_INET. Fix it! [ 561.806545][ T9015] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 561.826691][ T9015] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1004'. [ 561.905710][ T9015] veth0_macvtap: left promiscuous mode [ 561.950608][ T9019] netlink: 'syz.3.1003': attribute type 3 has an invalid length. [ 561.984207][ T9019] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1003'. [ 562.172476][ T9017] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1003'. [ 562.182967][ T9020] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 562.192713][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.202941][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1005'. [ 562.356189][ T9032] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1006'. [ 562.687987][ T9044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1010'. [ 563.285218][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.296502][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.760842][ T9073] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1020'. [ 563.823494][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1023'. [ 563.975893][ T9079] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 563.982493][ T9086] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 563.998759][ T9086] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1024'. [ 564.017979][ T9079] team0: Device vxcan1 is of different type [ 564.454332][ T9102] syzkaller0: entered promiscuous mode [ 564.472486][ T9102] syzkaller0: entered allmulticast mode [ 564.548406][ T9104] netlink: 'syz.3.1030': attribute type 2 has an invalid length. [ 564.557309][ T9106] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1028'. [ 564.576168][ T9106] netlink: 'syz.0.1028': attribute type 33 has an invalid length. [ 565.562673][ T9129] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 565.728287][ T9128] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 565.790493][ T9128] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 565.813747][ T9133] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 565.990018][ T9119] delete_channel: no stack [ 565.994944][ T9119] delete_channel: no stack [ 566.585164][ T9147] sctp: [Deprecated]: syz.3.1039 (pid 9147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.585164][ T9147] Use struct sctp_sack_info instead [ 567.065602][ T9151] __nla_validate_parse: 6 callbacks suppressed [ 567.065620][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1041'. [ 567.133474][ T9155] validate_nla: 2 callbacks suppressed [ 567.133491][ T9155] netlink: 'syz.1.1042': attribute type 3 has an invalid length. [ 567.236473][ T9155] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1042'. [ 567.432184][ T9164] netlink: 'syz.3.1044': attribute type 3 has an invalid length. [ 567.440456][ T9164] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1044'. [ 567.533014][ T9164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.556471][ T9164] bond0 (unregistering): (slave team0): Releasing backup interface [ 567.585641][ T9164] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 567.604457][ T9164] bond0 (unregistering): Released all slaves [ 567.701646][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 567.795608][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 567.809552][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 568.031363][ T9174] netlink: 'syz.2.1047': attribute type 2 has an invalid length. [ 568.057587][ T9174] netlink: 'syz.2.1047': attribute type 8 has an invalid length. [ 568.088477][ T9174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1047'. [ 569.895906][ T9200] netlink: 'syz.1.1055': attribute type 21 has an invalid length. [ 569.904840][ T9200] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1055'. [ 571.986895][ T9235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 572.270018][ T9235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 572.305808][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 572.573137][ T9239] netlink: 'syz.1.1066': attribute type 49 has an invalid length. [ 572.753806][ T9235] netlink: set zone limit has 8 unknown bytes [ 574.132225][ T9294] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 574.161643][ T9294] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1083'. [ 574.233087][ T9294] veth0_macvtap: left promiscuous mode [ 574.851002][ T9297] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 574.864829][ T9297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.796063][ T9319] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 575.805154][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1092'. [ 575.858521][ T9319] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 575.869655][ T9319] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.913379][ T9319] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 576.705891][ T9354] netlink: 'syz.2.1102': attribute type 3 has an invalid length. [ 576.726943][ T9354] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1102'. [ 577.358438][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1105'. [ 577.968875][ T9356] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1103'. [ 579.318907][ T9404] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 579.474598][ T9404] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1114'. [ 580.024028][ T9413] FAULT_INJECTION: forcing a failure. [ 580.024028][ T9413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.038607][ T9417] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 580.076770][ T9417] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1118'. [ 580.110933][ T9413] CPU: 1 PID: 9413 Comm: syz.1.1116 Not tainted syzkaller #0 [ 580.118652][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 580.129210][ T9413] Call Trace: [ 580.132547][ T9413] [ 580.135609][ T9413] dump_stack_lvl+0x18c/0x250 [ 580.140700][ T9413] ? show_regs_print_info+0x20/0x20 [ 580.146296][ T9413] ? load_image+0x420/0x420 [ 580.151123][ T9413] ? __lock_acquire+0x7d40/0x7d40 [ 580.156220][ T9413] ? snprintf+0xe9/0x140 [ 580.160631][ T9413] should_fail_ex+0x39d/0x4d0 [ 580.165480][ T9413] _copy_to_user+0x2f/0xa0 [ 580.170141][ T9413] simple_read_from_buffer+0xe7/0x150 [ 580.175761][ T9413] proc_fail_nth_read+0x1e8/0x260 [ 580.180984][ T9413] ? proc_fault_inject_write+0x360/0x360 [ 580.186668][ T9413] ? fsnotify_perm+0x271/0x5e0 [ 580.191462][ T9413] ? proc_fault_inject_write+0x360/0x360 [ 580.197225][ T9413] vfs_read+0x28b/0x970 [ 580.201588][ T9413] ? kernel_read+0x1e0/0x1e0 [ 580.206591][ T9413] ? __fget_files+0x28/0x4b0 [ 580.211403][ T9413] ? __fget_files+0x28/0x4b0 [ 580.216138][ T9413] ? __fget_files+0x43d/0x4b0 [ 580.220951][ T9413] ? __fdget_pos+0x2a3/0x330 [ 580.225571][ T9413] ? ksys_read+0x75/0x260 [ 580.230016][ T9413] ksys_read+0x150/0x260 [ 580.234543][ T9413] ? vfs_write+0x990/0x990 [ 580.239287][ T9413] ? lockdep_hardirqs_on+0x98/0x150 [ 580.244687][ T9413] do_syscall_64+0x55/0xa0 [ 580.249144][ T9413] ? clear_bhb_loop+0x40/0x90 [ 580.253839][ T9413] ? clear_bhb_loop+0x40/0x90 [ 580.258735][ T9413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.264728][ T9413] RIP: 0033:0x7f823ad5d04e [ 580.269284][ T9413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.289526][ T9413] RSP: 002b:00007f823bc7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.298376][ T9413] RAX: ffffffffffffffda RBX: 00007f823bc7c6c0 RCX: 00007f823ad5d04e [ 580.307430][ T9413] RDX: 000000000000000f RSI: 00007f823bc7c0a0 RDI: 000000000000000b [ 580.315520][ T9413] RBP: 00007f823bc7c090 R08: 0000000000000000 R09: 0000000000000000 [ 580.323507][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.331693][ T9413] R13: 00007f823b016128 R14: 00007f823b016090 R15: 00007ffe56c77b08 [ 580.339714][ T9413] [ 581.121379][ T9440] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 581.197257][ T9440] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.206993][ T9440] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.234923][ T9440] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.246666][ T9440] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.555767][ T9445] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 582.535768][ T9461] netlink: 'syz.2.1132': attribute type 10 has an invalid length. [ 582.638085][ T9461] syz_tun: entered promiscuous mode [ 582.675678][ T9461] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 582.969351][ T9477] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 582.994006][ T9477] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1137'. [ 583.010570][ T9480] sock: sock_set_timeout: `syz.3.1138' (pid 9480) tries to set negative timeout [ 583.526629][ T9488] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1148'. [ 584.344503][ T9513] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1143'. [ 584.669457][ T9513] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 584.706133][ T9513] CPU: 0 PID: 9513 Comm: syz.1.1143 Not tainted syzkaller #0 [ 584.713702][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 584.723906][ T9513] Call Trace: [ 584.727308][ T9513] [ 584.730370][ T9513] dump_stack_lvl+0x18c/0x250 [ 584.735116][ T9513] ? show_regs_print_info+0x20/0x20 [ 584.740361][ T9513] ? load_image+0x420/0x420 [ 584.744926][ T9513] sysfs_warn_dup+0x8e/0xa0 [ 584.749474][ T9513] sysfs_do_create_link_sd+0xc0/0x110 [ 584.754978][ T9513] device_add_class_symlinks+0x1cf/0x240 [ 584.760747][ T9513] device_add+0x507/0xc20 [ 584.765135][ T9513] wiphy_register+0x1dad/0x2ae0 [ 584.770050][ T9513] ? cfg80211_event_work+0x40/0x40 [ 584.775256][ T9513] ? minstrel_ht_alloc+0x88a/0x990 [ 584.780510][ T9513] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 584.786741][ T9513] ieee80211_register_hw+0x3464/0x4250 [ 584.792270][ T9513] ? ieee80211_tasklet_handler+0x20/0x20 [ 584.797945][ T9513] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 584.803977][ T9513] ? __debug_object_init+0xec/0x450 [ 584.809234][ T9513] ? __asan_memset+0x22/0x40 [ 584.813870][ T9513] ? __hrtimer_init+0x186/0x270 [ 584.818772][ T9513] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 584.824644][ T9513] ? mac80211_hwsim_free+0x220/0x220 [ 584.829975][ T9513] ? rcu_is_watching+0x15/0xb0 [ 584.834873][ T9513] ? kstrndup+0xbd/0x140 [ 584.839173][ T9513] hwsim_new_radio_nl+0xdc9/0x1a90 [ 584.844502][ T9513] ? __nla_validate+0x50/0x50 [ 584.849316][ T9513] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 584.855696][ T9513] ? __nla_parse+0x40/0x50 [ 584.860161][ T9513] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 584.866802][ T9513] genl_family_rcv_msg_doit+0x211/0x310 [ 584.872387][ T9513] ? end_current_label_crit_section+0x170/0x170 [ 584.878677][ T9513] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 584.884622][ T9513] ? bpf_lsm_capable+0x9/0x10 [ 584.889359][ T9513] ? security_capable+0x89/0xb0 [ 584.894356][ T9513] genl_rcv_msg+0x619/0x7a0 [ 584.898904][ T9513] ? genl_bind+0x360/0x360 [ 584.903371][ T9513] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 584.909856][ T9513] ? ref_tracker_free+0x690/0x840 [ 584.914945][ T9513] netlink_rcv_skb+0x241/0x4d0 [ 584.919767][ T9513] ? genl_bind+0x360/0x360 [ 584.924319][ T9513] ? netlink_ack+0x1180/0x1180 [ 584.929237][ T9513] ? __lock_acquire+0x7d40/0x7d40 [ 584.934314][ T9513] ? down_read+0x1ac/0x2e0 [ 584.938774][ T9513] genl_rcv+0x28/0x40 [ 584.942792][ T9513] netlink_unicast+0x751/0x8d0 [ 584.947616][ T9513] netlink_sendmsg+0x8d0/0xbf0 [ 584.952440][ T9513] ? netlink_getsockopt+0x590/0x590 [ 584.957686][ T9513] ? aa_sock_msg_perm+0x94/0x150 [ 584.962691][ T9513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 584.968031][ T9513] ? security_socket_sendmsg+0x80/0xa0 [ 584.973538][ T9513] ? netlink_getsockopt+0x590/0x590 [ 584.978792][ T9513] ____sys_sendmsg+0x5ba/0x960 [ 584.983727][ T9513] ? __asan_memset+0x22/0x40 [ 584.988368][ T9513] ? __sys_sendmsg_sock+0x30/0x30 [ 584.993704][ T9513] ? __import_iovec+0x5f2/0x850 [ 584.998615][ T9513] ? import_iovec+0x73/0xa0 [ 585.003171][ T9513] ___sys_sendmsg+0x2a6/0x360 [ 585.007984][ T9513] ? __sys_sendmsg+0x2a0/0x2a0 [ 585.012847][ T9513] __se_sys_sendmsg+0x1c2/0x2b0 [ 585.017757][ T9513] ? __x64_sys_sendmsg+0x80/0x80 [ 585.022770][ T9513] ? lockdep_hardirqs_on+0x98/0x150 [ 585.028029][ T9513] do_syscall_64+0x55/0xa0 [ 585.032491][ T9513] ? clear_bhb_loop+0x40/0x90 [ 585.037301][ T9513] ? clear_bhb_loop+0x40/0x90 [ 585.042035][ T9513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.047978][ T9513] RIP: 0033:0x7f823ad9c819 [ 585.052434][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.072187][ T9513] RSP: 002b:00007f823bc5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.080737][ T9513] RAX: ffffffffffffffda RBX: 00007f823b016180 RCX: 00007f823ad9c819 [ 585.088720][ T9513] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 585.096814][ T9513] RBP: 00007f823ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 585.104939][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.112952][ T9513] R13: 00007f823b016218 R14: 00007f823b016180 R15: 00007ffe56c77b08 [ 585.120975][ T9513] [ 585.257670][ T9512] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 585.274106][ T9512] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1146'. [ 585.527350][ T9535] syzkaller0: left promiscuous mode [ 585.532742][ T9535] syzkaller0: left allmulticast mode [ 585.561827][ T9541] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1153'. [ 585.594466][ T9538] caif0: entered promiscuous mode [ 585.599712][ T9538] caif0: entered allmulticast mode [ 585.608488][ T9537] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1155'. [ 585.640226][ T9537] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1155'. [ 585.660337][ T9538] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1155'. [ 585.686731][ T9537] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1155'. [ 586.016802][ T9555] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 588.455227][ T9555] bridge0: port 3(batadv0) entered disabled state [ 588.462223][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.470133][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.591040][ T9555] bridge0: port 3(batadv0) entered blocking state [ 588.597814][ T9555] bridge0: port 3(batadv0) entered forwarding state [ 588.604770][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.612097][ T9555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.619626][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.626858][ T9555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.826886][ T9555] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 591.925709][ T9588] netlink: 'syz.0.1165': attribute type 2 has an invalid length. [ 591.962579][ T9588] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1165'. [ 592.348026][ T9598] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1167'. [ 592.368513][ T9581] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 592.386766][ T9581] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1162'. [ 594.080187][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 595.149355][ T9655] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 595.264920][ T9651] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.1183'. [ 595.544416][ T9665] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1186'. [ 595.621075][ T9665] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1186'. [ 595.771767][ T9663] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 596.219570][ T9681] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 596.518054][ T9681] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 597.093966][ T9705] netlink: 'syz.0.1198': attribute type 21 has an invalid length. [ 597.118469][ T9706] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1197'. [ 597.152733][ T9710] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1199'. [ 598.181302][ T9725] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1203'. [ 598.200592][ T9725] netlink: del zone limit has 4 unknown bytes [ 598.559053][ T9737] netlink: 'syz.1.1206': attribute type 2 has an invalid length. [ 598.810062][ T9742] netlink: 'syz.1.1209': attribute type 12 has an invalid length. [ 598.836577][ T9742] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1209'. [ 599.386507][ T9751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1211'. [ 599.444582][ T9739] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1207'. [ 599.673980][ T9763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1215'. [ 599.695006][ T9762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1215'. [ 599.773922][ T9763] netlink: 'syz.2.1215': attribute type 41 has an invalid length. [ 602.155656][ T9803] netlink: 'syz.3.1225': attribute type 10 has an invalid length. [ 602.553942][ T9808] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 602.755907][ T9808] batman_adv: batadv0: Adding interface: netdevsim0 [ 602.845671][ T9808] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.901696][ T9808] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 606.348443][ T9827] netlink: 'syz.1.1232': attribute type 5 has an invalid length. [ 608.100876][ T9845] netlink: 'syz.3.1238': attribute type 21 has an invalid length. [ 608.135889][ T9845] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1238'. [ 608.272387][ T9845] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1238'. [ 608.310725][ T9847] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 609.703990][ T9847] team0: Device xfrm0 is of different type [ 610.813067][ T9872] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 611.896530][ T9895] netlink: 'syz.1.1252': attribute type 3 has an invalid length. [ 611.922111][ T9895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1252'. [ 612.962265][ T9912] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1258'. [ 613.499490][ T9928] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1263'. [ 614.362238][ T9947] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1267'. [ 615.172175][ T9966] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 615.254154][ T9971] netlink: 'syz.2.1272': attribute type 9 has an invalid length. [ 615.254308][ T9971] netlink: 180548 bytes leftover after parsing attributes in process `syz.2.1272'. [ 615.678492][ T9973] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 615.712435][ T9973] bridge0: port 3(batadv0) entered disabled state [ 615.724321][ T9973] batadv0: left allmulticast mode [ 615.730246][ T9973] batadv0: left promiscuous mode [ 615.735652][ T9973] bridge0: port 3(batadv0) entered disabled state [ 615.754401][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.772262][ T9973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 615.816522][ T9984] syzkaller0: entered promiscuous mode [ 615.822364][ T9984] syzkaller0: entered allmulticast mode [ 617.742436][ T9979] netlink: 'syz.2.1272': attribute type 9 has an invalid length. [ 617.750651][ T9979] netlink: 200976 bytes leftover after parsing attributes in process `syz.2.1272'. [ 617.865209][ T9997] netlink: 'syz.1.1281': attribute type 17 has an invalid length. [ 618.344293][T10002] macvlan1: entered promiscuous mode [ 618.508756][T10005] pim6reg1: entered allmulticast mode [ 619.496145][T10019] netlink: 'syz.0.1287': attribute type 21 has an invalid length. [ 619.506075][T10019] IPv6: NLM_F_CREATE should be specified when creating new route [ 619.572086][T10019] IPv6: Can't replace route, no match found [ 619.740584][T10026] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 619.816620][T10026] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1289'. [ 620.872332][T10035] team0: Port device bond0 removed [ 620.985625][T10035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.183657][T10035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.257407][T10035] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 621.307273][T10035] bond0 (unregistering): Released all slaves [ 621.367162][T10042] netlink: 'syz.3.1293': attribute type 10 has an invalid length. [ 621.390309][T10042] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1293'. [ 622.431873][T10057] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 622.452239][T10057] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1300'. [ 623.891728][T10074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.959178][T10074] netlink: 'syz.3.1303': attribute type 21 has an invalid length. [ 623.969946][T10074] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.999977][T10074] IPv6: Can't replace route, no match found [ 624.722563][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.731242][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.198882][T10120] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 629.380736][T10127] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1318'. [ 629.431985][T10127] netlink: 'syz.2.1318': attribute type 10 has an invalid length. [ 629.498282][T10127] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.528965][T10127] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.551420][T10127] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.586692][T10127] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.263122][T10141] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 630.601248][T10143] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1324'. [ 631.376035][T10155] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 631.405745][T10155] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 631.469520][T10161] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 631.487415][T10161] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 632.367382][T10171] syz.2.1330[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.367534][T10171] syz.2.1330[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.355183][T10191] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1335'. [ 635.457539][T10191] bridge_slave_1: default FDB implementation only supports local addresses [ 635.825107][T10176] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 635.980285][T10206] tun0: tun_chr_ioctl cmd 1074025675 [ 635.986028][T10206] tun0: persist enabled [ 636.014476][T10206] tun0: tun_chr_ioctl cmd 1074025675 [ 636.035985][T10206] tun0: persist disabled [ 636.117639][T10207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1340'. [ 636.145135][T10207] tc_dump_action: action bad kind [ 636.268959][T10219] netlink: 142240 bytes leftover after parsing attributes in process `syz.0.1343'. [ 636.582804][T10232] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 637.585206][T10249] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 637.814172][T10258] netlink: 'syz.1.1355': attribute type 5 has an invalid length. [ 638.045825][T10270] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1358'. [ 638.243699][T10277] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 638.303016][T10277] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1360'. [ 638.399646][T10283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1362'. [ 638.439503][T10283] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 638.469536][T10283] CPU: 0 PID: 10283 Comm: syz.1.1362 Not tainted syzkaller #0 [ 638.477092][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 638.487215][T10283] Call Trace: [ 638.490644][T10283] [ 638.493631][T10283] dump_stack_lvl+0x18c/0x250 [ 638.498491][T10283] ? show_regs_print_info+0x20/0x20 [ 638.503894][T10283] ? load_image+0x420/0x420 [ 638.508501][T10283] sysfs_warn_dup+0x8e/0xa0 [ 638.513066][T10283] sysfs_do_create_link_sd+0xc0/0x110 [ 638.518507][T10283] device_add_class_symlinks+0x1cf/0x240 [ 638.524212][T10283] device_add+0x507/0xc20 [ 638.528614][T10283] wiphy_register+0x1dad/0x2ae0 [ 638.533583][T10283] ? cfg80211_event_work+0x40/0x40 [ 638.538746][T10283] ? minstrel_ht_alloc+0x88a/0x990 [ 638.544046][T10283] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 638.550289][T10283] ieee80211_register_hw+0x3464/0x4250 [ 638.555963][T10283] ? ieee80211_tasklet_handler+0x20/0x20 [ 638.561746][T10283] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 638.567720][T10283] ? __debug_object_init+0xec/0x450 [ 638.573001][T10283] ? __asan_memset+0x22/0x40 [ 638.577773][T10283] ? __hrtimer_init+0x186/0x270 [ 638.582798][T10283] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 638.588625][T10283] ? mac80211_hwsim_free+0x220/0x220 [ 638.593965][T10283] ? rcu_is_watching+0x15/0xb0 [ 638.598795][T10283] ? kstrndup+0xbd/0x140 [ 638.603127][T10283] hwsim_new_radio_nl+0xdc9/0x1a90 [ 638.608309][T10283] ? __nla_validate+0x50/0x50 [ 638.613078][T10283] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 638.619541][T10283] ? __nla_parse+0x40/0x50 [ 638.624033][T10283] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 638.630456][T10283] genl_family_rcv_msg_doit+0x211/0x310 [ 638.636067][T10283] ? end_current_label_crit_section+0x170/0x170 [ 638.642386][T10283] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 638.648365][T10283] ? bpf_lsm_capable+0x9/0x10 [ 638.653106][T10283] ? security_capable+0x89/0xb0 [ 638.658131][T10283] genl_rcv_msg+0x619/0x7a0 [ 638.662825][T10283] ? genl_bind+0x360/0x360 [ 638.667302][T10283] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 638.673703][T10283] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 638.680372][T10283] ? ref_tracker_free+0x690/0x840 [ 638.685507][T10283] netlink_rcv_skb+0x241/0x4d0 [ 638.690359][T10283] ? genl_bind+0x360/0x360 [ 638.694944][T10283] ? netlink_ack+0x1180/0x1180 [ 638.699908][T10283] ? __lock_acquire+0x7d40/0x7d40 [ 638.705124][T10283] ? down_read+0x1ac/0x2e0 [ 638.709735][T10283] genl_rcv+0x28/0x40 [ 638.713781][T10283] netlink_unicast+0x751/0x8d0 [ 638.718655][T10283] netlink_sendmsg+0x8d0/0xbf0 [ 638.723519][T10283] ? netlink_getsockopt+0x590/0x590 [ 638.728825][T10283] ? aa_sock_msg_perm+0x94/0x150 [ 638.733833][T10283] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 638.739185][T10283] ? security_socket_sendmsg+0x80/0xa0 [ 638.744982][T10283] ? netlink_getsockopt+0x590/0x590 [ 638.750256][T10283] ____sys_sendmsg+0x5ba/0x960 [ 638.755110][T10283] ? __asan_memset+0x22/0x40 [ 638.759797][T10283] ? __sys_sendmsg_sock+0x30/0x30 [ 638.765034][T10283] ? __import_iovec+0x5f2/0x850 [ 638.769981][T10283] ? import_iovec+0x73/0xa0 [ 638.774562][T10283] ___sys_sendmsg+0x2a6/0x360 [ 638.779308][T10283] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 638.785983][T10283] ? __sys_sendmsg+0x2a0/0x2a0 [ 638.791050][T10283] __se_sys_sendmsg+0x1c2/0x2b0 [ 638.795982][T10283] ? __x64_sys_sendmsg+0x80/0x80 [ 638.801037][T10283] ? lockdep_hardirqs_on+0x98/0x150 [ 638.806322][T10283] do_syscall_64+0x55/0xa0 [ 638.810967][T10283] ? clear_bhb_loop+0x40/0x90 [ 638.815843][T10283] ? clear_bhb_loop+0x40/0x90 [ 638.820600][T10283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.826665][T10283] RIP: 0033:0x7f823ad9c819 [ 638.831139][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.850984][T10283] RSP: 002b:00007f823bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.859574][T10283] RAX: ffffffffffffffda RBX: 00007f823b015fa0 RCX: 00007f823ad9c819 [ 638.867718][T10283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 638.875764][T10283] RBP: 00007f823ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 638.883806][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.891932][T10283] R13: 00007f823b016038 R14: 00007f823b015fa0 R15: 00007ffe56c77b08 [ 638.900017][T10283] [ 639.530808][T10312] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 639.538961][T10312] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 639.556390][T10312] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1371'. [ 640.501862][T10339] delete_channel: no stack [ 640.600349][T10344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1381'. [ 640.639804][T10345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.980478][T10350] netlink: 'syz.2.1382': attribute type 10 has an invalid length. [ 641.046004][T10350] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1382'. [ 641.619047][T10362] netlink: 'syz.0.1387': attribute type 39 has an invalid length. [ 642.064610][T10365] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1388'. [ 642.706526][T10371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1391'. [ 642.800242][T10371] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1391'. [ 643.855865][T10381] IPv6: NLM_F_CREATE should be specified when creating new route [ 644.347793][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.394784][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.424892][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.448475][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.471711][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.498820][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.530073][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 644.558349][T10396] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 645.227632][T10403] pim6reg1: entered promiscuous mode [ 645.256897][T10403] pim6reg1: entered allmulticast mode [ 646.501469][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1402'. [ 646.761240][T10415] delete_channel: no stack [ 646.792784][T10415] delete_channel: no stack [ 648.769611][T10438] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.1411'. [ 648.845334][T10437] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1413'. [ 648.884930][T10434] validate_nla: 25 callbacks suppressed [ 648.885239][T10434] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 648.968598][T10434] netlink: 'syz.1.1412': attribute type 8 has an invalid length. [ 648.991532][T10434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1412'. [ 649.083750][T10437] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 649.171584][T10440] netlink: 'syz.1.1412': attribute type 11 has an invalid length. [ 649.940385][T10447] netlink: 'syz.1.1415': attribute type 11 has an invalid length. [ 649.969216][T10447] netlink: 126332 bytes leftover after parsing attributes in process `syz.1.1415'. [ 650.530909][T10462] netlink: 'syz.1.1418': attribute type 10 has an invalid length. [ 650.592906][T10462] netlink: 'syz.1.1418': attribute type 9 has an invalid length. [ 650.614804][T10462] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1418'. [ 650.982464][T10465] netlink: 'syz.1.1418': attribute type 9 has an invalid length. [ 651.055750][T10465] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1418'. [ 652.505067][T10481] netlink: 'syz.1.1425': attribute type 39 has an invalid length. [ 653.224128][T10481] hsr_slave_1 (unregistering): left promiscuous mode [ 654.228042][T10506] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1430'. [ 654.367390][T10510] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 654.444483][T10498] syzkaller0: entered promiscuous mode [ 654.472908][T10498] syzkaller0: entered allmulticast mode [ 654.596834][T10510] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 654.760606][T10506] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 654.907958][T10515] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 655.224478][T10503] netlink: 'syz.2.1430': attribute type 29 has an invalid length. [ 656.102191][T10537] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1436'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.