last executing test programs: 3.137158226s ago: executing program 1 (id=9284): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c77fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) 3.050726301s ago: executing program 1 (id=9285): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x9}, 0x4090, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev, 0x0, 0xfffffffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000014c0)="2dcaa39e98ea6d8466a17bf3f7973aaf741fbfeafd2df04c1d70daf163a528a9e5e0946392d4c5249476d2bbdab2ca693c5840fa63025188b2", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040, 0x0, 0x4000000000}, 0x0, 0x6, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0xd, 0xf9, 0x1, 0x9}, {0x6, 0x80, 0x4, 0x7ff}, {0x5, 0x4, 0x5, 0x4}, {0x200, 0x0, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001f00"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000b00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100130000000007080000f8ffffffbfa400000000000007040000f0ffffffb722c1cdb90000001821003c5fccf43c0d76d070630bec6942aa05d07398bebd409f958bf68e5522cd0da10f840f85973cbed9a8948c22068193036b349f86a2d4de1babf917da8b15b4031741c5556bf927570e729efd692d0212c6eb35e094123c788cdc3c6d3700f7d3ed6ed0e16cfd2fdcc64c54e4a6567b2133c56a8be0740c71a869e15a63278c406bc4c8ed45d5164b7e858c", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa000024f22a38fe0d96a8010a5479d589e6eba0298eaef95be2fca2650a29a035281a9c566846d2b1da6f4ec35bb5c98796e29d2880f7ea7361e8de1a0d24004aa7d90e856b03747a86237ae673511f37749ca6318326e52b7716a2ce335bf3fac94d1d75bdd10e309a43d8dbf60a40973b75d62f1e26f9ea0bcaf854459e888b6498b7391800e67a022f0bd859b0d8e5aad18f1edd69a0c32efe5eb1bab584e88563c282143f5f5bec442d93cb8eb01e41853e1e6aa4968a"], &(0x7f0000000000)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x5, 0x4, 0xfffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 2.542552861s ago: executing program 2 (id=9290): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0x31) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8481100000003000000000000000e000a000f08000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 2.359467212s ago: executing program 0 (id=9292): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000700)=""/239, 0xef}], 0x6}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 2.290075365s ago: executing program 2 (id=9293): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c77fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) 2.246579349s ago: executing program 2 (id=9294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e0000f34b2b0000010100001010000065bffdac36e4efe1ad4b256ccd4dacf51b6f8406dbfc17e9d6e8e000fa4f023f6aaf71b7fee5375703673b81be", @ANYRES32=0x1, @ANYBLOB="01000100"/19, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="000000005000000018450000080000000000000000000000c135fcff01000000bf91000000000000b7020000010000008500000084"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={r6, 0x0, 0xd2, 0x0, &(0x7f0000000380)="1f55bbb6d3102de4ee2a071f0af3c9b767558c89b612ca5a596596dcd752e346e3b43164463c665d5812a9ccd2b44ef2cec2c43c2d0507fb947f380059acbfd58760d4a0798362707473a782dc4295fae14d8a6171bafa9c24198313554b501aaddded7cfc88e95f0a939396480775aef401bbfc00cd1c8e920316ea4f0f143e324932d5e4bbfbb7f34dc0d77ddd16afb1cfb547d730d9d7902fff31f97dd0d8f67f0f88a2448dc8918de22e114b256ba0c49feea09a9fdb9442090c8651394a62400ae5206af5452584a4c3c6c24554c407", 0x0, 0x3, 0x0, 0x6e, 0x0, &(0x7f0000000480)="b2cf44ca7b11afe96d6069c99115a37452ef4430668fb9c5793e8160d9b2b1ba6f5946568790d9ecbab16fe9f2af310ac47f35c641b7af3977f0a741211713650def10fd7c2d175c465c3a0ac9b4cd3d85705e3a036db9f6fc4971613fc3746ac99aa01904f5364b17237b3cd5a5", 0x0, 0x2, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.014481412s ago: executing program 1 (id=9295): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(r1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r5, 0x37, 0x0, 0xbd, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r9, r8, 0x4, r8}, 0x10) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x42) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff, 0x37, '\x00', r6, r7, 0x5, 0x1}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.824949853s ago: executing program 2 (id=9297): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/239, 0xef}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 1.482183443s ago: executing program 0 (id=9298): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d448dc59061add42d85dc1139429cdaeacacd4", 0x13}, {&(0x7f0000000100)="d435533d71a7ca7c1cefc36aa7a040eabc317f832cd8f53dba5f23247c32e2dfb0330b66358e38980976fe9c", 0x2c}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x4000010}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000580)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000240)="a0548d1a126bc6ee90ddb28b728ce7d4a522b9c0", 0x14}, {&(0x7f0000000600)="d6e2b9ad6f7dc5e8663bd3353aad0cefc8b795c3bbe7e1978c45b8cd53b04e7d2d1d1143a504bdf562bc02f2a14199214b6573b51e87e9f3f8f1f7f81821403b589da24aa1cbac1c761b4678dff48ba2abc40d16dd1f95346bc42d57ebd8448cccfd32f269c9f6dd544e269c645bc8fd62a83507f40ca26b172a373c936d920bf34e34633bb3404a814c73a57dbe49187f0c648a08631334c408ad56ad85abff6b243addbf0da5772e21dda99839aa8c79a0cc55192d6ae5c7aa7329eb852ed6e7ea810ec2692e1faf8e24ba405ca7a3466fdb95bd0e6769e1fb28e203d142d1ab0575d61ac8bfc89ba3974b", 0xec}, {&(0x7f0000000700)="681ae114b043dcd2fb8221d090c65dd6333020365b16b200a8062fe9f77574c3e85e3524bf825a983629355ea3c8b42807715e9216da852acc13f45d815e67e74fec48fac598885a4a5d7c1dad44d796ae6fb921e32f4801ab88565fb127e5e22ba8491bb6315e7fb66235c2a0c5823290a3c1e333e738cba21f25082c6adfd83a2ec683a0133d31180fec085bdb834ca27fd7617a0521d07e40afb8656d3147c59433fe9e52fe742fdd4967a73730578512e2aaa0c933a6f621f2f908bae3507f3b2077d5b6ca5e99b3a56328dafff7c5692691e9fdf7301942", 0xda}, {&(0x7f0000000800)="ad2fd9165a3bfdeecce00c526b155f91540469f95fa332a77efacca50440394af49d5c2b7091828cd288c627d4cae6c2060a7adb850fe328dbcf001a39d87e6b236750aa601b4619be79a8c3217e7ee5b59c99ca059bb14ca295cb2c3cba07befee31477bda90977cf9b4e6d8a1ba09bf435d48976a2ce61078f1b6febb10938bfaf9e853f4d6cad55bc2fd551aa0f1fe6dfd1b80e62f78b33f646e6f2366afc4dd271fb4838859e1bc8d057e8d7f25cddb95c0657400a28a4d03294d411dfa99d74a59708f38c8001ee14c96f38a8d087ad6c9f62367e9f", 0xd8}, {&(0x7f0000000900)="5e6711ba4e4ae5e1fe701c7c6d12e19eaca8b2e7da42c784a2fd596e9e2d85f69f6348437949dc54403acc658f9f39a10d2b8e9fdebadd509d1ce806c42e3a0b922f91adb197e6cfa09cc750ab6f42997700f549b1747ffbb097f37b5265fc5546b5c7c5ac026af1523d3895e1290983ed9858514539bf425d40df39e1306f5b09ffad27659c0a9040b5c07d338024408f64e91121671962cf9eee6b8a53123dd98b9d91bc42cf9595e3cea575a9825f566436053ba28494aac730ed332179e6", 0xc0}], 0x5, &(0x7f0000000b80)=[{0x70, 0x6, 0x40, "244694e34c465951c4c408494e5105a2b1ff1b9010f2be2380342314512ad6bcc8029a9d1fcfeacfb66ad915e97eedaffde9b57e200dc488c8ce5375c42d54e0c08c018636c37bb4c5ba389fe3000e261fd0c5b79ff0351d4bd0457d30d018"}, {0x20, 0x10f, 0x7, "9b05cf00632ef138163c09d70685"}, {0x98, 0x3a, 0x2, "5083a7ba51ca1f1fd7e7c780250df811b39aacda4e7ff37600190c3b62f4865ff8d40e93af99cb69987393d0f6e98f40036db1d78dc3ab56a0836b88ae6a28af03ee60af90a7ec6c2651ffbf52ad06b639b4f7e36d24ddaa23fe4fb22fe23ef4c57610276636e64044e9ec8f67fb081a85b4842057212e74cdcc9f7fc40eb2f86a2a220ed816c5ed"}, {0xc8, 0x0, 0x9, "1effece14d87984e7eeb1cb30c32cc6f0641192a7dd31eb96262bdd72c78f7d8eb482eeed0af8823e777e00921a544cfa7b48a0a125a3ac99bae49cc70a890e4ea5e2920586e22c08fdfed29b2f6526599c87e99d292f0684d70bd501a20bb908ddca0cc66637b3b68067e0398f05301872d9a4d21b3e0aa6d4fc4382557d4c2439ecd8d9c503b3c9c45faa91fd2b5abf98ddd745ef17c4ce59f4791320157cea3721debe7f0d497ce2713cc7103141ddfe2278e"}, {0xa8, 0xd4fa922bdac32dc0, 0x2, "4099b95cb585477f3144b4bdd1c04259caadfc00eb2876df1ebbd12675634c08759805ba71787a19b8741ed52513f5125494606ccaee4462b4610eaeaffc0fdbce0d5f20cfc62d9e19cb866aca0d8892ae605cc53f6605441d2587ba093f2ff1e6be6a00c284e9c013b7ed5ed80b403782dc2dde27eab3837a77b8111a9959f0eed3b4ebf88ebdbb88341d2377fea8f0b63d7430"}, {0xf0, 0x115, 0x7ff, "b211e2758b86a21a06b504b9774779181cbb58af5cc67082d03c9024e6f32d0181a5d22195f12216f006556f9aa3a5f8b2595bf9061a82535689da209d5320c8ef976d4ae9c3fabf2e36fa7db5b87938f91efbc69e51d3f983f5a3983256040488401df5e668199cd04f0f5f0cc9aa1345c9ea3d046fd7119f511b9b8452e65051db6197acc576f5d294bbeb32b1c5408ed590d9c8052813e4210c9268f609dfa29598cd1da27c070d0a01921a38ab79037d104d817f57d48b86f1d76a8a603599659910bd22d42921c7488509bb6e112fdb83e010eaea1fa653"}, {0xf8, 0x1, 0x1, "634741d4b1ef4485b09a5d67a2e73ddf0d0766d38175cbaa87c91da4626b5b731c1105027d6af5572b95f1c2a72218248fb6047639c01767774f73f110f5a7a0dd4b971f0bf3240804f015d345514d86ac9f037d51baa204b866134e889643b9232772f1751619b90dc606171b553135c882968daf97846a3a05d29af389acd7676bb83675be5eaa1635eef45889c84b90338acd7c7bbc5e2445ef02e8080c890b920c284cdced60962e71b905fcd5ee74202467721f7a5b32c4e4c6985d7803f7b4ec18e87cf034a535670df4c0747af5accaa8e8a1676544c0cceb12bddac6d3c8"}, {0xa8, 0x112, 0x9d, "6584383302f2e4f2edbee956c4e3a93595f5588b03a394c42921ea3f7ac7d09f092cd1a7a9f535bf9df481c0762b7402070da53ba6809f07e096b70f5ccb04be319bda225522270424fe965a86d8811122dba87876182d261eef72b786f6cd3ed4ce8a90cf1196c4043ea25de103a6fa3c4515695b8cb26ede1a026157ca8bfcc673709e0b8e67e025fb9d9da1b829fdcabcbc6b9c"}], 0x528}, 0x4000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000091000000000000000000000003cb34a7ad4d2ea5701ca3da55b440113a38ee562b127fc8bb4b7f761517247beb26fdf529e6c9d2f13acfcdde593241754caae700e8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000003420113c904bc465000000da41215a72c1e1d55d5a1bc74b25a52de5fcec165435f6f97c970ee735b3177cc1e7b258fd40309b3576d6a3be1418c5389efd243a157f5a79cae00951bace12b682a80f4048fc8fea22d7d734e646f067926b8b820d01232e6c362b58799f9379165d468e6ddbc416b35526b91ff1bc19c184057141d3277ac89571f686370232dc33a0336e179cf401fc0fe454"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd63"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.476695973s ago: executing program 1 (id=9299): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d448dc59061add42d85dc1139429cdaeacacd4", 0x13}, {&(0x7f0000000100)="d435533d71a7ca7c1cefc36aa7a040eabc317f832cd8f53dba5f23247c32e2dfb0330b66358e38980976fe9c", 0x2c}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x4000010}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000580)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000240)="a0548d1a126bc6ee90ddb28b728ce7d4a522b9c0", 0x14}, {&(0x7f0000000600)="d6e2b9ad6f7dc5e8663bd3353aad0cefc8b795c3bbe7e1978c45b8cd53b04e7d2d1d1143a504bdf562bc02f2a14199214b6573b51e87e9f3f8f1f7f81821403b589da24aa1cbac1c761b4678dff48ba2abc40d16dd1f95346bc42d57ebd8448cccfd32f269c9f6dd544e269c645bc8fd62a83507f40ca26b172a373c936d920bf34e34633bb3404a814c73a57dbe49187f0c648a08631334c408ad56ad85abff6b243addbf0da5772e21dda99839aa8c79a0cc55192d6ae5c7aa7329eb852ed6e7ea810ec2692e1faf8e24ba405ca7a3466fdb95bd0e6769e1fb28e203d142d1ab0575d61ac8bfc89ba3974b", 0xec}, {&(0x7f0000000700)="681ae114b043dcd2fb8221d090c65dd6333020365b16b200a8062fe9f77574c3e85e3524bf825a983629355ea3c8b42807715e9216da852acc13f45d815e67e74fec48fac598885a4a5d7c1dad44d796ae6fb921e32f4801ab88565fb127e5e22ba8491bb6315e7fb66235c2a0c5823290a3c1e333e738cba21f25082c6adfd83a2ec683a0133d31180fec085bdb834ca27fd7617a0521d07e40afb8656d3147c59433fe9e52fe742fdd4967a73730578512e2aaa0c933a6f621f2f908bae3507f3b2077d5b6ca5e99b3a56328dafff7c5692691e9fdf7301942", 0xda}, {&(0x7f0000000800)="ad2fd9165a3bfdeecce00c526b155f91540469f95fa332a77efacca50440394af49d5c2b7091828cd288c627d4cae6c2060a7adb850fe328dbcf001a39d87e6b236750aa601b4619be79a8c3217e7ee5b59c99ca059bb14ca295cb2c3cba07befee31477bda90977cf9b4e6d8a1ba09bf435d48976a2ce61078f1b6febb10938bfaf9e853f4d6cad55bc2fd551aa0f1fe6dfd1b80e62f78b33f646e6f2366afc4dd271fb4838859e1bc8d057e8", 0xad}, {&(0x7f0000000900)="5e6711ba4e4ae5e1fe701c7c6d12e19eaca8b2e7da42c784a2fd596e9e2d85f69f6348437949dc54403acc658f9f39a10d2b8e9fdebadd509d1ce806c42e3a0b922f91adb197e6cfa09cc750ab6f42997700f549b1747ffbb097f37b5265fc5546b5c7c5ac026af1523d3895e1290983ed9858514539bf425d40df39e1306f5b09ffad27659c0a9040b5c07d338024408f64e91121671962cf9eee6b8a53123dd98b9d91bc42cf9595e3cea575a9825f566436053ba28494aac730ed332179e6", 0xc0}], 0x5, &(0x7f0000000b80)=[{0x70, 0x6, 0x40, "244694e34c465951c4c408494e5105a2b1ff1b9010f2be2380342314512ad6bcc8029a9d1fcfeacfb66ad915e97eedaffde9b57e200dc488c8ce5375c42d54e0c08c018636c37bb4c5ba389fe3000e261fd0c5b79ff0351d4bd0457d30d018"}, {0x20, 0x10f, 0x7, "9b05cf00632ef138163c09d70685"}, {0x98, 0x3a, 0x2, "5083a7ba51ca1f1fd7e7c780250df811b39aacda4e7ff37600190c3b62f4865ff8d40e93af99cb69987393d0f6e98f40036db1d78dc3ab56a0836b88ae6a28af03ee60af90a7ec6c2651ffbf52ad06b639b4f7e36d24ddaa23fe4fb22fe23ef4c57610276636e64044e9ec8f67fb081a85b4842057212e74cdcc9f7fc40eb2f86a2a220ed816c5ed"}, {0xc8, 0x0, 0x9, "1effece14d87984e7eeb1cb30c32cc6f0641192a7dd31eb96262bdd72c78f7d8eb482eeed0af8823e777e00921a544cfa7b48a0a125a3ac99bae49cc70a890e4ea5e2920586e22c08fdfed29b2f6526599c87e99d292f0684d70bd501a20bb908ddca0cc66637b3b68067e0398f05301872d9a4d21b3e0aa6d4fc4382557d4c2439ecd8d9c503b3c9c45faa91fd2b5abf98ddd745ef17c4ce59f4791320157cea3721debe7f0d497ce2713cc7103141ddfe2278e"}, {0xa8, 0xd4fa922bdac32dc0, 0x2, "4099b95cb585477f3144b4bdd1c04259caadfc00eb2876df1ebbd12675634c08759805ba71787a19b8741ed52513f5125494606ccaee4462b4610eaeaffc0fdbce0d5f20cfc62d9e19cb866aca0d8892ae605cc53f6605441d2587ba093f2ff1e6be6a00c284e9c013b7ed5ed80b403782dc2dde27eab3837a77b8111a9959f0eed3b4ebf88ebdbb88341d2377fea8f0b63d7430"}, {0xf0, 0x115, 0x7ff, "b211e2758b86a21a06b504b9774779181cbb58af5cc67082d03c9024e6f32d0181a5d22195f12216f006556f9aa3a5f8b2595bf9061a82535689da209d5320c8ef976d4ae9c3fabf2e36fa7db5b87938f91efbc69e51d3f983f5a3983256040488401df5e668199cd04f0f5f0cc9aa1345c9ea3d046fd7119f511b9b8452e65051db6197acc576f5d294bbeb32b1c5408ed590d9c8052813e4210c9268f609dfa29598cd1da27c070d0a01921a38ab79037d104d817f57d48b86f1d76a8a603599659910bd22d42921c7488509bb6e112fdb83e010eaea1fa653"}, {0xf8, 0x1, 0x1, "634741d4b1ef4485b09a5d67a2e73ddf0d0766d38175cbaa87c91da4626b5b731c1105027d6af5572b95f1c2a72218248fb6047639c01767774f73f110f5a7a0dd4b971f0bf3240804f015d345514d86ac9f037d51baa204b866134e889643b9232772f1751619b90dc606171b553135c882968daf97846a3a05d29af389acd7676bb83675be5eaa1635eef45889c84b90338acd7c7bbc5e2445ef02e8080c890b920c284cdced60962e71b905fcd5ee74202467721f7a5b32c4e4c6985d7803f7b4ec18e87cf034a535670df4c0747af5accaa8e8a1676544c0cceb12bddac6d3c8"}, {0xa8, 0x112, 0x9d, "6584383302f2e4f2edbee956c4e3a93595f5588b03a394c42921ea3f7ac7d09f092cd1a7a9f535bf9df481c0762b7402070da53ba6809f07e096b70f5ccb04be319bda225522270424fe965a86d8811122dba87876182d261eef72b786f6cd3ed4ce8a90cf1196c4043ea25de103a6fa3c4515695b8cb26ede1a026157ca8bfcc673709e0b8e67e025fb9d9da1b829fdcabcbc6b9c"}], 0x528}, 0x4000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000091000000000000000000000003cb34a7ad4d2ea5701ca3da55b440113a38ee562b127fc8bb4b7f761517247beb26fdf529e6c9d2f13acfcdde593241754caae700e8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000003420113c904bc465000000da41215a72c1e1d55d5a1bc74b25a52de5fcec165435f6f97c970ee735b3177cc1e7b258fd40309b3576d6a3be1418c5389efd243a157f5a79cae00951bace12b682a80f4048fc8fea22d7d734e646f067926b8b820d01232e6c362b58799f9379165d468e6ddbc416b35526b91ff1bc19c184057141d3277ac89571f686370232dc33a0336e179cf401fc0fe454"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd63"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.335136652s ago: executing program 3 (id=9300): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x8080) 1.265945705s ago: executing program 0 (id=9301): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 1.170978861s ago: executing program 3 (id=9302): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0x31) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8481100000003000000000000000e000a000f08000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 1.155408042s ago: executing program 1 (id=9303): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x9}, 0x4090, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev, 0x0, 0xfffffffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000014c0)="2dcaa39e98ea6d8466a17bf3f7973aaf741fbfeafd2df04c1d70daf163a528a9e5e0946392d4c5249476d2bbdab2ca693c5840fa63025188b2", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040, 0x0, 0x4000000000}, 0x0, 0x6, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0xd, 0xf9, 0x1, 0x9}, {0x6, 0x80, 0x4, 0x7ff}, {0x5, 0x4, 0x5, 0x4}, {0x200, 0x0, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006010000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001f00"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000b00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100130000000007080000f8ffffffbfa400000000000007040000f0ffffffb722c1cdb90000001821003c5fccf43c0d76d070630bec6942aa05d07398bebd409f958bf68e5522cd0da10f840f85973cbed9a8948c22068193036b349f86a2d4de1babf917da8b15b4031741c5556bf927570e729efd692d0212c6eb35e094123c788cdc3c6d3700f7d3ed6ed0e16cfd2fdcc64c54e4a6567b2133c56a8be0740c71a869e15a63278c406bc4c8ed45d5164b7e858c", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa000024f22a38fe0d96a8010a5479d589e6eba0298eaef95be2fca2650a29a035281a9c566846d2b1da6f4ec35bb5c98796e29d2880f7ea7361e8de1a0d24004aa7d90e856b03747a86237ae673511f37749ca6318326e52b7716a2ce335bf3fac94d1d75bdd10e309a43d8dbf60a40973b75d62f1e26f9ea0bcaf854459e888b6498b7391800e67a022f0bd859b0d8e5aad18f1edd69a0c32efe5eb1bab584e88563c282143f5f5bec442d93cb8eb01e41853e1e6aa4968a"], &(0x7f0000000000)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x5, 0x4, 0xfffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) 1.052285938s ago: executing program 0 (id=9304): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/178, 0xb2}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d49380", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 905.883017ms ago: executing program 3 (id=9305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e611418000000000085430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e0000f34b2b0000010100001010000065bffdac36e4efe1ad4b256ccd4dacf51b6f8406dbfc17e9d6e8e000fa4f023f6aaf71b7fee5375703673b81be", @ANYRES32=0x1, @ANYBLOB="01000100"/19, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="000000005000000018450000080000000000000000000000c135fcff01000000bf91000000000000b7020000010000008500000084"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={r6, 0x0, 0xd2, 0x0, &(0x7f0000000380)="1f55bbb6d3102de4ee2a071f0af3c9b767558c89b612ca5a596596dcd752e346e3b43164463c665d5812a9ccd2b44ef2cec2c43c2d0507fb947f380059acbfd58760d4a0798362707473a782dc4295fae14d8a6171bafa9c24198313554b501aaddded7cfc88e95f0a939396480775aef401bbfc00cd1c8e920316ea4f0f143e324932d5e4bbfbb7f34dc0d77ddd16afb1cfb547d730d9d7902fff31f97dd0d8f67f0f88a2448dc8918de22e114b256ba0c49feea09a9fdb9442090c8651394a62400ae5206af5452584a4c3c6c24554c407", 0x0, 0x3, 0x0, 0x6e, 0x0, &(0x7f0000000480)="b2cf44ca7b11afe96d6069c99115a37452ef4430668fb9c5793e8160d9b2b1ba6f5946568790d9ecbab16fe9f2af310ac47f35c641b7af3977f0a741211713650def10fd7c2d175c465c3a0ac9b4cd3d85705e3a036db9f6fc4971613fc3746ac99aa01904f5364b17237b3cd5a5", 0x0, 0x2, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 852.31172ms ago: executing program 2 (id=9306): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 530.617769ms ago: executing program 2 (id=9307): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000700)=""/239, 0xef}], 0x6}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db8607847548368705", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 482.873612ms ago: executing program 3 (id=9308): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000fffeffff00000085000000af0037c19500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) 351.976059ms ago: executing program 3 (id=9309): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(r1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r5, 0x37, 0x0, 0xbd, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r9, 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r10, r8, 0x4, r8}, 0x10) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x42) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff, 0x37, '\x00', r6, r7, 0x5, 0x1}, 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r11, 0x800454d3, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 193.358149ms ago: executing program 1 (id=9310): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d448dc59061add42d85dc1139429cdaeacacd4", 0x13}, {&(0x7f0000000100)}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x4000010}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000580)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000240)="a0548d1a126bc6ee90ddb28b728ce7d4a522b9c0", 0x14}, {&(0x7f0000000600)="d6e2b9ad6f7dc5e8663bd3353aad0cefc8b795c3bbe7e1978c45b8cd53b04e7d2d1d1143a504bdf562bc02f2a14199214b6573b51e87e9f3f8f1f7f81821403b589da24aa1cbac1c761b4678dff48ba2abc40d16dd1f95346bc42d57ebd8448cccfd32f269c9f6dd544e269c645bc8fd62a83507f40ca26b172a373c936d920bf34e34633bb3404a814c73a57dbe49187f0c648a08631334c408ad56ad85abff6b243addbf0da5772e21dda99839aa8c79a0cc55192d6ae5c7aa7329eb852ed6e7ea810ec2692e1faf8e24ba405ca7a3466fdb95bd0e6769e1fb28e203d142d1ab0575d61ac8bfc89ba3974b", 0xec}, {&(0x7f0000000700)="681ae114b043dcd2fb8221d090c65dd6333020365b16b200a8062fe9f77574c3e85e3524bf825a983629355ea3c8b42807715e9216da852acc13f45d815e67e74fec48fac598885a4a5d7c1dad44d796ae6fb921e32f4801ab88565fb127e5e22ba8491bb6315e7fb66235c2a0c5823290a3c1e333e738cba21f25082c6adfd83a2ec683a0133d31180fec085bdb834ca27fd7617a0521d07e40afb8656d3147c59433fe9e52fe742fdd4967a73730578512e2aaa0c933a6f621f2f908bae3507f3b2077d5b6ca5e99b3a56328dafff7c5692691e9fdf7301942", 0xda}, {&(0x7f0000000800)="ad2fd9165a3bfdeecce00c526b155f91540469f95fa332a77efacca50440394af49d5c2b7091828cd288c627d4cae6c2060a7adb850fe328dbcf001a39d87e6b236750aa601b4619be79a8c3217e7ee5b59c99ca059bb14ca295cb2c3cba07befee31477bda90977cf9b4e6d8a1ba09bf435d48976a2ce61078f1b6febb10938bfaf9e853f4d6cad55bc2fd551aa0f1fe6dfd1b80e62f78b33f646e6f2366afc4dd271fb4838859e1bc8d057e8d7f25cddb95c0657400a28a4d03294d411dfa99d74a59708f38c8001ee14c96f38a8d087ad6c9f62367e9f6afe1beb4b23c2469bc2d2024a20", 0xe6}, {&(0x7f0000000900)="5e6711ba4e4ae5e1fe701c7c6d12e19eaca8b2e7da42c784a2fd596e9e2d85f69f6348437949dc54403acc658f9f39a10d2b8e9fdebadd509d1ce806c42e3a0b922f91adb197e6cfa09cc750ab6f42997700f549b1747ffbb097f37b5265fc5546b5c7c5ac026af1523d3895e1290983ed9858514539bf425d40df39e1306f5b09ffad27659c0a9040b5c07d338024408f64e91121671962cf9eee6b8a53123dd98b9d91bc42cf9595e3cea575a9825f566436053ba28494aac730ed332179e6", 0xc0}], 0x5, &(0x7f0000000b80)=[{0x70, 0x6, 0x40, "244694e34c465951c4c408494e5105a2b1ff1b9010f2be2380342314512ad6bcc8029a9d1fcfeacfb66ad915e97eedaffde9b57e200dc488c8ce5375c42d54e0c08c018636c37bb4c5ba389fe3000e261fd0c5b79ff0351d4bd0457d30d018"}, {0x20, 0x10f, 0x7, "9b05cf00632ef138163c09d70685"}, {0x98, 0x3a, 0x2, "5083a7ba51ca1f1fd7e7c780250df811b39aacda4e7ff37600190c3b62f4865ff8d40e93af99cb69987393d0f6e98f40036db1d78dc3ab56a0836b88ae6a28af03ee60af90a7ec6c2651ffbf52ad06b639b4f7e36d24ddaa23fe4fb22fe23ef4c57610276636e64044e9ec8f67fb081a85b4842057212e74cdcc9f7fc40eb2f86a2a220ed816c5ed"}, {0x98, 0x0, 0x9, "1effece14d87984e7eeb1cb30c32cc6f0641192a7dd31eb96262bdd72c78f7d8eb482eeed0af8823e777e00921a544cfa7b48a0a125a3ac99bae49cc70a890e4ea5e2920586e22c08fdfed29b2f6526599c87e99d292f0684d70bd501a20bb908ddca0cc66637b3b68067e0398f05301872d9a4d21b3e0aa6d4fc4382557d4c2439ecd8d9c503b"}, {0xa8, 0xd4fa922bdac32dc0, 0x2, "4099b95cb585477f3144b4bdd1c04259caadfc00eb2876df1ebbd12675634c08759805ba71787a19b8741ed52513f5125494606ccaee4462b4610eaeaffc0fdbce0d5f20cfc62d9e19cb866aca0d8892ae605cc53f6605441d2587ba093f2ff1e6be6a00c284e9c013b7ed5ed80b403782dc2dde27eab3837a77b8111a9959f0eed3b4ebf88ebdbb88341d2377fea8f0b63d7430"}, {0x48, 0x115, 0x7ff, "b211e2758b86a21a06b504b9774779181cbb58af5cc67082d03c9024e6f32d0181a5d22195f12216f006556f9aa3a5f8b2595bf9061a82"}, {0xf0, 0x1, 0x1, "634741d4b1ef4485b09a5d67a2e73ddf0d0766d38175cbaa87c91da4626b5b731c1105027d6af5572b95f1c2a72218248fb6047639c01767774f73f110f5a7a0dd4b971f0bf3240804f015d345514d86ac9f037d51baa204b866134e889643b9232772f1751619b90dc606171b553135c882968daf97846a3a05d29af389acd7676bb83675be5eaa1635eef45889c84b90338acd7c7bbc5e2445ef02e8080c890b920c284cdced60962e71b905fcd5ee74202467721f7a5b32c4e4c6985d7803f7b4ec18e87cf034a535670df4c0747af5accaa8e8a1676544c0cc"}, {0xa8, 0x112, 0x9d, "6584383302f2e4f2edbee956c4e3a93595f5588b03a394c42921ea3f7ac7d09f092cd1a7a9f535bf9df481c0762b7402070da53ba6809f07e096b70f5ccb04be319bda225522270424fe965a86d8811122dba87876182d261eef72b786f6cd3ed4ce8a90cf1196c4043ea25de103a6fa3c4515695b8cb26ede1a026157ca8bfcc673709e0b8e67e025fb9d9da1b829fdcabcbc"}], 0x448}, 0x4000004) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000091000000000000000000000003cb34a7ad4d2ea5701ca3da55b440113a38ee562b127fc8bb4b7f761517247beb26fdf529e6c9d2f13acfcdde593241754caae700e8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000003420113c904bc465000000da41215a72c1e1d55d5a1bc74b25a52de5fcec165435f6f97c970ee735b3177cc1e7b258fd40309b3576d6a3be1418c5389efd243a157f5a79cae00951bace12b682a80f4048fc8fea22d7d734e646f067926b8b820d01232e6c362b58799f9379165d468e6ddbc416b35526b91ff1bc19c184057141d3277ac89571f686370232dc33a0336e179cf401fc0fe454"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd63"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 117.177354ms ago: executing program 0 (id=9311): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x8080) 116.053103ms ago: executing program 3 (id=9312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1f, 0x1, 0x73b0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0xfffd, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="11000000ebffffff000000000017e8"], 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'macvtap0\x00', 0x8000}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x12) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair(0xa, 0xa, 0xffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="4686a6a1c4f5514c65cc4144bd71f5987693792031ccf63dd08ecc2ffd127029c285db140cd0b78b795445e63022cf3ff77481aaf57beab793f8b2b3ae8f76bf89efefb1ffc707b3afe125bb6ed5a2a3ac2934ca5732026dd8a64696849f15"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000006531e1c1b74a515a3400"/28], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000800000000001eda54d8af3ba2e5c9864399da8a4a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x87, 0x100000001}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="03000000040500000000007eedb6c2e6a1d18455e8db0cde1ad64dbaf5260000ed46c6a9864d5762dc187299631be7829e40a6efc46ddbf1f47d9c880858e903683d2854ad8a2f0e4df367104db73cc586baba4c7c8a43a91ce9f4352542b094af6437699084609f8f390c4b2f48d7667e87f540"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e30"], 0x0, 0x52}, 0x28) 0s ago: executing program 0 (id=9313): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000180), 0x4a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): my0 removed [ 1172.651026][T27903] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1172.709138][T27903] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1173.138704][T27912] team0: Port device dummy0 added [ 1173.206330][T27912] team0: Port device dummy0 removed [ 1173.317591][T27916] team0: Port device dummy0 added [ 1173.377197][T27916] team0: Port device dummy0 removed [ 1173.446859][T27926] team0: Port device dummy0 added [ 1173.538302][T27926] team0: Port device dummy0 removed [ 1173.561553][T27932] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8065'. [ 1173.693183][T27938] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1173.775068][T27938] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1173.921000][T27944] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1174.164429][T27946] team0: Port device dummy0 added [ 1174.265116][T27946] team0: Port device dummy0 removed [ 1174.424702][T27954] team0: Port device dummy0 added [ 1174.553680][T27954] team0: Port device dummy0 removed [ 1174.597606][T27960] team0: Port device dummy0 added [ 1174.694890][T27960] team0: Port device dummy0 removed [ 1175.070362][T27970] team0: Port device dummy0 added [ 1175.175109][T27970] team0: Port device dummy0 removed [ 1175.364146][T27988] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.8086'. [ 1175.418723][T27983] team0: Port device dummy0 added [ 1175.496584][T27983] team0: Port device dummy0 removed [ 1175.535271][T27993] team0: Port device dummy0 added [ 1175.661228][T27993] team0: Port device dummy0 removed [ 1175.853253][T28000] team0: Port device dummy0 added [ 1175.961977][T28000] team0: Port device dummy0 removed [ 1176.019213][T28008] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1176.077815][T28008] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1176.121151][T28011] sctp: [Deprecated]: syz.1.8094 (pid 28011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.121151][T28011] Use struct sctp_sack_info instead [ 1176.442118][T28020] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1176.471054][T28008] validate_nla: 27 callbacks suppressed [ 1176.471076][T28008] netlink: 'syz.1.8094': attribute type 10 has an invalid length. [ 1176.518127][T28008] team0: Port device dummy0 added [ 1176.534608][T28011] netlink: 'syz.1.8094': attribute type 10 has an invalid length. [ 1176.700715][T28013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1176.768690][T28011] team0: Port device dummy0 removed [ 1176.852863][T28036] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1176.948680][T28011] : (slave dummy0): Enslaving as an active interface with an up link [ 1176.957624][T28026] netlink: 'syz.0.8101': attribute type 10 has an invalid length. [ 1176.965881][T28026] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1176.980959][T28028] netlink: 'syz.3.8109': attribute type 10 has an invalid length. [ 1177.222759][T28028] team0: Port device dummy0 added [ 1177.325386][T28030] netlink: 'syz.3.8109': attribute type 10 has an invalid length. [ 1177.345235][T28030] team0: Port device dummy0 removed [ 1177.363640][T28013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1177.458088][T28035] netlink: 'syz.2.8102': attribute type 10 has an invalid length. [ 1177.478043][T28035] team0: Port device dummy0 added [ 1177.488220][T28038] netlink: 'syz.2.8102': attribute type 10 has an invalid length. [ 1177.533042][T28038] team0: Port device dummy0 removed [ 1177.615382][T28045] netlink: 'syz.3.8103': attribute type 10 has an invalid length. [ 1177.641113][T28046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1177.655952][T28045] team0: Port device dummy0 added [ 1177.700489][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.706935][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.724244][T28046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1177.740215][T28044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1177.750640][T28050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1177.765148][T28048] netlink: 'syz.3.8103': attribute type 10 has an invalid length. [ 1177.824556][T28048] team0: Port device dummy0 removed [ 1177.881836][T28052] netlink: 'syz.1.8105': attribute type 10 has an invalid length. [ 1178.161930][T28056] team0: Port device dummy0 added [ 1178.208760][T28056] team0: Port device dummy0 removed [ 1178.252110][T28064] team0: Port device dummy0 added [ 1178.304476][T28068] team0: Port device dummy0 removed [ 1178.653808][T28073] team0: Port device dummy0 added [ 1178.730199][T28073] team0: Port device dummy0 removed [ 1179.007108][T28095] team0: Port device dummy0 added [ 1179.022548][T28093] team0: Port device dummy0 added [ 1179.067692][T28095] team0: Port device dummy0 removed [ 1179.129358][T28093] team0: Port device dummy0 removed [ 1179.228589][T28100] team0: Port device dummy0 added [ 1179.255445][T28101] team0: Port device dummy0 removed [ 1179.761932][T14013] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.860558][T28115] team0: Port device dummy0 added [ 1179.948406][T28115] team0: Port device dummy0 removed [ 1179.984939][T28124] : (slave dummy0): Releasing backup interface [ 1179.997127][T28124] team0: Port device dummy0 added [ 1180.034631][T28127] team0: Port device dummy0 removed [ 1180.136594][T28134] FAULT_INJECTION: forcing a failure. [ 1180.136594][T28134] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.147548][T28137] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1180.149593][T28134] CPU: 0 PID: 28134 Comm: syz.0.8138 Not tainted syzkaller #0 [ 1180.169285][T28134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1180.179361][T28134] Call Trace: [ 1180.182647][T28134] [ 1180.185580][T28134] dump_stack_lvl+0x18c/0x250 [ 1180.190268][T28134] ? show_regs_print_info+0x20/0x20 [ 1180.195464][T28134] ? load_image+0x400/0x400 [ 1180.199961][T28134] ? __might_sleep+0xe0/0xe0 [ 1180.204546][T28134] ? __lock_acquire+0x7d40/0x7d40 [ 1180.209571][T28134] ? lock_chain_count+0x20/0x20 [ 1180.214414][T28134] should_fail_ex+0x39d/0x4d0 [ 1180.219090][T28134] should_failslab+0x9/0x20 [ 1180.223601][T28134] slab_pre_alloc_hook+0x59/0x310 [ 1180.228618][T28134] ? _raw_spin_unlock+0x40/0x40 [ 1180.233458][T28134] ? __request_module+0x2d1/0x600 [ 1180.238474][T28134] __kmem_cache_alloc_node+0x53/0x250 [ 1180.243849][T28134] ? __request_module+0x2d1/0x600 [ 1180.248866][T28134] kmalloc_trace+0x2a/0xe0 [ 1180.253282][T28134] __request_module+0x2d1/0x600 [ 1180.258133][T28134] ? module_enforce_rwx_sections+0x150/0x150 [ 1180.264113][T28134] ? inet6_create+0x83/0x11d0 [ 1180.268786][T28134] ? rcu_read_unlock+0x8c/0xa0 [ 1180.273545][T28134] inet6_create+0x442/0x11d0 [ 1180.278131][T28134] ? inet6_create+0x83/0x11d0 [ 1180.282811][T28134] __sock_create+0x4a6/0x940 [ 1180.287408][T28134] __sys_socket+0xd7/0x1a0 [ 1180.291825][T28134] __x64_sys_socket+0x7a/0x90 [ 1180.296497][T28134] do_syscall_64+0x55/0xa0 [ 1180.300907][T28134] ? clear_bhb_loop+0x40/0x90 [ 1180.305576][T28134] ? clear_bhb_loop+0x40/0x90 [ 1180.310292][T28134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.316198][T28134] RIP: 0033:0x7fd59759aeb9 [ 1180.320617][T28134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.340222][T28134] RSP: 002b:00007fd598480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1180.348632][T28134] RAX: ffffffffffffffda RBX: 00007fd597815fa0 RCX: 00007fd59759aeb9 [ 1180.356684][T28134] RDX: 0000000000000088 RSI: 0000000000000007 RDI: 000000000000000a [ 1180.364648][T28134] RBP: 00007fd598480090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.372642][T28134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.380608][T28134] R13: 00007fd597816038 R14: 00007fd597815fa0 R15: 00007fff44a0f888 [ 1180.388584][T28134] [ 1180.440339][T28137] __nla_validate_parse: 2 callbacks suppressed [ 1180.440357][T28137] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8139'. [ 1181.165147][T28161] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1181.329050][T28157] team0: Port device dummy0 added [ 1181.349036][T28162] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8150'. [ 1181.390632][T28164] team0: Port device dummy0 removed [ 1181.409188][T28159] team0: Port device dummy0 added [ 1181.497977][T28155] team0: Port device dummy0 added [ 1181.554048][T28167] validate_nla: 27 callbacks suppressed [ 1181.554068][T28167] netlink: 'syz.3.8149': attribute type 10 has an invalid length. [ 1181.591273][T28167] team0: Port device dummy0 removed [ 1181.605448][T28166] netlink: 'syz.1.8147': attribute type 10 has an invalid length. [ 1181.628773][T28166] team0: Port device dummy0 removed [ 1182.193069][T28191] netlink: 'syz.3.8158': attribute type 10 has an invalid length. [ 1182.269509][T28191] team0: Cannot enslave team device to itself [ 1182.292465][T28192] netlink: 'syz.0.8157': attribute type 10 has an invalid length. [ 1182.596354][T28198] netlink: 'syz.0.8160': attribute type 10 has an invalid length. [ 1182.668427][T28198] team0: Port device dummy0 added [ 1182.680490][T28204] netlink: 'syz.0.8160': attribute type 10 has an invalid length. [ 1182.718644][T28204] team0: Port device dummy0 removed [ 1182.725424][T28202] netlink: 'syz.1.8159': attribute type 10 has an invalid length. [ 1182.761669][T28202] team0: Port device dummy0 added [ 1182.792890][T28207] netlink: 'syz.1.8159': attribute type 10 has an invalid length. [ 1182.846385][T28207] team0: Port device dummy0 removed [ 1182.880696][T28209] netlink: 'syz.2.8163': attribute type 10 has an invalid length. [ 1182.925028][T28209] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1183.002115][T28217] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1183.514120][T28226] netlink: 'syz.3.8169': attribute type 10 has an invalid length. [ 1183.648013][T28233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1183.718188][T28233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1183.776659][T28236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1184.024719][T28245] team0: Port device dummy0 added [ 1184.073500][T28244] team0: Port device dummy0 added [ 1184.143848][T28244] team0: Port device dummy0 removed [ 1184.224355][T28235] team0: Port device dummy0 removed [ 1184.391466][T28254] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1184.473306][T28254] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8178'. [ 1184.528068][T28256] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.8179'. [ 1184.569904][T28256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8179'. [ 1184.632697][T28256] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8179'. [ 1185.143499][T28266] team0: Port device dummy0 added [ 1185.189219][T28270] team0: Port device dummy0 added [ 1185.270320][T28266] team0: Port device dummy0 removed [ 1185.332505][T28276] team0: Port device dummy0 removed [ 1185.371498][T28268] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1185.378341][T28268] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.462268][T28268] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1185.569357][T28267] delete_channel: no stack [ 1185.716606][T28283] team0: Port device dummy0 added [ 1185.870070][T28283] team0: Port device dummy0 removed [ 1186.021035][T28299] __nla_validate_parse: 4 callbacks suppressed [ 1186.021054][T28299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1186.068436][T28299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1186.108329][T28304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1186.329658][T28303] team0: Port device dummy0 added [ 1186.417917][T28303] team0: Port device dummy0 removed [ 1186.437773][T28314] FAULT_INJECTION: forcing a failure. [ 1186.437773][T28314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.465849][T28311] team0: Port device dummy0 added [ 1186.499381][T28314] CPU: 1 PID: 28314 Comm: syz.0.8198 Not tainted syzkaller #0 [ 1186.506914][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1186.516997][T28314] Call Trace: [ 1186.520297][T28314] [ 1186.523251][T28314] dump_stack_lvl+0x18c/0x250 [ 1186.527953][T28314] ? show_regs_print_info+0x20/0x20 [ 1186.533148][T28314] ? load_image+0x400/0x400 [ 1186.537721][T28314] ? __might_fault+0xaa/0x120 [ 1186.542432][T28314] ? __lock_acquire+0x7d40/0x7d40 [ 1186.547499][T28314] should_fail_ex+0x39d/0x4d0 [ 1186.552224][T28314] _copy_from_user+0x2f/0xe0 [ 1186.556857][T28314] kstrtouint_from_user+0xde/0x170 [ 1186.562011][T28314] ? kstrtol_from_user+0x190/0x190 [ 1186.567185][T28314] proc_fail_nth_write+0x8f/0x250 [ 1186.572245][T28314] ? proc_fail_nth_read+0x260/0x260 [ 1186.577492][T28314] ? proc_fail_nth_read+0x260/0x260 [ 1186.582729][T28314] vfs_write+0x296/0x990 [ 1186.587008][T28314] ? file_end_write+0x250/0x250 [ 1186.591885][T28314] ? __fget_files+0x28/0x4b0 [ 1186.596503][T28314] ? __fget_files+0x28/0x4b0 [ 1186.601120][T28314] ? __fget_files+0x43d/0x4b0 [ 1186.605830][T28314] ? __fdget_pos+0x2a3/0x330 [ 1186.610444][T28314] ? ksys_write+0x75/0x260 [ 1186.614899][T28314] ksys_write+0x150/0x260 [ 1186.619256][T28314] ? __ia32_sys_read+0x90/0x90 [ 1186.624062][T28314] ? lockdep_hardirqs_on+0x98/0x150 [ 1186.629285][T28314] do_syscall_64+0x55/0xa0 [ 1186.633736][T28314] ? clear_bhb_loop+0x40/0x90 [ 1186.638446][T28314] ? clear_bhb_loop+0x40/0x90 [ 1186.643163][T28314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.649093][T28314] RIP: 0033:0x7fd59755b78e [ 1186.653539][T28314] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1186.673181][T28314] RSP: 002b:00007fd59847ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1186.681635][T28314] RAX: ffffffffffffffda RBX: 00007fd5984806c0 RCX: 00007fd59755b78e [ 1186.689635][T28314] RDX: 0000000000000001 RSI: 00007fd5984800a0 RDI: 0000000000000004 [ 1186.697604][T28314] RBP: 00007fd598480090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.705592][T28314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.713592][T28314] R13: 00007fd597816038 R14: 00007fd597815fa0 R15: 00007fff44a0f888 [ 1186.721593][T28314] [ 1186.794433][T28311] team0: Port device dummy0 removed [ 1187.303141][T28336] validate_nla: 19 callbacks suppressed [ 1187.303199][T28336] netlink: 'syz.2.8207': attribute type 10 has an invalid length. [ 1187.364831][T28336] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1187.527641][T28340] netlink: 'syz.3.8209': attribute type 10 has an invalid length. [ 1187.538726][T28336] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8207'. [ 1187.600595][T28340] team0: Port device dummy0 added [ 1187.625970][T28343] netlink: 'syz.1.8208': attribute type 10 has an invalid length. [ 1187.677540][T28346] netlink: 'syz.3.8209': attribute type 10 has an invalid length. [ 1187.732228][T28346] team0: Port device dummy0 removed [ 1187.762781][T28332] netlink: 'syz.0.8205': attribute type 10 has an invalid length. [ 1187.858497][T28332] team0: Port device dummy0 added [ 1187.917254][T28345] netlink: 'syz.0.8205': attribute type 10 has an invalid length. [ 1188.023230][T28345] team0: Port device dummy0 removed [ 1188.075012][T28356] netlink: 'syz.3.8213': attribute type 10 has an invalid length. [ 1188.135911][T28356] team0: Port device dummy0 added [ 1188.153715][T28358] netlink: 'syz.3.8213': attribute type 10 has an invalid length. [ 1188.250731][T28358] team0: Port device dummy0 removed [ 1188.361171][T28365] FAULT_INJECTION: forcing a failure. [ 1188.361171][T28365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.408279][T28365] CPU: 1 PID: 28365 Comm: syz.2.8215 Not tainted syzkaller #0 [ 1188.415806][T28365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1188.425888][T28365] Call Trace: [ 1188.429195][T28365] [ 1188.432145][T28365] dump_stack_lvl+0x18c/0x250 [ 1188.436859][T28365] ? show_regs_print_info+0x20/0x20 [ 1188.442090][T28365] ? load_image+0x400/0x400 [ 1188.446624][T28365] ? __might_fault+0xaa/0x120 [ 1188.451328][T28365] ? __lock_acquire+0x7d40/0x7d40 [ 1188.456371][T28365] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1188.462979][T28365] should_fail_ex+0x39d/0x4d0 [ 1188.467664][T28365] _copy_from_user+0x2f/0xe0 [ 1188.472252][T28365] __sys_bpf+0x23e/0x890 [ 1188.476488][T28365] ? bpf_link_show_fdinfo+0x390/0x390 [ 1188.481862][T28365] ? lock_chain_count+0x20/0x20 [ 1188.486703][T28365] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1188.492691][T28365] __x64_sys_bpf+0x7c/0x90 [ 1188.497131][T28365] do_syscall_64+0x55/0xa0 [ 1188.501566][T28365] ? clear_bhb_loop+0x40/0x90 [ 1188.506255][T28365] ? clear_bhb_loop+0x40/0x90 [ 1188.510937][T28365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.516835][T28365] RIP: 0033:0x7f963c59aeb9 [ 1188.521245][T28365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.540850][T28365] RSP: 002b:00007f963d4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.549258][T28365] RAX: ffffffffffffffda RBX: 00007f963c815fa0 RCX: 00007f963c59aeb9 [ 1188.557224][T28365] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1188.565188][T28365] RBP: 00007f963d4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.573148][T28365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.581114][T28365] R13: 00007f963c816038 R14: 00007f963c815fa0 R15: 00007ffdee519558 [ 1188.589092][T28365] [ 1188.925888][T28372] netlink: 'syz.0.8219': attribute type 10 has an invalid length. [ 1189.080670][T28381] netlink: 'syz.3.8223': attribute type 3 has an invalid length. [ 1189.103187][T28381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1189.327472][T28384] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1189.456358][T28384] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1189.556653][T28388] FAULT_INJECTION: forcing a failure. [ 1189.556653][T28388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.627000][T28388] CPU: 1 PID: 28388 Comm: syz.3.8226 Not tainted syzkaller #0 [ 1189.634528][T28388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1189.644608][T28388] Call Trace: [ 1189.647916][T28388] [ 1189.650875][T28388] dump_stack_lvl+0x18c/0x250 [ 1189.655593][T28388] ? show_regs_print_info+0x20/0x20 [ 1189.660816][T28388] ? load_image+0x400/0x400 [ 1189.665347][T28388] ? __might_fault+0xaa/0x120 [ 1189.670054][T28388] ? __lock_acquire+0x7d40/0x7d40 [ 1189.675105][T28388] should_fail_ex+0x39d/0x4d0 [ 1189.679810][T28388] _copy_from_user+0x2f/0xe0 [ 1189.684424][T28388] kstrtouint_from_user+0xde/0x170 [ 1189.689556][T28388] ? kstrtol_from_user+0x190/0x190 [ 1189.694712][T28388] proc_fail_nth_write+0x8f/0x250 [ 1189.699768][T28388] ? proc_fail_nth_read+0x260/0x260 [ 1189.704991][T28388] ? proc_fail_nth_read+0x260/0x260 [ 1189.710209][T28388] vfs_write+0x296/0x990 [ 1189.714475][T28388] ? file_end_write+0x250/0x250 [ 1189.719340][T28388] ? __fget_files+0x28/0x4b0 [ 1189.723948][T28388] ? __fget_files+0x28/0x4b0 [ 1189.728573][T28388] ? __fget_files+0x43d/0x4b0 [ 1189.733285][T28388] ? __fdget_pos+0x2a3/0x330 [ 1189.737889][T28388] ? ksys_write+0x75/0x260 [ 1189.742326][T28388] ksys_write+0x150/0x260 [ 1189.746689][T28388] ? __ia32_sys_read+0x90/0x90 [ 1189.751473][T28388] ? lockdep_hardirqs_on+0x98/0x150 [ 1189.756691][T28388] do_syscall_64+0x55/0xa0 [ 1189.761135][T28388] ? clear_bhb_loop+0x40/0x90 [ 1189.765833][T28388] ? clear_bhb_loop+0x40/0x90 [ 1189.770533][T28388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.776447][T28388] RIP: 0033:0x7f9e5655b78e [ 1189.780875][T28388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1189.800504][T28388] RSP: 002b:00007f9e57438fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.808937][T28388] RAX: ffffffffffffffda RBX: 00007f9e574396c0 RCX: 00007f9e5655b78e [ 1189.816929][T28388] RDX: 0000000000000001 RSI: 00007f9e574390a0 RDI: 0000000000000003 [ 1189.824915][T28388] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.832910][T28388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.840894][T28388] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1189.848904][T28388] [ 1189.942056][T28391] team0: Port device dummy0 added [ 1190.003499][T28391] team0: Port device dummy0 removed [ 1190.367690][T28404] team0: Port device dummy0 added [ 1190.403543][T28411] team0: Port device dummy0 removed [ 1190.456968][T28406] team0: Port device dummy0 added [ 1190.584156][T28406] team0: Port device dummy0 removed [ 1190.777768][T28420] team0: Port device dummy0 added [ 1190.825397][T28420] team0: Port device dummy0 removed [ 1190.844996][T28426] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1190.963013][T28426] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8238'. [ 1191.502249][T28442] team0: Port device dummy0 added [ 1191.555628][T28442] team0: Port device dummy0 removed [ 1191.754668][T28449] team0: Port device dummy0 added [ 1191.813073][T28449] team0: Port device dummy0 removed [ 1192.025276][T28466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1192.046681][T28466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1192.066028][T28466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1192.092527][T28470] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1192.122992][T28469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8256'. [ 1192.132998][T28470] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8255'. [ 1192.320712][T28474] FAULT_INJECTION: forcing a failure. [ 1192.320712][T28474] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.338865][T28474] CPU: 1 PID: 28474 Comm: syz.3.8258 Not tainted syzkaller #0 [ 1192.346390][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1192.356479][T28474] Call Trace: [ 1192.359755][T28474] [ 1192.362678][T28474] dump_stack_lvl+0x18c/0x250 [ 1192.367362][T28474] ? show_regs_print_info+0x20/0x20 [ 1192.372572][T28474] ? load_image+0x400/0x400 [ 1192.377083][T28474] ? __might_sleep+0xe0/0xe0 [ 1192.381669][T28474] ? __lock_acquire+0x7d40/0x7d40 [ 1192.386707][T28474] ? mark_lock+0x94/0x320 [ 1192.391047][T28474] should_fail_ex+0x39d/0x4d0 [ 1192.395760][T28474] should_failslab+0x9/0x20 [ 1192.400276][T28474] slab_pre_alloc_hook+0x59/0x310 [ 1192.405303][T28474] kmem_cache_alloc_node+0x60/0x320 [ 1192.410502][T28474] ? __alloc_skb+0x103/0x2c0 [ 1192.415098][T28474] __alloc_skb+0x103/0x2c0 [ 1192.419529][T28474] rtmsg_fib+0xeb/0x4c0 [ 1192.423693][T28474] ? fib_find_node+0x2ad/0x2f0 [ 1192.428449][T28474] fib_table_delete+0xd04/0xff0 [ 1192.433352][T28474] ? nexthop_get_nhc_lookup+0x400/0x400 [ 1192.438892][T28474] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1192.445481][T28474] ? l3mdev_fib_table+0x18/0x160 [ 1192.450426][T28474] ? fib_new_table+0x10a/0x2d0 [ 1192.455191][T28474] fib_magic+0x305/0x3c0 [ 1192.459435][T28474] ? fib_add_ifaddr+0x5e0/0x5e0 [ 1192.464301][T28474] fib_del_ifaddr+0xfe3/0x1480 [ 1192.469069][T28474] ? inetaddr_event+0xf0/0x150 [ 1192.473826][T28474] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 1192.480407][T28474] ? netlink_broadcast_filtered+0x10a4/0x1110 [ 1192.486476][T28474] ? fib_del_ifaddr+0x2fa/0x1480 [ 1192.491427][T28474] fib_inetaddr_event+0xbb/0x1d0 [ 1192.496372][T28474] notifier_call_chain+0x197/0x380 [ 1192.501484][T28474] blocking_notifier_call_chain+0x6a/0x90 [ 1192.507202][T28474] __inet_del_ifa+0x876/0x1020 [ 1192.511971][T28474] devinet_ioctl+0xb40/0x1c40 [ 1192.516651][T28474] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1192.521752][T28474] ? _copy_from_user+0xa5/0xe0 [ 1192.526511][T28474] ? get_user_ifreq+0x12b/0x180 [ 1192.531356][T28474] inet_ioctl+0x42b/0x560 [ 1192.535684][T28474] ? tomoyo_path_number_perm+0x217/0x620 [ 1192.541314][T28474] ? inet_shutdown+0x370/0x370 [ 1192.546068][T28474] ? slab_free_freelist_hook+0x130/0x1a0 [ 1192.551695][T28474] ? tomoyo_path_number_perm+0x500/0x620 [ 1192.557322][T28474] ? __kmem_cache_free+0xba/0x1e0 [ 1192.562350][T28474] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1192.567810][T28474] sock_do_ioctl+0xfc/0x310 [ 1192.572354][T28474] ? sock_show_fdinfo+0xb0/0xb0 [ 1192.577213][T28474] sock_ioctl+0x5ba/0x7e0 [ 1192.581537][T28474] ? sock_poll+0x3e0/0x3e0 [ 1192.585950][T28474] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1192.590880][T28474] ? security_file_ioctl+0x80/0xa0 [ 1192.595991][T28474] ? sock_poll+0x3e0/0x3e0 [ 1192.600399][T28474] __se_sys_ioctl+0xfd/0x170 [ 1192.604987][T28474] do_syscall_64+0x55/0xa0 [ 1192.609401][T28474] ? clear_bhb_loop+0x40/0x90 [ 1192.614071][T28474] ? clear_bhb_loop+0x40/0x90 [ 1192.618746][T28474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.624631][T28474] RIP: 0033:0x7f9e5659aeb9 [ 1192.629041][T28474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.648641][T28474] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.657068][T28474] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1192.665054][T28474] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 1192.673023][T28474] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.680986][T28474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.688947][T28474] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1192.696930][T28474] [ 1193.023430][T28480] validate_nla: 16 callbacks suppressed [ 1193.023525][T28480] netlink: 'syz.1.8260': attribute type 10 has an invalid length. [ 1193.078206][T28480] team0: Port device dummy0 added [ 1193.088429][T28480] netlink: 'syz.1.8260': attribute type 10 has an invalid length. [ 1193.144638][T28480] team0: Port device dummy0 removed [ 1193.453790][T28500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8266'. [ 1193.465713][T28500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8266'. [ 1193.479382][T28500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8266'. [ 1193.498177][T28495] netlink: 'syz.1.8264': attribute type 10 has an invalid length. [ 1193.529251][T28495] team0: Port device dummy0 added [ 1193.555004][T28495] netlink: 'syz.1.8264': attribute type 10 has an invalid length. [ 1193.606537][T28495] team0: Port device dummy0 removed [ 1193.654529][T28505] netlink: 'syz.0.8268': attribute type 3 has an invalid length. [ 1193.672981][T28505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8268'. [ 1193.883267][T28513] netlink: 'syz.2.8271': attribute type 17 has an invalid length. [ 1194.091019][T28515] netlink: 'syz.1.8273': attribute type 10 has an invalid length. [ 1194.143980][T28515] team0: Port device dummy0 added [ 1194.180771][T28521] netlink: 'syz.1.8273': attribute type 10 has an invalid length. [ 1194.237979][T28521] team0: Port device dummy0 removed [ 1194.284852][T28517] netlink: 'syz.0.8274': attribute type 10 has an invalid length. [ 1194.338198][T28517] team0: Port device dummy0 added [ 1194.372565][T28527] netlink: 'syz.0.8274': attribute type 10 has an invalid length. [ 1194.404758][T28527] team0: Port device dummy0 removed [ 1194.448846][T28532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1194.817896][T28543] team0: Port device dummy0 added [ 1194.905651][T28543] team0: Port device dummy0 removed [ 1194.961026][T28538] team0: Port device dummy0 added [ 1195.019335][T28538] team0: Port device dummy0 removed [ 1195.054129][T28547] team0: Port device dummy0 added [ 1195.074314][T28549] team0: Port device dummy0 removed [ 1195.345643][T28552] team0: Port device dummy0 added [ 1195.417112][T28552] team0: Port device dummy0 removed [ 1195.568137][T28565] team0: Port device dummy0 added [ 1195.596539][T28570] team0: Port device dummy0 removed [ 1195.889005][T28579] team0: Port device dummy0 added [ 1195.954331][T28579] team0: Port device dummy0 removed [ 1196.222968][T28584] team0: Port device dummy0 added [ 1196.288775][T28593] team0: Port device dummy0 removed [ 1196.467720][T28595] team0: Port device dummy0 added [ 1196.513277][T28595] team0: Port device dummy0 removed [ 1196.863883][T28607] team0: Port device dummy0 added [ 1196.924365][T28614] team0: Port device dummy0 removed [ 1197.138617][T28625] __nla_validate_parse: 10 callbacks suppressed [ 1197.138635][T28625] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8308'. [ 1197.354341][T28635] FAULT_INJECTION: forcing a failure. [ 1197.354341][T28635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.376002][T28635] CPU: 1 PID: 28635 Comm: syz.1.8311 Not tainted syzkaller #0 [ 1197.383509][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1197.393583][T28635] Call Trace: [ 1197.396878][T28635] [ 1197.399820][T28635] dump_stack_lvl+0x18c/0x250 [ 1197.404534][T28635] ? show_regs_print_info+0x20/0x20 [ 1197.409757][T28635] ? load_image+0x400/0x400 [ 1197.414283][T28635] ? __might_fault+0xaa/0x120 [ 1197.418987][T28635] ? __lock_acquire+0x7d40/0x7d40 [ 1197.424038][T28635] should_fail_ex+0x39d/0x4d0 [ 1197.428740][T28635] _copy_from_user+0x2f/0xe0 [ 1197.433348][T28635] ___sys_sendmsg+0x1c7/0x360 [ 1197.436886][T28628] team0: Port device dummy0 added [ 1197.438031][T28635] ? get_pid_task+0x20/0x1e0 [ 1197.438064][T28635] ? __sys_sendmsg+0x2a0/0x2a0 [ 1197.438104][T28635] ? __lock_acquire+0x7d40/0x7d40 [ 1197.457518][T28635] __se_sys_sendmsg+0x1c2/0x2b0 [ 1197.462408][T28635] ? __x64_sys_sendmsg+0x80/0x80 [ 1197.467394][T28635] ? lockdep_hardirqs_on+0x98/0x150 [ 1197.472636][T28635] do_syscall_64+0x55/0xa0 [ 1197.477072][T28635] ? clear_bhb_loop+0x40/0x90 [ 1197.481788][T28635] ? clear_bhb_loop+0x40/0x90 [ 1197.486488][T28635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.492396][T28635] RIP: 0033:0x7fc467d9aeb9 [ 1197.496823][T28635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.516455][T28635] RSP: 002b:00007fc468c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.524893][T28635] RAX: ffffffffffffffda RBX: 00007fc468015fa0 RCX: 00007fc467d9aeb9 [ 1197.532899][T28635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1197.540886][T28635] RBP: 00007fc468c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.548882][T28635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.556870][T28635] R13: 00007fc468016038 R14: 00007fc468015fa0 R15: 00007fffb0d6d1f8 [ 1197.564881][T28635] [ 1197.579477][T28633] team0: Port device dummy0 removed [ 1197.655052][T28637] team0: Port device dummy0 added [ 1197.727557][T28637] team0: Port device dummy0 removed [ 1197.753991][T28643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1197.885583][T28646] team0: Port device dummy0 added [ 1197.905120][T28649] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1197.965710][T28648] team0: Port device dummy0 removed [ 1198.106147][T28653] validate_nla: 36 callbacks suppressed [ 1198.106164][T28653] netlink: 'syz.0.8325': attribute type 3 has an invalid length. [ 1198.113722][T28655] netlink: 'syz.2.8317': attribute type 2 has an invalid length. [ 1198.128981][T28655] netlink: 'syz.2.8317': attribute type 1 has an invalid length. [ 1198.146143][T28653] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8325'. [ 1198.171397][T28655] netlink: 'syz.2.8317': attribute type 2 has an invalid length. [ 1198.196674][T28655] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.8317'. [ 1198.438882][T28665] netlink: 'syz.0.8321': attribute type 10 has an invalid length. [ 1198.482960][T28665] team0: Port device dummy0 added [ 1198.493085][T28666] netlink: 'syz.3.8323': attribute type 3 has an invalid length. [ 1198.505009][T28666] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1198.517848][T28669] netlink: 'syz.0.8321': attribute type 10 has an invalid length. [ 1198.600207][T28669] team0: Port device dummy0 removed [ 1198.705899][T28671] netlink: 'syz.1.8324': attribute type 10 has an invalid length. [ 1198.747213][T28671] team0: Port device dummy0 added [ 1198.755103][T28676] netlink: 'syz.3.8326': attribute type 10 has an invalid length. [ 1198.816500][T28681] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1198.837915][T28676] team0: Port device dummy0 added [ 1198.890142][T28671] netlink: 'syz.1.8324': attribute type 10 has an invalid length. [ 1199.004509][T28671] team0: Port device dummy0 removed [ 1199.034393][T28680] team0: Port device dummy0 removed [ 1199.214032][T28690] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8330'. [ 1199.246276][T28692] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1199.433800][T28700] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.8335'. [ 1199.487140][T28697] team0: Port device dummy0 added [ 1199.515768][T28704] team0: Port device dummy0 removed [ 1199.787211][T28714] team0: Port device dummy0 added [ 1199.869553][T28712] team0: Port device dummy0 removed [ 1199.918366][T28716] team0: Port device dummy0 added [ 1199.958368][T28723] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1200.050185][T28716] team0: Port device dummy0 removed [ 1200.276369][T28736] team0: Port device dummy0 added [ 1200.360892][T28730] team0: Port device dummy0 removed [ 1200.879001][T28750] team0: Port device dummy0 added [ 1200.935351][T28760] team0: Port device dummy0 removed [ 1200.983857][T28765] FAULT_INJECTION: forcing a failure. [ 1200.983857][T28765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.998750][T28765] CPU: 0 PID: 28765 Comm: syz.1.8355 Not tainted syzkaller #0 [ 1201.006246][T28765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1201.016302][T28765] Call Trace: [ 1201.019578][T28765] [ 1201.022506][T28765] dump_stack_lvl+0x18c/0x250 [ 1201.027194][T28765] ? show_regs_print_info+0x20/0x20 [ 1201.032389][T28765] ? load_image+0x400/0x400 [ 1201.036885][T28765] ? __might_fault+0xaa/0x120 [ 1201.041556][T28765] ? __lock_acquire+0x7d40/0x7d40 [ 1201.046580][T28765] should_fail_ex+0x39d/0x4d0 [ 1201.051260][T28765] _copy_from_user+0x2f/0xe0 [ 1201.055846][T28765] sctp_setsockopt+0x19e/0x11e0 [ 1201.060699][T28765] ? sock_common_recvmsg+0x190/0x190 [ 1201.065982][T28765] do_sock_setsockopt+0x175/0x1a0 [ 1201.071092][T28765] ? __fdget+0x180/0x210 [ 1201.075333][T28765] __x64_sys_setsockopt+0x182/0x200 [ 1201.080567][T28765] do_syscall_64+0x55/0xa0 [ 1201.084982][T28765] ? clear_bhb_loop+0x40/0x90 [ 1201.089654][T28765] ? clear_bhb_loop+0x40/0x90 [ 1201.094331][T28765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.100218][T28765] RIP: 0033:0x7fc467d9aeb9 [ 1201.104644][T28765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.124273][T28765] RSP: 002b:00007fc468c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1201.132712][T28765] RAX: ffffffffffffffda RBX: 00007fc468015fa0 RCX: 00007fc467d9aeb9 [ 1201.140691][T28765] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006 [ 1201.148658][T28765] RBP: 00007fc468c56090 R08: 0000000000000010 R09: 0000000000000000 [ 1201.156622][T28765] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.164590][T28765] R13: 00007fc468016038 R14: 00007fc468015fa0 R15: 00007fffb0d6d1f8 [ 1201.172572][T28765] [ 1201.401118][T28769] team0: Port device dummy0 added [ 1201.486022][T28778] team0: Port device dummy0 removed [ 1201.573824][T28784] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1202.761624][T28814] __nla_validate_parse: 12 callbacks suppressed [ 1202.761640][T28814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1202.801441][T28814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1202.825621][T28811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1202.845548][T28814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1203.153598][T28818] validate_nla: 25 callbacks suppressed [ 1203.153618][T28818] netlink: 'syz.3.8375': attribute type 10 has an invalid length. [ 1203.184916][T28818] team0: Port device dummy0 added [ 1203.192522][T28828] netlink: 'syz.0.8377': attribute type 10 has an invalid length. [ 1203.230764][T28828] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1203.247770][T28818] netlink: 'syz.3.8375': attribute type 10 has an invalid length. [ 1203.294396][T28818] team0: Port device dummy0 removed [ 1203.328483][T28828] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1203.637024][T28839] netlink: 'syz.0.8381': attribute type 10 has an invalid length. [ 1203.676708][T28839] team0: Port device dummy0 added [ 1203.687508][T28839] netlink: 'syz.0.8381': attribute type 10 has an invalid length. [ 1203.763243][T28839] team0: Port device dummy0 removed [ 1203.774880][T28837] netlink: 'syz.2.8380': attribute type 10 has an invalid length. [ 1203.808335][T28837] team0: Port device dummy0 added [ 1203.817679][T28841] netlink: 'syz.2.8380': attribute type 10 has an invalid length. [ 1203.891837][T28841] team0: Port device dummy0 removed [ 1203.980519][T28850] netlink: 'syz.0.8385': attribute type 10 has an invalid length. [ 1204.035815][T28850] team0: Port device dummy0 added [ 1204.074916][T28851] netlink: 'syz.0.8385': attribute type 10 has an invalid length. [ 1204.158328][T28851] team0: Port device dummy0 removed [ 1204.178308][T28853] netlink: 'syz.2.8387': attribute type 10 has an invalid length. [ 1204.189883][T28857] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8388'. [ 1204.324131][T28862] FAULT_INJECTION: forcing a failure. [ 1204.324131][T28862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.341818][T28862] CPU: 0 PID: 28862 Comm: syz.2.8390 Not tainted syzkaller #0 [ 1204.349325][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.359396][T28862] Call Trace: [ 1204.362693][T28862] [ 1204.365641][T28862] dump_stack_lvl+0x18c/0x250 [ 1204.370354][T28862] ? show_regs_print_info+0x20/0x20 [ 1204.375579][T28862] ? load_image+0x400/0x400 [ 1204.380113][T28862] ? __lock_acquire+0x7d40/0x7d40 [ 1204.385162][T28862] ? snprintf+0xe9/0x140 [ 1204.389430][T28862] should_fail_ex+0x39d/0x4d0 [ 1204.394137][T28862] _copy_to_user+0x2f/0xa0 [ 1204.398576][T28862] simple_read_from_buffer+0xe7/0x150 [ 1204.403981][T28862] proc_fail_nth_read+0x1e8/0x260 [ 1204.409031][T28862] ? proc_fault_inject_write+0x360/0x360 [ 1204.414682][T28862] ? fsnotify_perm+0x271/0x5e0 [ 1204.419453][T28862] ? proc_fault_inject_write+0x360/0x360 [ 1204.425094][T28862] vfs_read+0x28b/0x970 [ 1204.429258][T28862] ? kernel_read+0x1e0/0x1e0 [ 1204.433846][T28862] ? __fget_files+0x28/0x4b0 [ 1204.438426][T28862] ? __fget_files+0x28/0x4b0 [ 1204.443010][T28862] ? __fget_files+0x43d/0x4b0 [ 1204.447679][T28862] ? __fdget_pos+0x2a3/0x330 [ 1204.452277][T28862] ? ksys_read+0x75/0x260 [ 1204.456620][T28862] ksys_read+0x150/0x260 [ 1204.460866][T28862] ? vfs_write+0x990/0x990 [ 1204.465303][T28862] ? lockdep_hardirqs_on+0x98/0x150 [ 1204.470510][T28862] do_syscall_64+0x55/0xa0 [ 1204.474938][T28862] ? clear_bhb_loop+0x40/0x90 [ 1204.479609][T28862] ? clear_bhb_loop+0x40/0x90 [ 1204.484289][T28862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.490183][T28862] RIP: 0033:0x7f963c55b78e [ 1204.494629][T28862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1204.514250][T28862] RSP: 002b:00007f963d4fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1204.522663][T28862] RAX: ffffffffffffffda RBX: 00007f963d4fc6c0 RCX: 00007f963c55b78e [ 1204.530636][T28862] RDX: 000000000000000f RSI: 00007f963d4fc0a0 RDI: 0000000000000005 [ 1204.538611][T28862] RBP: 00007f963d4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.546573][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.554579][T28862] R13: 00007f963c816038 R14: 00007f963c815fa0 R15: 00007ffdee519558 [ 1204.562557][T28862] [ 1204.768929][T28874] team0: Port device dummy0 added [ 1204.823298][T28878] team0: Port device dummy0 removed [ 1205.171804][T28884] team0: Port device dummy0 added [ 1205.310192][T28891] team0: Port device dummy0 removed [ 1205.474209][T28898] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1205.772808][T28911] team0: Port device dummy0 added [ 1205.905632][T28911] team0: Port device dummy0 removed [ 1206.094356][T28924] FAULT_INJECTION: forcing a failure. [ 1206.094356][T28924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.108022][T28924] CPU: 0 PID: 28924 Comm: syz.2.8411 Not tainted syzkaller #0 [ 1206.115513][T28924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.125568][T28924] Call Trace: [ 1206.128838][T28924] [ 1206.131772][T28924] dump_stack_lvl+0x18c/0x250 [ 1206.136466][T28924] ? show_regs_print_info+0x20/0x20 [ 1206.141675][T28924] ? load_image+0x400/0x400 [ 1206.146187][T28924] ? __might_fault+0xaa/0x120 [ 1206.150866][T28924] ? __lock_acquire+0x7d40/0x7d40 [ 1206.155900][T28924] should_fail_ex+0x39d/0x4d0 [ 1206.160584][T28924] _copy_from_iter+0x1d9/0x12e0 [ 1206.165446][T28924] ? __might_fault+0xaa/0x120 [ 1206.170119][T28924] ? _copy_from_iter+0x24e/0x12e0 [ 1206.175155][T28924] ? __virt_addr_valid+0x18c/0x540 [ 1206.180268][T28924] ? __lock_acquire+0x7d40/0x7d40 [ 1206.185299][T28924] ? copyout_mc+0x70/0x70 [ 1206.189627][T28924] ? copyout_mc+0x70/0x70 [ 1206.193949][T28924] ? __virt_addr_valid+0x18c/0x540 [ 1206.199062][T28924] ? page_copy_sane+0x16a/0x270 [ 1206.203918][T28924] copy_page_from_iter+0x7b/0x100 [ 1206.208950][T28924] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1206.214759][T28924] tun_get_user+0x15db/0x3ca0 [ 1206.219436][T28924] ? aa_file_perm+0x11b/0xee0 [ 1206.224110][T28924] ? rcu_read_unlock+0xa0/0xa0 [ 1206.228875][T28924] ? tun_get+0x1c/0x2e0 [ 1206.233021][T28924] ? __lock_acquire+0x7d40/0x7d40 [ 1206.238042][T28924] ? tun_get+0x1c/0x2e0 [ 1206.242192][T28924] tun_chr_write_iter+0x119/0x200 [ 1206.247209][T28924] vfs_write+0x46c/0x990 [ 1206.251480][T28924] ? file_end_write+0x250/0x250 [ 1206.256351][T28924] ? __fget_files+0x43d/0x4b0 [ 1206.261035][T28924] ? __fdget_pos+0x1d8/0x330 [ 1206.265625][T28924] ? ksys_write+0x75/0x260 [ 1206.270049][T28924] ksys_write+0x150/0x260 [ 1206.274418][T28924] ? __ia32_sys_read+0x90/0x90 [ 1206.279185][T28924] ? lockdep_hardirqs_on+0x98/0x150 [ 1206.284378][T28924] do_syscall_64+0x55/0xa0 [ 1206.288789][T28924] ? clear_bhb_loop+0x40/0x90 [ 1206.293454][T28924] ? clear_bhb_loop+0x40/0x90 [ 1206.298123][T28924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.304007][T28924] RIP: 0033:0x7f963c59aeb9 [ 1206.308416][T28924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.328022][T28924] RSP: 002b:00007f963d4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1206.336435][T28924] RAX: ffffffffffffffda RBX: 00007f963c815fa0 RCX: 00007f963c59aeb9 [ 1206.344407][T28924] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1206.352377][T28924] RBP: 00007f963d4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.360352][T28924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.368355][T28924] R13: 00007f963c816038 R14: 00007f963c815fa0 R15: 00007ffdee519558 [ 1206.376341][T28924] [ 1206.538225][T28922] team0: Port device dummy0 added [ 1206.588480][T28922] team0: Port device dummy0 removed [ 1206.722044][T28933] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.8414'. [ 1206.871064][T28938] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8416'. [ 1207.022042][T28938] syzkaller0: entered promiscuous mode [ 1207.040159][T28938] syzkaller0: entered allmulticast mode [ 1207.453931][T28954] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8421'. [ 1207.877296][T28964] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8423'. [ 1209.472546][T28959] validate_nla: 13 callbacks suppressed [ 1209.472562][T28959] netlink: 'syz.2.8423': attribute type 10 has an invalid length. [ 1209.487191][T28959] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1209.525428][T28968] netlink: 'syz.0.8424': attribute type 10 has an invalid length. [ 1209.546117][T28968] team0: Port device dummy0 added [ 1209.553804][T28967] netlink: 'syz.0.8424': attribute type 10 has an invalid length. [ 1209.574505][T28967] team0: Port device dummy0 removed [ 1209.677416][T28980] FAULT_INJECTION: forcing a failure. [ 1209.677416][T28980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.713896][T28980] CPU: 0 PID: 28980 Comm: syz.3.8427 Not tainted syzkaller #0 [ 1209.721431][T28980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1209.728026][T28982] netlink: 'syz.0.8435': attribute type 10 has an invalid length. [ 1209.731486][T28980] Call Trace: [ 1209.731500][T28980] [ 1209.731508][T28980] dump_stack_lvl+0x18c/0x250 [ 1209.731540][T28980] ? show_regs_print_info+0x20/0x20 [ 1209.731561][T28980] ? load_image+0x400/0x400 [ 1209.731583][T28980] ? __might_fault+0xaa/0x120 [ 1209.731602][T28980] ? __lock_acquire+0x7d40/0x7d40 [ 1209.731626][T28980] should_fail_ex+0x39d/0x4d0 [ 1209.731652][T28980] _copy_from_user+0x2f/0xe0 [ 1209.731674][T28980] generic_map_update_batch+0x59a/0x810 [ 1209.731702][T28980] ? rcu_read_unlock+0xa0/0xa0 [ 1209.731723][T28980] ? __fdget+0x180/0x210 [ 1209.731746][T28980] ? rcu_read_unlock+0xa0/0xa0 [ 1209.731760][T28980] bpf_map_do_batch+0x3d7/0x610 [ 1209.731785][T28980] __sys_bpf+0x381/0x890 [ 1209.731804][T28980] ? bpf_link_show_fdinfo+0x390/0x390 [ 1209.764279][T28982] team0: Port device dummy0 added [ 1209.764806][T28980] ? lock_chain_count+0x20/0x20 [ 1209.764843][T28980] __x64_sys_bpf+0x7c/0x90 [ 1209.827107][T28980] do_syscall_64+0x55/0xa0 [ 1209.831529][T28980] ? clear_bhb_loop+0x40/0x90 [ 1209.836288][T28980] ? clear_bhb_loop+0x40/0x90 [ 1209.840964][T28980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.846862][T28980] RIP: 0033:0x7f9e5659aeb9 [ 1209.851271][T28980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.870869][T28980] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1209.879280][T28980] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1209.887254][T28980] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1209.895218][T28980] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.903181][T28980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.911140][T28980] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1209.919117][T28980] [ 1209.925067][T28983] netlink: 'syz.0.8435': attribute type 10 has an invalid length. [ 1210.041023][T28983] team0: Port device dummy0 removed [ 1210.192845][T28992] netlink: 'syz.3.8430': attribute type 10 has an invalid length. [ 1210.255523][T28995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1210.265813][T28995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1210.275838][T28994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1210.289919][T28995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1210.822867][T29010] netlink: 'syz.2.8437': attribute type 10 has an invalid length. [ 1210.838316][T29010] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1210.854060][T29006] netlink: 'syz.1.8436': attribute type 10 has an invalid length. [ 1210.917985][T29006] team0: Port device dummy0 added [ 1210.928521][T29011] netlink: 'syz.1.8436': attribute type 10 has an invalid length. [ 1210.981732][T29011] team0: Port device dummy0 removed [ 1211.018410][T29010] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1211.157947][T29015] netlink: 'syz.3.8438': attribute type 10 has an invalid length. [ 1211.193034][T29015] team0: Port device dummy0 added [ 1211.227738][T29018] team0: Port device dummy0 removed [ 1211.399437][T29021] team0: Port device dummy0 added [ 1212.801130][T29021] team0: Port device dummy0 removed [ 1212.852755][T29030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1212.862138][T29030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1212.883537][T29030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1213.323636][T29048] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1213.396205][T29048] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8451'. [ 1213.577049][T29056] team0: Port device dummy0 added [ 1213.611406][T29058] team0: Port device dummy0 removed [ 1213.727246][T29061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8457'. [ 1213.741392][T29061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8457'. [ 1213.759088][T29061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8457'. [ 1213.818911][T29065] FAULT_INJECTION: forcing a failure. [ 1213.818911][T29065] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.850034][T29065] CPU: 0 PID: 29065 Comm: syz.1.8459 Not tainted syzkaller #0 [ 1213.857566][T29065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.867643][T29065] Call Trace: [ 1213.870944][T29065] [ 1213.873893][T29065] dump_stack_lvl+0x18c/0x250 [ 1213.878608][T29065] ? show_regs_print_info+0x20/0x20 [ 1213.883839][T29065] ? load_image+0x400/0x400 [ 1213.888370][T29065] ? __might_sleep+0xe0/0xe0 [ 1213.892984][T29065] ? __lock_acquire+0x7d40/0x7d40 [ 1213.898040][T29065] should_fail_ex+0x39d/0x4d0 [ 1213.902756][T29065] should_failslab+0x9/0x20 [ 1213.907285][T29065] slab_pre_alloc_hook+0x59/0x310 [ 1213.912337][T29065] ? tomoyo_encode+0x28b/0x540 [ 1213.917123][T29065] ? tomoyo_encode+0x28b/0x540 [ 1213.921906][T29065] __kmem_cache_alloc_node+0x53/0x250 [ 1213.927310][T29065] ? tomoyo_encode+0x28b/0x540 [ 1213.932093][T29065] __kmalloc+0xa4/0x230 [ 1213.936277][T29065] tomoyo_encode+0x28b/0x540 [ 1213.940892][T29065] tomoyo_realpath_from_path+0x592/0x5d0 [ 1213.946562][T29065] tomoyo_path_number_perm+0x248/0x620 [ 1213.952049][T29065] ? tomoyo_path_number_perm+0x217/0x620 [ 1213.957710][T29065] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1213.963202][T29065] ? trace_call_bpf+0xc3/0x6c0 [ 1213.967992][T29065] ? trace_call_bpf+0xc3/0x6c0 [ 1213.972783][T29065] ? trace_call_bpf+0x5e9/0x6c0 [ 1213.977692][T29065] ? __fget_files+0x28/0x4b0 [ 1213.982304][T29065] ? __fget_files+0x28/0x4b0 [ 1213.986927][T29065] security_file_ioctl+0x70/0xa0 [ 1213.991892][T29065] __se_sys_ioctl+0x48/0x170 [ 1213.996532][T29065] do_syscall_64+0x55/0xa0 [ 1214.000971][T29065] ? clear_bhb_loop+0x40/0x90 [ 1214.005667][T29065] ? clear_bhb_loop+0x40/0x90 [ 1214.010409][T29065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1214.016317][T29065] RIP: 0033:0x7fc467d9aeb9 [ 1214.020745][T29065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.040459][T29065] RSP: 002b:00007fc468c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.048920][T29065] RAX: ffffffffffffffda RBX: 00007fc468015fa0 RCX: 00007fc467d9aeb9 [ 1214.057086][T29065] RDX: 0000200000000040 RSI: 0000000000008915 RDI: 0000000000000003 [ 1214.065069][T29065] RBP: 00007fc468c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.073033][T29065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.080997][T29065] R13: 00007fc468016038 R14: 00007fc468015fa0 R15: 00007fffb0d6d1f8 [ 1214.088968][T29065] [ 1214.096003][T29065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1214.219073][T29077] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1214.290260][T29077] syzkaller0: entered promiscuous mode [ 1214.297726][T29077] syzkaller0: entered allmulticast mode [ 1214.394568][T29086] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1214.536102][T29088] validate_nla: 10 callbacks suppressed [ 1214.536140][T29088] netlink: 'syz.0.8467': attribute type 10 has an invalid length. [ 1214.573654][T29086] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1214.638099][T29088] team0: Port device dummy0 added [ 1214.653691][T29092] netlink: 'syz.0.8467': attribute type 10 has an invalid length. [ 1214.676512][T29092] team0: Port device dummy0 removed [ 1216.594457][T29090] netlink: 'syz.3.8468': attribute type 10 has an invalid length. [ 1217.001995][T29111] netlink: 'syz.1.8477': attribute type 10 has an invalid length. [ 1217.242940][T29121] netlink: 'syz.2.8480': attribute type 10 has an invalid length. [ 1217.324998][T29121] team0: Port device dummy0 added [ 1217.334585][T29125] netlink: 'syz.2.8480': attribute type 10 has an invalid length. [ 1217.354332][T29125] team0: Port device dummy0 removed [ 1217.360595][T29124] netlink: 'syz.1.8481': attribute type 10 has an invalid length. [ 1217.412603][T29124] team0: Port device dummy0 added [ 1217.421379][T29128] netlink: 'syz.3.8482': attribute type 10 has an invalid length. [ 1217.469747][T29130] netlink: 'syz.1.8481': attribute type 10 has an invalid length. [ 1217.498418][T29130] team0: Port device dummy0 removed [ 1217.603693][T29134] FAULT_INJECTION: forcing a failure. [ 1217.603693][T29134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.618040][T29134] CPU: 1 PID: 29134 Comm: syz.3.8484 Not tainted syzkaller #0 [ 1217.625556][T29134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1217.635629][T29134] Call Trace: [ 1217.638918][T29134] [ 1217.641856][T29134] dump_stack_lvl+0x18c/0x250 [ 1217.646550][T29134] ? show_regs_print_info+0x20/0x20 [ 1217.651782][T29134] ? load_image+0x400/0x400 [ 1217.656291][T29134] ? __might_fault+0xaa/0x120 [ 1217.660970][T29134] ? __lock_acquire+0x7d40/0x7d40 [ 1217.666000][T29134] should_fail_ex+0x39d/0x4d0 [ 1217.670684][T29134] _copy_from_user+0x2f/0xe0 [ 1217.675279][T29134] ___sys_sendmsg+0x1c7/0x360 [ 1217.679998][T29134] ? __sys_sendmsg+0x2a0/0x2a0 [ 1217.684799][T29134] ? __lock_acquire+0x7d40/0x7d40 [ 1217.689858][T29134] __se_sys_sendmsg+0x1c2/0x2b0 [ 1217.694720][T29134] ? __x64_sys_sendmsg+0x80/0x80 [ 1217.699695][T29134] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.704910][T29134] do_syscall_64+0x55/0xa0 [ 1217.709331][T29134] ? clear_bhb_loop+0x40/0x90 [ 1217.714009][T29134] ? clear_bhb_loop+0x40/0x90 [ 1217.718689][T29134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.724586][T29134] RIP: 0033:0x7f9e5659aeb9 [ 1217.729010][T29134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.748639][T29134] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.757154][T29134] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1217.765131][T29134] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 1217.773105][T29134] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.781082][T29134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.789058][T29134] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1217.797061][T29134] [ 1218.319404][T29148] netlink: 'syz.1.8490': attribute type 10 has an invalid length. [ 1218.389151][T29152] team0: Port device dummy0 added [ 1218.431515][T29160] team0: Port device dummy0 removed [ 1218.628022][T29171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1218.637554][T29171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1218.651291][T29166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1218.661037][T29171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1219.106208][T29184] team0: Port device dummy0 added [ 1219.159897][T29189] team0: Port device dummy0 removed [ 1219.455100][T29198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8508'. [ 1219.455206][T29201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1219.479630][T29198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8508'. [ 1219.492787][T29201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1219.519513][T29194] team0: Port device dummy0 added [ 1219.528586][T29198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8508'. [ 1219.538477][T29196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8507'. [ 1219.549487][T29194] validate_nla: 8 callbacks suppressed [ 1219.549503][T29194] netlink: 'syz.2.8506': attribute type 10 has an invalid length. [ 1219.647373][T29194] team0: Port device dummy0 removed [ 1219.861980][T29216] netlink: 'syz.2.8513': attribute type 10 has an invalid length. [ 1219.893352][T29216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1219.935751][T29210] netlink: 'syz.0.8511': attribute type 10 has an invalid length. [ 1219.963147][T29210] team0: Port device dummy0 added [ 1219.974273][T29215] netlink: 'syz.3.8514': attribute type 10 has an invalid length. [ 1220.001692][T29217] netlink: 'syz.0.8511': attribute type 10 has an invalid length. [ 1220.034261][T29217] team0: Port device dummy0 removed [ 1220.384093][T29232] netlink: 'syz.3.8518': attribute type 10 has an invalid length. [ 1220.467130][T29232] team0: Port device dummy0 added [ 1220.486341][T29235] netlink: 'syz.3.8518': attribute type 10 has an invalid length. [ 1220.522419][T29235] team0: Port device dummy0 removed [ 1220.873070][T29246] netlink: 'syz.2.8523': attribute type 10 has an invalid length. [ 1221.007205][T29257] netlink: 'syz.3.8528': attribute type 10 has an invalid length. [ 1221.035379][T29257] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1221.249122][T29267] netlink: 'syz.2.8532': attribute type 10 has an invalid length. [ 1221.345439][T29267] team0: Port device dummy0 added [ 1221.396891][T29268] team0: Port device dummy0 removed [ 1221.428206][T29270] team0: Port device dummy0 added [ 1221.490174][T29276] team0: Port device dummy0 removed [ 1221.884067][T29297] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1221.965288][T29299] team0: Port device dummy0 added [ 1222.047706][T29299] team0: Port device dummy0 removed [ 1222.602005][T29332] team0: Port device dummy0 added [ 1222.645568][T29339] team0: Port device dummy0 removed [ 1222.654707][T29338] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1223.502337][T29366] FAULT_INJECTION: forcing a failure. [ 1223.502337][T29366] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.525816][T29366] CPU: 0 PID: 29366 Comm: syz.3.8570 Not tainted syzkaller #0 [ 1223.533349][T29366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1223.543432][T29366] Call Trace: [ 1223.546730][T29366] [ 1223.549669][T29366] dump_stack_lvl+0x18c/0x250 [ 1223.554377][T29366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.560559][T29366] ? show_regs_print_info+0x20/0x20 [ 1223.565791][T29366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.572022][T29366] should_fail_ex+0x39d/0x4d0 [ 1223.576733][T29366] should_failslab+0x9/0x20 [ 1223.581258][T29366] slab_pre_alloc_hook+0x59/0x310 [ 1223.586315][T29366] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1223.591452][T29366] ? sock_alloc_inode+0x28/0xc0 [ 1223.596334][T29366] sock_alloc_inode+0x28/0xc0 [ 1223.601039][T29366] ? sockfs_init_fs_context+0xb0/0xb0 [ 1223.606438][T29366] new_inode_pseudo+0x63/0x1d0 [ 1223.611228][T29366] __sock_create+0x12d/0x940 [ 1223.615850][T29366] ? mark_lock+0x94/0x320 [ 1223.620202][T29366] mptcp_subflow_create_socket+0x10b/0xac0 [ 1223.626038][T29366] ? __mptcp_subflow_connect+0x1450/0x1450 [ 1223.632048][T29366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.638227][T29366] ? lockdep_hardirqs_on+0x98/0x150 [ 1223.643452][T29366] __mptcp_nmpc_sk+0x157/0x740 [ 1223.648249][T29366] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1223.655045][T29366] ? __local_bh_enable_ip+0x142/0x1c0 [ 1223.660453][T29366] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 1223.665777][T29366] mptcp_sendmsg+0x14b2/0x16d0 [ 1223.670576][T29366] ? lock_chain_count+0x20/0x20 [ 1223.675464][T29366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.681641][T29366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.687816][T29366] ? inet_send_prepare+0x21/0x260 [ 1223.692843][T29366] ? mptcp_shutdown+0x80/0x80 [ 1223.697549][T29366] ? inet6_sendmsg+0x5f/0xd0 [ 1223.702166][T29366] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1223.707370][T29366] ____sys_sendmsg+0x5ba/0x960 [ 1223.712154][T29366] ? __import_iovec+0x64b/0x850 [ 1223.717000][T29366] ? __sys_sendmsg_sock+0x30/0x30 [ 1223.722030][T29366] ? import_iovec+0x73/0xa0 [ 1223.726530][T29366] ___sys_sendmsg+0x2a6/0x360 [ 1223.731207][T29366] ? __sys_sendmsg+0x2a0/0x2a0 [ 1223.735974][T29366] ? trace_call_bpf+0xc3/0x6c0 [ 1223.740737][T29366] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1223.746985][T29366] __se_sys_sendmsg+0x1c2/0x2b0 [ 1223.751844][T29366] ? __x64_sys_sendmsg+0x80/0x80 [ 1223.756801][T29366] ? lockdep_hardirqs_on+0x98/0x150 [ 1223.762002][T29366] do_syscall_64+0x55/0xa0 [ 1223.766434][T29366] ? clear_bhb_loop+0x40/0x90 [ 1223.771120][T29366] ? clear_bhb_loop+0x40/0x90 [ 1223.775787][T29366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1223.781668][T29366] RIP: 0033:0x7f9e5659aeb9 [ 1223.786073][T29366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.805690][T29366] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.814127][T29366] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1223.822179][T29366] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 1223.830143][T29366] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.838202][T29366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.846191][T29366] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1223.854181][T29366] [ 1223.884253][T29366] socket: no more sockets [ 1224.264210][T29387] __nla_validate_parse: 35 callbacks suppressed [ 1224.264228][T29387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1224.373976][T29387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1224.387757][T29384] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1224.399016][T29388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1224.749131][T29401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1224.942274][T29401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1224.966560][T29398] validate_nla: 10 callbacks suppressed [ 1224.966579][T29398] netlink: 'syz.0.8582': attribute type 10 has an invalid length. [ 1225.005884][T29398] team0: Port device dummy0 added [ 1225.052159][T29404] netlink: 'syz.0.8582': attribute type 10 has an invalid length. [ 1225.084774][T29404] team0: Port device dummy0 removed [ 1225.098320][T29400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1225.108498][T29402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1225.268302][T29414] netlink: 'syz.1.8587': attribute type 10 has an invalid length. [ 1225.398128][T29414] team0: Port device dummy0 added [ 1225.466762][T29422] netlink: 'syz.1.8587': attribute type 10 has an invalid length. [ 1225.491192][T29422] team0: Port device dummy0 removed [ 1225.500316][T29417] netlink: 'syz.3.8589': attribute type 10 has an invalid length. [ 1229.037760][T29449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1229.064882][T29449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1229.252643][T29453] netlink: 'syz.2.8600': attribute type 10 has an invalid length. [ 1229.306949][T29456] netlink: 'syz.3.8601': attribute type 10 has an invalid length. [ 1229.373301][T29456] team0: Port device dummy0 added [ 1229.398702][T29460] netlink: 'syz.0.8602': attribute type 10 has an invalid length. [ 1229.418209][T29448] netlink: 'syz.1.8599': attribute type 10 has an invalid length. [ 1229.567704][T29448] team0: Port device dummy0 added [ 1229.615094][T29457] netlink: 'syz.3.8601': attribute type 10 has an invalid length. [ 1229.627672][T29457] team0: Port device dummy0 removed [ 1229.674386][T29462] team0: Port device dummy0 removed [ 1229.813264][T29471] team0: Port device dummy0 added [ 1229.897163][T29471] team0: Port device dummy0 removed [ 1230.208239][T29485] validate_nla: 3 callbacks suppressed [ 1230.208257][T29485] netlink: 'syz.0.8608': attribute type 10 has an invalid length. [ 1230.231713][T29485] team0: Device hsr_slave_0 failed to register rx_handler [ 1230.377663][T29492] netlink: 'syz.2.8611': attribute type 10 has an invalid length. [ 1230.392803][T29493] __nla_validate_parse: 2 callbacks suppressed [ 1230.392821][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8610'. [ 1230.412554][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8610'. [ 1230.423699][T29490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8610'. [ 1230.433187][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8610'. [ 1230.641544][T29497] netlink: 'syz.2.8613': attribute type 10 has an invalid length. [ 1230.762142][T29506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1230.780015][T29506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1230.799056][T29503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1230.812246][T29506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1230.875883][T29505] netlink: 'syz.2.8616': attribute type 10 has an invalid length. [ 1230.935041][T29505] team0: Port device dummy0 added [ 1230.948870][T29507] netlink: 'syz.2.8616': attribute type 10 has an invalid length. [ 1230.970254][T29507] team0: Port device dummy0 removed [ 1231.306895][T29519] netlink: 'syz.1.8621': attribute type 10 has an invalid length. [ 1231.354935][T29519] team0: Port device dummy0 added [ 1231.383993][T29525] netlink: 'syz.1.8621': attribute type 10 has an invalid length. [ 1231.399042][T29525] team0: Port device dummy0 removed [ 1231.414249][T29527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1231.431404][T29521] netlink: 'syz.3.8622': attribute type 10 has an invalid length. [ 1231.441023][T29527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1231.744272][T29532] netlink: 'syz.3.8626': attribute type 10 has an invalid length. [ 1231.952421][T29543] netlink: 'syz.1.8628': attribute type 10 has an invalid length. [ 1231.984244][T29543] team0: Port device dummy0 added [ 1232.037704][T29543] team0: Port device dummy0 removed [ 1232.634910][T29567] team0: Port device dummy0 added [ 1232.664363][T29571] team0: Port device dummy0 removed [ 1233.331556][T29579] team0: Port device dummy0 added [ 1233.424668][T29589] team0: Port device dummy0 removed [ 1234.094710][T29620] team0: Port device dummy0 added [ 1234.161649][T29622] team0: Port device dummy0 removed [ 1234.469268][T29630] team0: Port device dummy0 added [ 1234.526817][T29630] team0: Port device dummy0 removed [ 1234.734305][T29640] team0: Port device dummy0 added [ 1237.594137][T29641] team0: Port device dummy0 removed [ 1237.607443][T29645] validate_nla: 18 callbacks suppressed [ 1237.607461][T29645] netlink: 'syz.1.8662': attribute type 10 has an invalid length. [ 1237.795254][T29657] __nla_validate_parse: 26 callbacks suppressed [ 1237.795273][T29657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1237.813328][T29656] netlink: 'syz.1.8666': attribute type 10 has an invalid length. [ 1237.928227][T29656] team0: Port device dummy0 added [ 1237.938496][T29657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1237.959126][T29660] netlink: 'syz.1.8666': attribute type 10 has an invalid length. [ 1237.975643][T29660] team0: Port device dummy0 removed [ 1237.998791][T29653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1238.010289][T29659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1238.023078][T29666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8667'. [ 1238.032367][T29666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8667'. [ 1238.046502][T29663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8667'. [ 1238.060920][T29666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8667'. [ 1238.117082][T29669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1238.150751][T29669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1238.323583][T29677] netlink: 'syz.2.8673': attribute type 10 has an invalid length. [ 1238.335538][T29677] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1238.366219][T29680] netlink: 'syz.0.8672': attribute type 10 has an invalid length. [ 1238.391031][T29680] team0: Device hsr_slave_0 failed to register rx_handler [ 1238.755245][T29694] netlink: 'syz.3.8679': attribute type 10 has an invalid length. [ 1239.035895][T29692] netlink: 'syz.2.8678': attribute type 10 has an invalid length. [ 1239.086909][T29692] team0: Port device dummy0 added [ 1239.099639][T29705] netlink: 'syz.2.8678': attribute type 10 has an invalid length. [ 1239.125110][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.131921][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.134562][T29705] team0: Port device dummy0 removed [ 1239.315448][T29711] netlink: 'syz.1.8684': attribute type 10 has an invalid length. [ 1239.365240][T29711] team0: Port device dummy0 added [ 1239.413655][T29716] netlink: 'syz.1.8684': attribute type 10 has an invalid length. [ 1239.492848][T29716] team0: Port device dummy0 removed [ 1239.513704][T29718] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1240.305792][T29739] team0: Port device dummy0 added [ 1240.337610][T29744] team0: Port device dummy0 removed [ 1240.653586][T29751] team0: Port device dummy0 added [ 1240.709625][T29757] team0: Port device dummy0 removed [ 1240.942340][T29764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1241.578302][T29781] team0: Port device dummy0 added [ 1241.644209][T29792] team0: Device hsr_slave_0 failed to register rx_handler [ 1241.720953][T29781] team0: Port device dummy0 removed [ 1241.813486][T29794] team0: Port device dummy0 added [ 1241.881502][T29795] team0: Port device dummy0 removed [ 1242.355876][T29817] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1242.711786][T29825] validate_nla: 22 callbacks suppressed [ 1242.711807][T29825] netlink: 'syz.2.8724': attribute type 10 has an invalid length. [ 1242.782532][T29825] team0: Port device dummy0 added [ 1242.796948][T29831] netlink: 'syz.2.8724': attribute type 10 has an invalid length. [ 1242.870693][T29831] team0: Port device dummy0 removed [ 1242.890526][T29832] netlink: 'syz.3.8725': attribute type 10 has an invalid length. [ 1242.973524][T29832] team0: Device hsr_slave_0 failed to register rx_handler [ 1243.112697][T29834] netlink: 'syz.0.8726': attribute type 10 has an invalid length. [ 1243.248249][T29838] netlink: 'syz.1.8728': attribute type 10 has an invalid length. [ 1246.457035][T29848] __nla_validate_parse: 35 callbacks suppressed [ 1246.457052][T29848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1246.478328][T29848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1246.496944][T29846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1246.508734][T29848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1246.741294][T29859] netlink: 'syz.3.8737': attribute type 10 has an invalid length. [ 1246.757416][T29859] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1246.803947][T29863] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1246.830087][T29863] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1246.883417][T29859] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1247.147951][T29865] netlink: 'syz.1.8740': attribute type 10 has an invalid length. [ 1247.353406][T29865] team0: Port device dummy0 added [ 1247.450061][T29870] netlink: 'syz.1.8740': attribute type 10 has an invalid length. [ 1247.518026][T29870] team0: Port device dummy0 removed [ 1247.660006][T29875] netlink: 'syz.0.8742': attribute type 10 has an invalid length. [ 1247.727295][T29863] netlink: 'syz.2.8739': attribute type 10 has an invalid length. [ 1247.737173][T29863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.785936][T29863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.861521][T29863] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1247.873649][T29877] netlink: 'syz.3.8743': attribute type 10 has an invalid length. [ 1248.014400][T29887] FAULT_INJECTION: forcing a failure. [ 1248.014400][T29887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.035186][T29889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1248.044543][T29887] CPU: 0 PID: 29887 Comm: syz.3.8748 Not tainted syzkaller #0 [ 1248.052058][T29887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1248.062175][T29887] Call Trace: [ 1248.065527][T29887] [ 1248.068512][T29887] dump_stack_lvl+0x18c/0x250 [ 1248.073271][T29887] ? show_regs_print_info+0x20/0x20 [ 1248.078540][T29887] ? load_image+0x400/0x400 [ 1248.083107][T29887] ? __might_fault+0xaa/0x120 [ 1248.087854][T29887] ? __lock_acquire+0x7d40/0x7d40 [ 1248.092948][T29887] should_fail_ex+0x39d/0x4d0 [ 1248.097710][T29887] _copy_from_user+0x2f/0xe0 [ 1248.102363][T29887] ___sys_sendmsg+0x1c7/0x360 [ 1248.107095][T29887] ? get_pid_task+0x20/0x1e0 [ 1248.111758][T29887] ? __sys_sendmsg+0x2a0/0x2a0 [ 1248.116650][T29887] ? __lock_acquire+0x7d40/0x7d40 [ 1248.121810][T29887] __se_sys_sendmsg+0x1c2/0x2b0 [ 1248.122945][T29889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1248.126702][T29887] ? __x64_sys_sendmsg+0x80/0x80 [ 1248.140679][T29887] ? lockdep_hardirqs_on+0x98/0x150 [ 1248.145941][T29887] do_syscall_64+0x55/0xa0 [ 1248.150410][T29887] ? clear_bhb_loop+0x40/0x90 [ 1248.155131][T29887] ? clear_bhb_loop+0x40/0x90 [ 1248.159865][T29887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.165801][T29887] RIP: 0033:0x7f9e5659aeb9 [ 1248.170265][T29887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.189929][T29887] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.198460][T29887] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1248.206492][T29887] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000006 [ 1248.214514][T29887] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.222547][T29887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.227352][T29884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1248.230535][T29887] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1248.230570][T29887] [ 1248.260131][T29892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1248.432341][T29901] netlink: 'syz.2.8751': attribute type 10 has an invalid length. [ 1248.448738][T29901] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1248.527556][T29900] netlink: 'syz.3.8753': attribute type 10 has an invalid length. [ 1248.626016][T29895] netlink: 'syz.1.8750': attribute type 10 has an invalid length. [ 1249.025305][T29917] netlink: 'syz.2.8758': attribute type 10 has an invalid length. [ 1249.065329][T29917] team0: Device hsr_slave_0 failed to register rx_handler [ 1249.175899][T29912] netlink: 'syz.3.8756': attribute type 10 has an invalid length. [ 1249.196066][T29908] netlink: 'syz.0.8755': attribute type 10 has an invalid length. [ 1249.284759][T29908] team0: Port device dummy0 added [ 1249.294946][T29919] netlink: 'syz.0.8755': attribute type 10 has an invalid length. [ 1249.365298][T29919] team0: Port device dummy0 removed [ 1250.003867][T29937] netlink: 'syz.2.8764': attribute type 10 has an invalid length. [ 1250.252848][T29942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1250.614166][T29955] team0: Port device team_slave_0 removed [ 1250.636706][T29955] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1251.176382][T29982] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1251.442200][T14013] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.726574][T29993] team0: Port device dummy0 added [ 1251.759394][T30002] batman_adv: batadv0: Adding interface: team0 [ 1251.781907][T30002] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.868884][T30002] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1251.895114][T30000] team0: Port device dummy0 removed [ 1251.934354][T30008] __nla_validate_parse: 32 callbacks suppressed [ 1251.934370][T30008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1251.950589][T30008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1251.962033][T30006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1251.972953][T30006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1252.098415][T30014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1252.172324][T30014] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8795'. [ 1252.232668][T30020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1252.255409][T30020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1252.266246][T30018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1252.277396][T30020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1252.493161][T30031] team0: Device hsr_slave_0 failed to register rx_handler [ 1252.716915][T30039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1252.795284][T30038] validate_nla: 11 callbacks suppressed [ 1252.795305][T30038] netlink: 'syz.2.8804': attribute type 10 has an invalid length. [ 1252.811724][T30042] FAULT_INJECTION: forcing a failure. [ 1252.811724][T30042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.825775][T30042] CPU: 0 PID: 30042 Comm: syz.3.8805 Not tainted syzkaller #0 [ 1252.832759][T30038] team0: Port device dummy0 added [ 1252.833260][T30042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.833274][T30042] Call Trace: [ 1252.833284][T30042] [ 1252.833293][T30042] dump_stack_lvl+0x18c/0x250 [ 1252.833325][T30042] ? show_regs_print_info+0x20/0x20 [ 1252.833349][T30042] ? load_image+0x400/0x400 [ 1252.833371][T30042] ? __might_fault+0xaa/0x120 [ 1252.873680][T30042] ? __lock_acquire+0x7d40/0x7d40 [ 1252.878717][T30042] should_fail_ex+0x39d/0x4d0 [ 1252.883399][T30042] _copy_from_user+0x2f/0xe0 [ 1252.887990][T30042] ___sys_sendmsg+0x1c7/0x360 [ 1252.892682][T30042] ? __sys_sendmsg+0x2a0/0x2a0 [ 1252.897462][T30042] ? trace_call_bpf+0xc3/0x6c0 [ 1252.902253][T30042] __se_sys_sendmsg+0x1c2/0x2b0 [ 1252.907117][T30042] ? __x64_sys_sendmsg+0x80/0x80 [ 1252.912068][T30042] ? lockdep_hardirqs_on+0x98/0x150 [ 1252.917266][T30042] do_syscall_64+0x55/0xa0 [ 1252.921684][T30042] ? clear_bhb_loop+0x40/0x90 [ 1252.926356][T30042] ? clear_bhb_loop+0x40/0x90 [ 1252.931029][T30042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1252.936917][T30042] RIP: 0033:0x7f9e5659aeb9 [ 1252.941328][T30042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.960933][T30042] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.969359][T30042] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1252.977332][T30042] RDX: 0000000000008080 RSI: 0000200000000280 RDI: 0000000000000003 [ 1252.985304][T30042] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.993269][T30042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.001248][T30042] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1253.009229][T30042] [ 1253.403807][T30047] netlink: 'syz.3.8806': attribute type 10 has an invalid length. [ 1253.504585][T30047] team0: Port device dummy0 added [ 1253.522833][T30054] netlink: 'syz.3.8806': attribute type 10 has an invalid length. [ 1253.591223][T30054] team0: Port device dummy0 removed [ 1253.858434][T30068] bond_slave_0: entered promiscuous mode [ 1253.864222][T30068] bond_slave_1: entered promiscuous mode [ 1253.869973][T30068] batadv_slave_0: entered promiscuous mode [ 1254.064728][T30080] netlink: 'syz.1.8818': attribute type 10 has an invalid length. [ 1254.662246][T30092] netlink: 'syz.1.8823': attribute type 10 has an invalid length. [ 1254.725600][T30092] team0: Port device dummy0 added [ 1254.734639][T30094] netlink: 'syz.1.8823': attribute type 10 has an invalid length. [ 1254.751062][T30094] team0: Port device dummy0 removed [ 1254.870695][T30102] netlink: 'syz.0.8826': attribute type 10 has an invalid length. [ 1254.879213][T30102] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1254.982396][T30104] netlink: 'syz.2.8827': attribute type 10 has an invalid length. [ 1255.022230][T30104] batman_adv: batadv0: Adding interface: team0 [ 1255.028592][T30104] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.055809][T30104] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1255.245233][T30109] netlink: 'syz.2.8829': attribute type 10 has an invalid length. [ 1255.379084][T30114] netlink: 'syz.1.8831': attribute type 10 has an invalid length. [ 1255.400983][T30114] team0: Device hsr_slave_0 failed to register rx_handler [ 1255.701293][T30125] team0: Port device dummy0 added [ 1255.747084][T30125] team0: Port device dummy0 removed [ 1255.918856][T30135] batman_adv: batadv0: Adding interface: team0 [ 1255.925615][T30135] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.951022][T30135] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1256.253983][T30144] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1256.833135][T30153] team0: Port device dummy0 added [ 1256.893394][T30153] team0: Port device dummy0 removed [ 1257.105450][T30173] team0: Device hsr_slave_0 failed to register rx_handler [ 1257.263043][T30182] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1257.331548][T30182] __nla_validate_parse: 18 callbacks suppressed [ 1257.331570][T30182] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1258.100576][T30203] validate_nla: 12 callbacks suppressed [ 1258.100689][T30203] netlink: 'syz.0.8862': attribute type 10 has an invalid length. [ 1258.158784][T30203] team0: Port device dummy0 added [ 1258.186770][T30208] netlink: 'syz.0.8862': attribute type 10 has an invalid length. [ 1258.225867][T30208] team0: Port device dummy0 removed [ 1258.243684][T30212] FAULT_INJECTION: forcing a failure. [ 1258.243684][T30212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.275764][T30214] netlink: 'syz.2.8866': attribute type 10 has an invalid length. [ 1258.288469][T30212] CPU: 1 PID: 30212 Comm: syz.1.8865 Not tainted syzkaller #0 [ 1258.290584][T30214] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1258.295946][T30212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1258.295963][T30212] Call Trace: [ 1258.295971][T30212] [ 1258.295980][T30212] dump_stack_lvl+0x18c/0x250 [ 1258.296013][T30212] ? show_regs_print_info+0x20/0x20 [ 1258.296036][T30212] ? load_image+0x400/0x400 [ 1258.296059][T30212] ? __might_fault+0xaa/0x120 [ 1258.296077][T30212] ? __lock_acquire+0x7d40/0x7d40 [ 1258.348673][T30212] should_fail_ex+0x39d/0x4d0 [ 1258.353362][T30212] _copy_from_user+0x2f/0xe0 [ 1258.357950][T30212] ___sys_sendmsg+0x1c7/0x360 [ 1258.362632][T30212] ? __sys_sendmsg+0x2a0/0x2a0 [ 1258.367412][T30212] ? trace_call_bpf+0xc3/0x6c0 [ 1258.372197][T30212] __se_sys_sendmsg+0x1c2/0x2b0 [ 1258.377051][T30212] ? __x64_sys_sendmsg+0x80/0x80 [ 1258.381997][T30212] ? lockdep_hardirqs_on+0x98/0x150 [ 1258.387199][T30212] do_syscall_64+0x55/0xa0 [ 1258.391617][T30212] ? clear_bhb_loop+0x40/0x90 [ 1258.396295][T30212] ? clear_bhb_loop+0x40/0x90 [ 1258.400972][T30212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.406867][T30212] RIP: 0033:0x7fc467d9aeb9 [ 1258.411278][T30212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.430884][T30212] RSP: 002b:00007fc468c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.439301][T30212] RAX: ffffffffffffffda RBX: 00007fc468015fa0 RCX: 00007fc467d9aeb9 [ 1258.447301][T30212] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1258.455385][T30212] RBP: 00007fc468c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.463358][T30212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.471329][T30212] R13: 00007fc468016038 R14: 00007fc468015fa0 R15: 00007fffb0d6d1f8 [ 1258.479312][T30212] [ 1258.524558][T30214] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1258.627664][T30218] netlink: 'syz.3.8867': attribute type 10 has an invalid length. [ 1258.799211][T30223] netlink: 'syz.3.8870': attribute type 10 has an invalid length. [ 1258.821028][T30223] batman_adv: batadv0: Adding interface: team0 [ 1258.827356][T30223] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.860080][T30223] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1259.135078][T30244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1259.144265][T30244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1259.155963][T30240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1259.166367][T30240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1259.170929][T30245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1259.189851][T30245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1259.199420][T30242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1259.219421][T30245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1259.327427][T30249] netlink: 'syz.1.8879': attribute type 10 has an invalid length. [ 1259.386581][T30247] netlink: 'syz.2.8878': attribute type 10 has an invalid length. [ 1259.426808][T30247] netlink: 'syz.2.8878': attribute type 10 has an invalid length. [ 1259.477172][T30247] team0: Port device dummy0 removed [ 1259.586112][T30257] netlink: 'syz.2.8882': attribute type 10 has an invalid length. [ 1259.608394][T30257] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1259.923566][T30262] netlink: 'syz.1.8884': attribute type 10 has an invalid length. [ 1259.951879][T30262] team0: Device hsr_slave_0 failed to register rx_handler [ 1260.387995][T30280] team0: Port device dummy0 added [ 1260.438790][T30280] team0: Port device dummy0 removed [ 1260.561807][T30284] team0: Port device dummy0 added [ 1261.370381][T30313] team0: Port device dummy0 removed [ 1261.406418][T30316] team0: Port device dummy0 added [ 1261.725379][T30326] team0: Device hsr_slave_0 failed to register rx_handler [ 1262.374325][T30328] team0: Port device dummy0 added [ 1262.498502][T30328] team0: Port device dummy0 removed [ 1262.671719][T30347] __nla_validate_parse: 14 callbacks suppressed [ 1262.671738][T30347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1262.699577][T30347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1262.712458][T30345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1262.723760][T30347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8912'. [ 1262.939329][T30349] team0: Port device dummy0 added [ 1263.017167][T30349] team0: Port device dummy0 removed [ 1263.401664][T30363] validate_nla: 14 callbacks suppressed [ 1263.401685][T30363] netlink: 'syz.0.8917': attribute type 10 has an invalid length. [ 1263.417341][T30363] team0: Device hsr_slave_0 failed to register rx_handler [ 1263.576816][T30367] netlink: 'syz.3.8919': attribute type 10 has an invalid length. [ 1263.585573][T30367] team0: Device hsr_slave_0 failed to register rx_handler [ 1264.168703][T30377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8923'. [ 1264.187912][T30377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8923'. [ 1264.197893][T30376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8923'. [ 1264.216113][T30376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8923'. [ 1264.485933][T30387] netlink: 'syz.3.8926': attribute type 10 has an invalid length. [ 1264.504666][T30387] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1264.619605][T30387] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1264.847608][T30397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1264.985762][T30403] netlink: 'syz.2.8932': attribute type 10 has an invalid length. [ 1264.994169][T30403] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1265.181197][T30408] netlink: 'syz.3.8934': attribute type 10 has an invalid length. [ 1265.210451][T30408] team0: Device hsr_slave_0 failed to register rx_handler [ 1265.477829][T30418] netlink: 'syz.2.8936': attribute type 10 has an invalid length. [ 1265.517484][T30418] team0: Device hsr_slave_0 failed to register rx_handler [ 1266.170185][T30445] netlink: 'syz.0.8946': attribute type 10 has an invalid length. [ 1266.178628][T30445] team0: Device hsr_slave_0 failed to register rx_handler [ 1267.054578][T30472] FAULT_INJECTION: forcing a failure. [ 1267.054578][T30472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.071340][T30472] CPU: 1 PID: 30472 Comm: syz.0.8955 Not tainted syzkaller #0 [ 1267.078870][T30472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1267.088947][T30472] Call Trace: [ 1267.092277][T30472] [ 1267.095226][T30472] dump_stack_lvl+0x18c/0x250 [ 1267.099945][T30472] ? show_regs_print_info+0x20/0x20 [ 1267.105194][T30472] ? load_image+0x400/0x400 [ 1267.109747][T30472] ? __lock_acquire+0x7d40/0x7d40 [ 1267.114801][T30472] ? snprintf+0xe9/0x140 [ 1267.119067][T30472] should_fail_ex+0x39d/0x4d0 [ 1267.123804][T30472] _copy_to_user+0x2f/0xa0 [ 1267.128276][T30472] simple_read_from_buffer+0xe7/0x150 [ 1267.133712][T30472] proc_fail_nth_read+0x1e8/0x260 [ 1267.138791][T30472] ? proc_fault_inject_write+0x360/0x360 [ 1267.144492][T30472] ? fsnotify_perm+0x271/0x5e0 [ 1267.149322][T30472] ? proc_fault_inject_write+0x360/0x360 [ 1267.155004][T30472] vfs_read+0x28b/0x970 [ 1267.159223][T30472] ? kernel_read+0x1e0/0x1e0 [ 1267.159538][T30475] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1267.163838][T30472] ? __fget_files+0x28/0x4b0 [ 1267.163866][T30472] ? __fget_files+0x28/0x4b0 [ 1267.163894][T30472] ? __fget_files+0x43d/0x4b0 [ 1267.163946][T30472] ? __fdget_pos+0x2a3/0x330 [ 1267.163968][T30472] ? ksys_read+0x75/0x260 [ 1267.164004][T30472] ksys_read+0x150/0x260 [ 1267.164040][T30472] ? vfs_write+0x990/0x990 [ 1267.164081][T30472] ? lockdep_hardirqs_on+0x98/0x150 [ 1267.178140][T30475] syzkaller1: linktype set to 823 [ 1267.179058][T30472] do_syscall_64+0x55/0xa0 [ 1267.179088][T30472] ? clear_bhb_loop+0x40/0x90 [ 1267.220734][T30472] ? clear_bhb_loop+0x40/0x90 [ 1267.225468][T30472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.231406][T30472] RIP: 0033:0x7fd59755b78e [ 1267.235848][T30472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.255462][T30472] RSP: 002b:00007fd59847ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.263904][T30472] RAX: ffffffffffffffda RBX: 00007fd5984806c0 RCX: 00007fd59755b78e [ 1267.271916][T30472] RDX: 000000000000000f RSI: 00007fd5984800a0 RDI: 0000000000000004 [ 1267.279927][T30472] RBP: 00007fd598480090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.287917][T30472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.295892][T30472] R13: 00007fd597816038 R14: 00007fd597815fa0 R15: 00007fff44a0f888 [ 1267.303942][T30472] [ 1267.495793][T30482] netlink: 'syz.1.8967': attribute type 10 has an invalid length. [ 1268.489749][T30498] __nla_validate_parse: 24 callbacks suppressed [ 1268.489765][T30498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1268.507022][T30493] netlink: 'syz.0.8960': attribute type 10 has an invalid length. [ 1268.515771][T30493] team0: Device hsr_slave_0 failed to register rx_handler [ 1268.530653][T30498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1268.549436][T30495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1268.559488][T30499] netlink: 'syz.1.8965': attribute type 10 has an invalid length. [ 1268.572878][T30499] team0: Device hsr_slave_0 failed to register rx_handler [ 1268.584391][T30498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1269.332718][T30513] netlink: 'syz.0.8971': attribute type 10 has an invalid length. [ 1269.371512][T30513] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1269.417043][T30513] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1269.712295][T30519] netlink: 'syz.2.8972': attribute type 10 has an invalid length. [ 1269.734724][T30519] team0: Port device dummy0 added [ 1269.788530][T30521] netlink: 'syz.1.8973': attribute type 10 has an invalid length. [ 1269.891584][T30525] netlink: 'syz.1.8973': attribute type 10 has an invalid length. [ 1269.953728][T30525] team0: Port device dummy0 removed [ 1270.028065][T30529] netlink: 'syz.3.8975': attribute type 10 has an invalid length. [ 1270.067255][T30534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1270.076647][T30534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1270.086543][T30531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1270.097076][T30534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1270.289021][T30548] netlink: 'syz.1.8982': attribute type 10 has an invalid length. [ 1270.303071][T30548] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1270.347280][T30548] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8982'. [ 1270.467876][T30551] netlink: 'syz.2.8983': attribute type 10 has an invalid length. [ 1270.477774][T30551] team0: Device hsr_slave_0 failed to register rx_handler [ 1271.099396][T30557] netlink: 'syz.0.8985': attribute type 10 has an invalid length. [ 1271.941414][T30581] team0: Port device dummy0 added [ 1271.997418][T30581] team0: Port device dummy0 removed [ 1272.096348][T30592] team0: Device hsr_slave_0 failed to register rx_handler [ 1272.248640][T30597] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1273.305205][T30615] team0: Port device dummy0 added [ 1273.494818][T30621] team0: Port device dummy0 added [ 1273.529463][T30621] validate_nla: 7 callbacks suppressed [ 1273.529566][T30621] netlink: 'syz.3.9010': attribute type 10 has an invalid length. [ 1273.607085][T30621] team0: Port device dummy0 removed [ 1273.686858][T30636] netlink: 'syz.0.9014': attribute type 10 has an invalid length. [ 1273.759598][T30642] __nla_validate_parse: 21 callbacks suppressed [ 1273.759618][T30642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1273.790736][T30636] team0: Port device dummy0 removed [ 1273.797116][T30641] netlink: 'syz.3.9016': attribute type 10 has an invalid length. [ 1273.805602][T30642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1273.816670][T30638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1273.826300][T30643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1273.933330][T30647] netlink: 'syz.2.9019': attribute type 10 has an invalid length. [ 1273.947149][T30647] team0: Device hsr_slave_0 failed to register rx_handler [ 1274.086480][T30651] netlink: 'syz.3.9021': attribute type 10 has an invalid length. [ 1274.139597][T30651] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1274.155355][T30649] netlink: 'syz.0.9020': attribute type 10 has an invalid length. [ 1274.183584][T30649] team0: Port device dummy0 added [ 1274.224747][T30651] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1274.425031][T30658] netlink: 'syz.1.9023': attribute type 10 has an invalid length. [ 1274.477077][T30658] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1274.529083][T30658] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1274.845586][T30669] netlink: 'syz.1.9026': attribute type 10 has an invalid length. [ 1274.934780][T30672] netlink: 'syz.2.9028': attribute type 10 has an invalid length. [ 1275.004052][T30672] team0: Port device dummy0 removed [ 1275.015520][T30670] netlink: 'syz.3.9027': attribute type 10 has an invalid length. [ 1275.059330][T30670] team0: Port device dummy0 added [ 1275.082671][T30675] team0: Port device dummy0 removed [ 1275.100920][T30678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1275.134581][T30678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1275.161274][T30677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1275.176157][T30678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1275.399128][T30686] team0: Port device dummy0 added [ 1275.550466][T30695] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1275.704044][T30697] team0: Device hsr_slave_0 failed to register rx_handler [ 1275.931062][T30701] team0: Port device dummy0 removed [ 1276.179559][T30708] team0: Port device dummy0 removed [ 1276.412710][T30718] team0: Port device dummy0 added [ 1276.511566][T30727] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1276.713246][T30731] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1277.099469][T30735] team0: Port device dummy0 removed [ 1277.114615][T30739] team0: Device hsr_slave_0 failed to register rx_handler [ 1277.219048][T30742] team0: Port device dummy0 added [ 1277.259073][T30742] team0: Port device dummy0 removed [ 1277.624689][T30749] team0: Port device dummy0 added [ 1278.252318][T30764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1278.495244][T30773] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1278.733117][T30776] validate_nla: 21 callbacks suppressed [ 1278.733166][T30776] netlink: 'syz.0.9063': attribute type 10 has an invalid length. [ 1278.786898][T30776] team0: Port device dummy0 added [ 1278.811802][T30781] __nla_validate_parse: 11 callbacks suppressed [ 1278.811820][T30781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9064'. [ 1278.828319][T30778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9064'. [ 1278.846915][T30782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9064'. [ 1279.541481][T30799] netlink: 'syz.2.9070': attribute type 10 has an invalid length. [ 1279.624903][T30805] netlink: 'syz.3.9073': attribute type 10 has an invalid length. [ 1279.653133][T30805] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1279.653537][T30806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1279.685050][T30801] netlink: 'syz.1.9071': attribute type 10 has an invalid length. [ 1279.710912][T30806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1279.735453][T30803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1279.747217][T30805] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9073'. [ 1279.751707][T30808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1279.916560][T30810] netlink: 'syz.2.9074': attribute type 10 has an invalid length. [ 1279.962986][T30810] team0: Port device dummy0 added [ 1279.995906][T30817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1280.020371][T30817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1280.562279][T30837] netlink: 'syz.0.9083': attribute type 10 has an invalid length. [ 1280.721943][T30837] team0: Port device dummy0 removed [ 1281.216976][T30846] netlink: 'syz.2.9086': attribute type 10 has an invalid length. [ 1281.259054][T30845] netlink: 'syz.0.9085': attribute type 10 has an invalid length. [ 1281.295542][T30845] team0: Port device dummy0 added [ 1281.314303][T30852] netlink: 'syz.1.9087': attribute type 10 has an invalid length. [ 1281.339309][T30852] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1281.378659][T30849] netlink: 'syz.0.9085': attribute type 10 has an invalid length. [ 1281.472568][T30849] team0: Port device dummy0 removed [ 1281.825124][T30864] team0: Device hsr_slave_0 failed to register rx_handler [ 1282.621719][T30880] team0: Port device dummy0 added [ 1282.817146][T30885] team0: Port device dummy0 removed [ 1282.890627][T30893] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1283.528544][T30901] syz.3.9105 (30901) used greatest stack depth: 17896 bytes left [ 1284.015118][T30910] validate_nla: 7 callbacks suppressed [ 1284.015266][T30910] netlink: 'syz.1.9109': attribute type 10 has an invalid length. [ 1284.131511][T30917] netlink: 'syz.0.9111': attribute type 10 has an invalid length. [ 1284.161118][T30917] team0: Device hsr_slave_0 failed to register rx_handler [ 1284.340606][T30922] netlink: 'syz.2.9113': attribute type 10 has an invalid length. [ 1284.353537][T30922] netlink: 'syz.2.9113': attribute type 10 has an invalid length. [ 1284.420338][T30922] team0: Port device dummy0 removed [ 1284.508315][T30930] netlink: 'syz.1.9115': attribute type 10 has an invalid length. [ 1284.523505][T30930] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1284.568016][T30930] __nla_validate_parse: 16 callbacks suppressed [ 1284.568034][T30930] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1284.642677][T30933] netlink: 'syz.2.9116': attribute type 10 has an invalid length. [ 1284.805919][T30936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1284.815491][T30936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1284.834012][T30935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1284.849173][T30936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1285.580889][T30948] netlink: 'syz.3.9122': attribute type 10 has an invalid length. [ 1285.622506][T30948] team0: Port device dummy0 added [ 1285.840144][T30960] netlink: 'syz.3.9125': attribute type 10 has an invalid length. [ 1285.906781][T30960] team0: Port device dummy0 removed [ 1285.942184][T30963] netlink: 'syz.1.9126': attribute type 10 has an invalid length. [ 1286.003488][T30958] netlink: 'syz.0.9124': attribute type 10 has an invalid length. [ 1286.027048][T30958] team0: Port device dummy0 added [ 1286.089927][T30958] team0: Port device dummy0 removed [ 1286.273637][T30976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1286.282990][T30976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1286.295545][T30973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1286.304861][T30976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9129'. [ 1286.993510][T30992] team0: Device hsr_slave_0 failed to register rx_handler [ 1287.265266][T31003] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9141'. [ 1287.288146][T30998] team0: Port device dummy0 added [ 1287.301912][T31005] team0: Port device dummy0 removed [ 1287.615055][T31003] team0: Device ipvlan1 failed to register rx_handler [ 1288.446786][T31022] team0: Port device dummy0 removed [ 1288.695787][T31032] team0: Port device dummy0 added [ 1288.752787][T31038] team0: Port device dummy0 removed [ 1289.068306][T31052] validate_nla: 11 callbacks suppressed [ 1289.068325][T31052] netlink: 'syz.1.9157': attribute type 10 has an invalid length. [ 1289.274404][T31057] netlink: 'syz.0.9160': attribute type 10 has an invalid length. [ 1289.542604][T31064] netlink: 'syz.0.9162': attribute type 10 has an invalid length. [ 1289.575965][T31065] __nla_validate_parse: 8 callbacks suppressed [ 1289.575982][T31065] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1289.590920][T31067] FAULT_INJECTION: forcing a failure. [ 1289.590920][T31067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.599411][T31065] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1289.616568][T31067] CPU: 0 PID: 31067 Comm: syz.1.9163 Not tainted syzkaller #0 [ 1289.619950][T31062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1289.624047][T31067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1289.624062][T31067] Call Trace: [ 1289.624070][T31067] [ 1289.624085][T31067] dump_stack_lvl+0x18c/0x250 [ 1289.637012][T31065] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1289.643041][T31067] ? show_regs_print_info+0x20/0x20 [ 1289.643074][T31067] ? load_image+0x400/0x400 [ 1289.643102][T31067] ? __might_fault+0xaa/0x120 [ 1289.677222][T31067] ? __lock_acquire+0x7d40/0x7d40 [ 1289.682270][T31067] should_fail_ex+0x39d/0x4d0 [ 1289.686959][T31067] _copy_from_user+0x2f/0xe0 [ 1289.691548][T31067] ___sys_sendmsg+0x1c7/0x360 [ 1289.696226][T31067] ? __sys_sendmsg+0x2a0/0x2a0 [ 1289.701000][T31067] ? __lock_acquire+0x7d40/0x7d40 [ 1289.706033][T31067] __se_sys_sendmsg+0x1c2/0x2b0 [ 1289.710884][T31067] ? __x64_sys_sendmsg+0x80/0x80 [ 1289.715827][T31067] ? lockdep_hardirqs_on+0x98/0x150 [ 1289.721022][T31067] do_syscall_64+0x55/0xa0 [ 1289.725442][T31067] ? clear_bhb_loop+0x40/0x90 [ 1289.730110][T31067] ? clear_bhb_loop+0x40/0x90 [ 1289.734775][T31067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.740673][T31067] RIP: 0033:0x7fc467d9aeb9 [ 1289.745079][T31067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.764714][T31067] RSP: 002b:00007fc468c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.773123][T31067] RAX: ffffffffffffffda RBX: 00007fc468015fa0 RCX: 00007fc467d9aeb9 [ 1289.781091][T31067] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1289.789051][T31067] RBP: 00007fc468c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.797013][T31067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.804974][T31067] R13: 00007fc468016038 R14: 00007fc468015fa0 R15: 00007fffb0d6d1f8 [ 1289.812948][T31067] [ 1290.083676][T31071] netlink: 'syz.3.9165': attribute type 10 has an invalid length. [ 1290.117859][T31071] team0: Port device dummy0 added [ 1290.143795][T31077] netlink: 'syz.3.9165': attribute type 10 has an invalid length. [ 1290.189190][T31077] team0: Port device dummy0 removed [ 1290.245512][T31073] netlink: 'syz.1.9166': attribute type 10 has an invalid length. [ 1290.349251][T31073] team0: Port device dummy0 added [ 1290.394901][T31085] netlink: 'syz.1.9166': attribute type 10 has an invalid length. [ 1290.463449][T31085] team0: Port device dummy0 removed [ 1290.469385][T31083] netlink: 'syz.0.9168': attribute type 10 has an invalid length. [ 1290.789215][T31098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1290.809460][T31098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1290.819272][T31096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1290.829022][T31098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1290.959631][T31100] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9174'. [ 1291.196860][T31104] netlink: 'syz.0.9174': attribute type 10 has an invalid length. [ 1291.223725][T31104] team0: Device ipvlan1 failed to register rx_handler [ 1291.968946][T31126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1292.152078][T31122] netlink: 'syz.0.9181': attribute type 10 has an invalid length. [ 1292.235468][T31122] team0: Port device dummy0 added [ 1292.363602][T31127] team0: Port device dummy0 removed [ 1292.485298][T31132] team0: Port device dummy0 added [ 1292.629117][T31134] team0: Port device dummy0 added [ 1292.677274][T31134] team0: Port device dummy0 removed [ 1293.568191][T31156] team0: Port device dummy0 added [ 1294.200391][T31166] validate_nla: 7 callbacks suppressed [ 1294.200461][T31166] netlink: 'syz.3.9196': attribute type 10 has an invalid length. [ 1295.149370][T31190] netlink: 'syz.3.9202': attribute type 10 has an invalid length. [ 1295.330874][T31196] netlink: 'syz.2.9204': attribute type 10 has an invalid length. [ 1295.356296][T31196] team0: Port device dummy0 added [ 1295.431893][T31198] netlink: 'syz.1.9205': attribute type 10 has an invalid length. [ 1295.455921][T31198] netlink: 'syz.1.9205': attribute type 10 has an invalid length. [ 1295.519559][T31198] team0: Port device dummy0 removed [ 1295.669327][T31204] netlink: 'syz.2.9207': attribute type 10 has an invalid length. [ 1295.768409][T31207] netlink: 'syz.3.9208': attribute type 10 has an invalid length. [ 1296.060227][T31214] netlink: 'syz.3.9211': attribute type 10 has an invalid length. [ 1296.086295][T31214] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1296.133962][T31214] __nla_validate_parse: 8 callbacks suppressed [ 1296.133980][T31214] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1296.158889][T31222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1296.194176][T31222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1296.210868][T31218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1296.244548][T31222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1296.630472][T31233] netlink: 'syz.3.9217': attribute type 10 has an invalid length. [ 1296.647765][T31233] netlink: 'syz.3.9217': attribute type 10 has an invalid length. [ 1296.705933][T31233] team0: Port device dummy0 removed [ 1297.215224][T31248] team0: Port device dummy0 added [ 1297.563946][T31260] team0: Device hsr_slave_0 failed to register rx_handler [ 1297.730590][T31266] FAULT_INJECTION: forcing a failure. [ 1297.730590][T31266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.761365][T31266] CPU: 1 PID: 31266 Comm: syz.0.9227 Not tainted syzkaller #0 [ 1297.768888][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1297.778979][T31266] Call Trace: [ 1297.782277][T31266] [ 1297.785225][T31266] dump_stack_lvl+0x18c/0x250 [ 1297.789942][T31266] ? show_regs_print_info+0x20/0x20 [ 1297.795169][T31266] ? load_image+0x400/0x400 [ 1297.799696][T31266] ? __lock_acquire+0x7d40/0x7d40 [ 1297.804743][T31266] ? snprintf+0xe9/0x140 [ 1297.809008][T31266] should_fail_ex+0x39d/0x4d0 [ 1297.813717][T31266] _copy_to_user+0x2f/0xa0 [ 1297.818160][T31266] simple_read_from_buffer+0xe7/0x150 [ 1297.823571][T31266] proc_fail_nth_read+0x1e8/0x260 [ 1297.828624][T31266] ? proc_fault_inject_write+0x360/0x360 [ 1297.834289][T31266] ? fsnotify_perm+0x271/0x5e0 [ 1297.839081][T31266] ? proc_fault_inject_write+0x360/0x360 [ 1297.844741][T31266] vfs_read+0x28b/0x970 [ 1297.848934][T31266] ? kernel_read+0x1e0/0x1e0 [ 1297.853552][T31266] ? __fget_files+0x28/0x4b0 [ 1297.858172][T31266] ? __fget_files+0x28/0x4b0 [ 1297.862796][T31266] ? __fget_files+0x43d/0x4b0 [ 1297.867515][T31266] ? __fdget_pos+0x2a3/0x330 [ 1297.872129][T31266] ? ksys_read+0x75/0x260 [ 1297.876498][T31266] ksys_read+0x150/0x260 [ 1297.880770][T31266] ? vfs_write+0x990/0x990 [ 1297.884767][T31265] team0: Port device dummy0 added [ 1297.885254][T31266] ? lockdep_hardirqs_on+0x98/0x150 [ 1297.885283][T31266] do_syscall_64+0x55/0xa0 [ 1297.885306][T31266] ? clear_bhb_loop+0x40/0x90 [ 1297.885326][T31266] ? clear_bhb_loop+0x40/0x90 [ 1297.885347][T31266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.885365][T31266] RIP: 0033:0x7fd59755b78e [ 1297.919681][T31266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1297.939316][T31266] RSP: 002b:00007fd59845efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1297.947765][T31266] RAX: ffffffffffffffda RBX: 00007fd59845f6c0 RCX: 00007fd59755b78e [ 1297.955763][T31266] RDX: 000000000000000f RSI: 00007fd59845f0a0 RDI: 0000000000000006 [ 1297.963758][T31266] RBP: 00007fd59845f090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.971755][T31266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.979751][T31266] R13: 00007fd597816128 R14: 00007fd597816090 R15: 00007fff44a0f888 [ 1297.987762][T31266] [ 1298.043277][T31265] team0: Port device dummy0 removed [ 1298.221001][T31279] team0: Port device dummy0 added [ 1298.423730][T31286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9234'. [ 1298.432918][T31286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9234'. [ 1298.444910][T31283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9234'. [ 1298.455475][T31283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9234'. [ 1299.106975][T31298] team0: Port device dummy0 removed [ 1299.234102][T31308] validate_nla: 9 callbacks suppressed [ 1299.234137][T31308] netlink: 'syz.1.9243': attribute type 10 has an invalid length. [ 1299.273184][T31308] team0: Port device dummy0 added [ 1299.466067][T31315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9245'. [ 1300.084707][T31333] netlink: 'syz.3.9252': attribute type 10 has an invalid length. [ 1300.252251][T31339] netlink: 'syz.3.9254': attribute type 10 has an invalid length. [ 1300.263652][T31339] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1300.570811][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.577208][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.743836][T31360] netlink: 'syz.1.9261': attribute type 10 has an invalid length. [ 1301.820282][T31360] netlink: 'syz.1.9261': attribute type 10 has an invalid length. [ 1301.938252][T31360] team0: Port device dummy0 removed [ 1302.098972][T31364] netlink: 'syz.0.9262': attribute type 10 has an invalid length. [ 1302.145513][T31364] team0: Port device dummy0 removed [ 1302.673490][T31381] netlink: 'syz.3.9267': attribute type 10 has an invalid length. [ 1302.720401][T31381] team0: Port device dummy0 added [ 1302.743825][T31378] netlink: 'syz.0.9266': attribute type 10 has an invalid length. [ 1302.787082][T31378] team0: Port device dummy0 added [ 1302.796055][T31383] netlink: 'syz.0.9266': attribute type 10 has an invalid length. [ 1302.818177][T31383] team0: Port device dummy0 removed [ 1302.901717][T31391] netlink: 'syz.3.9270': attribute type 10 has an invalid length. [ 1302.918206][T31391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1302.958606][T31391] __nla_validate_parse: 4 callbacks suppressed [ 1302.958618][T31391] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9270'. [ 1303.966134][T31418] FAULT_INJECTION: forcing a failure. [ 1303.966134][T31418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.989727][T31418] CPU: 1 PID: 31418 Comm: syz.3.9280 Not tainted syzkaller #0 [ 1303.997267][T31418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.007383][T31418] Call Trace: [ 1304.010703][T31418] [ 1304.013672][T31418] dump_stack_lvl+0x18c/0x250 [ 1304.018416][T31418] ? show_regs_print_info+0x20/0x20 [ 1304.023661][T31418] ? load_image+0x400/0x400 [ 1304.028224][T31418] ? __might_fault+0xaa/0x120 [ 1304.032975][T31418] ? __lock_acquire+0x7d40/0x7d40 [ 1304.038083][T31418] should_fail_ex+0x39d/0x4d0 [ 1304.042830][T31418] _copy_from_user+0x2f/0xe0 [ 1304.047470][T31418] ___sys_sendmsg+0x1c7/0x360 [ 1304.052213][T31418] ? __sys_sendmsg+0x2a0/0x2a0 [ 1304.057097][T31418] ? __lock_acquire+0x7d40/0x7d40 [ 1304.062245][T31418] __se_sys_sendmsg+0x1c2/0x2b0 [ 1304.067158][T31418] ? __x64_sys_sendmsg+0x80/0x80 [ 1304.072173][T31418] ? lockdep_hardirqs_on+0x98/0x150 [ 1304.077396][T31418] do_syscall_64+0x55/0xa0 [ 1304.081830][T31418] ? clear_bhb_loop+0x40/0x90 [ 1304.086519][T31418] ? clear_bhb_loop+0x40/0x90 [ 1304.091211][T31418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.097115][T31418] RIP: 0033:0x7f9e5659aeb9 [ 1304.101550][T31418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.121168][T31418] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.129774][T31418] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1304.137761][T31418] RDX: 0000000004000080 RSI: 0000200000000580 RDI: 0000000000000005 [ 1304.145750][T31418] RBP: 00007f9e57439090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.153740][T31418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.161720][T31418] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1304.169736][T31418] [ 1304.684878][T31433] validate_nla: 1 callbacks suppressed [ 1304.684934][T31433] netlink: 'syz.2.9286': attribute type 10 has an invalid length. [ 1304.703430][T31433] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1304.735100][T31433] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9286'. [ 1305.278103][T31445] netlink: 'syz.2.9290': attribute type 10 has an invalid length. [ 1305.327349][T31445] team0: Port device dummy0 removed [ 1305.770564][T31458] netlink: 'syz.1.9295': attribute type 10 has an invalid length. [ 1305.798198][T31458] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1305.829784][T31460] netlink: 'syz.3.9296': attribute type 10 has an invalid length. [ 1305.851907][T31460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1305.917097][T31458] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9295'. [ 1306.008920][T31460] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9296'. [ 1306.462985][T31475] netlink: 'syz.0.9301': attribute type 10 has an invalid length. [ 1306.511733][T31475] team0: Port device dummy0 added [ 1306.644617][T31477] netlink: 'syz.3.9302': attribute type 10 has an invalid length. [ 1306.705701][T31477] team0: Port device dummy0 removed [ 1306.871493][T31490] netlink: 'syz.2.9306': attribute type 10 has an invalid length. [ 1306.987339][T31490] team0: Port device dummy0 added [ 1307.061136][T31490] syz.2.9306 (31490) used greatest stack depth: 17064 bytes left [ 1307.216427][T31497] netlink: 'syz.3.9308': attribute type 10 has an invalid length. [ 1307.225538][T31497] team0: Device hsr_slave_0 failed to register rx_handler [ 1307.322536][T31500] netlink: 'syz.3.9309': attribute type 10 has an invalid length. [ 1307.345645][T31500] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1307.379909][T31500] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9309'. [ 1307.615096][ C1] [ 1307.615107][ C1] ================================ [ 1307.615113][ C1] WARNING: inconsistent lock state [ 1307.615130][ C1] syzkaller #0 Not tainted [ 1307.615140][ C1] -------------------------------- [ 1307.615145][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1307.615153][ C1] syz.3.9312/31506 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1307.615172][ C1] ffff888078f878f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 1307.615223][ C1] {INITIAL USE} state was registered at: [ 1307.615230][ C1] lock_acquire+0x19e/0x420 [ 1307.615247][ C1] _raw_spin_lock+0x2e/0x40 [ 1307.615263][ C1] htab_lock_bucket+0x17d/0x300 [ 1307.615279][ C1] htab_map_delete_elem+0x1a4/0x650 [ 1307.615294][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1307.615314][ C1] bpf_overflow_handler+0x1fc/0x510 [ 1307.615336][ C1] __perf_event_overflow+0x447/0x630 [ 1307.615352][ C1] perf_swevent_event+0x542/0x630 [ 1307.615370][ C1] perf_bp_event+0x2a7/0x380 [ 1307.615386][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1307.615405][ C1] notifier_call_chain+0x197/0x380 [ 1307.615424][ C1] atomic_notifier_call_chain+0xda/0x180 [ 1307.615443][ C1] notify_die+0x145/0x1a0 [ 1307.615461][ C1] notify_debug+0x2e/0x50 [ 1307.615474][ C1] noist_exc_debug+0x77/0x120 [ 1307.615504][ C1] asm_exc_debug+0x33/0x40 [ 1307.615520][ C1] irq event stamp: 1912 [ 1307.615526][ C1] hardirqs last enabled at (1911): [] exc_debug+0xf5/0x140 [ 1307.615553][ C1] hardirqs last disabled at (1912): [] exc_debug+0x73/0x140 [ 1307.615578][ C1] softirqs last enabled at (1780): [] __irq_exit_rcu+0xd3/0x190 [ 1307.615599][ C1] softirqs last disabled at (1725): [] __irq_exit_rcu+0xd3/0x190 [ 1307.615619][ C1] [ 1307.615619][ C1] other info that might help us debug this: [ 1307.615624][ C1] Possible unsafe locking scenario: [ 1307.615624][ C1] [ 1307.615629][ C1] CPU0 [ 1307.615632][ C1] ---- [ 1307.615636][ C1] lock(&htab->lockdep_key); [ 1307.615647][ C1] [ 1307.615650][ C1] lock(&htab->lockdep_key); [ 1307.615661][ C1] [ 1307.615661][ C1] *** DEADLOCK *** [ 1307.615661][ C1] [ 1307.615664][ C1] no locks held by syz.3.9312/31506. [ 1307.615672][ C1] [ 1307.615672][ C1] stack backtrace: [ 1307.615678][ C1] CPU: 1 PID: 31506 Comm: syz.3.9312 Not tainted syzkaller #0 [ 1307.615694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1307.615704][ C1] Call Trace: [ 1307.615713][ C1] <#DB> [ 1307.615721][ C1] dump_stack_lvl+0x18c/0x250 [ 1307.615749][ C1] ? show_regs_print_info+0x20/0x20 [ 1307.615783][ C1] ? print_usage_bug+0x475/0x690 [ 1307.615804][ C1] ? verify_lock_unused+0x18/0x140 [ 1307.615830][ C1] lock_acquire+0x2c2/0x420 [ 1307.615848][ C1] ? look_up_lock_class+0x75/0x140 [ 1307.615871][ C1] ? htab_lock_bucket+0x17d/0x300 [ 1307.615889][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1307.615903][ C1] ? lock_release+0xb5/0x8c0 [ 1307.615941][ C1] _raw_spin_lock+0x2e/0x40 [ 1307.615956][ C1] ? htab_lock_bucket+0x17d/0x300 [ 1307.615973][ C1] htab_lock_bucket+0x17d/0x300 [ 1307.615994][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 1307.616011][ C1] ? look_up_lock_class+0x75/0x140 [ 1307.616031][ C1] ? verify_lock_unused+0x18/0x140 [ 1307.616051][ C1] ? jhash+0x2e8/0x740 [ 1307.616070][ C1] htab_map_delete_elem+0x1a4/0x650 [ 1307.616092][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 1307.616110][ C1] ? perf_callchain+0x1f0/0x1f0 [ 1307.616137][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1307.616158][ C1] bpf_overflow_handler+0x1fc/0x510 [ 1307.616184][ C1] ? bpf_overflow_handler+0xde/0x510 [ 1307.616207][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 1307.616238][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1307.616263][ C1] __perf_event_overflow+0x447/0x630 [ 1307.616293][ C1] perf_swevent_event+0x542/0x630 [ 1307.616322][ C1] ? perf_tp_event+0x1450/0x1450 [ 1307.616340][ C1] ? perf_trace_lock+0x198/0x3b0 [ 1307.616378][ C1] perf_bp_event+0x2a7/0x380 [ 1307.616406][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1307.616425][ C1] ? rcu_is_watching+0x15/0xb0 [ 1307.616447][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 1307.616471][ C1] ? lock_release+0xb5/0x8c0 [ 1307.616536][ C1] ? lock_acquire+0x2c2/0x420 [ 1307.616568][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1307.616595][ C1] notifier_call_chain+0x197/0x380 [ 1307.616618][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 1307.616641][ C1] atomic_notifier_call_chain+0xda/0x180 [ 1307.616665][ C1] notify_die+0x145/0x1a0 [ 1307.616688][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1307.616720][ C1] ? rcu_is_watching+0x15/0xb0 [ 1307.616744][ C1] notify_debug+0x2e/0x50 [ 1307.616760][ C1] exc_debug+0xde/0x140 [ 1307.616786][ C1] asm_exc_debug+0x1e/0x40 [ 1307.616802][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1307.616828][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1307.616843][ C1] RSP: 0018:ffffc9000ce3fd50 EFLAGS: 00050202 [ 1307.616857][ C1] RAX: ffffffff84294e01 RBX: 0000000000000048 RCX: 0000000000000044 [ 1307.616869][ C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc9000ce3fdc4 [ 1307.616881][ C1] RBP: ffffc9000ce3fee8 R08: ffffc9000ce3fe07 R09: 1ffff920019c7fc0 [ 1307.616894][ C1] R10: dffffc0000000000 R11: fffff520019c7fc1 R12: 0000200000000348 [ 1307.616907][ C1] R13: 0000000000000048 R14: ffffc9000ce3fdc0 R15: 0000200000000300 [ 1307.616929][ C1] ? rcuref_put_slowpath+0xe1/0x150 [ 1307.616960][ C1] [ 1307.616966][ C1] [ 1307.616972][ C1] _copy_from_user+0x8b/0xe0 [ 1307.616994][ C1] __sys_bpf+0x23e/0x890 [ 1307.617015][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 1307.617051][ C1] ? lock_chain_count+0x20/0x20 [ 1307.617082][ C1] __x64_sys_bpf+0x7c/0x90 [ 1307.617102][ C1] do_syscall_64+0x55/0xa0 [ 1307.617122][ C1] ? clear_bhb_loop+0x40/0x90 [ 1307.617140][ C1] ? clear_bhb_loop+0x40/0x90 [ 1307.617162][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.617175][ C1] RIP: 0033:0x7f9e5659aeb9 [ 1307.617190][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.617204][ C1] RSP: 002b:00007f9e57439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1307.617222][ C1] RAX: ffffffffffffffda RBX: 00007f9e56815fa0 RCX: 00007f9e5659aeb9 [ 1307.617234][ C1] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000000 [ 1307.617245][ C1] RBP: 00007f9e56608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1307.617254][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.617263][ C1] R13: 00007f9e56816038 R14: 00007f9e56815fa0 R15: 00007ffdd93754e8 [ 1307.617297][ C1] [ 1307.647010][T31510] netlink: 'syz.0.9313': attribute type 10 has an invalid length.