last executing test programs: 6.871694312s ago: executing program 4 (id=16060): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 5.698330701s ago: executing program 3 (id=16066): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000100081046881f782db44b904021d080b01100000e8fe55a118001500060014000000001208000c0043000008a80040000a00014006000d00fab94dcf5c0461c1d67f6f94df7134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef442b6d953709b56ff71090000001fb7565e88e8e4ce1b14d6d930dfe1d9d3225a3d261c75730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf0000bd6c769ad8", 0xd8}], 0x1}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 5.551255154s ago: executing program 4 (id=16067): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x3, 0xb2, 0x7, 0x8, 0xf, 0xfb, 0x0, 0x3c, 0xc002, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x84, 0xfffffffffffffffc}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005ed58ffa4355cc93039ebc57746ca71eb6a220c079af2d39264b8429a3443caade13ff656ebfa4793c85a7216a57455b6b31dd090cc79b673446b22289d6880d01ee1147a7376473fa4c387fee9474fa4b6d558e7fa9150b7ee7ee0247f7afe0f510b55374765f69ca3f49648904cd756f9a72ebe9798486b52af6bc4646dd2c55", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x10d022, 0x6, 0x1272, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a04db00000000950000b16d1dc3fe215ea200000000007aa12309fba5263cde0edbcc1e25c3ce3d13634441e4d804d1b1cf9f9f0f856c4d80"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.413554898s ago: executing program 3 (id=16071): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000020) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x14, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x84, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b1d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c555241b1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfba2567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a000924ad08cc798a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51de0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae44e2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbebe4e52a28da"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x38000000, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb1c}}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0xd, &(0x7f00000002c0)=""/13, 0x41100, 0x9418964b0fae4129, '\x00', 0x0, @fallback=0x31, r6, 0x8, &(0x7f0000000300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x1, 0x6, 0x5}, 0x10, r8, r9, 0x1, &(0x7f00000003c0)=[r10], &(0x7f0000000400)=[{0x4, 0x3, 0x3, 0x8}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r11, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r4, r4}, 0xc) 5.252992772s ago: executing program 2 (id=16073): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc004) close(r4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 4.611552017s ago: executing program 2 (id=16076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6", 0xbd}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000b40)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x2}, 0x200ce0c0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) socket$kcm(0x2, 0x5, 0x84) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000dd9aeb86740ab7c9", @ANYRES32=0x1, @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1003, r5}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) 4.386226153s ago: executing program 3 (id=16078): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0x3) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044) 4.337284034s ago: executing program 1 (id=16079): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x6, &(0x7f0000000740)=r0, 0x4) (fail_nth: 1) 3.919217094s ago: executing program 4 (id=16080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6", 0xbd}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000b40)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x2}, 0x200ce0c0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) socket$kcm(0x2, 0x5, 0x84) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000dd9aeb86740ab7c9", @ANYRES32=0x1, @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1003, r5}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) 3.776768208s ago: executing program 0 (id=16081): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000100081046881f782db44b904021d080b01100000e8fe55a118001500060014000000001208000c0043000008a80040000a00014006000d00fab94dcf5c0461c1d67f6f94df7134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef442b6d953709b56ff71090000001fb7565e88e8e4ce1b14d6d930dfe1d9d3225a3d261c75730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf0000bd6c769ad8", 0xd8}], 0x1}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 3.420036977s ago: executing program 1 (id=16082): perf_event_open(&(0x7f0000001100)={0x3, 0xb2, 0x7, 0x8, 0xf, 0xfb, 0x0, 0x3c, 0xc002, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.247791451s ago: executing program 1 (id=16083): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0x7fad}, 0x81, 0x3, 0x0, 0x9, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xbd}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.910621579s ago: executing program 3 (id=16084): socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40000003) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80000, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x32, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x40}]}) 2.805011252s ago: executing program 2 (id=16085): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0x7fad}, 0x81, 0x3, 0x0, 0x9, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.747028473s ago: executing program 1 (id=16086): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000780)='H', 0x1}], 0x2}, 0x40c0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) 2.736006943s ago: executing program 0 (id=16087): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc004) close(r4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 2.590772517s ago: executing program 4 (id=16088): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000020) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x14, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x84, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x38000000, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb1c}}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0xd, &(0x7f00000002c0)=""/13, 0x41100, 0x9418964b0fae4129, '\x00', 0x0, @fallback=0x31, r6, 0x8, &(0x7f0000000300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x1, 0x6, 0x5}, 0x10, r8, r9, 0x1, &(0x7f00000003c0)=[r10], &(0x7f0000000400)=[{0x4, 0x3, 0x3, 0x8}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r11, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r4, r4}, 0xc) 2.530615368s ago: executing program 1 (id=16089): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) 2.45671212s ago: executing program 2 (id=16090): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc004) close(r3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 2.44317363s ago: executing program 3 (id=16091): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.309404864s ago: executing program 0 (id=16092): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0) 2.162187417s ago: executing program 0 (id=16093): perf_event_open(&(0x7f0000001100)={0x3, 0xb2, 0x7, 0x8, 0xf, 0xfb, 0x0, 0x3c, 0xc002, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.161198187s ago: executing program 3 (id=16094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x10, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0xfffffffffffffff9) (async, rerun: 64) r0 = socket$kcm(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b87031300fff01f000000000000000800030018000a000d0013009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="39aa0706063e7b0066adb5d026eb8da537e50a31fd420feab6e929545b08be20ef17fef494894e93943dc932a80d428eb0d3f2e26e2d42f8a352ac1978eb8837e0a266e43122c2afecf592ab21d61bcad37f999802d2db1bd11425d35ae281efa5e27ed899014de7e32420c2a704c89a03e075d9beb45edc5e7297f12065cd2a5e7fd169848bff2fbdd831661a375c662d6d2c62f5dd4fdee4efa422e86e9a55fca82d", 0xa3}, {&(0x7f0000000140)="794f4e6ea9e87c4f4a30089a516fb67bd0fd8c56615be49d052f89f7699c535e3886ca97fc0a80153c6ec0fd98b60c4bb1b208c113c0da0fa76243e903d594e6ad990a88d0426aa813db5ceadbaf677194b07a1069447f03ee0bd86d3f2be121bb64c68eec2c1f8a71b811fc613e50bd4f5129ea9aba4c2b2753987dd60c12765a237bf1c32600f7669a50", 0x8b}, {0x0}, {0x0}, {&(0x7f0000000380)="4a7637df5264c57c25011983119b0e4ee4fdb4f814e3c6cb17a55d6d21390b30f9c26814d83d96b997bb3faf2081dd807bc5090bf3076b60f09d603806", 0x3d}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x238}, 0x400c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001e52b702e93f9000008f39", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@fallback=r2, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0]}, 0x40) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r3, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, 0x0, 0x0, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x6, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x3, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002040)=@bpf_tracing={0x1a, 0x16, &(0x7f0000001f00)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000050000000000000000000000180000003df3052d000000006e0c0000185600000100000000000000000000008520000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x1000, &(0x7f0000000e40)=""/4096, 0x41000, 0x20, '\x00', r7, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x104e0, r3, 0x1, &(0x7f0000001fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002000)=[{0x4, 0x4, 0x9, 0xb}], 0x10, 0x11c0a9ea}, 0x94) (async, rerun: 64) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'bond_slave_1\x00', 0x400}) socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100006020782500000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000000000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2.098919879s ago: executing program 2 (id=16095): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(0x3) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044) 2.03836981s ago: executing program 0 (id=16096): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0x7fad}, 0x81, 0x3, 0x0, 0x9, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xbd}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.531849933s ago: executing program 1 (id=16097): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000100081046881f782db44b904021d080b01100000e8fe55a118001500060014000000001208000c0043000008a80040000a00014006000d00fab94dcf5c0461c1d67f6f94df7134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef442b6d953709b56ff71090000001fb7565e88e8e4ce1b14d6d930dfe1d9d3225a3d261c75730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf0000bd6c769ad8", 0xd8}], 0x1}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 695.799263ms ago: executing program 0 (id=16098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6", 0xbd}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000b40)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x2}, 0x200ce0c0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) socket$kcm(0x2, 0x5, 0x84) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000dd9aeb86740ab7c9", @ANYRES32=0x1, @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1003, r5}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) 638.607125ms ago: executing program 4 (id=16099): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) (fail_nth: 7) 611.765815ms ago: executing program 2 (id=16100): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xf4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xdd\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\ty\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xdb\xa9\xd3\x01\xb2\xc7\xf8%\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86P\x0f\x11\x93\xc7\x7f\x05\x00\x00\x00\x00\x00\x00\x00\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14B\a\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f\'OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xebp\x82\xae\xd2M:\xa2*\xd4vk=>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x913\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x88\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gnc\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5P}j`\x95OC\xdf\xfd\xbcK\x17J@w1\xfc\x14\xe5[\xde\xa78\xce\x14#\xba\x13:\xb0\x80{\x04\x13\xb8&{\x8cH\x12\xae\x13\x86\xa5&7Wl\x8f\xfe\xee\xa8\xb6v\"\xe4\xcd\xb5\xad\xc4^\xcd\x93\"\x84\xe9|\x92e\x00\x00\x00\x8ai}\xad1\xb8\xdc\xe9\x88\xca%\xe8\xd4O\xd9\x05F\xf5i\xb3\x96\x19\x85\xfezdT\xd6fJ\x8e\x80S\xe5\x91\xb2\xb6Q\x93_\n%\xcdc\xddZR0W\x1d\xfc\x87\xeb\xab\xbaY5\xceP\xf7xO\x83\"\xb9\xb2\xb7\x85\\\xcd\x03I\x82.\x99x\xdfA\xfcK\xee\xa43z\x99\xd0\xd0\xd86\xa1\x02\xc8\xdedw\x9eN\xef\xcc\x80\xe2\xc69\x1d9E\x02\xb3\xccnk\xa8eb\x1d\xf4\x91') 0s ago: executing program 4 (id=16101): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0x7fad}, 0x81, 0x3, 0x0, 0x9, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe", 0x41, 0x0, &(0x7f0000000840), 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) kernel console output (not intermixed with test programs): hsr0' with parent 'hsr' already present! [ 2973.435435][T17597] Cannot create hsr debugfs directory [ 2974.928446][T17710] netlink: 'syz.0.15085': attribute type 4 has an invalid length. [ 2974.970963][T17708] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.15086'. [ 2975.977266][T17727] netlink: 'syz.4.15087': attribute type 4 has an invalid length. [ 2976.353161][ T2712] device hsr_slave_0 left promiscuous mode [ 2976.363889][ T2712] device hsr_slave_1 left promiscuous mode [ 2976.404911][ T2712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2976.419500][ T2712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2976.440510][ T2712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2976.480018][ T2712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2976.500227][ T2712] bridge0: port 3(hsr0) entered disabled state [ 2976.508398][ T2712] device bridge_slave_1 left promiscuous mode [ 2976.522239][ T2712] bridge0: port 2(bridge_slave_1) entered disabled state [ 2976.541509][ T2712] device bridge_slave_0 left promiscuous mode [ 2976.577872][ T2712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2976.618637][ T2712] device veth1_macvtap left promiscuous mode [ 2976.625475][ T2712] device veth0_macvtap left promiscuous mode [ 2976.636962][ T2712] device veth1_vlan left promiscuous mode [ 2976.643230][ T2712] device veth0_vlan left promiscuous mode [ 2977.356784][ T2712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2977.398907][ T2712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2977.686530][ T2712] bond0 (unregistering): Released all slaves [ 2977.821582][T17747] netlink: 'syz.0.15092': attribute type 4 has an invalid length. [ 2978.075572][T17752] netlink: 'syz.0.15093': attribute type 4 has an invalid length. [ 2978.320450][T17597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2978.360461][T17597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2978.442746][T17597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2978.474821][T17597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2978.871508][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.950495][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2978.966141][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2979.005930][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 2979.068779][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2979.102617][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2979.145334][T16763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2979.152538][T16763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2980.429719][T17767] netlink: 'syz.0.15097': attribute type 4 has an invalid length. [ 2980.456552][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2980.481343][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2980.510131][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2980.568912][T16763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2980.576067][T16763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2980.609920][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2980.628529][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2980.652244][T17770] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.15098'. [ 2980.690870][T17788] netlink: 'syz.4.15102': attribute type 4 has an invalid length. [ 2980.724705][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2980.768464][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2980.787543][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2980.814482][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2980.827054][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2980.869133][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2980.895903][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2980.934469][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2980.961081][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2980.996198][T17597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2981.079544][T17789] device syzkaller0 entered promiscuous mode [ 2981.095357][T17802] netlink: 'syz.4.15104': attribute type 4 has an invalid length. [ 2981.127273][T17804] netlink: 'syz.3.15105': attribute type 4 has an invalid length. [ 2984.183059][T17815] netlink: 'syz.4.15106': attribute type 4 has an invalid length. [ 2984.192075][T17817] netlink: 'syz.3.15107': attribute type 4 has an invalid length. [ 2984.212082][T17832] netlink: 'syz.2.15110': attribute type 4 has an invalid length. [ 2984.614912][T17856] netlink: 'syz.2.15114': attribute type 4 has an invalid length. [ 2984.715654][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2984.734414][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2984.783382][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2984.838314][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2984.860801][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2984.924645][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2984.951355][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2984.963241][T17597] device veth0_vlan entered promiscuous mode [ 2984.988407][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2984.996821][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2985.031666][T17597] device veth1_vlan entered promiscuous mode [ 2985.120969][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2985.134071][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2985.157651][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2985.180690][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2985.193821][T17597] device veth0_macvtap entered promiscuous mode [ 2985.205722][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2985.222278][T17597] device veth1_macvtap entered promiscuous mode [ 2985.256942][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2985.276539][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.286904][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2985.304050][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.316283][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2985.328057][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.344103][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2985.356304][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.375663][T17597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2985.386538][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2985.395907][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2985.408570][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2985.421103][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.432362][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2985.443291][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.459470][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2985.476816][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.487824][T17597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2985.506524][T17597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2985.518322][T17597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2985.536423][T17597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.548567][T17597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.570092][T17597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.585894][T17597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2985.605391][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2985.615693][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2985.829722][T27454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2985.837576][T27454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2985.895832][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2985.956649][ T2707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2985.966559][ T2707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2985.998455][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2986.108502][T17878] netlink: 'syz.3.15118': attribute type 4 has an invalid length. [ 2986.200488][T17885] FAULT_INJECTION: forcing a failure. [ 2986.200488][T17885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2986.236115][T17885] CPU: 1 PID: 17885 Comm: syz.2.15119 Not tainted syzkaller #0 [ 2986.243733][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2986.253814][T17885] Call Trace: [ 2986.257104][T17885] [ 2986.260044][T17885] dump_stack_lvl+0x188/0x24e [ 2986.264752][T17885] ? show_regs_print_info+0x12/0x12 [ 2986.269965][T17885] ? load_image+0x410/0x410 [ 2986.274485][T17885] ? __lock_acquire+0x7c40/0x7c40 [ 2986.279525][T17885] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2986.286131][T17885] should_fail_ex+0x390/0x4c0 [ 2986.290836][T17885] prepare_alloc_pages+0x1e1/0x5b0 [ 2986.295981][T17885] __alloc_pages+0x130/0x4f0 [ 2986.300584][T17885] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 2986.306313][T17885] ? zone_statistics+0x170/0x170 [ 2986.311271][T17885] ? __rwlock_init+0x140/0x140 [ 2986.316050][T17885] ? do_raw_spin_unlock+0x11d/0x230 [ 2986.321266][T17885] __get_free_pages+0x8/0x30 [ 2986.325866][T17885] kasan_populate_vmalloc_pte+0x31/0xf0 [ 2986.331417][T17885] ? __apply_to_page_range+0x97b/0xd10 [ 2986.336885][T17885] __apply_to_page_range+0x98d/0xd10 [ 2986.342194][T17885] ? kasan_populate_vmalloc+0x70/0x70 [ 2986.347589][T17885] alloc_vmap_area+0x179f/0x18d0 [ 2986.352577][T17885] ? vm_map_ram+0xab0/0xab0 [ 2986.357096][T17885] ? rcu_is_watching+0x11/0xa0 [ 2986.361887][T17885] __get_vm_area_node+0x158/0x330 [ 2986.366933][T17885] __vmalloc_node_range+0x357/0x1380 [ 2986.372228][T17885] ? sock_hash_alloc+0x294/0x510 [ 2986.377238][T17885] ? free_vm_area+0x50/0x50 [ 2986.381749][T17885] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2986.387395][T17885] ? rcu_is_watching+0x11/0xa0 [ 2986.392173][T17885] ? bpf_map_area_alloc+0x47/0xe0 [ 2986.397215][T17885] bpf_map_area_alloc+0xd4/0xe0 [ 2986.402074][T17885] ? sock_hash_alloc+0x294/0x510 [ 2986.407026][T17885] sock_hash_alloc+0x294/0x510 [ 2986.411814][T17885] map_create+0x524/0xff0 [ 2986.416162][T17885] ? security_bpf+0x7a/0xa0 [ 2986.420684][T17885] __sys_bpf+0x38b/0x780 [ 2986.424949][T17885] ? bpf_link_show_fdinfo+0x380/0x380 [ 2986.430364][T17885] ? lock_chain_count+0x20/0x20 [ 2986.435246][T17885] __x64_sys_bpf+0x78/0x90 [ 2986.439679][T17885] do_syscall_64+0x4c/0xa0 [ 2986.444115][T17885] ? clear_bhb_loop+0x60/0xb0 [ 2986.448802][T17885] ? clear_bhb_loop+0x60/0xb0 [ 2986.453495][T17885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2986.459397][T17885] RIP: 0033:0x7f8c8d99e0d9 [ 2986.463822][T17885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2986.483431][T17885] RSP: 002b:00007f8c8e881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2986.491852][T17885] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99e0d9 [ 2986.499830][T17885] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 2986.507807][T17885] RBP: 00007f8c8e881090 R08: 0000000000000000 R09: 0000000000000000 [ 2986.515780][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2986.523755][T17885] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007ffc2df43f58 [ 2986.531766][T17885] [ 2986.644857][T17886] netlink: 'syz.0.15120': attribute type 4 has an invalid length. [ 2986.929197][T17892] device syzkaller0 entered promiscuous mode [ 2989.566489][T17906] netlink: 'syz.0.15125': attribute type 4 has an invalid length. [ 2989.588932][T17919] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.15127'. [ 2990.529780][T17937] netlink: 'syz.1.15131': attribute type 4 has an invalid length. [ 2990.686529][T17944] netlink: 'syz.2.15134': attribute type 4 has an invalid length. [ 2990.818912][T17947] netlink: 'syz.3.15135': attribute type 4 has an invalid length. [ 2990.919203][T17953] netlink: 'syz.1.15138': attribute type 4 has an invalid length. [ 2991.700589][T17964] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.15141'. [ 2991.828326][T17967] device syzkaller0 entered promiscuous mode [ 2991.947412][T17972] netlink: 'syz.1.15146': attribute type 4 has an invalid length. [ 2995.041536][T17978] netlink: 'syz.2.15145': attribute type 4 has an invalid length. [ 2995.055580][T17987] netlink: 'syz.1.15148': attribute type 4 has an invalid length. [ 2996.089627][T18010] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.15156'. [ 2996.502969][T18017] device syzkaller0 entered promiscuous mode [ 2996.510820][T18020] netlink: 'syz.4.15159': attribute type 4 has an invalid length. [ 2999.178403][T18042] netlink: 'syz.0.15168': attribute type 4 has an invalid length. [ 2999.495960][T18048] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.15171'. [ 2999.811563][T18062] netlink: 'syz.4.15175': attribute type 4 has an invalid length. [ 2999.905654][T18061] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15174'. [ 3000.256286][T18064] FAULT_INJECTION: forcing a failure. [ 3000.256286][T18064] name failslab, interval 1, probability 0, space 0, times 0 [ 3000.286006][T18064] CPU: 1 PID: 18064 Comm: syz.0.15176 Not tainted syzkaller #0 [ 3000.293610][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3000.303693][T18064] Call Trace: [ 3000.306994][T18064] [ 3000.309955][T18064] dump_stack_lvl+0x188/0x24e [ 3000.314685][T18064] ? show_regs_print_info+0x12/0x12 [ 3000.319930][T18064] ? load_image+0x410/0x410 [ 3000.324490][T18064] ? __lock_acquire+0x7c40/0x7c40 [ 3000.329578][T18064] should_fail_ex+0x390/0x4c0 [ 3000.334316][T18064] should_failslab+0x5/0x20 [ 3000.338846][T18064] slab_pre_alloc_hook+0x59/0x300 [ 3000.343911][T18064] ? security_sk_alloc+0x47/0x130 [ 3000.348978][T18064] __kmem_cache_alloc_node+0x4f/0x270 [ 3000.354400][T18064] ? security_sk_alloc+0x47/0x130 [ 3000.359462][T18064] __kmalloc+0xa3/0x240 [ 3000.363659][T18064] ? sk_prot_alloc+0xe7/0x210 [ 3000.368383][T18064] security_sk_alloc+0x47/0x130 [ 3000.373289][T18064] sk_prot_alloc+0x101/0x210 [ 3000.378002][T18064] ? sk_alloc+0x20/0x330 [ 3000.382289][T18064] sk_alloc+0x36/0x330 [ 3000.386389][T18064] ? bpf_ctx_init+0x154/0x190 [ 3000.391110][T18064] bpf_prog_test_run_skb+0x36d/0x18e0 [ 3000.396525][T18064] ? __fget_files+0x28/0x460 [ 3000.401153][T18064] ? __fget_files+0x3fc/0x460 [ 3000.405902][T18064] ? cpu_online+0xa0/0xa0 [ 3000.410286][T18064] bpf_prog_test_run+0x31c/0x390 [ 3000.415281][T18064] __sys_bpf+0x62b/0x780 [ 3000.419573][T18064] ? bpf_link_show_fdinfo+0x380/0x380 [ 3000.425031][T18064] ? lock_chain_count+0x20/0x20 [ 3000.429949][T18064] __x64_sys_bpf+0x78/0x90 [ 3000.434408][T18064] do_syscall_64+0x4c/0xa0 [ 3000.438856][T18064] ? clear_bhb_loop+0x60/0xb0 [ 3000.443566][T18064] ? clear_bhb_loop+0x60/0xb0 [ 3000.448283][T18064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3000.454209][T18064] RIP: 0033:0x7f4683f9e0d9 [ 3000.458665][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3000.478312][T18064] RSP: 002b:00007f4684ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3000.486770][T18064] RAX: ffffffffffffffda RBX: 00007f4684225fa0 RCX: 00007f4683f9e0d9 [ 3000.494772][T18064] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 3000.502770][T18064] RBP: 00007f4684ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 3000.510769][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3000.518769][T18064] R13: 00007f4684226038 R14: 00007f4684225fa0 R15: 00007ffc0ca44d98 [ 3000.526823][T18064] [ 3001.428680][T18080] device syzkaller0 entered promiscuous mode [ 3005.207172][T18116] netlink: 'syz.3.15194': attribute type 4 has an invalid length. [ 3005.235301][T18118] netlink: 'syz.0.15195': attribute type 4 has an invalid length. [ 3005.765160][T18129] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.15199'. [ 3005.815869][T18138] device netdevsim0 entered promiscuous mode [ 3006.914040][T18150] device syzkaller0 entered promiscuous mode [ 3007.001080][T18155] netlink: 'syz.3.15210': attribute type 4 has an invalid length. [ 3010.243289][T18163] netlink: 'syz.4.15213': attribute type 4 has an invalid length. [ 3010.493208][T18196] netlink: 'syz.3.15222': attribute type 4 has an invalid length. [ 3011.687034][T18213] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.15230'. [ 3012.232134][T18218] netlink: 'syz.2.15232': attribute type 4 has an invalid length. [ 3012.293426][T18223] netlink: 'syz.1.15233': attribute type 21 has an invalid length. [ 3012.483799][T18228] netlink: 'syz.3.15236': attribute type 4 has an invalid length. [ 3012.801640][T18232] netlink: 'syz.1.15248': attribute type 4 has an invalid length. [ 3013.729588][T18250] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.15244'. [ 3013.996264][T18259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15250'. [ 3014.015943][T18259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15250'. [ 3014.027719][T18260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15250'. [ 3014.148457][T18269] FAULT_INJECTION: forcing a failure. [ 3014.148457][T18269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3014.164007][T18269] CPU: 0 PID: 18269 Comm: syz.0.15252 Not tainted syzkaller #0 [ 3014.171582][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3014.181643][T18269] Call Trace: [ 3014.184927][T18269] [ 3014.187865][T18269] dump_stack_lvl+0x188/0x24e [ 3014.192567][T18269] ? show_regs_print_info+0x12/0x12 [ 3014.197789][T18269] ? load_image+0x410/0x410 [ 3014.202313][T18269] ? __lock_acquire+0x7c40/0x7c40 [ 3014.207355][T18269] ? snprintf+0xe5/0x140 [ 3014.211610][T18269] should_fail_ex+0x390/0x4c0 [ 3014.216311][T18269] _copy_to_user+0x2c/0x130 [ 3014.220827][T18269] simple_read_from_buffer+0xe3/0x150 [ 3014.226214][T18269] proc_fail_nth_read+0x1a6/0x220 [ 3014.231255][T18269] ? proc_fault_inject_write+0x310/0x310 [ 3014.236903][T18269] ? fsnotify_perm+0x248/0x550 [ 3014.241681][T18269] ? proc_fault_inject_write+0x310/0x310 [ 3014.247330][T18269] vfs_read+0x2db/0x960 [ 3014.251508][T18269] ? kernel_read+0x1e0/0x1e0 [ 3014.256112][T18269] ? __fget_files+0x28/0x460 [ 3014.260723][T18269] ? __fget_files+0x3fc/0x460 [ 3014.265420][T18269] ? __fdget_pos+0x2ae/0x360 [ 3014.270025][T18269] ? ksys_read+0x70/0x260 [ 3014.274383][T18269] ksys_read+0x14d/0x260 [ 3014.278646][T18269] ? vfs_write+0x9a0/0x9a0 [ 3014.283086][T18269] ? lockdep_hardirqs_on+0x94/0x140 [ 3014.288302][T18269] do_syscall_64+0x4c/0xa0 [ 3014.292732][T18269] ? clear_bhb_loop+0x60/0xb0 [ 3014.297424][T18269] ? clear_bhb_loop+0x60/0xb0 [ 3014.302118][T18269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3014.308033][T18269] RIP: 0033:0x7f4683f5e90e [ 3014.312459][T18269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3014.332078][T18269] RSP: 002b:00007f4684ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3014.340513][T18269] RAX: ffffffffffffffda RBX: 00007f4684ea66c0 RCX: 00007f4683f5e90e [ 3014.348493][T18269] RDX: 000000000000000f RSI: 00007f4684ea60a0 RDI: 0000000000000004 [ 3014.356472][T18269] RBP: 00007f4684ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 3014.364453][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.372432][T18269] R13: 00007f4684226038 R14: 00007f4684225fa0 R15: 00007ffc0ca44d98 [ 3014.380429][T18269] [ 3014.470001][T18274] netlink: 'syz.3.15251': attribute type 2 has an invalid length. [ 3014.599860][T18276] netlink: 'syz.0.15253': attribute type 4 has an invalid length. [ 3015.440439][T18289] netlink: 'syz.2.15259': attribute type 4 has an invalid length. [ 3015.619002][T18294] netlink: 'syz.1.15260': attribute type 2 has an invalid length. [ 3015.627502][T18294] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15260'. [ 3015.859073][T18307] netlink: 'syz.1.15264': attribute type 4 has an invalid length. [ 3017.602740][T18331] netlink: 'syz.4.15270': attribute type 4 has an invalid length. [ 3018.689115][T18348] netlink: 'syz.3.15277': attribute type 4 has an invalid length. [ 3018.806965][T18353] netlink: 'syz.0.15280': attribute type 10 has an invalid length. [ 3018.828865][T18353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15280'. [ 3018.869933][T18353] bridge0: port 3(ipvlan1) entered blocking state [ 3018.924991][T18353] bridge0: port 3(ipvlan1) entered disabled state [ 3019.003683][T18353] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3019.078806][T18356] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.15279'. [ 3019.115204][T18362] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.15278'. [ 3019.291876][T18366] FAULT_INJECTION: forcing a failure. [ 3019.291876][T18366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3019.320327][T18366] CPU: 1 PID: 18366 Comm: syz.1.15283 Not tainted syzkaller #0 [ 3019.327916][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3019.337982][T18366] Call Trace: [ 3019.341271][T18366] [ 3019.344204][T18366] dump_stack_lvl+0x188/0x24e [ 3019.348886][T18366] ? show_regs_print_info+0x12/0x12 [ 3019.354081][T18366] ? load_image+0x410/0x410 [ 3019.358593][T18366] ? __lock_acquire+0x7c40/0x7c40 [ 3019.363627][T18366] ? snprintf+0xe5/0x140 [ 3019.367869][T18366] should_fail_ex+0x390/0x4c0 [ 3019.372550][T18366] _copy_to_user+0x2c/0x130 [ 3019.377049][T18366] simple_read_from_buffer+0xe3/0x150 [ 3019.382417][T18366] proc_fail_nth_read+0x1a6/0x220 [ 3019.387439][T18366] ? proc_fault_inject_write+0x310/0x310 [ 3019.393067][T18366] ? fsnotify_perm+0x248/0x550 [ 3019.397841][T18366] ? proc_fault_inject_write+0x310/0x310 [ 3019.403478][T18366] vfs_read+0x2db/0x960 [ 3019.407641][T18366] ? kernel_read+0x1e0/0x1e0 [ 3019.412228][T18366] ? __fget_files+0x28/0x460 [ 3019.416817][T18366] ? __fget_files+0x3fc/0x460 [ 3019.421496][T18366] ? __fdget_pos+0x2ae/0x360 [ 3019.426081][T18366] ? ksys_read+0x70/0x260 [ 3019.430413][T18366] ksys_read+0x14d/0x260 [ 3019.434656][T18366] ? vfs_write+0x9a0/0x9a0 [ 3019.439083][T18366] ? lockdep_hardirqs_on+0x94/0x140 [ 3019.444283][T18366] do_syscall_64+0x4c/0xa0 [ 3019.448697][T18366] ? clear_bhb_loop+0x60/0xb0 [ 3019.453371][T18366] ? clear_bhb_loop+0x60/0xb0 [ 3019.458045][T18366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3019.463936][T18366] RIP: 0033:0x7f53eed5e90e [ 3019.468343][T18366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3019.487941][T18366] RSP: 002b:00007f53efceafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3019.496346][T18366] RAX: ffffffffffffffda RBX: 00007f53efceb6c0 RCX: 00007f53eed5e90e [ 3019.504310][T18366] RDX: 000000000000000f RSI: 00007f53efceb0a0 RDI: 0000000000000004 [ 3019.512270][T18366] RBP: 00007f53efceb090 R08: 0000000000000000 R09: 0000000000000000 [ 3019.520233][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.528200][T18366] R13: 00007f53ef026038 R14: 00007f53ef025fa0 R15: 00007ffe14b5c7d8 [ 3019.536176][T18366] [ 3019.852999][T18377] netlink: 'syz.4.15288': attribute type 21 has an invalid length. [ 3019.872380][T18377] netlink: 'syz.4.15288': attribute type 2 has an invalid length. [ 3019.894946][T18377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15288'. [ 3019.944383][T18377] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.15288'. [ 3019.960298][T18381] netlink: 'syz.2.15287': attribute type 4 has an invalid length. [ 3020.285237][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.291672][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.913187][T18392] netlink: 'syz.1.15291': attribute type 4 has an invalid length. [ 3021.108749][T18398] netlink: 'syz.0.15294': attribute type 10 has an invalid length. [ 3021.129121][T18398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15294'. [ 3021.150172][T18398] bridge0: port 3(ipvlan1) entered blocking state [ 3021.157557][T18398] bridge0: port 3(ipvlan1) entered disabled state [ 3021.197478][T18398] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3022.206527][T18409] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.15298'. [ 3022.253100][T18416] FAULT_INJECTION: forcing a failure. [ 3022.253100][T18416] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.277243][T18416] CPU: 1 PID: 18416 Comm: syz.1.15300 Not tainted syzkaller #0 [ 3022.284817][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3022.294883][T18416] Call Trace: [ 3022.298167][T18416] [ 3022.301099][T18416] dump_stack_lvl+0x188/0x24e [ 3022.305777][T18416] ? sctp_sendmsg+0x1686/0x2940 [ 3022.310630][T18416] ? ___sys_sendmsg+0x2a2/0x360 [ 3022.315498][T18416] ? show_regs_print_info+0x12/0x12 [ 3022.320702][T18416] ? load_image+0x410/0x410 [ 3022.325200][T18416] should_fail_ex+0x390/0x4c0 [ 3022.329880][T18416] should_failslab+0x5/0x20 [ 3022.334391][T18416] slab_pre_alloc_hook+0x59/0x300 [ 3022.339414][T18416] ? sctp_add_bind_addr+0x89/0x350 [ 3022.344531][T18416] __kmem_cache_alloc_node+0x4f/0x270 [ 3022.349900][T18416] ? sctp_add_bind_addr+0x89/0x350 [ 3022.355006][T18416] kmalloc_trace+0x26/0xe0 [ 3022.359420][T18416] sctp_add_bind_addr+0x89/0x350 [ 3022.364358][T18416] sctp_copy_local_addr_list+0x317/0x4d0 [ 3022.369990][T18416] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 3022.375704][T18416] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 3022.381769][T18416] ? sctp_v4_is_any+0x31/0x50 [ 3022.386443][T18416] ? sctp_copy_one_addr+0x93/0x660 [ 3022.391552][T18416] sctp_bind_addr_copy+0xaf/0x3c0 [ 3022.396574][T18416] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3022.402896][T18416] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3022.408192][T18416] ? __sctp_connect+0xd80/0xd80 [ 3022.413043][T18416] ? __local_bh_enable_ip+0x136/0x1c0 [ 3022.418415][T18416] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3022.423986][T18416] ? security_sctp_bind_connect+0x85/0xb0 [ 3022.429710][T18416] sctp_sendmsg+0x1686/0x2940 [ 3022.434404][T18416] ? sctp_getsockopt+0x8a0/0x8a0 [ 3022.439370][T18416] ? __might_fault+0xa6/0x120 [ 3022.444048][T18416] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3022.450469][T18416] ? aa_sock_msg_perm+0x94/0x150 [ 3022.455408][T18416] ? inet_sendmsg+0xca/0x2a0 [ 3022.459993][T18416] ? inet_send_prepare+0x250/0x250 [ 3022.465102][T18416] ____sys_sendmsg+0x5ed/0x9a0 [ 3022.469876][T18416] ? __sys_sendmsg_sock+0x30/0x30 [ 3022.474898][T18416] ? __import_iovec+0x306/0x510 [ 3022.479756][T18416] ? import_iovec+0x6f/0xa0 [ 3022.484276][T18416] ___sys_sendmsg+0x2a2/0x360 [ 3022.488965][T18416] ? __sys_sendmsg+0x2a0/0x2a0 [ 3022.493742][T18416] ? trace_call_bpf+0xbf/0x6b0 [ 3022.498525][T18416] __se_sys_sendmsg+0x1c3/0x2b0 [ 3022.503373][T18416] ? perf_trace_preemptirq_template+0x268/0x320 [ 3022.509615][T18416] ? __x64_sys_sendmsg+0x80/0x80 [ 3022.514564][T18416] ? lockdep_hardirqs_on+0x94/0x140 [ 3022.519761][T18416] do_syscall_64+0x4c/0xa0 [ 3022.524174][T18416] ? clear_bhb_loop+0x60/0xb0 [ 3022.528847][T18416] ? clear_bhb_loop+0x60/0xb0 [ 3022.533546][T18416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3022.539441][T18416] RIP: 0033:0x7f53eed9e0d9 [ 3022.543852][T18416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3022.563452][T18416] RSP: 002b:00007f53efceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3022.571858][T18416] RAX: ffffffffffffffda RBX: 00007f53ef025fa0 RCX: 00007f53eed9e0d9 [ 3022.579823][T18416] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 3022.587784][T18416] RBP: 00007f53efceb090 R08: 0000000000000000 R09: 0000000000000000 [ 3022.595744][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3022.603704][T18416] R13: 00007f53ef026038 R14: 00007f53ef025fa0 R15: 00007ffe14b5c7d8 [ 3022.611678][T18416] [ 3022.723104][T18425] netlink: 'syz.1.15302': attribute type 4 has an invalid length. [ 3023.154673][T18429] netlink: 'syz.2.15304': attribute type 4 has an invalid length. [ 3023.574397][T18436] netlink: 'syz.1.15306': attribute type 4 has an invalid length. [ 3023.620590][T18437] netlink: 'syz.4.15307': attribute type 10 has an invalid length. [ 3023.674772][T18437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15307'. [ 3023.694290][T18437] bridge0: port 3(ipvlan1) entered blocking state [ 3023.704794][T18437] bridge0: port 3(ipvlan1) entered disabled state [ 3023.737271][T18437] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3024.208547][T18447] netlink: 'syz.0.15311': attribute type 10 has an invalid length. [ 3024.313145][T18447] team0: Port device dummy0 added [ 3024.601348][T18456] IPv6: Can't replace route, no match found [ 3025.437189][T18473] device syzkaller0 entered promiscuous mode [ 3026.526508][T18477] netlink: 'syz.3.15320': attribute type 4 has an invalid length. [ 3029.413652][T18486] netlink: 'syz.2.15324': attribute type 10 has an invalid length. [ 3029.421651][T18486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15324'. [ 3029.431413][T18486] bridge0: port 3(ipvlan1) entered blocking state [ 3029.437993][T18486] bridge0: port 3(ipvlan1) entered disabled state [ 3029.446194][T18486] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3029.466347][T18501] netlink: 'syz.0.15326': attribute type 4 has an invalid length. [ 3029.781466][T18510] netlink: 'syz.0.15329': attribute type 4 has an invalid length. [ 3030.175820][T18509] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.15327'. [ 3030.881264][T18528] netlink: 'syz.0.15336': attribute type 4 has an invalid length. [ 3030.979467][T18534] netlink: 'syz.3.15334': attribute type 4 has an invalid length. [ 3031.110719][T18536] device syzkaller0 entered promiscuous mode [ 3034.266783][T18542] netlink: 'syz.1.15341': attribute type 10 has an invalid length. [ 3034.275231][T18542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15341'. [ 3034.284636][T18542] device ipvlan1 entered promiscuous mode [ 3034.291968][T18542] bridge0: port 3(ipvlan1) entered blocking state [ 3034.298458][T18542] bridge0: port 3(ipvlan1) entered disabled state [ 3034.306320][T18542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3034.322975][T18553] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.15343'. [ 3034.403319][T18562] device syzkaller0 entered promiscuous mode [ 3034.818204][T18584] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.15347'. [ 3038.119366][T18596] netlink: 'syz.0.15353': attribute type 4 has an invalid length. [ 3038.127306][T18604] netlink: 'syz.3.15356': attribute type 4 has an invalid length. [ 3038.297649][T18612] netlink: 'syz.0.15368': attribute type 4 has an invalid length. [ 3038.453065][T18611] device syzkaller0 entered promiscuous mode [ 3038.560724][T18614] device syzkaller0 entered promiscuous mode [ 3038.590186][T18620] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.15357'. [ 3038.735472][T18625] netlink: 'syz.0.15362': attribute type 2 has an invalid length. [ 3038.753926][T18625] netlink: 'syz.0.15362': attribute type 8 has an invalid length. [ 3038.772265][T18625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15362'. [ 3038.807785][T18628] netlink: 'syz.1.15361': attribute type 4 has an invalid length. [ 3044.081180][T18632] netlink: 'syz.0.15364': attribute type 1 has an invalid length. [ 3044.089005][T18632] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.15364'. [ 3044.098536][T18635] netlink: 'syz.0.15364': attribute type 2 has an invalid length. [ 3044.107156][T18635] netlink: 'syz.0.15364': attribute type 8 has an invalid length. [ 3044.115860][T18635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15364'. [ 3044.125297][T18643] netlink: 'syz.4.15369': attribute type 4 has an invalid length. [ 3044.265922][T18646] netlink: 'syz.1.15370': attribute type 4 has an invalid length. [ 3044.346510][T18653] netlink: 'syz.2.15373': attribute type 4 has an invalid length. [ 3044.626468][T18652] FAULT_INJECTION: forcing a failure. [ 3044.626468][T18652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3044.648462][T18659] netlink: 'syz.4.15374': attribute type 11 has an invalid length. [ 3044.670536][T18659] netlink: 176 bytes leftover after parsing attributes in process `syz.4.15374'. [ 3044.690935][T18652] CPU: 0 PID: 18652 Comm: syz.3.15372 Not tainted syzkaller #0 [ 3044.698519][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3044.708589][T18652] Call Trace: [ 3044.711879][T18652] [ 3044.714820][T18652] dump_stack_lvl+0x188/0x24e [ 3044.719515][T18652] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3044.725679][T18652] ? show_regs_print_info+0x12/0x12 [ 3044.730903][T18652] ? load_image+0x410/0x410 [ 3044.735440][T18652] should_fail_ex+0x390/0x4c0 [ 3044.740145][T18652] _copy_to_user+0x2c/0x130 [ 3044.744673][T18652] bpf_test_finish+0x198/0x600 [ 3044.749469][T18652] ? convert_skb_to___skb+0x420/0x420 [ 3044.754867][T18652] ? __build_skb+0x24b/0x3b0 [ 3044.759492][T18652] bpf_prog_test_run_skb+0x1129/0x18e0 [ 3044.764994][T18652] ? cpu_online+0xa0/0xa0 [ 3044.769344][T18652] bpf_prog_test_run+0x31c/0x390 [ 3044.774310][T18652] __sys_bpf+0x62b/0x780 [ 3044.778580][T18652] ? bpf_link_show_fdinfo+0x380/0x380 [ 3044.783988][T18652] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3044.790179][T18652] __x64_sys_bpf+0x78/0x90 [ 3044.794616][T18652] do_syscall_64+0x4c/0xa0 [ 3044.799054][T18652] ? clear_bhb_loop+0x60/0xb0 [ 3044.803761][T18652] ? clear_bhb_loop+0x60/0xb0 [ 3044.808465][T18652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3044.814385][T18652] RIP: 0033:0x7f70e039e0d9 [ 3044.818818][T18652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3044.838443][T18652] RSP: 002b:00007f70e131e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3044.846876][T18652] RAX: ffffffffffffffda RBX: 00007f70e0625fa0 RCX: 00007f70e039e0d9 [ 3044.854865][T18652] RDX: 000000000000004c RSI: 0000200000000380 RDI: 000000000000000a [ 3044.862855][T18652] RBP: 00007f70e131e090 R08: 0000000000000000 R09: 0000000000000000 [ 3044.870879][T18652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3044.878870][T18652] R13: 00007f70e0626038 R14: 00007f70e0625fa0 R15: 00007ffe35a6a258 [ 3044.886876][T18652] [ 3044.891074][T18665] FAULT_INJECTION: forcing a failure. [ 3044.891074][T18665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3044.933072][T18665] CPU: 1 PID: 18665 Comm: syz.2.15376 Not tainted syzkaller #0 [ 3044.940659][T18665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3044.950728][T18665] Call Trace: [ 3044.954022][T18665] [ 3044.956972][T18665] dump_stack_lvl+0x188/0x24e [ 3044.961682][T18665] ? show_regs_print_info+0x12/0x12 [ 3044.966908][T18665] ? load_image+0x410/0x410 [ 3044.971434][T18665] ? __lock_acquire+0x7c40/0x7c40 [ 3044.976475][T18665] ? migrate_enable+0x148/0x220 [ 3044.981335][T18665] should_fail_ex+0x390/0x4c0 [ 3044.986034][T18665] _copy_to_user+0x2c/0x130 [ 3044.990556][T18665] bpf_test_finish+0x198/0x600 [ 3044.995348][T18665] ? convert_skb_to___skb+0x420/0x420 [ 3045.000761][T18665] ? __build_skb+0x24b/0x3b0 [ 3045.005386][T18665] bpf_prog_test_run_skb+0x1129/0x18e0 [ 3045.010892][T18665] ? cpu_online+0xa0/0xa0 [ 3045.015235][T18665] bpf_prog_test_run+0x31c/0x390 [ 3045.020182][T18665] __sys_bpf+0x62b/0x780 [ 3045.024440][T18665] ? bpf_link_show_fdinfo+0x380/0x380 [ 3045.029834][T18665] ? lock_chain_count+0x20/0x20 [ 3045.034716][T18665] __x64_sys_bpf+0x78/0x90 [ 3045.039161][T18665] do_syscall_64+0x4c/0xa0 [ 3045.043594][T18665] ? clear_bhb_loop+0x60/0xb0 [ 3045.048286][T18665] ? clear_bhb_loop+0x60/0xb0 [ 3045.052982][T18665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3045.058894][T18665] RIP: 0033:0x7f8c8d99e0d9 [ 3045.063319][T18665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3045.082938][T18665] RSP: 002b:00007f8c8e881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3045.091365][T18665] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99e0d9 [ 3045.099345][T18665] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3045.107326][T18665] RBP: 00007f8c8e881090 R08: 0000000000000000 R09: 0000000000000000 [ 3045.115301][T18665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3045.123278][T18665] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007ffc2df43f58 [ 3045.131275][T18665] [ 3045.354131][T18678] netlink: 'syz.0.15378': attribute type 4 has an invalid length. [ 3045.941330][T18685] netlink: 'syz.2.15382': attribute type 1 has an invalid length. [ 3045.951045][T18685] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.15382'. [ 3045.985466][T18685] netlink: 'syz.2.15382': attribute type 2 has an invalid length. [ 3045.994568][T18685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15382'. [ 3046.092273][T18687] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15383'. [ 3046.103166][T18687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3046.546978][T18689] device syzkaller0 entered promiscuous mode [ 3049.624209][T18729] validate_nla: 4 callbacks suppressed [ 3049.624288][T18729] netlink: 'syz.0.15408': attribute type 4 has an invalid length. [ 3049.631368][T18732] netlink: 'syz.1.15399': attribute type 4 has an invalid length. [ 3049.678653][T18735] netlink: 'syz.4.15400': attribute type 1 has an invalid length. [ 3049.688203][T18729] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15408'. [ 3049.707861][T18735] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.15400'. [ 3049.767020][T18735] netlink: 'syz.4.15400': attribute type 2 has an invalid length. [ 3049.798491][T18735] netlink: 'syz.4.15400': attribute type 8 has an invalid length. [ 3049.838343][T18735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15400'. [ 3049.896434][T18739] netlink: 'syz.3.15398': attribute type 4 has an invalid length. [ 3050.688972][T18753] netlink: 'syz.0.15403': attribute type 4 has an invalid length. [ 3050.724945][T18754] netlink: 'syz.4.15404': attribute type 4 has an invalid length. [ 3050.738220][T18756] FAULT_INJECTION: forcing a failure. [ 3050.738220][T18756] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.751394][T18756] CPU: 1 PID: 18756 Comm: syz.2.15407 Not tainted syzkaller #0 [ 3050.758961][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3050.769027][T18756] Call Trace: [ 3050.772311][T18756] [ 3050.775248][T18756] dump_stack_lvl+0x188/0x24e [ 3050.779956][T18756] ? verify_lock_unused+0x140/0x140 [ 3050.785173][T18756] ? show_regs_print_info+0x12/0x12 [ 3050.790393][T18756] ? load_image+0x410/0x410 [ 3050.794911][T18756] ? dsa_slave_change_master+0x730/0x730 [ 3050.800669][T18756] ? switchdev_handle_port_obj_add_foreign+0x3f/0x60 [ 3050.807410][T18756] ? dsa_slave_switchdev_blocking_event+0xce/0x100 [ 3050.813938][T18756] should_fail_ex+0x390/0x4c0 [ 3050.818639][T18756] should_failslab+0x5/0x20 [ 3050.823155][T18756] slab_pre_alloc_hook+0x59/0x300 [ 3050.828199][T18756] kmem_cache_alloc+0x56/0x2f0 [ 3050.832976][T18756] ? fdb_create+0x37/0x1230 [ 3050.837559][T18756] fdb_create+0x37/0x1230 [ 3050.841908][T18756] ? br_fdb_find_rcu+0x30/0x30 [ 3050.846704][T18756] ? br_fdb_find+0x82/0x210 [ 3050.851224][T18756] ? br_fdb_find+0x82/0x210 [ 3050.855749][T18756] fdb_add_local+0x121/0x240 [ 3050.860355][T18756] ? br_fdb_add_local+0x26/0x50 [ 3050.865229][T18756] br_fdb_add_local+0x36/0x50 [ 3050.869925][T18756] br_vlan_add+0x5dc/0x910 [ 3050.874430][T18756] br_vlan_info+0x1bb/0x460 [ 3050.878955][T18756] ? br_process_vlan_info+0x7f0/0x7f0 [ 3050.884345][T18756] ? __lock_acquire+0x1465/0x7c40 [ 3050.889394][T18756] br_process_vlan_info+0x287/0x7f0 [ 3050.894613][T18756] ? __kernel_text_address+0x9/0x30 [ 3050.899832][T18756] br_afspec+0x1fd/0x5d0 [ 3050.904100][T18756] ? verify_lock_unused+0x140/0x140 [ 3050.909331][T18756] ? br_setport+0x10e0/0x10e0 [ 3050.914035][T18756] br_setlink+0x346/0x810 [ 3050.918388][T18756] ? br_vlan_info+0x460/0x460 [ 3050.923114][T18756] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 3050.928236][T18756] ? rcu_read_unlock+0x8c/0xa0 [ 3050.933019][T18756] ? mutex_lock_nested+0x10/0x10 [ 3050.937975][T18756] ? nla_find+0x12d/0x150 [ 3050.942334][T18756] rtnl_bridge_setlink+0x58f/0x720 [ 3050.947471][T18756] ? rtnl_bridge_dellink+0x680/0x680 [ 3050.952777][T18756] rtnetlink_rcv_msg+0x863/0xfb0 [ 3050.957729][T18756] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 3050.962858][T18756] ? rtnetlink_bind+0x80/0x80 [ 3050.967542][T18756] ? __local_bh_enable_ip+0x136/0x1c0 [ 3050.972924][T18756] ? lockdep_hardirqs_on+0x94/0x140 [ 3050.978137][T18756] ? __local_bh_enable_ip+0x136/0x1c0 [ 3050.983523][T18756] ? _local_bh_enable+0xa0/0xa0 [ 3050.988392][T18756] ? __dev_queue_xmit+0x281/0x3810 [ 3050.993521][T18756] ? __dev_queue_xmit+0x281/0x3810 [ 3050.998648][T18756] ? __dev_queue_xmit+0x1d84/0x3810 [ 3051.003870][T18756] ? __dev_queue_xmit+0x281/0x3810 [ 3051.009004][T18756] ? ref_tracker_free+0x682/0x830 [ 3051.014047][T18756] ? refcount_inc+0x70/0x70 [ 3051.018569][T18756] ? memcpy+0x3c/0x60 [ 3051.022559][T18756] ? __copy_skb_header+0x3ba/0x4f0 [ 3051.027676][T18756] ? __skb_clone+0x446/0x6c0 [ 3051.032280][T18756] netlink_rcv_skb+0x1ef/0x440 [ 3051.037075][T18756] ? rtnetlink_bind+0x80/0x80 [ 3051.041764][T18756] ? netlink_ack+0x1160/0x1160 [ 3051.046553][T18756] ? netlink_deliver_tap+0x2e/0x1b0 [ 3051.051770][T18756] netlink_unicast+0x7ad/0x920 [ 3051.056566][T18756] netlink_sendmsg+0x8ad/0xbd0 [ 3051.061350][T18756] ? netlink_getsockopt+0x550/0x550 [ 3051.066564][T18756] ? apparmor_socket_sendmsg+0x16c/0x330 [ 3051.072218][T18756] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3051.077518][T18756] ? security_socket_sendmsg+0x7c/0xa0 [ 3051.082992][T18756] ? netlink_getsockopt+0x550/0x550 [ 3051.088203][T18756] ____sys_sendmsg+0x5ed/0x9a0 [ 3051.092999][T18756] ? __sys_sendmsg_sock+0x30/0x30 [ 3051.098043][T18756] ? __import_iovec+0x306/0x510 [ 3051.102918][T18756] ? import_iovec+0x6f/0xa0 [ 3051.107441][T18756] ___sys_sendmsg+0x2a2/0x360 [ 3051.112143][T18756] ? __sys_sendmsg+0x2a0/0x2a0 [ 3051.116947][T18756] ? __lock_acquire+0x7c40/0x7c40 [ 3051.122014][T18756] __se_sys_sendmsg+0x1c3/0x2b0 [ 3051.126886][T18756] ? __x64_sys_sendmsg+0x80/0x80 [ 3051.131858][T18756] ? lockdep_hardirqs_on+0x94/0x140 [ 3051.137077][T18756] do_syscall_64+0x4c/0xa0 [ 3051.141512][T18756] ? clear_bhb_loop+0x60/0xb0 [ 3051.146203][T18756] ? clear_bhb_loop+0x60/0xb0 [ 3051.150898][T18756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3051.156806][T18756] RIP: 0033:0x7f8c8d99e0d9 [ 3051.161231][T18756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3051.180848][T18756] RSP: 002b:00007f8c8e881028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3051.189277][T18756] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99e0d9 [ 3051.197267][T18756] RDX: 000000002000c880 RSI: 0000200000000040 RDI: 0000000000000003 [ 3051.205253][T18756] RBP: 00007f8c8e881090 R08: 0000000000000000 R09: 0000000000000000 [ 3051.213238][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3051.221222][T18756] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007ffc2df43f58 [ 3051.229219][T18756] [ 3051.248171][T18756] bridge0: failed to insert local address into bridge forwarding table [ 3051.710383][T18768] netlink: 'syz.3.15413': attribute type 4 has an invalid length. [ 3051.765613][T18773] netlink: 'syz.0.15412': attribute type 3 has an invalid length. [ 3051.784601][T18772] device syzkaller0 entered promiscuous mode [ 3051.797486][T18773] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15412'. [ 3051.918852][T18777] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15414'. [ 3054.685410][T18798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15419'. [ 3054.743643][T18798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3054.766315][T18798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3055.233193][T18798] bond0 (unregistering): Released all slaves [ 3055.250710][T18805] validate_nla: 1 callbacks suppressed [ 3055.250724][T18805] netlink: 'syz.1.15421': attribute type 4 has an invalid length. [ 3055.276862][T18810] netlink: 'syz.0.15422': attribute type 4 has an invalid length. [ 3055.451047][T18818] netlink: 'syz.1.15423': attribute type 4 has an invalid length. [ 3055.489718][T18815] netlink: 'syz.4.15425': attribute type 4 has an invalid length. [ 3056.398105][T18822] netlink: 'syz.0.15426': attribute type 4 has an invalid length. [ 3056.715307][T18838] netlink: 'syz.2.15430': attribute type 11 has an invalid length. [ 3056.741081][T18838] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15430'. [ 3056.772886][T18840] netlink: 'syz.3.15433': attribute type 4 has an invalid length. [ 3056.793540][T18837] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15431'. [ 3057.196651][T18853] device syzkaller0 entered promiscuous mode [ 3060.453200][T18858] netlink: 'syz.2.15438': attribute type 41 has an invalid length. [ 3060.461440][T18860] netlink: 'syz.1.15439': attribute type 4 has an invalid length. [ 3060.898828][T18870] netlink: 'syz.4.15443': attribute type 3 has an invalid length. [ 3060.908765][T18870] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15443'. [ 3061.662960][T18876] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.15443'. [ 3061.675376][T18883] netlink: 'syz.2.15442': attribute type 4 has an invalid length. [ 3061.691836][T18885] netlink: 'syz.0.15445': attribute type 4 has an invalid length. [ 3061.863450][T18890] netlink: 'syz.2.15446': attribute type 4 has an invalid length. [ 3062.440540][T18907] netlink: 'syz.3.15452': attribute type 4 has an invalid length. [ 3062.961625][T18922] netlink: 'syz.0.15455': attribute type 4 has an invalid length. [ 3063.330729][T12532] Bluetooth: hci1: command 0x0406 tx timeout [ 3063.636461][T18929] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.15458'. [ 3063.679058][T18931] netlink: 'syz.3.15460': attribute type 4 has an invalid length. [ 3063.691064][T18932] netlink: 'syz.4.15459': attribute type 3 has an invalid length. [ 3063.706532][T18932] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15459'. [ 3063.749984][T18926] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15458'. [ 3065.682193][T18974] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.15473'. [ 3065.697066][T18975] validate_nla: 6 callbacks suppressed [ 3065.697105][T18975] netlink: 'syz.3.15474': attribute type 3 has an invalid length. [ 3065.732060][T18977] netlink: 'syz.4.15475': attribute type 4 has an invalid length. [ 3065.754178][T18975] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15474'. [ 3065.804728][T18979] netlink: 'syz.1.15476': attribute type 4 has an invalid length. [ 3065.928052][T18979] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15476'. [ 3066.230461][T18972] netlink: 'syz.0.15473': attribute type 3 has an invalid length. [ 3066.245038][T18972] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15473'. [ 3066.267949][T18984] netlink: 'syz.2.15477': attribute type 4 has an invalid length. [ 3066.488965][T18990] netlink: 'syz.1.15479': attribute type 4 has an invalid length. [ 3066.619115][T18995] netlink: 'syz.2.15481': attribute type 10 has an invalid length. [ 3066.637848][T18995] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15481'. [ 3066.659769][T18995] device hsr0 entered promiscuous mode [ 3066.697882][T18995] bridge0: port 3(hsr0) entered blocking state [ 3066.719053][T18995] bridge0: port 3(hsr0) entered disabled state [ 3066.800381][T18995] bridge0: port 3(hsr0) entered blocking state [ 3066.807060][T18995] bridge0: port 3(hsr0) entered forwarding state [ 3066.832961][T19000] netlink: 'syz.4.15483': attribute type 2 has an invalid length. [ 3066.843711][T19002] IPv6: NLM_F_CREATE should be specified when creating new route [ 3066.862129][T19000] netlink: 'syz.4.15483': attribute type 1 has an invalid length. [ 3067.353474][T19015] netlink: 'syz.4.15489': attribute type 4 has an invalid length. [ 3067.361859][T19015] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15489'. [ 3067.877609][T19028] FAULT_INJECTION: forcing a failure. [ 3067.877609][T19028] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.890304][T19028] CPU: 0 PID: 19028 Comm: syz.4.15493 Not tainted syzkaller #0 [ 3067.897862][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3067.907913][T19028] Call Trace: [ 3067.911190][T19028] [ 3067.914141][T19028] dump_stack_lvl+0x188/0x24e [ 3067.918856][T19028] ? show_regs_print_info+0x12/0x12 [ 3067.924082][T19028] ? load_image+0x410/0x410 [ 3067.928623][T19028] should_fail_ex+0x390/0x4c0 [ 3067.933329][T19028] should_failslab+0x5/0x20 [ 3067.937846][T19028] slab_pre_alloc_hook+0x59/0x300 [ 3067.942895][T19028] kmem_cache_alloc+0x56/0x2f0 [ 3067.947675][T19028] ? radix_tree_node_alloc+0x7e/0x3a0 [ 3067.953076][T19028] radix_tree_node_alloc+0x7e/0x3a0 [ 3067.958310][T19028] idr_get_free+0x28b/0xa10 [ 3067.962852][T19028] idr_alloc_cyclic+0x286/0x610 [ 3067.967732][T19028] ? idr_alloc+0x2e0/0x2e0 [ 3067.972152][T19028] ? do_raw_spin_lock+0x128/0x2f0 [ 3067.977178][T19028] ? __radix_tree_preload+0x82/0x880 [ 3067.982471][T19028] ? btf_alloc_id+0x30/0x2d0 [ 3067.987061][T19028] btf_alloc_id+0x4f/0x2d0 [ 3067.991478][T19028] btf_new_fd+0x597/0x760 [ 3067.995812][T19028] __sys_bpf+0x612/0x780 [ 3068.000058][T19028] ? bpf_link_show_fdinfo+0x380/0x380 [ 3068.005447][T19028] ? lock_chain_count+0x20/0x20 [ 3068.010309][T19028] __x64_sys_bpf+0x78/0x90 [ 3068.014725][T19028] do_syscall_64+0x4c/0xa0 [ 3068.019143][T19028] ? clear_bhb_loop+0x60/0xb0 [ 3068.023823][T19028] ? clear_bhb_loop+0x60/0xb0 [ 3068.028500][T19028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3068.034390][T19028] RIP: 0033:0x7f54d079e0d9 [ 3068.038802][T19028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3068.058401][T19028] RSP: 002b:00007f54d16d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3068.066810][T19028] RAX: ffffffffffffffda RBX: 00007f54d0a25fa0 RCX: 00007f54d079e0d9 [ 3068.074779][T19028] RDX: 0000000000000028 RSI: 0000200000000740 RDI: 0000000000000012 [ 3068.082745][T19028] RBP: 00007f54d16d6090 R08: 0000000000000000 R09: 0000000000000000 [ 3068.090709][T19028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3068.098672][T19028] R13: 00007f54d0a26038 R14: 00007f54d0a25fa0 R15: 00007ffe630a15d8 [ 3068.106655][T19028] [ 3068.762679][T19047] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15500'. [ 3069.167605][T19053] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.15503'. [ 3070.427492][T19090] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.15515'. [ 3073.487263][T19102] validate_nla: 19 callbacks suppressed [ 3073.487279][T19102] netlink: 'syz.1.15518': attribute type 4 has an invalid length. [ 3073.501652][T19106] netlink: 'syz.3.15521': attribute type 4 has an invalid length. [ 3073.899539][T19131] netlink: 'syz.1.15528': attribute type 4 has an invalid length. [ 3074.338971][T19139] netlink: 'syz.2.15530': attribute type 4 has an invalid length. [ 3074.887025][T19146] netlink: 'syz.2.15533': attribute type 4 has an invalid length. [ 3075.192610][T19150] netlink: 'syz.3.15535': attribute type 4 has an invalid length. [ 3076.855131][T19191] netlink: 'syz.3.15549': attribute type 4 has an invalid length. [ 3076.888885][T19193] netlink: 'syz.2.15550': attribute type 4 has an invalid length. [ 3077.319653][T19203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15554'. [ 3077.554405][T19202] device syzkaller0 entered promiscuous mode [ 3077.591570][T19203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15554'. [ 3080.788498][T19218] netlink: 'syz.0.15559': attribute type 4 has an invalid length. [ 3080.796718][T19220] netlink: 'syz.1.15560': attribute type 4 has an invalid length. [ 3080.805508][T19224] netlink: 'syz.4.15561': attribute type 3 has an invalid length. [ 3080.816117][T19224] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.15561'. [ 3080.990929][T19231] netlink: 'syz.1.15564': attribute type 4 has an invalid length. [ 3081.000856][T19229] netlink: 'syz.0.15562': attribute type 10 has an invalid length. [ 3081.049050][T19229] team0: Port device dummy0 removed [ 3081.089947][T19229] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3081.299141][T19242] netlink: 'syz.0.15567': attribute type 21 has an invalid length. [ 3081.310130][T19242] netlink: 100 bytes leftover after parsing attributes in process `syz.0.15567'. [ 3081.540249][T19246] netlink: 'syz.2.15568': attribute type 4 has an invalid length. [ 3081.723799][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.730201][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.923385][T19260] netlink: 'syz.3.15573': attribute type 4 has an invalid length. [ 3082.006715][T19264] netlink: 'syz.2.15574': attribute type 4 has an invalid length. [ 3082.035230][T19265] netlink: 'syz.0.15572': attribute type 4 has an invalid length. [ 3082.973887][T19273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15579'. [ 3083.013635][T19269] device syzkaller0 entered promiscuous mode [ 3083.265347][T19285] FAULT_INJECTION: forcing a failure. [ 3083.265347][T19285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3083.321180][T19285] CPU: 0 PID: 19285 Comm: syz.4.15582 Not tainted syzkaller #0 [ 3083.328796][T19285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3083.338887][T19285] Call Trace: [ 3083.342191][T19285] [ 3083.345145][T19285] dump_stack_lvl+0x188/0x24e [ 3083.349875][T19285] ? show_regs_print_info+0x12/0x12 [ 3083.355111][T19285] ? load_image+0x410/0x410 [ 3083.359656][T19285] ? __might_fault+0xa6/0x120 [ 3083.364387][T19285] should_fail_ex+0x390/0x4c0 [ 3083.369115][T19285] copyin+0x1b/0x120 [ 3083.373051][T19285] _copy_from_iter+0x447/0x1130 [ 3083.377962][T19285] ? copyout_mc+0x110/0x110 [ 3083.382500][T19285] ? __virt_addr_valid+0x188/0x540 [ 3083.387653][T19285] ? __virt_addr_valid+0x188/0x540 [ 3083.392797][T19285] ? __virt_addr_valid+0x467/0x540 [ 3083.397949][T19285] ? __phys_addr_symbol+0x2b/0x70 [ 3083.403012][T19285] ? __check_object_size+0x4f6/0xa70 [ 3083.408347][T19285] netlink_sendmsg+0x755/0xbd0 [ 3083.413165][T19285] ? netlink_getsockopt+0x550/0x550 [ 3083.418401][T19285] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3083.423989][T19285] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3083.429302][T19285] ? security_socket_sendmsg+0x7c/0xa0 [ 3083.434796][T19285] ? netlink_getsockopt+0x550/0x550 [ 3083.440035][T19285] ____sys_sendmsg+0x5ed/0x9a0 [ 3083.444865][T19285] ? __sys_sendmsg_sock+0x30/0x30 [ 3083.449917][T19285] ? __import_iovec+0x306/0x510 [ 3083.454830][T19285] ? import_iovec+0x6f/0xa0 [ 3083.459384][T19285] ___sys_sendmsg+0x2a2/0x360 [ 3083.464099][T19285] ? __sys_sendmsg+0x2a0/0x2a0 [ 3083.468893][T19285] ? __lock_acquire+0x7c40/0x7c40 [ 3083.474002][T19285] __se_sys_sendmsg+0x1c3/0x2b0 [ 3083.478903][T19285] ? __x64_sys_sendmsg+0x80/0x80 [ 3083.483925][T19285] ? lockdep_hardirqs_on+0x94/0x140 [ 3083.489172][T19285] do_syscall_64+0x4c/0xa0 [ 3083.493627][T19285] ? clear_bhb_loop+0x60/0xb0 [ 3083.498333][T19285] ? clear_bhb_loop+0x60/0xb0 [ 3083.503048][T19285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3083.508976][T19285] RIP: 0033:0x7f54d079e0d9 [ 3083.513426][T19285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3083.533064][T19285] RSP: 002b:00007f54d16d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3083.541498][T19285] RAX: ffffffffffffffda RBX: 00007f54d0a25fa0 RCX: 00007f54d079e0d9 [ 3083.549485][T19285] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 3083.557465][T19285] RBP: 00007f54d16d6090 R08: 0000000000000000 R09: 0000000000000000 [ 3083.565442][T19285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3083.573419][T19285] R13: 00007f54d0a26038 R14: 00007f54d0a25fa0 R15: 00007ffe630a15d8 [ 3083.581433][T19285] [ 3083.913710][T19303] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15585'. [ 3085.450386][T19293] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3085.458935][T19293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3085.841883][T19317] validate_nla: 5 callbacks suppressed [ 3085.841902][T19317] netlink: 'syz.0.15590': attribute type 29 has an invalid length. [ 3086.039934][T19317] netlink: 'syz.0.15590': attribute type 29 has an invalid length. [ 3086.116659][T19319] netlink: 'syz.0.15590': attribute type 29 has an invalid length. [ 3086.172055][T19313] netlink: 'syz.0.15590': attribute type 29 has an invalid length. [ 3086.198958][T19313] netlink: 'syz.0.15590': attribute type 29 has an invalid length. [ 3088.606665][T19332] device ipvlan1 left promiscuous mode [ 3088.612762][T19335] netlink: 'syz.4.15596': attribute type 10 has an invalid length. [ 3088.635147][T19335] team0: Device nlmon0 is of different type [ 3088.649685][T19342] netlink: 'syz.2.15599': attribute type 10 has an invalid length. [ 3088.657904][T19346] netlink: 'syz.1.15598': attribute type 4 has an invalid length. [ 3088.914583][T19361] netlink: 'syz.1.15604': attribute type 4 has an invalid length. [ 3088.923824][T21169] Bluetooth: hci4: command 0x0406 tx timeout [ 3089.094857][T19369] syzkaller0: refused to change device tx_queue_len [ 3089.955948][T21169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3089.966654][T21169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3089.976724][T21169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3089.985512][T21169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3089.996094][T21169] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3090.009077][T21169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3090.093132][T19377] netlink: 'syz.3.15612': attribute type 4 has an invalid length. [ 3090.367939][T19391] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15616'. [ 3090.975446][T19408] FAULT_INJECTION: forcing a failure. [ 3090.975446][T19408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3091.053993][T19408] CPU: 1 PID: 19408 Comm: syz.3.15621 Not tainted syzkaller #0 [ 3091.061589][T19408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3091.071660][T19408] Call Trace: [ 3091.074951][T19408] [ 3091.077893][T19408] dump_stack_lvl+0x188/0x24e [ 3091.082597][T19408] ? show_regs_print_info+0x12/0x12 [ 3091.087822][T19408] ? load_image+0x410/0x410 [ 3091.092348][T19408] ? __lock_acquire+0x7c40/0x7c40 [ 3091.097399][T19408] ? snprintf+0xe5/0x140 [ 3091.101661][T19408] should_fail_ex+0x390/0x4c0 [ 3091.106363][T19408] _copy_to_user+0x2c/0x130 [ 3091.110886][T19408] simple_read_from_buffer+0xe3/0x150 [ 3091.116282][T19408] proc_fail_nth_read+0x1a6/0x220 [ 3091.121324][T19408] ? proc_fault_inject_write+0x310/0x310 [ 3091.126974][T19408] ? fsnotify_perm+0x248/0x550 [ 3091.131761][T19408] ? proc_fault_inject_write+0x310/0x310 [ 3091.137409][T19408] vfs_read+0x2db/0x960 [ 3091.141587][T19408] ? kernel_read+0x1e0/0x1e0 [ 3091.146195][T19408] ? __fget_files+0x28/0x460 [ 3091.150803][T19408] ? __fget_files+0x3fc/0x460 [ 3091.155501][T19408] ? __fdget_pos+0x2ae/0x360 [ 3091.160107][T19408] ? ksys_read+0x70/0x260 [ 3091.164457][T19408] ksys_read+0x14d/0x260 [ 3091.168719][T19408] ? vfs_write+0x9a0/0x9a0 [ 3091.173158][T19408] ? lockdep_hardirqs_on+0x94/0x140 [ 3091.178372][T19408] do_syscall_64+0x4c/0xa0 [ 3091.182802][T19408] ? clear_bhb_loop+0x60/0xb0 [ 3091.187494][T19408] ? clear_bhb_loop+0x60/0xb0 [ 3091.192190][T19408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3091.198096][T19408] RIP: 0033:0x7f70e035e90e [ 3091.202521][T19408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3091.222141][T19408] RSP: 002b:00007f70e131dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3091.230574][T19408] RAX: ffffffffffffffda RBX: 00007f70e131e6c0 RCX: 00007f70e035e90e [ 3091.238556][T19408] RDX: 000000000000000f RSI: 00007f70e131e0a0 RDI: 0000000000000005 [ 3091.246536][T19408] RBP: 00007f70e131e090 R08: 0000000000000000 R09: 0000000000000000 [ 3091.254516][T19408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3091.262499][T19408] R13: 00007f70e0626038 R14: 00007f70e0625fa0 R15: 00007ffe35a6a258 [ 3091.270494][T19408] [ 3091.347681][T19384] chnl_net:caif_netlink_parms(): no params data found [ 3091.570857][T19384] bridge0: port 1(bridge_slave_0) entered blocking state [ 3091.578036][T19384] bridge0: port 1(bridge_slave_0) entered disabled state [ 3091.637168][T19384] device bridge_slave_0 entered promiscuous mode [ 3091.697778][T19384] bridge0: port 2(bridge_slave_1) entered blocking state [ 3091.772472][T19384] bridge0: port 2(bridge_slave_1) entered disabled state [ 3091.840515][T19384] device bridge_slave_1 entered promiscuous mode [ 3091.903851][T19431] validate_nla: 1 callbacks suppressed [ 3091.903868][T19431] netlink: 'syz.3.15626': attribute type 4 has an invalid length. [ 3091.981645][T19384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3092.039435][T21169] Bluetooth: hci5: command 0x0409 tx timeout [ 3092.062469][T19384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3092.108591][T19384] team0: Port device team_slave_0 added [ 3092.117656][T19384] team0: Port device team_slave_1 added [ 3092.177479][T19384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3092.207751][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3092.289009][T19384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3092.363920][T19384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3092.407306][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3092.460712][T19384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3093.074865][T19384] device hsr_slave_0 entered promiscuous mode [ 3093.097192][T19384] device hsr_slave_1 entered promiscuous mode [ 3093.110049][T19384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3093.117645][T19384] Cannot create hsr debugfs directory [ 3093.202568][T27454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3093.226394][T19453] netlink: 'syz.1.15634': attribute type 4 has an invalid length. [ 3093.353857][T27454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3093.463411][T19460] netlink: 'syz.0.15637': attribute type 2 has an invalid length. [ 3093.475975][T27454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3093.510284][T19460] netlink: 'syz.0.15637': attribute type 1 has an invalid length. [ 3093.697094][T27454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3094.126581][T21169] Bluetooth: hci5: command 0x041b tx timeout [ 3094.291844][T19484] netlink: 'syz.1.15644': attribute type 10 has an invalid length. [ 3095.230540][T19484] team0 (unregistering): Port device team_slave_0 removed [ 3095.249019][T19484] team0 (unregistering): Port device team_slave_1 removed [ 3095.373586][T19485] netlink: 'syz.4.15643': attribute type 4 has an invalid length. [ 3095.474124][T19506] netlink: 98276 bytes leftover after parsing attributes in process `syz.3.15646'. [ 3095.615140][T19511] FAULT_INJECTION: forcing a failure. [ 3095.615140][T19511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3095.650047][T19511] CPU: 1 PID: 19511 Comm: syz.4.15648 Not tainted syzkaller #0 [ 3095.657654][T19511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3095.667726][T19511] Call Trace: [ 3095.671004][T19511] [ 3095.673931][T19511] dump_stack_lvl+0x188/0x24e [ 3095.678609][T19511] ? show_regs_print_info+0x12/0x12 [ 3095.683801][T19511] ? load_image+0x410/0x410 [ 3095.688301][T19511] ? __lock_acquire+0x7c40/0x7c40 [ 3095.693321][T19511] ? perf_trace_lock_acquire+0x101/0x3f0 [ 3095.698951][T19511] should_fail_ex+0x390/0x4c0 [ 3095.703627][T19511] _copy_from_user+0x2c/0x170 [ 3095.708296][T19511] ___sys_sendmsg+0x1c3/0x360 [ 3095.712975][T19511] ? __sys_sendmsg+0x2a0/0x2a0 [ 3095.717747][T19511] ? __lock_acquire+0x7c40/0x7c40 [ 3095.722780][T19511] __se_sys_sendmsg+0x1c3/0x2b0 [ 3095.727626][T19511] ? __x64_sys_sendmsg+0x80/0x80 [ 3095.732569][T19511] ? lockdep_hardirqs_on+0x94/0x140 [ 3095.737762][T19511] do_syscall_64+0x4c/0xa0 [ 3095.742179][T19511] ? clear_bhb_loop+0x60/0xb0 [ 3095.746852][T19511] ? clear_bhb_loop+0x60/0xb0 [ 3095.751523][T19511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3095.757409][T19511] RIP: 0033:0x7f54d079e0d9 [ 3095.761815][T19511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3095.781412][T19511] RSP: 002b:00007f54d16d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3095.789817][T19511] RAX: ffffffffffffffda RBX: 00007f54d0a25fa0 RCX: 00007f54d079e0d9 [ 3095.797779][T19511] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 3095.805738][T19511] RBP: 00007f54d16d6090 R08: 0000000000000000 R09: 0000000000000000 [ 3095.813720][T19511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3095.821682][T19511] R13: 00007f54d0a26038 R14: 00007f54d0a25fa0 R15: 00007ffe630a15d8 [ 3095.829657][T19511] [ 3096.065068][T19518] netlink: 'syz.4.15651': attribute type 2 has an invalid length. [ 3096.081743][T19518] netlink: 'syz.4.15651': attribute type 1 has an invalid length. [ 3096.132349][T19520] netlink: 'syz.0.15652': attribute type 4 has an invalid length. [ 3096.199432][T21169] Bluetooth: hci5: command 0x040f tx timeout [ 3096.538442][T19384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3096.624478][T19384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3096.806639][T19384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3096.834566][T19384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3096.854095][T19535] netlink: 'syz.1.15657': attribute type 29 has an invalid length. [ 3096.949878][T19535] netlink: 'syz.1.15657': attribute type 29 has an invalid length. [ 3096.970808][T19537] netlink: 'syz.1.15657': attribute type 29 has an invalid length. [ 3096.988965][T19535] netlink: 'syz.1.15657': attribute type 29 has an invalid length. [ 3097.486163][T19384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3097.514426][T19550] netlink: 'syz.0.15658': attribute type 4 has an invalid length. [ 3097.757459][T19384] 8021q: adding VLAN 0 to HW filter on device team0 [ 3097.790302][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3097.798752][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3097.912668][T27454] device hsr_slave_0 left promiscuous mode [ 3097.927297][T27454] device hsr_slave_1 left promiscuous mode [ 3097.947839][T27454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3097.960141][T27454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3097.982863][T27454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3097.999496][T27454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3098.015547][T27454] bridge0: port 3(hsr0) entered disabled state [ 3098.036511][T27454] device bridge_slave_1 left promiscuous mode [ 3098.053904][T27454] bridge0: port 2(bridge_slave_1) entered disabled state [ 3098.078437][T27454] device bridge_slave_0 left promiscuous mode [ 3098.096463][T27454] bridge0: port 1(bridge_slave_0) entered disabled state [ 3098.162486][T27454] device veth0_macvtap left promiscuous mode [ 3098.168853][T27454] device veth1_vlan left promiscuous mode [ 3098.174975][T27454] device veth0_vlan left promiscuous mode [ 3098.279365][T21169] Bluetooth: hci5: command 0x0419 tx timeout [ 3098.395922][T19570] netlink: 'syz.3.15665': attribute type 2 has an invalid length. [ 3098.405911][T19570] netlink: 'syz.3.15665': attribute type 1 has an invalid length. [ 3099.115017][T19577] netlink: 'syz.1.15667': attribute type 29 has an invalid length. [ 3099.582247][T27454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3099.597106][T27454] device bond_slave_1 left promiscuous mode [ 3099.665097][T27454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3099.679278][T27454] device bond_slave_0 left promiscuous mode [ 3099.946614][T27454] bond0 (unregistering): Released all slaves [ 3100.053180][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3100.062031][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3100.070542][T18410] bridge0: port 1(bridge_slave_0) entered blocking state [ 3100.077592][T18410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3100.085726][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3100.095810][T19563] netlink: 'syz.4.15664': attribute type 4 has an invalid length. [ 3100.109573][T19577] netlink: 'syz.1.15667': attribute type 29 has an invalid length. [ 3100.120905][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3100.150181][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3100.169785][ T2706] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.176895][ T2706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3100.220270][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3100.251679][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3100.298048][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3100.332519][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3100.352428][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3100.408425][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3100.417819][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3100.427036][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3100.436346][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3100.450501][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3100.459122][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3100.477242][T19384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3101.118265][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3101.140538][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3101.185084][T19384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3101.224613][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3101.242418][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3101.255380][T19610] netlink: 'syz.0.15674': attribute type 4 has an invalid length. [ 3101.294829][T19384] device veth0_vlan entered promiscuous mode [ 3101.307200][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3101.316679][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3101.337622][T19384] device veth1_vlan entered promiscuous mode [ 3101.368053][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3101.387326][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3101.425937][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3101.510649][T19384] device veth0_macvtap entered promiscuous mode [ 3101.539003][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3101.557745][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3101.584723][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3102.050940][T19616] device veth1_macvtap left promiscuous mode [ 3102.121280][T19384] device veth1_macvtap entered promiscuous mode [ 3102.144793][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3102.153503][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3102.187217][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3102.207090][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.228654][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3102.249494][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.269599][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3102.298165][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.315207][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3102.339676][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.371402][T19384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3102.414570][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3102.432501][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3102.455634][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3102.467445][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.478026][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3102.488764][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.498976][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3102.509766][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.520087][T19384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3102.532276][T19384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3102.543927][T19384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3102.555559][T19384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.564499][T19384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.573582][T19384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.583364][T19384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.601113][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3102.627416][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3102.675304][T19626] validate_nla: 1 callbacks suppressed [ 3102.675678][T19626] netlink: 'syz.3.15679': attribute type 2 has an invalid length. [ 3102.708637][T19626] netlink: 'syz.3.15679': attribute type 1 has an invalid length. [ 3102.895902][ T2707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3102.931030][ T2707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3102.980817][T27444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3103.065922][T27444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3103.083314][T27444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3103.109925][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3104.527019][ T2707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3104.705266][T12532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3104.722688][T12532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3104.733249][T12532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3104.760971][T12532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3104.768744][T12532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3104.777624][T12532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3105.920844][ T2707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.953482][T19664] netlink: 'syz.3.15687': attribute type 4 has an invalid length. [ 3106.057479][ T2707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.314785][ T2707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.378285][T19677] netlink: 'syz.0.15690': attribute type 27 has an invalid length. [ 3106.434348][T19677] netlink: 'syz.0.15690': attribute type 25 has an invalid length. [ 3106.464109][T19685] netlink: 'syz.2.15692': attribute type 2 has an invalid length. [ 3106.486345][T19685] netlink: 'syz.2.15692': attribute type 1 has an invalid length. [ 3106.518936][T19680] netlink: 'syz.0.15690': attribute type 39 has an invalid length. [ 3106.542060][T19680] device macvlan0 entered promiscuous mode [ 3106.644730][T19687] netlink: 'syz.3.15691': attribute type 10 has an invalid length. [ 3106.684936][T19687] device veth1_macvtap left promiscuous mode [ 3106.850105][T12532] Bluetooth: hci0: command 0x0409 tx timeout [ 3107.431140][T19661] chnl_net:caif_netlink_parms(): no params data found [ 3107.505013][T19699] FAULT_INJECTION: forcing a failure. [ 3107.505013][T19699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3107.589513][T19699] CPU: 1 PID: 19699 Comm: syz.0.15694 Not tainted syzkaller #0 [ 3107.597124][T19699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3107.607201][T19699] Call Trace: [ 3107.610495][T19699] [ 3107.613444][T19699] dump_stack_lvl+0x188/0x24e [ 3107.618157][T19699] ? show_regs_print_info+0x12/0x12 [ 3107.623381][T19699] ? load_image+0x410/0x410 [ 3107.627907][T19699] ? __lock_acquire+0x7c40/0x7c40 [ 3107.632949][T19699] ? lockdep_hardirqs_on+0x94/0x140 [ 3107.638174][T19699] should_fail_ex+0x390/0x4c0 [ 3107.642877][T19699] _copy_from_user+0x2c/0x170 [ 3107.647575][T19699] ___sys_sendmsg+0x1c3/0x360 [ 3107.652281][T19699] ? __sys_sendmsg+0x2a0/0x2a0 [ 3107.657093][T19699] ? ktime_get+0x7b/0x270 [ 3107.661469][T19699] __se_sys_sendmsg+0x1c3/0x2b0 [ 3107.666343][T19699] ? __x64_sys_sendmsg+0x80/0x80 [ 3107.671295][T19699] ? lockdep_hardirqs_on+0x94/0x140 [ 3107.676493][T19699] do_syscall_64+0x4c/0xa0 [ 3107.680916][T19699] ? clear_bhb_loop+0x60/0xb0 [ 3107.685591][T19699] ? clear_bhb_loop+0x60/0xb0 [ 3107.690268][T19699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3107.696158][T19699] RIP: 0033:0x7f4683f9e0d9 [ 3107.700568][T19699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3107.720169][T19699] RSP: 002b:00007f4684ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3107.728588][T19699] RAX: ffffffffffffffda RBX: 00007f4684225fa0 RCX: 00007f4683f9e0d9 [ 3107.736556][T19699] RDX: 0000000004040000 RSI: 0000200000000640 RDI: 000000000000000a [ 3107.744526][T19699] RBP: 00007f4684ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 3107.752493][T19699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3107.760459][T19699] R13: 00007f4684226038 R14: 00007f4684225fa0 R15: 00007ffc0ca44d98 [ 3107.768435][T19699] [ 3107.998743][T19704] netlink: 'syz.0.15694': attribute type 39 has an invalid length. [ 3108.028966][T19712] netlink: 'syz.2.15697': attribute type 39 has an invalid length. [ 3108.513255][T19724] netlink: 'syz.1.15698': attribute type 21 has an invalid length. [ 3108.526108][T19724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15698'. [ 3108.566859][T19724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15698'. [ 3108.909886][T19661] bridge0: port 1(bridge_slave_0) entered blocking state [ 3108.919664][T12532] Bluetooth: hci0: command 0x041b tx timeout [ 3108.927395][T19661] bridge0: port 1(bridge_slave_0) entered disabled state [ 3108.936070][T19661] device bridge_slave_0 entered promiscuous mode [ 3108.945026][T19661] bridge0: port 2(bridge_slave_1) entered blocking state [ 3108.953062][T19661] bridge0: port 2(bridge_slave_1) entered disabled state [ 3108.961412][T19661] device bridge_slave_1 entered promiscuous mode [ 3109.076857][T19661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3109.291847][T19661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3109.795021][T19661] team0: Port device team_slave_0 added [ 3109.824011][T19661] team0: Port device team_slave_1 added [ 3109.961685][T19661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3110.009694][T19661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3110.075594][T19661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3110.143112][T19661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3110.161308][T19661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3110.281387][T19661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3111.001878][T12532] Bluetooth: hci0: command 0x040f tx timeout [ 3111.198472][T19661] device hsr_slave_0 entered promiscuous mode [ 3111.239933][T19661] device hsr_slave_1 entered promiscuous mode [ 3111.299582][T19661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3111.327612][T19661] Cannot create hsr debugfs directory [ 3111.365054][ T2707] device hsr_slave_0 left promiscuous mode [ 3111.373700][ T2707] device hsr_slave_1 left promiscuous mode [ 3111.404567][ T2707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3111.451609][ T2707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3111.463798][ T2707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3111.472963][ T2707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3111.485281][ T2707] device bridge_slave_1 left promiscuous mode [ 3111.492503][ T2707] bridge0: port 2(bridge_slave_1) entered disabled state [ 3111.502639][ T2707] device bridge_slave_0 left promiscuous mode [ 3111.509073][ T2707] bridge0: port 1(bridge_slave_0) entered disabled state [ 3111.546296][ T2707] device veth0_macvtap left promiscuous mode [ 3111.553202][ T2707] device veth1_vlan left promiscuous mode [ 3111.562640][ T2707] device veth0_vlan left promiscuous mode [ 3112.603418][T19808] FAULT_INJECTION: forcing a failure. [ 3112.603418][T19808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3112.636064][T19808] CPU: 1 PID: 19808 Comm: syz.3.15715 Not tainted syzkaller #0 [ 3112.643653][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3112.653718][T19808] Call Trace: [ 3112.657009][T19808] [ 3112.659948][T19808] dump_stack_lvl+0x188/0x24e [ 3112.664647][T19808] ? show_regs_print_info+0x12/0x12 [ 3112.669865][T19808] ? load_image+0x410/0x410 [ 3112.674377][T19808] ? __lock_acquire+0x7c40/0x7c40 [ 3112.679408][T19808] should_fail_ex+0x390/0x4c0 [ 3112.684108][T19808] _copy_from_user+0x2c/0x170 [ 3112.688797][T19808] bpf_test_init+0xde/0x140 [ 3112.693293][T19808] bpf_prog_test_run_xdp+0x488/0xf80 [ 3112.698576][T19808] ? __lock_acquire+0x7c40/0x7c40 [ 3112.703630][T19808] ? dev_put+0x80/0x80 [ 3112.707724][T19808] ? dev_put+0x80/0x80 [ 3112.711802][T19808] bpf_prog_test_run+0x31c/0x390 [ 3112.716751][T19808] __sys_bpf+0x62b/0x780 [ 3112.721001][T19808] ? bpf_link_show_fdinfo+0x380/0x380 [ 3112.726394][T19808] ? lock_chain_count+0x20/0x20 [ 3112.731254][T19808] __x64_sys_bpf+0x78/0x90 [ 3112.735690][T19808] do_syscall_64+0x4c/0xa0 [ 3112.740128][T19808] ? clear_bhb_loop+0x60/0xb0 [ 3112.744822][T19808] ? clear_bhb_loop+0x60/0xb0 [ 3112.749521][T19808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3112.755424][T19808] RIP: 0033:0x7f70e039e0d9 [ 3112.759835][T19808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3112.779456][T19808] RSP: 002b:00007f70e131e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3112.787876][T19808] RAX: ffffffffffffffda RBX: 00007f70e0625fa0 RCX: 00007f70e039e0d9 [ 3112.795838][T19808] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 3112.803806][T19808] RBP: 00007f70e131e090 R08: 0000000000000000 R09: 0000000000000000 [ 3112.811780][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3112.819754][T19808] R13: 00007f70e0626038 R14: 00007f70e0625fa0 R15: 00007ffe35a6a258 [ 3112.827739][T19808] [ 3112.957704][ T2707] team0 (unregistering): Port device team_slave_1 removed [ 3113.000983][ T2707] team0 (unregistering): Port device team_slave_0 removed [ 3113.050532][ T2707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3113.097391][T12532] Bluetooth: hci0: command 0x0419 tx timeout [ 3113.177598][ T2707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3113.616762][ T2707] team0 (unregistering): Port device bridge0 removed [ 3113.654085][ T2707] bond0 (unregistering): Released all slaves [ 3113.819851][T19804] syzkaller0: mtu greater than device maximum [ 3114.890952][T19823] netlink: 'syz.0.15717': attribute type 4 has an invalid length. [ 3115.184717][T19837] netlink: 'syz.0.15721': attribute type 2 has an invalid length. [ 3115.218959][T19837] netlink: 'syz.0.15721': attribute type 1 has an invalid length. [ 3115.765338][T19661] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3115.825929][T19661] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3115.966122][T19661] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3115.981279][T19864] FAULT_INJECTION: forcing a failure. [ 3115.981279][T19864] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.031684][T19661] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3116.032059][T19864] CPU: 0 PID: 19864 Comm: syz.1.15727 Not tainted syzkaller #0 [ 3116.045983][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3116.056052][T19864] Call Trace: [ 3116.059343][T19864] [ 3116.062289][T19864] dump_stack_lvl+0x188/0x24e [ 3116.066994][T19864] ? show_regs_print_info+0x12/0x12 [ 3116.072220][T19864] ? load_image+0x410/0x410 [ 3116.076749][T19864] ? __might_sleep+0xd0/0xd0 [ 3116.081353][T19864] ? __lock_acquire+0x7c40/0x7c40 [ 3116.086396][T19864] should_fail_ex+0x390/0x4c0 [ 3116.091096][T19864] should_failslab+0x5/0x20 [ 3116.095614][T19864] slab_pre_alloc_hook+0x59/0x300 [ 3116.100666][T19864] kmem_cache_alloc_node+0x5a/0x310 [ 3116.105884][T19864] ? __alloc_skb+0xf9/0x7d0 [ 3116.110420][T19864] __alloc_skb+0xf9/0x7d0 [ 3116.114786][T19864] netlink_sendmsg+0x654/0xbd0 [ 3116.119577][T19864] ? netlink_getsockopt+0x550/0x550 [ 3116.124787][T19864] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3116.130351][T19864] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3116.135647][T19864] ? security_socket_sendmsg+0x7c/0xa0 [ 3116.141117][T19864] ? netlink_getsockopt+0x550/0x550 [ 3116.146327][T19864] ____sys_sendmsg+0x5ed/0x9a0 [ 3116.151112][T19864] ? __sys_sendmsg_sock+0x30/0x30 [ 3116.156157][T19864] ? __import_iovec+0x306/0x510 [ 3116.161025][T19864] ? import_iovec+0x6f/0xa0 [ 3116.165546][T19864] ___sys_sendmsg+0x2a2/0x360 [ 3116.170247][T19864] ? __sys_sendmsg+0x2a0/0x2a0 [ 3116.175038][T19864] ? __lock_acquire+0x7c40/0x7c40 [ 3116.180095][T19864] __se_sys_sendmsg+0x1c3/0x2b0 [ 3116.184957][T19864] ? ct_nmi_exit+0x145/0x1c0 [ 3116.189554][T19864] ? __x64_sys_sendmsg+0x80/0x80 [ 3116.194518][T19864] ? lockdep_hardirqs_on+0x94/0x140 [ 3116.199724][T19864] do_syscall_64+0x4c/0xa0 [ 3116.204152][T19864] ? clear_bhb_loop+0x60/0xb0 [ 3116.208843][T19864] ? clear_bhb_loop+0x60/0xb0 [ 3116.213530][T19864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3116.219433][T19864] RIP: 0033:0x7f53eed9e0d9 [ 3116.223855][T19864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3116.243466][T19864] RSP: 002b:00007f53efceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3116.251979][T19864] RAX: ffffffffffffffda RBX: 00007f53ef025fa0 RCX: 00007f53eed9e0d9 [ 3116.259957][T19864] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3116.267932][T19864] RBP: 00007f53efceb090 R08: 0000000000000000 R09: 0000000000000000 [ 3116.275909][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3116.283886][T19864] R13: 00007f53ef026038 R14: 00007f53ef025fa0 R15: 00007ffe14b5c7d8 [ 3116.291883][T19864] [ 3116.788408][T19661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3116.842206][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3116.870775][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3116.984321][T19661] 8021q: adding VLAN 0 to HW filter on device team0 [ 3117.047118][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3117.072746][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3117.122674][T27476] bridge0: port 1(bridge_slave_0) entered blocking state [ 3117.130020][T27476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3117.212546][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3117.283585][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3117.310410][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3117.362752][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 3117.370104][T18410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3117.449518][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3117.486281][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3117.513075][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3117.549501][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3117.584220][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3117.601392][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3117.625190][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3117.640257][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3117.671275][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3117.685328][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3117.703373][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3117.707038][T19894] netlink: 'syz.0.15734': attribute type 2 has an invalid length. [ 3117.716779][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3117.761097][T19894] netlink: 'syz.0.15734': attribute type 1 has an invalid length. [ 3118.365555][T19915] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3118.866517][T19914] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15738'. [ 3120.562879][T19661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3120.600095][T27444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3120.607572][T27444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3122.368235][T20003] netlink: 'syz.1.15749': attribute type 2 has an invalid length. [ 3122.389696][T20003] netlink: 'syz.1.15749': attribute type 1 has an invalid length. [ 3122.636241][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3122.652906][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3122.711235][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3122.721948][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3122.736573][T19661] device veth0_vlan entered promiscuous mode [ 3122.746271][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3122.759830][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3122.782300][T19661] device veth1_vlan entered promiscuous mode [ 3122.793222][T20013] FAULT_INJECTION: forcing a failure. [ 3122.793222][T20013] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.829382][T20013] CPU: 1 PID: 20013 Comm: syz.1.15753 Not tainted syzkaller #0 [ 3122.836987][T20013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3122.847073][T20013] Call Trace: [ 3122.850370][T20013] [ 3122.853314][T20013] dump_stack_lvl+0x188/0x24e [ 3122.858034][T20013] ? show_regs_print_info+0x12/0x12 [ 3122.863260][T20013] ? load_image+0x410/0x410 [ 3122.867789][T20013] ? __might_sleep+0xd0/0xd0 [ 3122.872396][T20013] ? __lock_acquire+0x7c40/0x7c40 [ 3122.877450][T20013] should_fail_ex+0x390/0x4c0 [ 3122.882150][T20013] should_failslab+0x5/0x20 [ 3122.886649][T20013] slab_pre_alloc_hook+0x59/0x300 [ 3122.891676][T20013] kmem_cache_alloc+0x56/0x2f0 [ 3122.896436][T20013] ? security_file_alloc+0x30/0x110 [ 3122.901635][T20013] security_file_alloc+0x30/0x110 [ 3122.906655][T20013] __alloc_file+0xc2/0x230 [ 3122.911070][T20013] alloc_empty_file+0x90/0x180 [ 3122.915826][T20013] alloc_file+0x5b/0x5f0 [ 3122.920067][T20013] alloc_file_pseudo+0x180/0x200 [ 3122.925001][T20013] ? alloc_empty_file_noaccount+0x80/0x80 [ 3122.930723][T20013] ? alloc_fd+0x590/0x640 [ 3122.935053][T20013] sock_alloc_file+0xb3/0x240 [ 3122.939736][T20013] __sys_socket+0x12d/0x190 [ 3122.944240][T20013] __x64_sys_socket+0x76/0x80 [ 3122.948914][T20013] do_syscall_64+0x4c/0xa0 [ 3122.953328][T20013] ? clear_bhb_loop+0x60/0xb0 [ 3122.958003][T20013] ? clear_bhb_loop+0x60/0xb0 [ 3122.962688][T20013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.968576][T20013] RIP: 0033:0x7f53eed9e0d9 [ 3122.972985][T20013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3122.992588][T20013] RSP: 002b:00007f53efceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3123.000997][T20013] RAX: ffffffffffffffda RBX: 00007f53ef025fa0 RCX: 00007f53eed9e0d9 [ 3123.008966][T20013] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 3123.016929][T20013] RBP: 00007f53efceb090 R08: 0000000000000000 R09: 0000000000000000 [ 3123.024894][T20013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3123.032857][T20013] R13: 00007f53ef026038 R14: 00007f53ef025fa0 R15: 00007ffe14b5c7d8 [ 3123.040831][T20013] [ 3123.083808][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3123.123107][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3123.152394][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3123.179897][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3123.208551][T19661] device veth0_macvtap entered promiscuous mode [ 3123.228817][T19661] device veth1_macvtap entered promiscuous mode [ 3123.268257][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3123.288719][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.298697][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3123.309201][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.321422][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3123.334737][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.344666][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3123.358089][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.376624][T19661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3123.396272][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3123.414944][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.426535][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3123.472127][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.501752][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3123.516043][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.527223][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3123.568605][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.624724][T19661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3123.649655][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3123.668015][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3123.698034][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3123.715977][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3123.735988][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3123.755809][T27454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3123.780770][T19661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3123.790306][T19661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3123.803150][T19661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3123.812137][T19661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3123.968914][ T2706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3123.997428][ T2706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.063212][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3124.091055][ T2707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.106501][ T2707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.142229][T27476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3124.395875][T20056] netlink: 'syz.4.15681': attribute type 4 has an invalid length. [ 3126.239804][T20105] netlink: 'syz.4.15769': attribute type 10 has an invalid length. [ 3126.299628][T20105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15769'. [ 3126.412291][T20105] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3126.504537][T20105] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3126.539534][T20105] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3126.864256][T20115] netlink: 'syz.0.15774': attribute type 4 has an invalid length. [ 3128.745625][T20152] delete_channel: no stack [ 3129.480449][T20166] netlink: 'syz.2.15788': attribute type 2 has an invalid length. [ 3129.491576][T20166] netlink: 'syz.2.15788': attribute type 1 has an invalid length. [ 3130.797399][T20177] netlink: 'syz.2.15792': attribute type 4 has an invalid length. [ 3131.784198][T20188] device syzkaller0 entered promiscuous mode [ 3134.156707][T20215] netlink: 'syz.3.15800': attribute type 10 has an invalid length. [ 3134.186511][T20215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15800'. [ 3134.261646][T20215] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3134.269515][T20215] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3134.296038][T20215] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3134.886691][T20224] netlink: 'syz.4.15802': attribute type 2 has an invalid length. [ 3134.942007][T20224] netlink: 'syz.4.15802': attribute type 1 has an invalid length. [ 3135.561296][T20238] netlink: 'syz.3.15810': attribute type 10 has an invalid length. [ 3135.697926][T20234] delete_channel: no stack [ 3135.915837][T20249] netlink: 'syz.2.15812': attribute type 4 has an invalid length. [ 3136.793037][T20261] netlink: 'syz.3.15818': attribute type 4 has an invalid length. [ 3136.832022][T20262] netlink: 'syz.2.15819': attribute type 2 has an invalid length. [ 3136.845585][T20262] netlink: 'syz.2.15819': attribute type 1 has an invalid length. [ 3137.136725][T20270] netlink: 'syz.0.15823': attribute type 15 has an invalid length. [ 3137.193806][T20270] netlink: 'syz.0.15823': attribute type 16 has an invalid length. [ 3137.230143][T20270] netlink: 'syz.0.15823': attribute type 4 has an invalid length. [ 3137.253453][T20270] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.15823'. [ 3138.428251][T20311] tap0: tun_chr_ioctl cmd 1074025677 [ 3138.434315][T20311] tap0: linktype set to 776 [ 3138.635419][T20314] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.15840'. [ 3138.728426][T20317] device syzkaller0 entered promiscuous mode [ 3141.455746][T20324] validate_nla: 13 callbacks suppressed [ 3141.455762][T20324] netlink: 'syz.2.15843': attribute type 4 has an invalid length. [ 3141.524981][T20320] device syzkaller0 entered promiscuous mode [ 3141.593268][T20344] netlink: 'syz.2.15848': attribute type 2 has an invalid length. [ 3141.604785][T20344] netlink: 'syz.2.15848': attribute type 1 has an invalid length. [ 3143.163446][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.170597][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.623200][T20336] netlink: 'syz.4.15847': attribute type 21 has an invalid length. [ 3143.631348][T20336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15847'. [ 3143.649673][T20348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15850'. [ 3143.669331][T20348] device hsr_slave_0 left promiscuous mode [ 3143.680793][T20348] device hsr_slave_1 left promiscuous mode [ 3143.898401][T20354] delete_channel: no stack [ 3144.298769][T20375] netlink: 'syz.1.15858': attribute type 4 has an invalid length. [ 3144.793085][T20385] netlink: 'syz.3.15862': attribute type 2 has an invalid length. [ 3144.829504][T20385] netlink: 'syz.3.15862': attribute type 1 has an invalid length. [ 3144.962205][T20389] netlink: 'syz.1.15861': attribute type 3 has an invalid length. [ 3145.019450][T20389] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15861'. [ 3145.839892][T20395] device syzkaller0 entered promiscuous mode [ 3148.411826][T20431] netlink: 'syz.4.15875': attribute type 2 has an invalid length. [ 3148.422954][T20431] netlink: 'syz.4.15875': attribute type 1 has an invalid length. [ 3149.044805][T20415] netlink: 172 bytes leftover after parsing attributes in process `syz.0.15870'. [ 3149.054990][T20418] netlink: 'syz.3.15871': attribute type 4 has an invalid length. [ 3149.977833][T20444] netlink: 'syz.3.15877': attribute type 3 has an invalid length. [ 3150.012490][T20444] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15877'. [ 3150.778162][T20471] netlink: 'syz.2.15887': attribute type 4 has an invalid length. [ 3151.075440][T20475] device syzkaller0 entered promiscuous mode [ 3152.368760][T20509] netlink: 'syz.0.15895': attribute type 3 has an invalid length. [ 3152.394379][T20509] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15895'. [ 3154.454347][T20524] netlink: 'syz.2.15900': attribute type 4 has an invalid length. [ 3154.622420][T20523] netlink: 'syz.0.15902': attribute type 2 has an invalid length. [ 3154.638630][T20523] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15902'. [ 3155.427098][T20549] netlink: 'syz.1.15909': attribute type 2 has an invalid length. [ 3155.452737][T20549] netlink: 'syz.1.15909': attribute type 1 has an invalid length. [ 3155.489905][T20541] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15908'. [ 3155.566745][T20541] device hsr_slave_0 left promiscuous mode [ 3155.710994][T20541] device hsr_slave_1 left promiscuous mode [ 3156.034431][T20554] device syzkaller0 entered promiscuous mode [ 3156.553100][T20561] device syzkaller0 entered promiscuous mode [ 3160.326420][T20572] netlink: 'syz.4.15916': attribute type 4 has an invalid length. [ 3161.546125][T20595] netlink: 'syz.2.15922': attribute type 2 has an invalid length. [ 3161.609565][T20595] netlink: 'syz.2.15922': attribute type 1 has an invalid length. [ 3161.891078][T20597] netlink: 'syz.4.15923': attribute type 2 has an invalid length. [ 3161.914888][T20597] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15923'. [ 3162.011556][T20606] netlink: 'syz.1.15927': attribute type 4 has an invalid length. [ 3162.129884][T20608] netlink: 'syz.2.15928': attribute type 2 has an invalid length. [ 3162.159337][T20608] netlink: 'syz.2.15928': attribute type 1 has an invalid length. [ 3162.482178][T20610] device syzkaller0 entered promiscuous mode [ 3162.520539][T20618] netlink: 'syz.1.15932': attribute type 10 has an invalid length. [ 3162.544809][T20618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15932'. [ 3162.583023][T20618] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3162.604182][T20618] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3162.700348][T20618] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3167.016023][T20650] netlink: 'syz.3.15941': attribute type 2 has an invalid length. [ 3167.038994][T20650] netlink: 'syz.3.15941': attribute type 1 has an invalid length. [ 3168.511922][T20653] netlink: 'syz.4.15942': attribute type 4 has an invalid length. [ 3169.028603][T20655] netlink: 'syz.2.15943': attribute type 2 has an invalid length. [ 3169.037171][T20655] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15943'. [ 3169.313123][T20670] netlink: 'syz.2.15947': attribute type 2 has an invalid length. [ 3169.346270][T20670] netlink: 'syz.2.15947': attribute type 1 has an invalid length. [ 3169.663849][T20665] netlink: 'syz.4.15946': attribute type 10 has an invalid length. [ 3169.681493][T20665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15946'. [ 3170.009555][T20683] device syzkaller0 entered promiscuous mode [ 3170.726771][T20695] netlink: 'syz.2.15953': attribute type 2 has an invalid length. [ 3170.741645][T20699] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15954'. [ 3170.741744][T20695] netlink: 'syz.2.15953': attribute type 1 has an invalid length. [ 3171.238450][T20703] netlink: 'syz.0.15955': attribute type 2 has an invalid length. [ 3173.134639][T20706] device syzkaller0 entered promiscuous mode [ 3173.456431][T20720] validate_nla: 1 callbacks suppressed [ 3173.456545][T20720] netlink: 'syz.3.15959': attribute type 2 has an invalid length. [ 3173.482594][T20720] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15959'. [ 3174.253126][T20727] netlink: 'syz.0.15963': attribute type 2 has an invalid length. [ 3174.262994][T20727] netlink: 'syz.0.15963': attribute type 1 has an invalid length. [ 3176.029282][T20713] netlink: 'syz.2.15958': attribute type 4 has an invalid length. [ 3176.039166][T20716] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3176.049621][T20728] netlink: 'syz.1.15962': attribute type 10 has an invalid length. [ 3176.057555][T20728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15962'. [ 3176.057647][T20716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3176.082170][T20716] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3176.847036][T20755] netlink: 'syz.2.15972': attribute type 4 has an invalid length. [ 3176.873588][T20757] netlink: 'syz.3.15974': attribute type 4 has an invalid length. [ 3177.027474][T20762] device syzkaller0 entered promiscuous mode [ 3177.500480][T20767] netlink: 'syz.4.15978': attribute type 3 has an invalid length. [ 3177.508611][T20767] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15978'. [ 3177.550077][T20770] delete_channel: no stack [ 3177.554644][T20770] delete_channel: no stack [ 3179.895665][T20776] netlink: 'syz.0.15979': attribute type 10 has an invalid length. [ 3179.914248][T20776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15979'. [ 3179.926369][T20776] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3179.949249][T20776] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3179.983750][T20776] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3180.038546][T20796] netlink: 'syz.4.15985': attribute type 4 has an invalid length. [ 3180.101739][T20798] netlink: 'syz.3.15986': attribute type 4 has an invalid length. [ 3181.232099][T20826] device syzkaller0 entered promiscuous mode [ 3181.754645][T20837] netlink: 'syz.4.15998': attribute type 10 has an invalid length. [ 3181.793546][T20837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15998'. [ 3184.968548][T20855] netlink: 'syz.4.16003': attribute type 4 has an invalid length. [ 3185.118621][T20872] netlink: 'syz.4.16009': attribute type 2 has an invalid length. [ 3185.140532][T20872] netlink: 'syz.4.16009': attribute type 1 has an invalid length. [ 3185.482735][T20876] netlink: 'syz.0.16011': attribute type 10 has an invalid length. [ 3185.500218][T20876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16011'. [ 3185.771050][T20884] device syzkaller0 entered promiscuous mode [ 3188.071053][T20911] netlink: 'syz.3.16023': attribute type 2 has an invalid length. [ 3188.081292][T20911] netlink: 'syz.3.16023': attribute type 1 has an invalid length. [ 3190.462654][T20921] netlink: 'syz.0.16025': attribute type 10 has an invalid length. [ 3190.480790][T20921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16025'. [ 3190.522903][T20924] device ipvlan0 entered promiscuous mode [ 3190.598583][T20929] netlink: 'syz.0.16029': attribute type 4 has an invalid length. [ 3190.650185][T20927] netlink: 'syz.1.16027': attribute type 10 has an invalid length. [ 3190.689442][T20927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16027'. [ 3190.768398][T20935] netlink: 'syz.4.16030': attribute type 4 has an invalid length. [ 3192.271196][T20960] device syzkaller0 entered promiscuous mode [ 3192.833584][T20965] netlink: 'syz.2.16038': attribute type 2 has an invalid length. [ 3192.869583][T20965] netlink: 'syz.2.16038': attribute type 1 has an invalid length. [ 3195.029030][T20976] netlink: 763 bytes leftover after parsing attributes in process `syz.4.16042'. [ 3196.204981][T20983] netlink: 'syz.2.16044': attribute type 4 has an invalid length. [ 3196.233956][T20987] netlink: 'syz.1.16046': attribute type 10 has an invalid length. [ 3196.247645][T20987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16046'. [ 3196.260363][T20986] netlink: 'syz.0.16047': attribute type 4 has an invalid length. [ 3196.681923][T21012] netlink: 'syz.3.16054': attribute type 2 has an invalid length. [ 3196.729992][T21012] netlink: 'syz.3.16054': attribute type 1 has an invalid length. [ 3197.222337][T21024] FAULT_INJECTION: forcing a failure. [ 3197.222337][T21024] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.236228][T21024] CPU: 1 PID: 21024 Comm: syz.3.16058 Not tainted syzkaller #0 [ 3197.243804][T21024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3197.253877][T21024] Call Trace: [ 3197.257165][T21024] [ 3197.260106][T21024] dump_stack_lvl+0x188/0x24e [ 3197.264815][T21024] ? show_regs_print_info+0x12/0x12 [ 3197.270029][T21024] ? load_image+0x410/0x410 [ 3197.274547][T21024] ? __might_sleep+0xd0/0xd0 [ 3197.279143][T21024] ? __lock_acquire+0x7c40/0x7c40 [ 3197.284184][T21024] should_fail_ex+0x390/0x4c0 [ 3197.288882][T21024] should_failslab+0x5/0x20 [ 3197.293388][T21024] slab_pre_alloc_hook+0x59/0x300 [ 3197.298418][T21024] ? __lock_acquire+0x138a/0x7c40 [ 3197.303459][T21024] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3197.309189][T21024] __kmem_cache_alloc_node+0x4f/0x270 [ 3197.314574][T21024] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 3197.320299][T21024] __kmalloc+0xa3/0x240 [ 3197.324473][T21024] tomoyo_realpath_from_path+0xe2/0x5c0 [ 3197.330030][T21024] ? tomoyo_domain+0xd2/0x120 [ 3197.334721][T21024] ? tomoyo_path_number_perm+0x205/0x650 [ 3197.340360][T21024] tomoyo_path_number_perm+0x22f/0x650 [ 3197.345829][T21024] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3197.351292][T21024] ? ksys_write+0x1ce/0x260 [ 3197.355806][T21024] ? common_file_perm+0x171/0x1c0 [ 3197.360870][T21024] ? __fget_files+0x28/0x460 [ 3197.365491][T21024] security_file_ioctl+0x6c/0xa0 [ 3197.370462][T21024] __se_sys_ioctl+0x48/0x170 [ 3197.375075][T21024] do_syscall_64+0x4c/0xa0 [ 3197.379502][T21024] ? clear_bhb_loop+0x60/0xb0 [ 3197.384193][T21024] ? clear_bhb_loop+0x60/0xb0 [ 3197.388888][T21024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3197.394807][T21024] RIP: 0033:0x7f70e039e0d9 [ 3197.399239][T21024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3197.418866][T21024] RSP: 002b:00007f70e131e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3197.427299][T21024] RAX: ffffffffffffffda RBX: 00007f70e0625fa0 RCX: 00007f70e039e0d9 [ 3197.435282][T21024] RDX: 00007ffffffff000 RSI: 0000000000008902 RDI: 0000000000000004 [ 3197.443257][T21024] RBP: 00007f70e131e090 R08: 0000000000000000 R09: 0000000000000000 [ 3197.451238][T21024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3197.459218][T21024] R13: 00007f70e0626038 R14: 00007f70e0625fa0 R15: 00007ffe35a6a258 [ 3197.467207][T21024] [ 3197.485293][T21024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3197.745424][T21030] netlink: 'syz.4.16060': attribute type 4 has an invalid length. [ 3197.866786][T21039] netlink: 'syz.1.16064': attribute type 4 has an invalid length. [ 3198.276897][T21043] netlink: 'syz.3.16063': attribute type 10 has an invalid length. [ 3198.314502][T21043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16063'. [ 3198.788378][T21053] netlink: 'syz.3.16066': attribute type 2 has an invalid length. [ 3198.810045][T21053] netlink: 'syz.3.16066': attribute type 1 has an invalid length. [ 3199.451663][T21075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16073'. [ 3199.568906][T21075] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3199.603411][T21075] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3199.649471][T21075] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3199.978850][T21090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16075'. [ 3200.466426][T21103] FAULT_INJECTION: forcing a failure. [ 3200.466426][T21103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3200.549894][T21103] CPU: 0 PID: 21103 Comm: syz.1.16079 Not tainted syzkaller #0 [ 3200.557516][T21103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3200.567600][T21103] Call Trace: [ 3200.570908][T21103] [ 3200.573874][T21103] dump_stack_lvl+0x188/0x24e [ 3200.578609][T21103] ? show_regs_print_info+0x12/0x12 [ 3200.583858][T21103] ? load_image+0x410/0x410 [ 3200.588425][T21103] ? __lock_acquire+0x7c40/0x7c40 [ 3200.593521][T21103] should_fail_ex+0x390/0x4c0 [ 3200.598261][T21103] _copy_from_user+0x2c/0x170 [ 3200.602991][T21103] do_tcp_setsockopt+0x59f/0x1b50 [ 3200.608079][T21103] ? tcp_set_window_clamp+0x5a0/0x5a0 [ 3200.613506][T21103] ? aa_af_perm+0x340/0x340 [ 3200.618048][T21103] ? __fget_files+0x3fc/0x460 [ 3200.622784][T21103] ? aa_sock_opt_perm+0x74/0x100 [ 3200.627769][T21103] ? sock_common_setsockopt+0x32/0xb0 [ 3200.633178][T21103] ? tcp_setsockopt+0x39/0xe0 [ 3200.637895][T21103] ? tcp_enable_tx_delay+0x70/0x70 [ 3200.643049][T21103] ? sock_common_recvmsg+0x190/0x190 [ 3200.648384][T21103] __sys_setsockopt+0x2bf/0x3d0 [ 3200.653296][T21103] __x64_sys_setsockopt+0xb1/0xc0 [ 3200.658374][T21103] do_syscall_64+0x4c/0xa0 [ 3200.662833][T21103] ? clear_bhb_loop+0x60/0xb0 [ 3200.667547][T21103] ? clear_bhb_loop+0x60/0xb0 [ 3200.672269][T21103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3200.678201][T21103] RIP: 0033:0x7f53eed9e0d9 [ 3200.682650][T21103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3200.702288][T21103] RSP: 002b:00007f53efceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3200.710742][T21103] RAX: ffffffffffffffda RBX: 00007f53ef025fa0 RCX: 00007f53eed9e0d9 [ 3200.718747][T21103] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000003 [ 3200.726739][T21103] RBP: 00007f53efceb090 R08: 0000000000000004 R09: 0000000000000000 [ 3200.734717][T21103] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 3200.742694][T21103] R13: 00007f53ef026038 R14: 00007f53ef025fa0 R15: 00007ffe14b5c7d8 [ 3200.750710][T21103] [ 3201.921661][T21126] validate_nla: 5 callbacks suppressed [ 3201.921703][T21126] netlink: 'syz.0.16087': attribute type 10 has an invalid length. [ 3201.958116][T21126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16087'. [ 3202.145564][T21136] netlink: 'syz.3.16091': attribute type 4 has an invalid length. [ 3202.184955][T21133] netlink: 'syz.2.16090': attribute type 10 has an invalid length. [ 3202.230233][T21133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16090'. [ 3203.169977][T21157] netlink: 'syz.1.16097': attribute type 2 has an invalid length. [ 3203.178063][T21157] netlink: 'syz.1.16097': attribute type 1 has an invalid length. [ 3203.956710][T21165] FAULT_INJECTION: forcing a failure. [ 3203.956710][T21165] name failslab, interval 1, probability 0, space 0, times 0 [ 3203.979277][T21165] CPU: 0 PID: 21165 Comm: syz.4.16099 Not tainted syzkaller #0 [ 3203.986858][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3203.996916][T21165] Call Trace: [ 3204.000200][T21165] [ 3204.003137][T21165] dump_stack_lvl+0x188/0x24e [ 3204.008182][T21165] ? show_regs_print_info+0x12/0x12 [ 3204.013396][T21165] ? load_image+0x410/0x410 [ 3204.017915][T21165] ? __might_sleep+0xd0/0xd0 [ 3204.022516][T21165] ? __lock_acquire+0x7c40/0x7c40 [ 3204.027560][T21165] should_fail_ex+0x390/0x4c0 [ 3204.032252][T21165] should_failslab+0x5/0x20 [ 3204.036760][T21165] slab_pre_alloc_hook+0x59/0x300 [ 3204.041795][T21165] ? __inet_diag_dump_start+0x8b/0x970 [ 3204.047271][T21165] __kmem_cache_alloc_node+0x4f/0x270 [ 3204.052654][T21165] ? __inet_diag_dump_start+0x8b/0x970 [ 3204.058124][T21165] kmalloc_trace+0x26/0xe0 [ 3204.062558][T21165] __inet_diag_dump_start+0x8b/0x970 [ 3204.067861][T21165] ? netlink_lookup+0x30/0x200 [ 3204.072643][T21165] __netlink_dump_start+0x3f0/0x6f0 [ 3204.077870][T21165] inet_diag_rcv_msg_compat+0x207/0x420 [ 3204.083431][T21165] ? __inet_diag_dump+0x380/0x380 [ 3204.088468][T21165] ? sock_diag_rcv_msg+0x137/0x5e0 [ 3204.093591][T21165] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 3204.099321][T21165] ? inet_diag_dump_start_compat+0x20/0x20 [ 3204.105138][T21165] ? inet_diag_dump+0x50/0x50 [ 3204.109825][T21165] ? trace_raw_output_contention_end+0xd0/0xd0 [ 3204.116002][T21165] ? __inet_diag_dump+0x380/0x380 [ 3204.121039][T21165] sock_diag_rcv_msg+0x3c7/0x5e0 [ 3204.125989][T21165] netlink_rcv_skb+0x1ef/0x440 [ 3204.130772][T21165] ? sock_diag_bind+0xa0/0xa0 [ 3204.135462][T21165] ? netlink_ack+0x1160/0x1160 [ 3204.140249][T21165] ? netlink_deliver_tap+0x2e/0x1b0 [ 3204.145457][T21165] sock_diag_rcv+0x26/0x40 [ 3204.149882][T21165] netlink_unicast+0x7ad/0x920 [ 3204.154673][T21165] netlink_sendmsg+0x8ad/0xbd0 [ 3204.159454][T21165] ? netlink_getsockopt+0x550/0x550 [ 3204.164662][T21165] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3204.170237][T21165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3204.175542][T21165] ? security_socket_sendmsg+0x7c/0xa0 [ 3204.181010][T21165] ? netlink_getsockopt+0x550/0x550 [ 3204.186215][T21165] ____sys_sendmsg+0x5ed/0x9a0 [ 3204.191001][T21165] ? __sys_sendmsg_sock+0x30/0x30 [ 3204.196037][T21165] ? __import_iovec+0x306/0x510 [ 3204.200912][T21165] ? import_iovec+0x6f/0xa0 [ 3204.205430][T21165] ___sys_sendmsg+0x2a2/0x360 [ 3204.210129][T21165] ? __sys_sendmsg+0x2a0/0x2a0 [ 3204.214926][T21165] ? __lock_acquire+0x7c40/0x7c40 [ 3204.219987][T21165] __se_sys_sendmsg+0x1c3/0x2b0 [ 3204.224860][T21165] ? ct_nmi_exit+0x145/0x1c0 [ 3204.229460][T21165] ? __x64_sys_sendmsg+0x80/0x80 [ 3204.234426][T21165] ? lockdep_hardirqs_on+0x94/0x140 [ 3204.239638][T21165] do_syscall_64+0x4c/0xa0 [ 3204.244066][T21165] ? clear_bhb_loop+0x60/0xb0 [ 3204.248753][T21165] ? clear_bhb_loop+0x60/0xb0 [ 3204.253442][T21165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3204.259345][T21165] RIP: 0033:0x7f7b45f9e0d9 [ 3204.263768][T21165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3204.283381][T21165] RSP: 002b:00007f7b46ec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3204.291802][T21165] RAX: ffffffffffffffda RBX: 00007f7b46225fa0 RCX: 00007f7b45f9e0d9 [ 3204.299784][T21165] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 3204.307762][T21165] RBP: 00007f7b46ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 3204.315735][T21165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3204.323715][T21165] R13: 00007f7b46226038 R14: 00007f7b46225fa0 R15: 00007ffed0942038 [ 3204.331709][T21165] [ 3204.608896][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.615330][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 3230.201893][T12920] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2627 jiffies s: 465501 root: 0x2/. [ 3230.228676][T12920] rcu: blocking rcu_node structures (internal RCU debug): [ 3230.244585][T12920] Sending NMI from CPU 0 to CPUs 1: [ 3230.249905][ C1] NMI backtrace for cpu 1 [ 3230.249915][ C1] CPU: 1 PID: 21145 Comm: syz.3.16094 Not tainted syzkaller #0 [ 3230.249930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3230.249939][ C1] RIP: 0010:perf_prepare_sample+0x871/0x2020 [ 3230.249967][ C1] Code: 8b 06 8d 04 40 8d 1c c3 4c 8b 74 24 10 48 8b 44 24 28 42 0f b6 04 20 84 c0 0f 85 93 12 00 00 48 8b 44 24 08 66 01 18 4c 89 f6 <48> 81 e6 00 30 00 00 31 ff e8 d1 78 dd ff 4c 89 f0 48 25 00 30 00 [ 3230.249979][ C1] RSP: 0018:ffffc900001dfd40 EFLAGS: 00000046 [ 3230.249992][ C1] RAX: ffffffff81a4bbae RBX: ffffc900001dfee0 RCX: ffff88806508da00 [ 3230.250003][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 3230.250012][ C1] RBP: ffffc900001dfe30 R08: ffffffff8fa27048 R09: ffffffff8fa27058 [ 3230.250023][ C1] R10: ffffffff8fa27050 R11: ffffffff8fa27043 R12: dffffc0000000000 [ 3230.250034][ C1] R13: 0000000000000004 R14: 0000000000000004 R15: ffffc900001e0180 [ 3230.250043][ C1] FS: 00007f70e131e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3230.250055][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3230.250065][ C1] CR2: 00007f53eedeb7c0 CR3: 000000007c3d6000 CR4: 00000000003506e0 [ 3230.250078][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 3230.250088][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3230.250097][ C1] Call Trace: [ 3230.250102][ C1] [ 3230.250110][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3230.250130][ C1] ? perf_callchain+0x190/0x190 [ 3230.250148][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 3230.250169][ C1] perf_event_output_forward+0x197/0x2f0 [ 3230.250187][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 3230.250205][ C1] ? perf_get_page_size+0x430/0x430 [ 3230.250224][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 3230.250242][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 3230.250260][ C1] ? perf_get_page_size+0x430/0x430 [ 3230.250283][ C1] ? __lock_acquire+0x1465/0x7c40 [ 3230.250300][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 3230.250321][ C1] __perf_event_overflow+0x457/0x630 [ 3230.250342][ C1] perf_swevent_overflow+0x19b/0x230 [ 3230.250359][ C1] perf_swevent_event+0x458/0x570 [ 3230.250379][ C1] ? perf_tp_event+0xc10/0xc10 [ 3230.250397][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 3230.250414][ C1] ? perf_swevent_event+0x4ba/0x570 [ 3230.250435][ C1] perf_tp_event+0x36b/0xc10 [ 3230.250456][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 3230.250475][ C1] ? perf_tp_event+0xa8e/0xc10 [ 3230.250510][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 3230.250523][ C1] ? sched_clock_cpu+0x6e/0x260 [ 3230.250540][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3230.250561][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 3230.250580][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 3230.250599][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 3230.250618][ C1] ? __irq_exit_rcu+0x147/0x230 [ 3230.250632][ C1] ? irq_exit_rcu+0x20/0x20 [ 3230.250647][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 3230.250665][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 3230.250684][ C1] trace_hardirqs_on+0x24/0x40 [ 3230.250700][ C1] asm_sysvec_irq_work+0x16/0x20 [ 3230.250718][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 3230.250734][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 3230.250745][ C1] RSP: 0018:ffffc900001e05a0 EFLAGS: 00000206 [ 3230.250757][ C1] RAX: 58241eebbd57e200 RBX: 1ffff9200003c0bc RCX: 58241eebbd57e200 [ 3230.250767][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120 [ 3230.250778][ C1] RBP: ffffc900001e0690 R08: ffffffff90b1224f R09: 1ffffffff2162449 [ 3230.250789][ C1] R10: dffffc0000000000 R11: fffffbfff216244a R12: 0000000000000246 [ 3230.250799][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 3230.250819][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3230.250832][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3230.250851][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 3230.250869][ C1] __rcu_read_unlock+0x78/0xd0 [ 3230.250883][ C1] is_bpf_text_address+0x27a/0x2a0 [ 3230.250897][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 3230.250912][ C1] kernel_text_address+0x9c/0xd0 [ 3230.250930][ C1] __kernel_text_address+0x9/0x30 [ 3230.250947][ C1] unwind_get_return_address+0x49/0x80 [ 3230.250963][ C1] ? stack_trace_save+0xf0/0xf0 [ 3230.250980][ C1] arch_stack_walk+0xf2/0x140 [ 3230.251000][ C1] stack_trace_save+0xa6/0xf0 [ 3230.251016][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 3230.251033][ C1] ? mark_lock+0x94/0x320 [ 3230.251052][ C1] kasan_set_track+0x4b/0x70 [ 3230.251070][ C1] ? kasan_set_track+0x4b/0x70 [ 3230.251086][ C1] ? kasan_save_free_info+0x27/0x40 [ 3230.251098][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 3230.251115][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 3230.251130][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 3230.251145][ C1] ? rcu_core+0x9a3/0x1740 [ 3230.251157][ C1] ? handle_softirqs+0x291/0x910 [ 3230.251170][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 3230.251182][ C1] ? irq_exit_rcu+0x5/0x20 [ 3230.251194][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 3230.251208][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3230.251225][ C1] ? put_cpu_partial+0x1b0/0x250 [ 3230.251239][ C1] ? qlist_free_all+0x76/0xe0 [ 3230.251252][ C1] ? kasan_quarantine_reduce+0x144/0x160 [ 3230.251266][ C1] ? __kasan_slab_alloc+0x1e/0x80 [ 3230.251288][ C1] ? slab_post_alloc_hook+0x4b/0x490 [ 3230.251302][ C1] ? kmem_cache_alloc+0x18b/0x2f0 [ 3230.251316][ C1] ? __kernfs_new_node+0xe1/0x7f0 [ 3230.251330][ C1] ? kernfs_new_node+0x148/0x250 [ 3230.251345][ C1] ? kernfs_create_link+0xa3/0x200 [ 3230.251360][ C1] ? sysfs_do_create_link_sd+0x83/0x110 [ 3230.251376][ C1] ? device_add+0x641/0x1050 [ 3230.251394][ C1] ? netdev_register_kobject+0x184/0x320 [ 3230.251412][ C1] ? register_netdevice+0x133a/0x1b80 [ 3230.251431][ C1] ? tun_set_iff+0x82b/0xea0 [ 3230.251449][ C1] ? __tun_chr_ioctl+0x770/0x1ed0 [ 3230.251466][ C1] ? __se_sys_ioctl+0xfa/0x170 [ 3230.251482][ C1] ? do_syscall_64+0x4c/0xa0 [ 3230.251501][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3230.251530][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 3230.251544][ C1] kasan_save_free_info+0x27/0x40 [ 3230.251557][ C1] ____kasan_slab_free+0x126/0x1f0 [ 3230.251575][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 3230.251592][ C1] ? proc_nr_files+0x50/0x50 [ 3230.251606][ C1] ? rcu_core+0x9a3/0x1740 [ 3230.251619][ C1] kmem_cache_free+0xf7/0x2a0 [ 3230.251635][ C1] rcu_core+0x9a3/0x1740 [ 3230.251653][ C1] ? rcu_core+0x931/0x1740 [ 3230.251670][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 3230.251684][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3230.251703][ C1] ? lock_chain_count+0x20/0x20 [ 3230.251722][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3230.251742][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 3230.251757][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3230.251781][ C1] handle_softirqs+0x291/0x910 [ 3230.251796][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 3230.251811][ C1] ? do_softirq+0x210/0x210 [ 3230.251823][ C1] ? hrtimer_interrupt+0x775/0x980 [ 3230.251842][ C1] __irq_exit_rcu+0x13b/0x230 [ 3230.251856][ C1] ? irq_exit_rcu+0x20/0x20 [ 3230.251873][ C1] irq_exit_rcu+0x5/0x20 [ 3230.251885][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 3230.251901][ C1] [ 3230.251905][ C1] [ 3230.251911][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3230.251928][ C1] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 3230.251945][ C1] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 dc 06 5e 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 87 d0 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d 60 54 4e [ 3230.251956][ C1] RSP: 0018:ffffc90005baf758 EFLAGS: 00000246 [ 3230.251968][ C1] RAX: 58241eebbd57e200 RBX: ffff888017442140 RCX: 58241eebbd57e200 [ 3230.251978][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6120 [ 3230.251990][ C1] RBP: 0000000000000282 R08: ffffffff90b1224f R09: 1ffffffff2162449 [ 3230.251999][ C1] R10: dffffc0000000000 R11: fffffbfff216244a R12: 0000000000000000 [ 3230.252009][ C1] R13: 0000000000000001 R14: ffff88806508da00 R15: ffff8880b8f3ea80 [ 3230.252027][ C1] ? put_cpu_partial+0x6e/0x250 [ 3230.252044][ C1] qlist_free_all+0x76/0xe0 [ 3230.252060][ C1] kasan_quarantine_reduce+0x144/0x160 [ 3230.252075][ C1] __kasan_slab_alloc+0x1e/0x80 [ 3230.252094][ C1] slab_post_alloc_hook+0x4b/0x490 [ 3230.252109][ C1] ? slab_pre_alloc_hook+0x59/0x300 [ 3230.252125][ C1] kmem_cache_alloc+0x18b/0x2f0 [ 3230.252139][ C1] ? __kernfs_new_node+0xe1/0x7f0 [ 3230.252156][ C1] __kernfs_new_node+0xe1/0x7f0 [ 3230.252174][ C1] ? kernfs_new_node+0x250/0x250 [ 3230.252192][ C1] ? sysfs_do_create_link_sd+0x75/0x110 [ 3230.252213][ C1] kernfs_new_node+0x148/0x250 [ 3230.252230][ C1] kernfs_create_link+0xa3/0x200 [ 3230.252248][ C1] sysfs_do_create_link_sd+0x83/0x110 [ 3230.252267][ C1] device_add+0x641/0x1050 [ 3230.252292][ C1] netdev_register_kobject+0x184/0x320 [ 3230.252313][ C1] register_netdevice+0x133a/0x1b80 [ 3230.252336][ C1] ? netif_stacked_transfer_operstate+0x200/0x200 [ 3230.252357][ C1] ? tun_net_initialize+0x154/0x430 [ 3230.252375][ C1] ? tun_setup+0x2b0/0x2b0 [ 3230.252393][ C1] ? alloc_netdev_mqs+0xb56/0xf10 [ 3230.252414][ C1] tun_set_iff+0x82b/0xea0 [ 3230.252435][ C1] __tun_chr_ioctl+0x770/0x1ed0 [ 3230.252456][ C1] ? tun_flow_create+0x310/0x310 [ 3230.252480][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3230.252499][ C1] ? security_file_ioctl+0x7c/0xa0 [ 3230.252515][ C1] ? tun_chr_poll+0x630/0x630 [ 3230.252532][ C1] __se_sys_ioctl+0xfa/0x170 [ 3230.252551][ C1] do_syscall_64+0x4c/0xa0 [ 3230.252569][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3230.252586][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3230.252604][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3230.252621][ C1] RIP: 0033:0x7f70e039e0d9 [ 3230.252634][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3230.252645][ C1] RSP: 002b:00007f70e131e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3230.252659][ C1] RAX: ffffffffffffffda RBX: 00007f70e0625fa0 RCX: 00007f70e039e0d9 [ 3230.252669][ C1] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000066 [ 3230.252679][ C1] RBP: 00007f70e0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3230.252688][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3230.252697][ C1] R13: 00007f70e0626038 R14: 00007f70e0625fa0 R15: 00007ffe35a6a258 [ 3230.252713][ C1]