last executing test programs: 2.915395253s ago: executing program 1 (id=713): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141683089f034d2f87e5440c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0xe1e) 2.802052939s ago: executing program 1 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe563, 0x0, 0x0, 0x0, 0xb428}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}, @jmp={0x5, 0x1, 0x5, 0xa, 0x1, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x199, 0x54, &(0x7f00000002c0)=""/27, 0x41100, 0x34, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0xec, 0x533}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x1, 0xf, 0x5}, {0x5, 0x5, 0x10, 0x3}, {0x3, 0x2, 0xd, 0x9}, {0x4, 0x4, 0x7, 0x4}, {0x2, 0x3, 0x5, 0xa}, {0x3, 0x1, 0x7, 0x9}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0x1000}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x2b, 0x0, 0x1, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r3, r0, 0x2b, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038003d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) sendmsg$kcm(r5, &(0x7f0000002180)={&(0x7f0000000780)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="dfb40cdeba1c396246ea4ba9cadd2d2e54b9077602297535a5a852a3621f1925e5d4463422c8a9d0cf42defd305e8d2847e3ed591f185805f6f082e52c203d9b7a22d639b534848ba5607fdcbce5253b81432900deb9c8473b8af502380eed17eb728965202f2e62c3cecc339ffbd89dbcf1b59bf8cb2a1606b839a3cf5b79a4c93755b9ece145fb035ac25c4a1d978bf6201fbd17fae05e0ec4bef5d67de42c7c7f409da412b8aafcb00830aad15a1b4af70ea8191a474dbdd28f14805d1a1a0d13dbba", 0xc4}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="fa62d14033c7b6cba93c720200a841176922adbf60a73f1ae3a6c5926e5f73510d1952ee6c", 0x25}, {&(0x7f0000001940)="68fb1210fc97cb22e15d6e666656ce76ac8ba574c083921dcab5c2f3aa1d3bf0751391fc995518bd9d62ed7d2ba6fe10f632ba65efd627028fc0e84711", 0x3d}, {&(0x7f0000001980)="124f662e2e4ff447bbe117b45f58953840e8216c26df38c142ff06c268907a6481939c1c4cb2b94c6c159490427fac11f943e243e9f83a39980b60dc799e779592da532b2d886453f4a829c52664d9a9ee3ec635108c7974509b33b912bab54bd097cfc7297e4c7d6c3cffda38bf74033d1322a63c18ed4204262727512aae21b5d4b52c28066b25bb8e60127406b65eb3e625bab7d5ed4f035e05211bb21c", 0x9f}, {&(0x7f0000001a40)="37e2bb1a5253781aac2ea5c88fef1ac6aa1818b96166d77ef0b8d40566348ea424cd5529917c630f93757f9b48ab11930476616fdd36af07151b4d3c2f3345d96463dfc2e1505529009a76c37322e4002e0dd57ff93cfa80d71015", 0x5b}], 0x6, &(0x7f0000001b40)=[{0x60, 0x113, 0x7f, "8e825e8cbdf52c3bfa0b41d36e259dc58f6d38a0c54e8cc4961e18855361beac89e2161cf4226156747d129fba110e588628eae88cc920df69528e158f0c9ddee6c9d1d7a2c23783ca136551eb"}, {0xc8, 0x102, 0xff, "36f2d94b9e8f36a572ec9d8361d9c034f76bfeabb11e72d292f6c42d6ad3ca70401c8df38b1ae8aea4968801108a47e457c9a506af7dac4d32a4de10dc88c8cc5372f0157efc260e416e363f4e6b2545013746e0cbfffd314c9a843393dd03ae692ef99f3382485d97be3332b61c20d135991659742b01937328d61b8a302f18c6c0fa030e91cc024913dbb90882e8dbb3266a33622d8e1c5f56022eb51797625fa74037b854368433a94153af8a651dc24516"}, {0x80, 0x0, 0x8, "8855c14e1c587aa73ac5f414711b13ac6048e0a98f4ce00c2f709caf219d7313b5493a1ef3d66a90ca610f1e4fb8e24fd763f1226e293bd52601573df1352f0005f1b67f3eab2a19b14423b363a45291661a263960b23cb441dc19f4b7390f09e9351a252c4a8bfb402a5d2f6c15"}, {0x110, 0x111, 0x8, "069203b07b88f8c1b58974de3b8d808ecc6a89279a8bf8daee9d56fc1968862c02cf3448f6a610355fbd9be8928201117ea040033b446f40c04c802008d491554acae2a3fe314ceb5c382241dc6095ab8b5f2b8ab57a99e38ef178803276cbe216b62a0ec55e80f596d35bd560f65f5510fcf11da9e30a6f1be8167e6ee0505f143d1f88c4295877977d4007c92c56bb963d207e384a8e0acff732f7fe236d95f576f527594b80778b232931feb94d7b83f3e3bf9322cb80e83543771973ae7aa6e5019c02fd9d3266ec739a16965f2f150f4ee5bf4fc2edf5322db08a7f7f993f4f09b3209c4417e0f2dfbd57793890160088a3d6ce55042c"}, {0x110, 0x113, 0x76be, "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"}, {0x78, 0x18b1054a9d77e27f, 0x9, "0dcfb4a71c6dd29c3aa7d565f5f072379ac6b7325ce16120a84d668d3a6c4bea1dbb90b03ff9f1e9aa51314eef9f1bbb6fc083aee486be13caed2ecab15faa1a6bf9c0d621cc7f280b6cb6c24fa17a6c021e6816e4162e1940566fd870c5bb931934d206e4"}, {0xe8, 0x11, 0x1, "ad5ad169b0955bd3e0606af47de0ea8b22d8a9bbdf61133467d985298b8319f39979f324ba763984ad6c6eb8c24ff47a72d20ecf0f5b4bf42e8b43af9b0e815ac189a23427cf950756f163be0ddbe46cfb437b347dd0cd2be4295a40e24c7e3b852720c8235283e0ae2823d66e23f91bbeb316424028676e4ffd5e8e4274ae806d769a1d2f545bbdc54eabd5c889f29a2857b4095be57242cd0ccbca4091de83f21488759aa8b96fcf3a6c0ec1d98f060896cadcc78142a0b1e2954398baebf7ca69b6fadfb9f21a8d2ec231232eadf795f400"}, {0x100, 0x1, 0x4301d20b, "04b2060f5a0523d6260d7184c65c016bfd33230b87cf8f7b7adbd95ce5afb75d71855019942a8965cfe8fdad011f46deee2c9cfcb76f16b624f5012efbb0ca89a3846d58f274a966717630bda2747a18fbfdd48a6d07821867ba6a9f43568d20786e69d81ad4084e863403c6555355ff286a03470309e53bebb1a8c0067cbb0438839c4377f337704d675d3acd1166d85f17b35fa9cea3630bb350890d36367d026246047fdc59ce70a7f48f69bf6c3f8be83fa3724ccc2bed882ce3d48ed7c04cd892b9dde6912df20601ca0c36b544a5fabb70b62e8a1b0e2b4fff136aec62b598d2c4fd86b1f46f"}], 0x628}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xe, 0x8, 0x0, 0x100, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff}, 0x94) (async, rerun: 64) r6 = syz_clone(0x100100, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0xe4, 0x6, 0x27, 0x0, 0x9, 0x80, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0), 0xc}, 0x101830, 0xb512, 0x3, 0x2, 0x8, 0x0, 0xfff, 0x0, 0xfffffff9, 0x0, 0x6b}, r6, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x71, 0x0, 0x1, 0x8b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r5}, 0x18) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000740)={r5}) (rerun: 32) 2.219967322s ago: executing program 3 (id=717): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0xf5}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902", 0x37}], 0x1}, 0x0) 2.142468737s ago: executing program 0 (id=719): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x7, 0x1000, &(0x7f0000002a00)=""/4096, 0x41000, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x8, 0xa03, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x5, 0x1, 0xc, 0xa}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x1, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc4140) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000004280)=ANY=[@ANYBLOB="9feb01001800000000000000280000001f00000006000000030000000100000f0300"], &(0x7f00000001c0)=""/13, 0x46, 0xd, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) 1.971612557s ago: executing program 3 (id=720): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208000f0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x8170) recvmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, &(0x7f0000002300)=""/4096, 0x1000}, 0x10003) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000003380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0xa, 0x1}, {0x0, 0x4}, {0xb, 0x2}, {0x3, 0x1}, {0x5, 0x3}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x9}, @func={0x9, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x61, 0x5f, 0x0, 0x0]}}, &(0x7f0000003440)=""/185, 0x83, 0xb9, 0x0, 0xc}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003500)={0x1b, 0x0, 0x0, 0xff, 0x0, r1, 0xa, '\x00', 0x0, r2, 0x0, 0x0, 0x5}, 0x50) 1.856780454s ago: executing program 3 (id=721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0xfd0}, 0x108, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.800624187s ago: executing program 0 (id=723): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x121) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x2, 0x3, 0x84) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x1cc, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r6 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r4, 0x3) socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xa1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 1.495937274s ago: executing program 2 (id=724): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.465326656s ago: executing program 0 (id=725): socket$kcm(0x10, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1, 0x0, 0x0, 0x18}, 0x10021) 1.411986119s ago: executing program 3 (id=726): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x7, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0d7, 0x0, @perf_bp={0x0}, 0x1000, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x954b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x6, 0x3, 0xfffff275, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xf, r0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000004000000"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r2], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r2], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r3, &(0x7f0000000680), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r3, &(0x7f0000000680), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000000000000010000002400000093"], 0x14}, 0x800) socket$kcm(0x10, 0x3, 0x10) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@phonet={0x23, 0x2, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xae, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x24}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000240)={'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xffffff80, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x14}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xffffff80, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x14}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000001c0)=r9, 0x4) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd28024fc60100003000a00020005358ac137800500026ccd000300", 0x24}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000840)="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", 0x1d0}], 0x3}, 0x0) 1.327941344s ago: executing program 1 (id=727): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x1, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c4080, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 1.284714847s ago: executing program 2 (id=728): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000069111c0000000000851000000200f7378500000005000000950000000000000095309a05000000004135988e74eed2821b2f2935cc788e786b82e2eb6b5e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.167376043s ago: executing program 2 (id=729): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x400000000000000) 1.104967727s ago: executing program 1 (id=730): r0 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1f, 0x1, 0xa, 0xf1, 0x0, 0x9c0, 0x8, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x2}, 0x1, 0x4, 0x1, 0x0, 0x10, 0x32, 0x8, 0x0, 0x3, 0x0, 0x400}, 0x0, 0xb, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x8c, 0x1, 0x3, 0x9, 0x0, 0x3d, 0x800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x800}, 0x110020, 0x38675ab2, 0xc, 0x7, 0x7, 0x2, 0x3, 0x0, 0x800, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0d000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_clone(0x80, &(0x7f0000000580)="d024800d3b300dfb00e7f7868876a58fc0befd884c9882ea5eea7ee58e66299197a5041b5993d4dbddc1022ec3b325685c55c3ece45c94711168946a7b400353ca68ee7530b33366fb1b47eac68c55e318736bc41c0fb7069db069015863f17d78412235153697d4ef483742783b1199cfe65d8740568b80db454b89b17fa6dcd3680f331cf982522fb87e4bf0cd6b75d792a3b83a063e788bf96bfbf7d1c419b9db0131dd4026a1a766f4d74089f15ed18f9db27c0f169b32af9603b6f5415c0b731d5b96b6050a9471ee45d863a8f05a773138", 0xd4, &(0x7f00000003c0), &(0x7f0000000680), &(0x7f0000000a40)="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") perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xff, 0x8, 0x0, 0x5, 0x0, 0xbf84, 0x2610, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x9, 0x80000000, 0x0, 0x2f4, 0xa, 0x1, 0x0, 0x1c, 0x0, 0x80}, r4, 0x9, 0xffffffffffffffff, 0x9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000040)="4f27be3c1dc3d8f78d9472", &(0x7f0000000100)=""/91}, 0x20) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x84}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) 1.007834572s ago: executing program 2 (id=731): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x7, 0x1000, &(0x7f0000002a00)=""/4096, 0x41000, 0x2, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x8, 0xa03, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x5, 0x1, 0xc, 0xa}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x1, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc4140) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000004280)=ANY=[@ANYBLOB="9feb01001800000000000000280000001f00000006000000030000000100000f0300"], &(0x7f00000001c0)=""/13, 0x46, 0xd, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) 932.623737ms ago: executing program 1 (id=732): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4000) (fail_nth: 4) 457.236434ms ago: executing program 1 (id=733): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xc1, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x57, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x15, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0xc7b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x5f, &(0x7f0000000240)=""/95, 0x40f00, 0x1f, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0xfffffffd, 0x1ff}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000a00)=[r6], &(0x7f0000000a40)=[{0x4, 0x4, 0x0, 0x5}, {0x1, 0x5, 0x3, 0xc}], 0x10, 0xb7}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x400, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000b80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000002280)={&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/195, 0xc3}, {&(0x7f0000001e00)=""/24, 0x18}, {&(0x7f0000001e40)=""/105, 0x69}, {&(0x7f0000001ec0)=""/198, 0xc6}, {&(0x7f0000001fc0)=""/169, 0xa9}], 0x7, &(0x7f0000002100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x122) r27 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002300)={0xffffffffffffffff, 0x8}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002340)=@o_path={&(0x7f00000022c0)='./file0\x00', 0x0, 0x4008, r27}, 0x18) r28 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000002480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x2}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x30, 0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f00000024c0)=""/17, 0x2f, 0x11, 0x0, 0x4, 0x10000, @value=r20}, 0x28) r29 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002580)={0x0, 0x7f}, 0xc) r30 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002640)={0x6, 0x4, &(0x7f0000002380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, @ldst={0x0, 0x1, 0x3, 0x1, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x9, 0x9, 0x8, 0x0, 0x1}], &(0x7f00000023c0)='GPL\x00', 0x7, 0x4d, &(0x7f0000002400)=""/77, 0x41000, 0x1, '\x00', r4, 0x25, r28, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002540)={0x4, 0xa, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000025c0)=[r25, r26, r0, r29, 0x1, r24, r13, r17], &(0x7f0000002600)=[{0x2, 0x3, 0x1, 0xc}, {0x2, 0x2, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x9}, {0x5, 0x4, 0x5, 0xc}], 0x10, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(r18, 0x8924, &(0x7f0000002700)={'vlan0\x00', @multicast}) ioctl$TUNGETVNETLE(r15, 0x800454dd, &(0x7f0000002740)) ioctl$TUNSETTXFILTER(r22, 0x400454d1, &(0x7f0000002780)={0x0, 0x3, [@remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}]}) mkdirat$cgroup(r19, &(0x7f00000027c0)='syz0\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002800)={r14, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000028c0)={{r31}, &(0x7f0000002840), &(0x7f0000002880)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003b80)={r7, 0x0, 0x1000, 0xf2, &(0x7f0000002900)="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", &(0x7f0000003900)=""/242, 0x0, 0x0, 0x5b, 0xdc, &(0x7f0000003a00)="903ee43b462d0f072f562d5ea45d6ea55301a89f730803fd7d0ed918d37ace73319b9099ee405fc8007599ade34e6dbeba4461abf1c3e2ceea11fc23e030487591e051b071874178d37dcdf3991f9e9a7f5c772bd6bcf3ada66119", &(0x7f0000003a80)="f6daaa79244fc488786a8d320b26995b684467595dfa7a94a3742767b220f575192a2776ab74b383926097d3164fe1f8d1f3c7183ccf141c2b6d5bf8b00d4bba0d2f5e7937a367572998d0389e1eafb8b832bf2ad6764ef4e4cd724875c2601557e2bc4147005689735346bd9931be61f06afdd5fe49fa1e44c71dea8ca293db3ec0bc6bde55d851332aa2fcf526897311821abdc21730c11a51accca5c4292adb491ed6ec3ec64f30278ee80cb087edc0ed7ef9e8a8eb3e4955826411b50001930518660e46845c8956123a9a9473aeff94789e6376cf06bc80358e", 0x0, 0x0, 0x487f6616}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r32, &(0x7f0000005200)={&(0x7f0000003c40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000003cc0)="129236809e2e3b2185453187cadf93accb7520ecc50d622bcb10e494de17f2f2461a5d97fc9d1d681ca905db2fc8f03a2e9c2bc666c3513751ac1a8994c3bbd968b8ae29e6776f4c5df8affef85e9487968febc19f3fcd627135f2685a2d58aa0d4f226faff6454cff981bf870b39f7dfd2da8f8d1c3c2ec95f7b64e309b", 0x7e}, {&(0x7f0000003d40)="8e1b743904c9e6a2dfd0f0aa4baddb665c0195f83f609821930b22862e0cc733d8736fecfc7925a4b9a4b8ce2813ddfeb9aa627c2056942f3a868e1f597f3898269ac7bcbaf5a1d0698bc8be33738ee049bc95d8e930b9dcb7ee54b8816e7c185ccf249694a94f677ed84e3b19bb925d18c08216377c582a4e8bb233109423e3478a2402c5149c13eaa2c6ad1c5306582a65b14e1160d6b11f3371e692df094678586f5a84c8a68c7701a777ad0103ee6afa8edf712ffdb9cd1a8c1ca89c6e0821354b640142aeae7d82", 0xca}, {&(0x7f0000003e40)="691cf264ac8a20c121e971adbd377662ecc693bd28472ae3a726c06caf860ccf54bf5c2d449888d91ebcf7744b9f8bd04a72934c0fa0cac58bda29640bd2799ef7f7", 0x42}, {&(0x7f0000003ec0)="d6826862421d46472819421ce679840bba4e2aff8b6e97e2000654a0543df63988c6ceb9bb6da40f2e2c216ed0772f780c52e71d2b927935a4d2e6776ac53bba76057d7760802541dcfce9d66f8307d230a75a03ee7bf3e8b06e092d3b21dd86f9ffe0b3803ba644287e62a7a39f0e9fad4303b57541d23acafc8993f93498488cb807de7aaa5a6ffe4f042f8da1ed9d14b0e28afe3a28ef3a2d67c76eeb6b3f41062b897f2cea5cd470610ab41d02bfd67af9b742433ef122f1e95e8654ceb5550cff6b8ddc6c28a1ac74c17bae29e44ab95be2a72ea23588", 0xd9}, {&(0x7f0000003fc0)="b73cb3aaed558c0e7236a4018e9d", 0xe}, {&(0x7f0000004000)="d9bac44136a5413a65fd4f7b687c0a780fbf1276641cfcdc8643eea09634775fafe201c04df2b5c03bcd443f87aecab2756546aafa1b8d71c060003c2e5efeaea46065e87e0c1ab853899d7fe2cb9e6bfe1f284acf14d3b22348c76640d16a41f8e0aff37ace631a405115eb28aac43dcb859dcb7008f3258187166fde7bd16114944c72f678065739df5f12509140a65d49701ccd9a97e5b0c760", 0x9b}, {&(0x7f00000040c0)="c12b20cf600547ada9aee336232d32c29210d65e8375fde19c66b5287ca7bb9ce3e0caba8fd5d5b07af1fd053998ee2bf468ccdd84d60df752e191cff02433860c41cddff3b81b209b7f787f32d5bdff7b19a614da335b193294c662131b1af7135430942304711d329be9384c783c9f03af06d349a3b265a3fb087f", 0x7c}, {&(0x7f0000004140)="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", 0x1000}], 0x8, &(0x7f00000051c0)=[@rights={{0x28, 0x1, 0x1, [r15, r27, r11, r17, r30, r23]}}], 0x28, 0xd0975424f71e9135}, 0x4000000) recvmsg(r26, &(0x7f0000007800)={&(0x7f0000005240)=@ax25={{0x3, @rose}, [@rose, @remote, @rose, @netrom, @netrom, @null, @null, @netrom]}, 0x80, &(0x7f0000006780)=[{&(0x7f00000052c0)=""/231, 0xe7}, {&(0x7f00000053c0)=""/226, 0xe2}, {&(0x7f00000054c0)=""/146, 0x92}, {&(0x7f0000005580)=""/69, 0x45}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/181, 0xb5}, {&(0x7f00000066c0)=""/131, 0x83}], 0x7, &(0x7f0000006800)=""/4096, 0x1000}, 0x100) recvmsg(r10, &(0x7f0000007f40)={&(0x7f0000007840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000007e40)=[{&(0x7f00000078c0)=""/60, 0x3c}, {&(0x7f0000007900)=""/27, 0x1b}, {&(0x7f0000007940)=""/241, 0xf1}, {&(0x7f0000007a40)=""/84, 0x54}, {&(0x7f0000007ac0)=""/186, 0xba}, {&(0x7f0000007b80)=""/144, 0x90}, {&(0x7f0000007c40)=""/123, 0x7b}, {&(0x7f0000007cc0)=""/207, 0xcf}, {&(0x7f0000007dc0)=""/109, 0x6d}], 0x9, &(0x7f0000007f00)=""/7, 0x7}, 0x40010062) r34 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r34, &(0x7f0000007fc0)='freezer.state\x00', 0x0, 0x0) r35 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000008280)={0x6, 0x14, &(0x7f0000008000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x7, 0x6, 0x5, 0x1, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @call={0x85, 0x0, 0x0, 0x9f}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x69}, @exit], &(0x7f00000080c0)='syzkaller\x00', 0x8, 0x49, &(0x7f0000008100)=""/73, 0x40f00, 0x12, '\x00', r2, 0x25, r21, 0x8, &(0x7f0000008180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000081c0)={0x0, 0xf, 0x3, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000008200)=[r12, r13], &(0x7f0000008240)=[{0x3, 0x2, 0x9, 0x4}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000008480)={@ifindex=r33, r35, 0x21, 0x22, r25, @void, @void, @void, @value=r3}, 0x20) 434.522705ms ago: executing program 0 (id=734): socket$kcm(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000600000007000000890f04630b4d7d113b3f186e"], 0x20, 0x5}, 0x0) 339.693781ms ago: executing program 3 (id=735): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x10, 0x6, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x1020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x8}, 0x4, 0x6, 0x1000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x48b3, 0x0, 0x6}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0xfffffffffffffffc}, @alu={0x3, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x123001, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001740)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6030, 0x8000}, 0x100904, 0x100000, 0x0, 0x4, 0x7f1d, 0x0, 0xd13b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x5, &(0x7f0000000140), 0x55) 245.048007ms ago: executing program 2 (id=736): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 161.621181ms ago: executing program 0 (id=737): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x84}, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18, 0xffffffff}, 0x4004000) 137.096023ms ago: executing program 3 (id=738): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x1, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c4080, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 78.220666ms ago: executing program 2 (id=739): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0180300000000000000815bbb2594f90124fc60100c0440020000fb043582c137023e370248078000f01700d1bd", 0x2e}], 0x1}, 0x4000800) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a'], 0xfe33) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x1009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r4}, 0x18) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}, {&(0x7f0000000580)="609915269c4e84624ef81783f9aebef576ec61e6f496dc32e8fc13126975caa38d110a3f11bd683ae48b2107c82aa5cdbd7dac20398457adf59be3e3a5dee0301cc26e6678a1de72c0dd6e82c3b1a6fabacba5076baa24bf1c4ec9ae9acc5ce579736b70ce0380eb3e57e834712d414fad667545aa7f9ef87f93263ee4f8a837b6b6fbd5fd269205bde13bc0cabd5f83d275c1ae24aa824160ff1e9d0b8c4a5a33af0b285558cd6296a58ec4f6e3cce13221c899dbe00adbd367f397b15c08c32446c34cd04ab654ce75fc405df16c89", 0xd0}, {&(0x7f0000000040)="b1245bdf55eaf94ab9a6b1a222d5858329ccaf118b1633d050bc888a2b9e56fe685fc39dec0c7a926925826c46c837853dd6b434aab961850893cf3542017258685c06dc6eaa2f576f90ec1e30566a39eefb2f5485a297ade9526202b5bdfe6ef98fa8289ad59a69d726099e0cc169291445ca7d1873040af60c7a7190bd2a86ff60a7b989f4e2b77c477a15b0845e7862d4", 0x92}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="3800000000000000120100007f0400004af285bcbe55b8fcb8a9543525c2f1ceabcbb5f298fa9d024799954748b1e909026227cbd09fea74f7c400000000000000"], 0x38}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000008000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x8000, &(0x7f0000000300)="2f1cf3aa4e59b129d64236404697ef80f277676637bfcd25b268e3fc74cee5700a5b3b3a239aa20c04696b0f817b82341a06e0a5bea571e4d7b5970c51c4f538adb6baa88c6281d38cd664e780592e52e6a6fe54d34d804bef25b1756af64794351bcd6b4ffd09dadd4c2ca7afee81a4a86dd1fa337ae0bc621b10dcfe92a71a9f8273e7e2a592f347bb0546ae5143e1486ef94d76c360d5a981a24f85bd9486aee0e931e59903f18ac606288bf4e9ef78bc79b6aeccea8c2e4a86bc6010323456c6c600bef0b6c2854013a4", 0xcc, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)="b1ced728ca2a1d4079b1bd443aca84588c20fd44d5db446ae5aed230d620920fa2c5832ccb9b8bb793495dfc") 0s ago: executing program 0 (id=740): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=0x0, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES8=r4, @ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="b468907052b5e0feceda6df7e689a7084176acce79a4273e828df722b5629062489b18e0561975560010fdd89e9760c35f4b04b58bcbe4d0ce898e34d7af63bd2948942e0f9789c5bfcf0c03bc1ebbdeb184ec162b69a960f4482319030e81c6b37b09f15c154a9d36c0aee6fc7b2f7289029fd523233989f6cad0f331abd6d1dfcfc08f3869c7f37b73b47d921a406575225056422852f0bf85d23c5e08e39c45156f49de7e846ff9bd22c29f253573b42f4410bc715acabd6421e8b0273bfb04ef9683e0712584a8b5feefe26b997f121787cc74fe4d6ef9"], 0xfe33) kernel console output (not intermixed with test programs): [ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.806794][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.833430][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.938076][ T5771] hsr_slave_0: entered promiscuous mode [ 85.946135][ T5771] hsr_slave_1: entered promiscuous mode [ 85.953262][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.961801][ T5771] Cannot create hsr debugfs directory [ 86.004751][ T5772] hsr_slave_0: entered promiscuous mode [ 86.011999][ T5772] hsr_slave_1: entered promiscuous mode [ 86.018453][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.026874][ T5772] Cannot create hsr debugfs directory [ 86.391177][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.426918][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.438178][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.483956][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.575485][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.601137][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.616822][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.631764][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.732279][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.755148][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.767139][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.784948][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.883582][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.896504][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.908270][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.935705][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.092648][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.145456][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.193647][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.201194][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.221811][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.256224][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.263486][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.326856][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.358458][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.377540][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.419055][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.483207][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.490629][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.527815][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.535060][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.567877][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.591096][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.598292][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.622959][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.630217][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.692031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.699425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.745583][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.753045][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.782012][ T5777] Bluetooth: hci3: command tx timeout [ 87.862379][ T5777] Bluetooth: hci0: command tx timeout [ 87.862544][ T51] Bluetooth: hci1: command tx timeout [ 87.874535][ T5783] Bluetooth: hci2: command tx timeout [ 87.972365][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.268242][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.388717][ T5769] veth0_vlan: entered promiscuous mode [ 88.437990][ T5769] veth1_vlan: entered promiscuous mode [ 88.512025][ T5769] veth0_macvtap: entered promiscuous mode [ 88.533820][ T5769] veth1_macvtap: entered promiscuous mode [ 88.597029][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.617810][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.636049][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.648717][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663901][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.674381][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.684084][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.734030][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.784469][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.876513][ T5771] veth0_vlan: entered promiscuous mode [ 88.945252][ T5771] veth1_vlan: entered promiscuous mode [ 88.954819][ T5770] veth0_vlan: entered promiscuous mode [ 88.966735][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.991570][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.015514][ T5772] veth0_vlan: entered promiscuous mode [ 89.056801][ T5770] veth1_vlan: entered promiscuous mode [ 89.080791][ T5772] veth1_vlan: entered promiscuous mode [ 89.089042][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.097336][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.213342][ T5772] veth0_macvtap: entered promiscuous mode [ 89.243288][ T5770] veth0_macvtap: entered promiscuous mode [ 89.258212][ T5770] veth1_macvtap: entered promiscuous mode [ 89.269490][ T5772] veth1_macvtap: entered promiscuous mode [ 89.283499][ T5771] veth0_macvtap: entered promiscuous mode [ 89.335295][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.348809][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.362317][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.377485][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.390736][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.403126][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.416471][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.443257][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.475137][ T5771] veth1_macvtap: entered promiscuous mode [ 89.493117][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.508199][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.528288][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.565883][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576798][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.587030][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.596056][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614367][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.626535][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.656359][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.672599][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.691172][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.740965][ T5865] Zero length message leads to an empty skb [ 89.746307][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.761960][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.770921][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781508][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.812899][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.819282][ C0] hrtimer: interrupt took 196257 ns [ 89.825545][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.840065][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.851268][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.862907][ T5783] Bluetooth: hci3: command tx timeout [ 89.870770][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.881804][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.900914][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.939925][ T5783] Bluetooth: hci2: command tx timeout [ 89.940346][ T51] Bluetooth: hci1: command tx timeout [ 89.945871][ T5777] Bluetooth: hci0: command tx timeout [ 89.965653][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.987654][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.998236][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.009270][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.020185][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.031838][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.044679][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.056600][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.066969][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.077348][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.088022][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.109837][ T5865] netlink: 'syz.1.5': attribute type 2 has an invalid length. [ 90.314031][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.325957][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.405779][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.430988][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.498200][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.530527][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.556152][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.583193][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.686475][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702292][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.715285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.727068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.083961][ T5878] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.111185][ T5878] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 91.561355][ T5887] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 91.627363][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.636184][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.755251][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.762868][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.771677][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.779194][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.815922][ T5887] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.848250][ T5896] Illegal XDP return value 4294967294 on prog (id 9) dev N/A, expect packet loss! [ 91.939792][ T5783] Bluetooth: hci3: command tx timeout [ 92.019917][ T5777] Bluetooth: hci0: command tx timeout [ 92.025777][ T5777] Bluetooth: hci1: command tx timeout [ 92.031475][ T5783] Bluetooth: hci2: command tx timeout [ 92.218037][ T9] cfg80211: failed to load regulatory.db [ 92.871212][ T5897] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.944607][ T5902] netlink: 'syz.2.10': attribute type 33 has an invalid length. [ 92.970417][ T5902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.969736][ T5929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'. [ 95.364925][ T5887] syz.0.1 (5887) used greatest stack depth: 20752 bytes left [ 96.064113][ T5948] bridge_slave_1: left allmulticast mode [ 96.072725][ T5948] bridge_slave_1: left promiscuous mode [ 96.081346][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.138473][ T5948] bridge_slave_0: left allmulticast mode [ 96.155095][ T5951] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.26'. [ 96.160921][ T5948] bridge_slave_0: left promiscuous mode [ 96.204743][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.690126][ T5957] netlink: 'syz.1.28': attribute type 2 has an invalid length. [ 96.998367][ T5948] syz.2.25 (5948) used greatest stack depth: 20488 bytes left [ 97.288229][ T5962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29'. [ 99.232643][ T5993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40'. [ 100.412168][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.48'. [ 100.454136][ T6018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50'. [ 101.219833][ T5777] Bluetooth: hci0: command tx timeout [ 101.335870][ T6022] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 103.639273][ T5777] Bluetooth: hci0: command tx timeout [ 104.117634][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.60'. [ 104.685408][ T6063] netlink: 'syz.1.62': attribute type 10 has an invalid length. [ 104.700864][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.709274][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.741925][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.749433][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.757086][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.764389][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.982282][ T6063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.705198][ T5783] Bluetooth: hci0: command tx timeout [ 106.056832][ T6079] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.77'. [ 106.084535][ T6079] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 106.164825][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 107.784056][ T5783] Bluetooth: hci0: command tx timeout [ 109.859466][ T5783] Bluetooth: hci0: command tx timeout [ 110.075102][ T6137] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 110.085513][ T6137] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 110.167928][ T6141] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 110.279422][ T6142] netlink: 'syz.1.84': attribute type 33 has an invalid length. [ 110.287519][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.84'. [ 110.424945][ T6148] netlink: 'syz.2.89': attribute type 3 has an invalid length. [ 110.459239][ T6148] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.89'. [ 111.163258][ T6153] netlink: 'syz.0.92': attribute type 13 has an invalid length. [ 111.174668][ T6153] macvtap0: entered promiscuous mode [ 111.193642][ T6153] macvtap0: refused to change device tx_queue_len [ 111.281808][ T6157] delete_channel: no stack [ 111.955710][ T5783] Bluetooth: hci0: command tx timeout [ 112.712992][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 3124 [ 114.019371][ T5783] Bluetooth: hci0: command tx timeout [ 115.673620][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.694407][ T6184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.721979][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.746575][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.757886][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.907719][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.109'. [ 115.928861][ T6191] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.104'. [ 116.098467][ T6196] netlink: 'syz.3.104': attribute type 2 has an invalid length. [ 116.106881][ T5783] Bluetooth: hci0: command tx timeout [ 116.189997][ T6195] netlink: 'syz.0.102': attribute type 33 has an invalid length. [ 116.210690][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.102'. [ 116.841912][ T6202] netlink: 'syz.2.105': attribute type 39 has an invalid length. [ 116.890659][ T6204] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 116.898609][ T6204] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.106'. [ 117.201978][ T6202] hsr_slave_1 (unregistering): left promiscuous mode [ 118.199000][ T5783] Bluetooth: hci0: command tx timeout [ 118.970616][ T6202] syz.2.105 (6202) used greatest stack depth: 20072 bytes left [ 119.291341][ T6299] netlink: 'syz.0.112': attribute type 21 has an invalid length. [ 119.332094][ T6299] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.358885][ T6299] IPv6: Can't replace route, no match found [ 120.259321][ T5783] Bluetooth: hci0: command tx timeout [ 120.684974][ T6324] sit0: entered promiscuous mode [ 120.705819][ T6324] sit0: entered allmulticast mode [ 120.881553][ T6324] FAULT_INJECTION: forcing a failure. [ 120.881553][ T6324] name failslab, interval 1, probability 0, space 0, times 1 [ 120.894521][ T6324] CPU: 0 PID: 6324 Comm: syz.3.122 Not tainted syzkaller #0 [ 120.902038][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.912476][ T6324] Call Trace: [ 120.916257][ T6324] [ 120.919262][ T6324] dump_stack_lvl+0x18c/0x250 [ 120.924034][ T6324] ? verify_lock_unused+0x140/0x140 [ 120.929501][ T6324] ? show_regs_print_info+0x20/0x20 [ 120.934770][ T6324] ? load_image+0x400/0x400 [ 120.939441][ T6324] ? perf_trace_preemptirq_template+0xac/0x330 [ 120.945695][ T6324] should_fail_ex+0x39d/0x4d0 [ 120.950457][ T6324] should_failslab+0x9/0x20 [ 120.955127][ T6324] slab_pre_alloc_hook+0x59/0x310 [ 120.960221][ T6324] ? lockdep_softirqs_on+0x580/0x580 [ 120.965677][ T6324] kmem_cache_alloc+0x5a/0x2d0 [ 120.970601][ T6324] ? skb_clone+0x1eb/0x370 [ 120.975180][ T6324] skb_clone+0x1eb/0x370 [ 120.979558][ T6324] bpf_clone_redirect+0xad/0x3d0 [ 120.984641][ T6324] ? read_tsc+0x9/0x20 [ 120.988775][ T6324] ? ktime_get+0x24b/0x280 [ 120.993348][ T6324] bpf_prog_ef4ac361e44d514c+0x21/0x25 [ 120.998901][ T6324] bpf_test_run+0x2df/0x870 [ 121.003572][ T6324] ? bpf_test_run+0x174/0x870 [ 121.008319][ T6324] ? convert___skb_to_skb+0x590/0x590 [ 121.013947][ T6324] ? eth_get_headlen+0x210/0x210 [ 121.019147][ T6324] ? slab_build_skb+0x25f/0x3f0 [ 121.024064][ T6324] ? convert___skb_to_skb+0x3d/0x590 [ 121.029499][ T6324] bpf_prog_test_run_skb+0xad2/0x12b0 [ 121.035132][ T6324] ? cpu_online+0x60/0x60 [ 121.039520][ T6324] bpf_prog_test_run+0x321/0x390 [ 121.044530][ T6324] __sys_bpf+0x49d/0x890 [ 121.048922][ T6324] ? bpf_link_show_fdinfo+0x390/0x390 [ 121.054552][ T6324] ? lock_chain_count+0x20/0x20 [ 121.059614][ T6324] __x64_sys_bpf+0x7c/0x90 [ 121.064089][ T6324] do_syscall_64+0x55/0xa0 [ 121.068585][ T6324] ? clear_bhb_loop+0x40/0x90 [ 121.073321][ T6324] ? clear_bhb_loop+0x40/0x90 [ 121.078062][ T6324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.084002][ T6324] RIP: 0033:0x7f74d779acb9 [ 121.088463][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.108475][ T6324] RSP: 002b:00007f74d86ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.117037][ T6324] RAX: ffffffffffffffda RBX: 00007f74d7a15fa0 RCX: 00007f74d779acb9 [ 121.125233][ T6324] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 121.133266][ T6324] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 121.141332][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.149435][ T6324] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 121.157705][ T6324] [ 122.345478][ T5783] Bluetooth: hci0: command tx timeout [ 124.399807][ T6346] netlink: 'syz.3.126': attribute type 6 has an invalid length. [ 124.445154][ T6346] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.126'. [ 124.510289][ T5783] Bluetooth: hci0: command tx timeout [ 124.612798][ T6345] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 124.625414][ T6345] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.125'. [ 125.315908][ T6356] netlink: 'syz.3.128': attribute type 39 has an invalid length. [ 125.553484][ T6356] hsr_slave_1 (unregistering): left promiscuous mode [ 125.626057][ T6357] netlink: 'syz.2.129': attribute type 12 has an invalid length. [ 125.639343][ T6357] netlink: 172 bytes leftover after parsing attributes in process `syz.2.129'. [ 126.051890][ T6367] netlink: 'syz.0.133': attribute type 17 has an invalid length. [ 126.060037][ T6367] netlink: 152 bytes leftover after parsing attributes in process `syz.0.133'. [ 126.072003][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.429949][ T6371] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.136'. [ 128.489643][ T6408] netlink: 180 bytes leftover after parsing attributes in process `syz.2.147'. [ 129.641260][ T6426] FAULT_INJECTION: forcing a failure. [ 129.641260][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.699038][ T6426] CPU: 0 PID: 6426 Comm: syz.2.153 Not tainted syzkaller #0 [ 129.706641][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.716850][ T6426] Call Trace: [ 129.720444][ T6426] [ 129.723515][ T6426] dump_stack_lvl+0x18c/0x250 [ 129.728261][ T6426] ? show_regs_print_info+0x20/0x20 [ 129.733528][ T6426] ? load_image+0x400/0x400 [ 129.738086][ T6426] ? __might_fault+0xaa/0x120 [ 129.743012][ T6426] ? __lock_acquire+0x7d40/0x7d40 [ 129.748193][ T6426] should_fail_ex+0x39d/0x4d0 [ 129.753061][ T6426] _copy_from_user+0x2f/0xe0 [ 129.757714][ T6426] __sys_bpf+0x23e/0x890 [ 129.762017][ T6426] ? bpf_link_show_fdinfo+0x390/0x390 [ 129.767475][ T6426] ? lock_chain_count+0x20/0x20 [ 129.772561][ T6426] __x64_sys_bpf+0x7c/0x90 [ 129.777124][ T6426] do_syscall_64+0x55/0xa0 [ 129.781772][ T6426] ? clear_bhb_loop+0x40/0x90 [ 129.786505][ T6426] ? clear_bhb_loop+0x40/0x90 [ 129.791260][ T6426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.797299][ T6426] RIP: 0033:0x7f7e0c59acb9 [ 129.801766][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.822307][ T6426] RSP: 002b:00007f7e0a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.830954][ T6426] RAX: ffffffffffffffda RBX: 00007f7e0c816090 RCX: 00007f7e0c59acb9 [ 129.839156][ T6426] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 129.847187][ T6426] RBP: 00007f7e0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.855216][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.863270][ T6426] R13: 00007f7e0c816128 R14: 00007f7e0c816090 R15: 00007ffdc0c3b3d8 [ 129.871493][ T6426] [ 130.188907][ T6432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.631476][ T6441] warning: `syz.0.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.225088][ T6446] FAULT_INJECTION: forcing a failure. [ 131.225088][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.268332][ T6446] CPU: 0 PID: 6446 Comm: syz.0.161 Not tainted syzkaller #0 [ 131.276236][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.286352][ T6446] Call Trace: [ 131.289852][ T6446] [ 131.292864][ T6446] dump_stack_lvl+0x18c/0x250 [ 131.297626][ T6446] ? show_regs_print_info+0x20/0x20 [ 131.303089][ T6446] ? load_image+0x400/0x400 [ 131.307657][ T6446] ? __lock_acquire+0x7d40/0x7d40 [ 131.312765][ T6446] ? snprintf+0xe9/0x140 [ 131.317432][ T6446] should_fail_ex+0x39d/0x4d0 [ 131.322297][ T6446] _copy_to_user+0x2f/0xa0 [ 131.326791][ T6446] simple_read_from_buffer+0xe7/0x150 [ 131.332328][ T6446] proc_fail_nth_read+0x1e8/0x260 [ 131.337419][ T6446] ? proc_fault_inject_write+0x360/0x360 [ 131.343164][ T6446] ? fsnotify_perm+0x271/0x5e0 [ 131.347995][ T6446] ? proc_fault_inject_write+0x360/0x360 [ 131.353704][ T6446] vfs_read+0x28b/0x970 [ 131.358017][ T6446] ? kernel_read+0x1e0/0x1e0 [ 131.362678][ T6446] ? __fget_files+0x28/0x4b0 [ 131.367322][ T6446] ? __fget_files+0x28/0x4b0 [ 131.371978][ T6446] ? __fget_files+0x43d/0x4b0 [ 131.376731][ T6446] ? __fdget_pos+0x2a3/0x330 [ 131.381385][ T6446] ? ksys_read+0x75/0x260 [ 131.386216][ T6446] ksys_read+0x150/0x260 [ 131.390533][ T6446] ? vfs_write+0x990/0x990 [ 131.395095][ T6446] ? lockdep_hardirqs_on+0x98/0x150 [ 131.400350][ T6446] do_syscall_64+0x55/0xa0 [ 131.404835][ T6446] ? clear_bhb_loop+0x40/0x90 [ 131.409574][ T6446] ? clear_bhb_loop+0x40/0x90 [ 131.414320][ T6446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.420268][ T6446] RIP: 0033:0x7f4f20f5b58e [ 131.424733][ T6446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.444761][ T6446] RSP: 002b:00007f4f21f22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.453525][ T6446] RAX: ffffffffffffffda RBX: 00007f4f21f236c0 RCX: 00007f4f20f5b58e [ 131.462111][ T6446] RDX: 000000000000000f RSI: 00007f4f21f230a0 RDI: 0000000000000004 [ 131.470668][ T6446] RBP: 00007f4f21f23090 R08: 0000000000000000 R09: 0000000000000000 [ 131.478879][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.487002][ T6446] R13: 00007f4f21216038 R14: 00007f4f21215fa0 R15: 00007ffebdc8c8f8 [ 131.495341][ T6446] [ 131.808363][ T6455] netlink: 'syz.3.166': attribute type 10 has an invalid length. [ 131.835699][ T6455] netlink: 'syz.3.166': attribute type 19 has an invalid length. [ 131.859547][ T6455] netlink: 156 bytes leftover after parsing attributes in process `syz.3.166'. [ 131.940373][ T6457] sctp: [Deprecated]: syz.3.166 (pid 6457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.940373][ T6457] Use struct sctp_sack_info instead [ 133.146040][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.153259][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189800][ T6477] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 133.208464][ T6477] syzkaller0: linktype set to 280 [ 136.236279][ T6529] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 136.246672][ T6529] netlink: 2 bytes leftover after parsing attributes in process `syz.2.190'. [ 136.266783][ T6529] batadv_slave_1: entered promiscuous mode [ 136.295792][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.345234][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.531872][ T6531] netlink: 'syz.3.192': attribute type 6 has an invalid length. [ 136.542735][ T6531] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.192'. [ 138.454806][ T6570] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 138.489606][ T6570] netlink: 2 bytes leftover after parsing attributes in process `syz.3.208'. [ 138.503073][ T6570] batadv_slave_1: entered promiscuous mode [ 138.511576][ T6570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.521880][ T6570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.535791][ T6570] bridge0: port 3(batadv_slave_1) entered blocking state [ 138.550726][ T6570] bridge0: port 3(batadv_slave_1) entered disabled state [ 138.575830][ T6570] batadv_slave_1: entered allmulticast mode [ 138.608237][ T6570] bridge0: port 3(batadv_slave_1) entered blocking state [ 138.616424][ T6570] bridge0: port 3(batadv_slave_1) entered forwarding state [ 138.942561][ T6580] Dead loop on virtual device ip6_vti0, fix it urgently! [ 139.513414][ T6598] syz.1.216[6598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.513768][ T6598] syz.1.216[6598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.559929][ T6598] netlink: 'syz.1.216': attribute type 2 has an invalid length. [ 139.602273][ T6598] netlink: 51 bytes leftover after parsing attributes in process `syz.1.216'. [ 139.805206][ T6599] netlink: 1 bytes leftover after parsing attributes in process `syz.1.216'. [ 139.999740][ T6602] netlink: 'syz.3.217': attribute type 21 has an invalid length. [ 140.047914][ T6602] netlink: 156 bytes leftover after parsing attributes in process `syz.3.217'. [ 141.775838][ T5783] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 141.777297][ T6631] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 141.817445][ T6631] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.228'. [ 142.054958][ T6638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.232'. [ 142.251749][ T6641] netlink: 'syz.2.233': attribute type 17 has an invalid length. [ 142.923218][ T6639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.298055][ T6655] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 145.587882][ T6663] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 145.613061][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.241'. [ 145.797519][ T6663] team0: Port device geneve0 added [ 145.884150][ T6667] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 145.909432][ T6667] team0: Port device netdevsim0 added [ 145.923943][ T6667] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 145.935759][ T6663] syz.1.241 (6663) used greatest stack depth: 19496 bytes left [ 146.245849][ T6669] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 146.295942][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 146.422169][ T6669] bridge0: port 3(ipvlan1) entered blocking state [ 146.437095][ T6669] bridge0: port 3(ipvlan1) entered disabled state [ 146.486421][ T6680] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.247'. [ 146.488350][ T6669] ipvlan1: entered allmulticast mode [ 146.516951][ T6669] veth0_vlan: entered allmulticast mode [ 146.558204][ T6680] delete_channel: no stack [ 146.567676][ T6680] delete_channel: no stack [ 146.597822][ T6669] ipvlan1: left allmulticast mode [ 146.603526][ T6669] veth0_vlan: left allmulticast mode [ 146.630303][ T6669] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 146.647608][ T6675] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 146.717805][ T6675] team0: Port device macvlan0 added [ 146.728743][ T6685] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.812415][ T6682] netlink: 'syz.3.248': attribute type 21 has an invalid length. [ 146.879877][ T6690] syz.2.250[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.880132][ T6690] syz.2.250[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.903068][ T6690] netlink: 'syz.2.250': attribute type 2 has an invalid length. [ 146.923373][ T6690] netlink: 51 bytes leftover after parsing attributes in process `syz.2.250'. [ 147.100735][ T6693] netlink: 'syz.1.251': attribute type 58 has an invalid length. [ 147.124314][ T6693] netlink: 144 bytes leftover after parsing attributes in process `syz.1.251'. [ 148.158069][ T6711] syz.2.257 uses obsolete (PF_INET,SOCK_PACKET) [ 149.297662][ T6727] netlink: 763 bytes leftover after parsing attributes in process `syz.2.263'. [ 149.408053][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 152.785209][ T6762] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 152.826968][ T6762] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.277'. [ 152.883462][ T6762] openvswitch: netlink: Flow key attr not present in new flow. [ 156.807393][ T6803] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 156.827115][ T6807] FAULT_INJECTION: forcing a failure. [ 156.827115][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 156.841685][ T6803] netlink: 152 bytes leftover after parsing attributes in process `syz.2.290'. [ 156.859646][ T6807] CPU: 0 PID: 6807 Comm: syz.1.291 Not tainted syzkaller #0 [ 156.867180][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.878928][ T6807] Call Trace: [ 156.882855][ T6807] [ 156.886206][ T6807] dump_stack_lvl+0x18c/0x250 [ 156.891266][ T6807] ? sctp_sendmsg+0x1575/0x28c0 [ 156.896490][ T6807] ? ___sys_sendmsg+0x2a6/0x360 [ 156.901681][ T6807] ? show_regs_print_info+0x20/0x20 [ 156.907460][ T6807] ? load_image+0x400/0x400 [ 156.912636][ T6807] should_fail_ex+0x39d/0x4d0 [ 156.917786][ T6807] should_failslab+0x9/0x20 [ 156.922980][ T6807] slab_pre_alloc_hook+0x59/0x310 [ 156.928333][ T6807] ? sctp_add_bind_addr+0x8c/0x360 [ 156.933905][ T6807] __kmem_cache_alloc_node+0x53/0x250 [ 156.939801][ T6807] ? sctp_add_bind_addr+0x8c/0x360 [ 156.945383][ T6807] kmalloc_trace+0x2a/0xe0 [ 156.950501][ T6807] sctp_add_bind_addr+0x8c/0x360 [ 156.956531][ T6807] sctp_copy_local_addr_list+0x315/0x4f0 [ 156.963161][ T6807] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 156.969658][ T6807] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 156.976154][ T6807] ? sctp_v4_is_any+0x35/0x60 [ 156.981486][ T6807] ? sctp_copy_one_addr+0x8c/0x350 [ 156.987104][ T6807] sctp_bind_addr_copy+0xb3/0x3c0 [ 156.992471][ T6807] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 156.999616][ T6807] sctp_connect_new_asoc+0x2f9/0x6a0 [ 157.006051][ T6807] ? __sctp_connect+0xd80/0xd80 [ 157.011200][ T6807] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.017595][ T6807] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 157.023312][ T6807] ? security_sctp_bind_connect+0x89/0xb0 [ 157.029609][ T6807] sctp_sendmsg+0x1575/0x28c0 [ 157.034782][ T6807] ? sctp_getsockopt+0xb60/0xb60 [ 157.040065][ T6807] ? aa_sk_perm+0x83c/0x970 [ 157.044821][ T6807] ? aa_af_perm+0x330/0x330 [ 157.049486][ T6807] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 157.056174][ T6807] ? sock_rps_record_flow+0x19/0x3f0 [ 157.061669][ T6807] ? inet_sendmsg+0xe9/0x2f0 [ 157.066492][ T6807] ? inet_send_prepare+0x260/0x260 [ 157.072224][ T6807] ____sys_sendmsg+0x5ba/0x960 [ 157.077340][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 157.082889][ T6807] ? __asan_memset+0x22/0x40 [ 157.087945][ T6807] ? __sys_sendmsg_sock+0x30/0x30 [ 157.093171][ T6807] ? __import_iovec+0x5f2/0x850 [ 157.098401][ T6807] ? import_iovec+0x73/0xa0 [ 157.103375][ T6807] ___sys_sendmsg+0x2a6/0x360 [ 157.108316][ T6807] ? __sys_sendmsg+0x2a0/0x2a0 [ 157.113532][ T6807] ? __lock_acquire+0x7d40/0x7d40 [ 157.119160][ T6807] __se_sys_sendmsg+0x1c2/0x2b0 [ 157.125405][ T6807] ? __x64_sys_sendmsg+0x80/0x80 [ 157.131296][ T6807] ? lockdep_hardirqs_on+0x98/0x150 [ 157.136954][ T6807] do_syscall_64+0x55/0xa0 [ 157.141518][ T6807] ? clear_bhb_loop+0x40/0x90 [ 157.146844][ T6807] ? clear_bhb_loop+0x40/0x90 [ 157.151689][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.157851][ T6807] RIP: 0033:0x7f203b59acb9 [ 157.162862][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.184607][ T6807] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.194291][ T6807] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 157.203032][ T6807] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 157.211887][ T6807] RBP: 00007f203c3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 157.220350][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.228620][ T6807] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 157.236925][ T6807] [ 157.255360][ T6803] .`: renamed from bond0 (while UP) [ 157.507620][ T6812] netlink: 'syz.3.293': attribute type 21 has an invalid length. [ 157.529855][ T6812] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.664374][ T6814] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.294'. [ 157.781603][ T6814] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 157.933452][ T6814] team0: Port device hsr0 added [ 157.981188][ T6827] syz.2.298[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.981429][ T6827] syz.2.298[6827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.128152][ T6827] netlink: 'syz.2.298': attribute type 2 has an invalid length. [ 158.148878][ T6827] netlink: 51 bytes leftover after parsing attributes in process `syz.2.298'. [ 158.357607][ T6832] netlink: 'syz.0.300': attribute type 3 has an invalid length. [ 158.384679][ T6832] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.300'. [ 158.595938][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.304'. [ 158.898957][ T6848] FAULT_INJECTION: forcing a failure. [ 158.898957][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 158.913229][ T6848] CPU: 0 PID: 6848 Comm: syz.3.305 Not tainted syzkaller #0 [ 158.921154][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.931707][ T6848] Call Trace: [ 158.935051][ T6848] [ 158.938230][ T6848] dump_stack_lvl+0x18c/0x250 [ 158.943266][ T6848] ? sctp_sendmsg+0x1575/0x28c0 [ 158.948980][ T6848] ? ___sys_sendmsg+0x2a6/0x360 [ 158.954471][ T6848] ? show_regs_print_info+0x20/0x20 [ 158.960254][ T6848] ? load_image+0x400/0x400 [ 158.965545][ T6848] should_fail_ex+0x39d/0x4d0 [ 158.970883][ T6848] should_failslab+0x9/0x20 [ 158.975991][ T6848] slab_pre_alloc_hook+0x59/0x310 [ 158.981295][ T6848] ? sctp_add_bind_addr+0x8c/0x360 [ 158.986551][ T6848] __kmem_cache_alloc_node+0x53/0x250 [ 158.992552][ T6848] ? sctp_add_bind_addr+0x8c/0x360 [ 158.998989][ T6848] kmalloc_trace+0x2a/0xe0 [ 159.004362][ T6848] sctp_add_bind_addr+0x8c/0x360 [ 159.009816][ T6848] sctp_copy_local_addr_list+0x315/0x4f0 [ 159.015621][ T6848] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 159.021475][ T6848] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 159.027670][ T6848] ? sctp_v6_is_any+0x64/0x70 [ 159.033349][ T6848] ? sctp_copy_one_addr+0x8c/0x350 [ 159.038508][ T6848] sctp_bind_addr_copy+0xb3/0x3c0 [ 159.043857][ T6848] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 159.050340][ T6848] sctp_connect_new_asoc+0x2f9/0x6a0 [ 159.055871][ T6848] ? __sctp_connect+0xd80/0xd80 [ 159.061076][ T6848] ? __local_bh_enable_ip+0x13a/0x1c0 [ 159.066928][ T6848] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 159.072627][ T6848] ? security_sctp_bind_connect+0x89/0xb0 [ 159.078766][ T6848] sctp_sendmsg+0x1575/0x28c0 [ 159.084606][ T6848] ? sctp_getsockopt+0xb60/0xb60 [ 159.089861][ T6848] ? aa_sk_perm+0x83c/0x970 [ 159.094421][ T6848] ? aa_af_perm+0x330/0x330 [ 159.099488][ T6848] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 159.106497][ T6848] ? sock_rps_record_flow+0x19/0x3f0 [ 159.112297][ T6848] ? inet_sendmsg+0xe9/0x2f0 [ 159.117124][ T6848] ? inet_send_prepare+0x260/0x260 [ 159.122327][ T6848] ____sys_sendmsg+0x5ba/0x960 [ 159.127151][ T6848] ? __lock_acquire+0x7d40/0x7d40 [ 159.133008][ T6848] ? __asan_memset+0x22/0x40 [ 159.138737][ T6848] ? __sys_sendmsg_sock+0x30/0x30 [ 159.144544][ T6848] ? __import_iovec+0x5f2/0x850 [ 159.150120][ T6848] ? import_iovec+0x73/0xa0 [ 159.154692][ T6848] ___sys_sendmsg+0x2a6/0x360 [ 159.159950][ T6848] ? get_pid_task+0x20/0x1e0 [ 159.164945][ T6848] ? __sys_sendmsg+0x2a0/0x2a0 [ 159.170395][ T6848] ? __lock_acquire+0x7d40/0x7d40 [ 159.176483][ T6848] __se_sys_sendmsg+0x1c2/0x2b0 [ 159.182668][ T6848] ? __x64_sys_sendmsg+0x80/0x80 [ 159.188346][ T6848] ? lockdep_hardirqs_on+0x98/0x150 [ 159.194642][ T6848] do_syscall_64+0x55/0xa0 [ 159.199384][ T6848] ? clear_bhb_loop+0x40/0x90 [ 159.204809][ T6848] ? clear_bhb_loop+0x40/0x90 [ 159.210715][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.217109][ T6848] RIP: 0033:0x7f74d779acb9 [ 159.221853][ T6848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.244746][ T6848] RSP: 002b:00007f74d86ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.253498][ T6848] RAX: ffffffffffffffda RBX: 00007f74d7a15fa0 RCX: 00007f74d779acb9 [ 159.262735][ T6848] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000004 [ 159.271357][ T6848] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 159.281016][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.289412][ T6848] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 159.298351][ T6848] [ 159.454736][ T6852] syz.2.307[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.454987][ T6852] syz.2.307[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.483602][ T6852] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 159.506818][ T6852] netlink: 51 bytes leftover after parsing attributes in process `syz.2.307'. [ 161.446616][ T6884] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.319'. [ 161.932407][ T6900] !1ÿ: renamed from bond_slave_0 (while UP) [ 162.452051][ T6920] syz.3.330[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.452277][ T6920] syz.3.330[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.478428][ T6920] netlink: 'syz.3.330': attribute type 2 has an invalid length. [ 162.509550][ T6920] netlink: 51 bytes leftover after parsing attributes in process `syz.3.330'. [ 162.547053][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 162.570546][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 162.584268][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 162.594154][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 166.784768][ T6971] netlink: 'syz.2.350': attribute type 9 has an invalid length. [ 166.868167][ T6971] __nla_validate_parse: 1 callbacks suppressed [ 166.868186][ T6971] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.350'. [ 167.160824][ T6978] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 167.228812][ T6978] netlink: 51 bytes leftover after parsing attributes in process `syz.1.353'. [ 168.024500][ T6992] FAULT_INJECTION: forcing a failure. [ 168.024500][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 168.048211][ T6992] CPU: 1 PID: 6992 Comm: syz.2.358 Not tainted syzkaller #0 [ 168.055787][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.066447][ T6992] Call Trace: [ 168.070073][ T6992] [ 168.073340][ T6992] dump_stack_lvl+0x18c/0x250 [ 168.078257][ T6992] ? sctp_sendmsg+0x1575/0x28c0 [ 168.083279][ T6992] ? ___sys_sendmsg+0x2a6/0x360 [ 168.088367][ T6992] ? show_regs_print_info+0x20/0x20 [ 168.093651][ T6992] ? load_image+0x400/0x400 [ 168.098444][ T6992] should_fail_ex+0x39d/0x4d0 [ 168.103309][ T6992] should_failslab+0x9/0x20 [ 168.108010][ T6992] slab_pre_alloc_hook+0x59/0x310 [ 168.113116][ T6992] ? sctp_add_bind_addr+0x8c/0x360 [ 168.118363][ T6992] __kmem_cache_alloc_node+0x53/0x250 [ 168.123832][ T6992] ? sctp_add_bind_addr+0x8c/0x360 [ 168.129195][ T6992] kmalloc_trace+0x2a/0xe0 [ 168.133977][ T6992] sctp_add_bind_addr+0x8c/0x360 [ 168.139119][ T6992] sctp_copy_local_addr_list+0x315/0x4f0 [ 168.144853][ T6992] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 168.150658][ T6992] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 168.156827][ T6992] ? sctp_v4_is_any+0x35/0x60 [ 168.162032][ T6992] ? sctp_copy_one_addr+0x8c/0x350 [ 168.167344][ T6992] sctp_bind_addr_copy+0xb3/0x3c0 [ 168.172455][ T6992] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 168.178863][ T6992] sctp_connect_new_asoc+0x2f9/0x6a0 [ 168.184229][ T6992] ? __sctp_connect+0xd80/0xd80 [ 168.189231][ T6992] ? __local_bh_enable_ip+0x13a/0x1c0 [ 168.194778][ T6992] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 168.200401][ T6992] ? security_sctp_bind_connect+0x89/0xb0 [ 168.206312][ T6992] sctp_sendmsg+0x1575/0x28c0 [ 168.211355][ T6992] ? sctp_getsockopt+0xb60/0xb60 [ 168.216376][ T6992] ? aa_sk_perm+0x83c/0x970 [ 168.221011][ T6992] ? aa_af_perm+0x330/0x330 [ 168.225681][ T6992] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 168.232267][ T6992] ? sock_rps_record_flow+0x19/0x3f0 [ 168.237986][ T6992] ? inet_sendmsg+0xe9/0x2f0 [ 168.242656][ T6992] ? inet_send_prepare+0x260/0x260 [ 168.247861][ T6992] ____sys_sendmsg+0x5ba/0x960 [ 168.252904][ T6992] ? __lock_acquire+0x7d40/0x7d40 [ 168.258599][ T6992] ? __asan_memset+0x22/0x40 [ 168.263464][ T6992] ? __sys_sendmsg_sock+0x30/0x30 [ 168.268577][ T6992] ? __import_iovec+0x5f2/0x850 [ 168.273634][ T6992] ? import_iovec+0x73/0xa0 [ 168.278332][ T6992] ___sys_sendmsg+0x2a6/0x360 [ 168.283209][ T6992] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.288203][ T6992] ? __lock_acquire+0x7d40/0x7d40 [ 168.293409][ T6992] __se_sys_sendmsg+0x1c2/0x2b0 [ 168.298760][ T6992] ? __x64_sys_sendmsg+0x80/0x80 [ 168.303827][ T6992] ? lockdep_hardirqs_on+0x98/0x150 [ 168.309140][ T6992] do_syscall_64+0x55/0xa0 [ 168.313647][ T6992] ? clear_bhb_loop+0x40/0x90 [ 168.318401][ T6992] ? clear_bhb_loop+0x40/0x90 [ 168.323158][ T6992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.329123][ T6992] RIP: 0033:0x7f7e0c59acb9 [ 168.333694][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.353722][ T6992] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.362253][ T6992] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 168.370397][ T6992] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000004 [ 168.378609][ T6992] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.386911][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.395175][ T6992] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 168.403353][ T6992] [ 168.756123][ T7001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.789336][ T7001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.194126][ T7014] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 169.219364][ T7014] netlink: 51 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.435717][ T7021] FAULT_INJECTION: forcing a failure. [ 169.435717][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 169.455571][ T7021] CPU: 1 PID: 7021 Comm: syz.2.367 Not tainted syzkaller #0 [ 169.463333][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.473532][ T7021] Call Trace: [ 169.476954][ T7021] [ 169.480152][ T7021] dump_stack_lvl+0x18c/0x250 [ 169.484983][ T7021] ? sctp_sendmsg+0x1575/0x28c0 [ 169.490058][ T7021] ? ___sys_sendmsg+0x2a6/0x360 [ 169.495983][ T7021] ? show_regs_print_info+0x20/0x20 [ 169.501535][ T7021] ? load_image+0x400/0x400 [ 169.506347][ T7021] should_fail_ex+0x39d/0x4d0 [ 169.511210][ T7021] should_failslab+0x9/0x20 [ 169.515862][ T7021] slab_pre_alloc_hook+0x59/0x310 [ 169.521045][ T7021] ? sctp_add_bind_addr+0x8c/0x360 [ 169.526296][ T7021] __kmem_cache_alloc_node+0x53/0x250 [ 169.532155][ T7021] ? sctp_add_bind_addr+0x8c/0x360 [ 169.537502][ T7021] kmalloc_trace+0x2a/0xe0 [ 169.542156][ T7021] sctp_add_bind_addr+0x8c/0x360 [ 169.547245][ T7021] sctp_copy_local_addr_list+0x315/0x4f0 [ 169.553086][ T7021] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 169.558914][ T7021] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 169.565307][ T7021] ? sctp_v4_is_any+0x35/0x60 [ 169.570088][ T7021] ? sctp_copy_one_addr+0x8c/0x350 [ 169.575436][ T7021] sctp_bind_addr_copy+0xb3/0x3c0 [ 169.580760][ T7021] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 169.587330][ T7021] sctp_connect_new_asoc+0x2f9/0x6a0 [ 169.592744][ T7021] ? __sctp_connect+0xd80/0xd80 [ 169.597680][ T7021] ? __local_bh_enable_ip+0x13a/0x1c0 [ 169.603266][ T7021] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 169.608922][ T7021] ? security_sctp_bind_connect+0x89/0xb0 [ 169.615305][ T7021] sctp_sendmsg+0x1575/0x28c0 [ 169.620356][ T7021] ? sctp_getsockopt+0xb60/0xb60 [ 169.625423][ T7021] ? aa_sk_perm+0x83c/0x970 [ 169.630104][ T7021] ? aa_af_perm+0x330/0x330 [ 169.634705][ T7021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 169.641426][ T7021] ? sock_rps_record_flow+0x19/0x3f0 [ 169.646846][ T7021] ? inet_sendmsg+0xe9/0x2f0 [ 169.651546][ T7021] ? inet_send_prepare+0x260/0x260 [ 169.656863][ T7021] ____sys_sendmsg+0x5ba/0x960 [ 169.661735][ T7021] ? __lock_acquire+0x7d40/0x7d40 [ 169.666911][ T7021] ? __asan_memset+0x22/0x40 [ 169.671614][ T7021] ? __sys_sendmsg_sock+0x30/0x30 [ 169.676907][ T7021] ? __import_iovec+0x5f2/0x850 [ 169.681948][ T7021] ? import_iovec+0x73/0xa0 [ 169.686594][ T7021] ___sys_sendmsg+0x2a6/0x360 [ 169.691430][ T7021] ? get_pid_task+0x20/0x1e0 [ 169.696243][ T7021] ? __sys_sendmsg+0x2a0/0x2a0 [ 169.701304][ T7021] ? __lock_acquire+0x7d40/0x7d40 [ 169.706617][ T7021] __se_sys_sendmsg+0x1c2/0x2b0 [ 169.711604][ T7021] ? __x64_sys_sendmsg+0x80/0x80 [ 169.716771][ T7021] ? lockdep_hardirqs_on+0x98/0x150 [ 169.722190][ T7021] do_syscall_64+0x55/0xa0 [ 169.726756][ T7021] ? clear_bhb_loop+0x40/0x90 [ 169.731536][ T7021] ? clear_bhb_loop+0x40/0x90 [ 169.736333][ T7021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.742573][ T7021] RIP: 0033:0x7f7e0c59acb9 [ 169.747098][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.766794][ T7021] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.775328][ T7021] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 169.783475][ T7021] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 169.791534][ T7021] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 169.800133][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.808197][ T7021] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 169.816552][ T7021] [ 169.840717][ T5783] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 169.847831][ T5777] Bluetooth: hci1: command 0x206a tx timeout [ 169.869201][ T5783] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 171.204461][ T7043] netlink: 'syz.3.376': attribute type 9 has an invalid length. [ 171.285776][ T7043] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.376'. [ 171.480971][ T7041] netlink: 'syz.3.376': attribute type 9 has an invalid length. [ 171.491756][ T7041] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.376'. [ 171.667753][ T7050] netlink: 'syz.3.378': attribute type 2 has an invalid length. [ 171.675836][ T7050] netlink: 51 bytes leftover after parsing attributes in process `syz.3.378'. [ 171.869730][ T5783] Bluetooth: hci1: command 0x206a tx timeout [ 172.113546][ T7071] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 172.558761][ T7078] netlink: 'syz.0.387': attribute type 21 has an invalid length. [ 172.807272][ T7083] FAULT_INJECTION: forcing a failure. [ 172.807272][ T7083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.859439][ T7083] CPU: 0 PID: 7083 Comm: syz.1.389 Not tainted syzkaller #0 [ 172.866921][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.877030][ T7083] Call Trace: [ 172.880367][ T7083] [ 172.883606][ T7083] dump_stack_lvl+0x18c/0x250 [ 172.888451][ T7083] ? show_regs_print_info+0x20/0x20 [ 172.893722][ T7083] ? load_image+0x400/0x400 [ 172.898480][ T7083] ? __might_fault+0xaa/0x120 [ 172.903309][ T7083] ? __lock_acquire+0x7d40/0x7d40 [ 172.908408][ T7083] should_fail_ex+0x39d/0x4d0 [ 172.913360][ T7083] _copy_from_user+0x2f/0xe0 [ 172.918011][ T7083] __sys_bpf+0x23e/0x890 [ 172.922323][ T7083] ? bpf_link_show_fdinfo+0x390/0x390 [ 172.927822][ T7083] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.934028][ T7083] __x64_sys_bpf+0x7c/0x90 [ 172.938597][ T7083] do_syscall_64+0x55/0xa0 [ 172.943152][ T7083] ? clear_bhb_loop+0x40/0x90 [ 172.948039][ T7083] ? clear_bhb_loop+0x40/0x90 [ 172.952860][ T7083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.959584][ T7083] RIP: 0033:0x7f203b59acb9 [ 172.964460][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.984228][ T7083] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.992748][ T7083] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 173.001213][ T7083] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 173.009498][ T7083] RBP: 00007f203c3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.017601][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.025783][ T7083] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 173.033806][ T7083] [ 173.205754][ T7087] FAULT_INJECTION: forcing a failure. [ 173.205754][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.223888][ T7087] CPU: 1 PID: 7087 Comm: syz.2.391 Not tainted syzkaller #0 [ 173.231532][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.241827][ T7087] Call Trace: [ 173.245350][ T7087] [ 173.248339][ T7087] dump_stack_lvl+0x18c/0x250 [ 173.253265][ T7087] ? show_regs_print_info+0x20/0x20 [ 173.258626][ T7087] ? load_image+0x400/0x400 [ 173.263291][ T7087] ? __might_fault+0xaa/0x120 [ 173.268194][ T7087] ? __lock_acquire+0x7d40/0x7d40 [ 173.273930][ T7087] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 173.280325][ T7087] should_fail_ex+0x39d/0x4d0 [ 173.285602][ T7087] _copy_from_user+0x2f/0xe0 [ 173.290526][ T7087] __sys_bpf+0x23e/0x890 [ 173.294846][ T7087] ? bpf_link_show_fdinfo+0x390/0x390 [ 173.300393][ T7087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.306781][ T7087] __x64_sys_bpf+0x7c/0x90 [ 173.311284][ T7087] do_syscall_64+0x55/0xa0 [ 173.315783][ T7087] ? clear_bhb_loop+0x40/0x90 [ 173.320536][ T7087] ? clear_bhb_loop+0x40/0x90 [ 173.325370][ T7087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.331367][ T7087] RIP: 0033:0x7f7e0c59acb9 [ 173.336357][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.356628][ T7087] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.365117][ T7087] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 173.373313][ T7087] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 173.381346][ T7087] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.389460][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.397506][ T7087] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 173.406190][ T7087] [ 173.483478][ T5777] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 173.490274][ T5777] Bluetooth: hci0: command 0x206a tx timeout [ 173.912889][ T7101] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.397'. [ 174.310737][ T7116] FAULT_INJECTION: forcing a failure. [ 174.310737][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 174.330032][ T7116] CPU: 1 PID: 7116 Comm: syz.3.404 Not tainted syzkaller #0 [ 174.337724][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.348591][ T7116] Call Trace: [ 174.351972][ T7116] [ 174.354974][ T7116] dump_stack_lvl+0x18c/0x250 [ 174.359758][ T7116] ? show_regs_print_info+0x20/0x20 [ 174.365046][ T7116] ? load_image+0x400/0x400 [ 174.369680][ T7116] ? __might_sleep+0xe0/0xe0 [ 174.374353][ T7116] ? __lock_acquire+0x7d40/0x7d40 [ 174.379518][ T7116] should_fail_ex+0x39d/0x4d0 [ 174.384456][ T7116] should_failslab+0x9/0x20 [ 174.389189][ T7116] slab_pre_alloc_hook+0x59/0x310 [ 174.394254][ T7116] ? ioctl_standard_iw_point+0x7d8/0xcf0 [ 174.400033][ T7116] ? cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 174.406801][ T7116] __kmem_cache_alloc_node+0x53/0x250 [ 174.412276][ T7116] ? cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 174.418587][ T7116] kmalloc_trace+0x2a/0xe0 [ 174.423070][ T7116] cfg80211_sinfo_alloc_tid_stats+0x73/0xf0 [ 174.429107][ T7116] sta_set_sinfo+0x1db0/0x45c0 [ 174.434004][ T7116] __sta_info_destroy_part2+0x2e9/0x430 [ 174.439726][ T7116] __sta_info_flush+0x3e5/0x4f0 [ 174.446103][ T7116] ? sta_info_stop+0x40/0x40 [ 174.451491][ T7116] ? __local_bh_enable_ip+0x13a/0x1c0 [ 174.459302][ T7116] ? _local_bh_enable+0xa0/0xa0 [ 174.464832][ T7116] ? do_raw_spin_unlock+0x121/0x230 [ 174.470197][ T7116] ieee80211_ibss_disconnect+0x262/0x700 [ 174.476198][ T7116] ieee80211_ibss_leave+0x25/0x140 [ 174.481634][ T7116] __cfg80211_leave_ibss+0x1d2/0x400 [ 174.487188][ T7116] cfg80211_ibss_wext_siwessid+0x163/0x390 [ 174.493139][ T7116] cfg80211_wext_siwessid+0xd8/0x120 [ 174.498482][ T7116] ioctl_standard_iw_point+0x7d8/0xcf0 [ 174.504104][ T7116] ? cfg80211_wext_giwap+0x120/0x120 [ 174.509444][ T7116] ? iw_handler_get_iwstats+0x110/0x110 [ 174.515043][ T7116] ? wext_ioctl_dispatch+0x115/0x600 [ 174.520383][ T7116] ? dev_load+0x21/0x1f0 [ 174.524680][ T7116] ? mutex_lock_nested+0x20/0x20 [ 174.529868][ T7116] ? apparmor_capable+0x137/0x1a0 [ 174.535058][ T7116] ? cfg80211_wext_giwap+0x120/0x120 [ 174.540811][ T7116] ioctl_standard_call+0xb7/0x2b0 [ 174.546208][ T7116] ? cfg80211_wext_giwap+0x120/0x120 [ 174.552178][ T7116] wext_ioctl_dispatch+0x1cb/0x600 [ 174.557708][ T7116] ? wext_ioctl_dispatch+0x600/0x600 [ 174.563250][ T7116] ? iw_handler_get_private+0x1f0/0x1f0 [ 174.569053][ T7116] ? wext_handle_ioctl+0x1d0/0x1d0 [ 174.574213][ T7116] ? __might_fault+0xaa/0x120 [ 174.578951][ T7116] ? __might_fault+0xc6/0x120 [ 174.583663][ T7116] ? __might_fault+0xaa/0x120 [ 174.588392][ T7116] wext_handle_ioctl+0x117/0x1d0 [ 174.593386][ T7116] ? call_commit_handler+0xf0/0xf0 [ 174.599276][ T7116] sock_ioctl+0x15d/0x7e0 [ 174.603770][ T7116] ? sock_poll+0x3e0/0x3e0 [ 174.608355][ T7116] ? bpf_lsm_file_ioctl+0x9/0x10 [ 174.613511][ T7116] ? security_file_ioctl+0x80/0xa0 [ 174.619470][ T7116] ? sock_poll+0x3e0/0x3e0 [ 174.624457][ T7116] __se_sys_ioctl+0xfd/0x170 [ 174.629485][ T7116] do_syscall_64+0x55/0xa0 [ 174.634047][ T7116] ? clear_bhb_loop+0x40/0x90 [ 174.639334][ T7116] ? clear_bhb_loop+0x40/0x90 [ 174.644453][ T7116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.651137][ T7116] RIP: 0033:0x7f74d779acb9 [ 174.655878][ T7116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.676740][ T7116] RSP: 002b:00007f74d86ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.686127][ T7116] RAX: ffffffffffffffda RBX: 00007f74d7a15fa0 RCX: 00007f74d779acb9 [ 174.694501][ T7116] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000004 [ 174.703678][ T7116] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 174.712268][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.720395][ T7116] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 174.728540][ T7116] [ 174.753693][ T5783] Bluetooth: hci3: command 0x206a tx timeout [ 174.760329][ T51] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 175.169926][ T7132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.409'. [ 175.385999][ T7139] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 175.526247][ T7146] FAULT_INJECTION: forcing a failure. [ 175.526247][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 175.569374][ T7146] CPU: 1 PID: 7146 Comm: syz.1.415 Not tainted syzkaller #0 [ 175.577666][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.588246][ T7146] Call Trace: [ 175.591770][ T7146] [ 175.594868][ T7146] dump_stack_lvl+0x18c/0x250 [ 175.599748][ T7146] ? show_regs_print_info+0x20/0x20 [ 175.605353][ T7146] ? load_image+0x400/0x400 [ 175.609974][ T7146] ? __might_sleep+0xe0/0xe0 [ 175.614746][ T7146] ? __lock_acquire+0x7d40/0x7d40 [ 175.620078][ T7146] should_fail_ex+0x39d/0x4d0 [ 175.625282][ T7146] should_failslab+0x9/0x20 [ 175.630547][ T7146] slab_pre_alloc_hook+0x59/0x310 [ 175.635701][ T7146] ? __lock_acquire+0x7d40/0x7d40 [ 175.641411][ T7146] kmem_cache_alloc_node+0x60/0x320 [ 175.647074][ T7146] ? __alloc_skb+0x103/0x2c0 [ 175.651968][ T7146] __alloc_skb+0x103/0x2c0 [ 175.656485][ T7146] netlink_sendmsg+0x66a/0xbf0 [ 175.661426][ T7146] ? perf_trace_lock+0x304/0x3b0 [ 175.666466][ T7146] ? netlink_getsockopt+0x590/0x590 [ 175.671839][ T7146] ? aa_sock_msg_perm+0x94/0x150 [ 175.676856][ T7146] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 175.682353][ T7146] ? security_socket_sendmsg+0x80/0xa0 [ 175.688803][ T7146] ? netlink_getsockopt+0x590/0x590 [ 175.694190][ T7146] ____sys_sendmsg+0x5ba/0x960 [ 175.699047][ T7146] ? __asan_memset+0x22/0x40 [ 175.704143][ T7146] ? __sys_sendmsg_sock+0x30/0x30 [ 175.709794][ T7146] ? __import_iovec+0x5f2/0x850 [ 175.714807][ T7146] ? import_iovec+0x73/0xa0 [ 175.719364][ T7146] ___sys_sendmsg+0x2a6/0x360 [ 175.724579][ T7146] ? __sys_sendmsg+0x2a0/0x2a0 [ 175.729805][ T7146] ? __lock_acquire+0x7d40/0x7d40 [ 175.735628][ T7146] __se_sys_sendmsg+0x1c2/0x2b0 [ 175.741088][ T7146] ? __x64_sys_sendmsg+0x80/0x80 [ 175.746299][ T7146] ? lockdep_hardirqs_on+0x98/0x150 [ 175.752985][ T7146] do_syscall_64+0x55/0xa0 [ 175.758774][ T7146] ? clear_bhb_loop+0x40/0x90 [ 175.764079][ T7146] ? clear_bhb_loop+0x40/0x90 [ 175.769257][ T7146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.776313][ T7146] RIP: 0033:0x7f203b59acb9 [ 175.781391][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.802729][ T7146] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.811629][ T7146] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 175.820569][ T7146] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 175.828873][ T7146] RBP: 00007f203c3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 175.837516][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.845900][ T7146] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 175.854234][ T7146] [ 175.943020][ T5783] Bluetooth: hci1: command 0x206a tx timeout [ 175.949474][ T5777] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 176.606478][ T7158] netlink: 763 bytes leftover after parsing attributes in process `syz.3.419'. [ 176.647137][ T7159] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 176.697992][ T7159] netlink: 55 bytes leftover after parsing attributes in process `syz.3.419'. [ 177.389591][ T5777] Bluetooth: hci0: command 0x206a tx timeout [ 177.398591][ T51] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 178.927072][ T7158] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 178.938583][ T7158] netlink: 55 bytes leftover after parsing attributes in process `syz.3.419'. [ 178.952214][ T7164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.420'. [ 179.096994][ T7159] syz.3.419 (7159) used greatest stack depth: 18984 bytes left [ 179.228551][ T7178] FAULT_INJECTION: forcing a failure. [ 179.228551][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.280090][ T7178] CPU: 0 PID: 7178 Comm: syz.0.425 Not tainted syzkaller #0 [ 179.287463][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.297653][ T7178] Call Trace: [ 179.300976][ T7178] [ 179.303970][ T7178] dump_stack_lvl+0x18c/0x250 [ 179.308733][ T7178] ? show_regs_print_info+0x20/0x20 [ 179.314170][ T7178] ? load_image+0x400/0x400 [ 179.318732][ T7178] ? __might_fault+0xaa/0x120 [ 179.323467][ T7178] ? __lock_acquire+0x7d40/0x7d40 [ 179.328647][ T7178] should_fail_ex+0x39d/0x4d0 [ 179.333658][ T7178] _copy_from_user+0x2f/0xe0 [ 179.338310][ T7178] bpf_prog_test_run_skb+0x266/0x12b0 [ 179.343881][ T7178] ? __fget_files+0x28/0x4b0 [ 179.348535][ T7178] ? __fget_files+0x28/0x4b0 [ 179.353350][ T7178] ? __fget_files+0x43d/0x4b0 [ 179.358113][ T7178] ? cpu_online+0x60/0x60 [ 179.362493][ T7178] bpf_prog_test_run+0x321/0x390 [ 179.367481][ T7178] __sys_bpf+0x49d/0x890 [ 179.371862][ T7178] ? bpf_link_show_fdinfo+0x390/0x390 [ 179.377401][ T7178] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.383669][ T7178] __x64_sys_bpf+0x7c/0x90 [ 179.388183][ T7178] do_syscall_64+0x55/0xa0 [ 179.392657][ T7178] ? clear_bhb_loop+0x40/0x90 [ 179.397572][ T7178] ? clear_bhb_loop+0x40/0x90 [ 179.402423][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.408591][ T7178] RIP: 0033:0x7f4f20f9acb9 [ 179.413065][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.433255][ T7178] RSP: 002b:00007f4f21f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.443050][ T7178] RAX: ffffffffffffffda RBX: 00007f4f21215fa0 RCX: 00007f4f20f9acb9 [ 179.451286][ T7178] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 179.460903][ T7178] RBP: 00007f4f21f23090 R08: 0000000000000000 R09: 0000000000000000 [ 179.469556][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.477568][ T7178] R13: 00007f4f21216038 R14: 00007f4f21215fa0 R15: 00007ffebdc8c8f8 [ 179.485864][ T7178] [ 179.619243][ T5777] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 179.626303][ T5777] Bluetooth: hci1: command 0x206a tx timeout [ 179.792675][ T7191] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 179.801644][ T7191] team0: Device bridge0 is up. Set it down before adding it as a team port [ 179.840971][ T7191] netlink: 44 bytes leftover after parsing attributes in process `syz.3.431'. [ 180.403738][ T7209] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.438'. [ 182.099407][ T51] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 182.105769][ T51] Bluetooth: hci3: command 0x206a tx timeout [ 182.116411][ T7244] syz.0.452[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.116631][ T7244] syz.0.452[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.161405][ T7244] netlink: 'syz.0.452': attribute type 2 has an invalid length. [ 182.193995][ T7244] netlink: 51 bytes leftover after parsing attributes in process `syz.0.452'. [ 182.205908][ T7246] netlink: 'syz.2.454': attribute type 2 has an invalid length. [ 182.214494][ T7246] netlink: 51 bytes leftover after parsing attributes in process `syz.2.454'. [ 183.029894][ T7266] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 183.053685][ T7266] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.460'. [ 183.226240][ T5777] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 183.233389][ T51] Bluetooth: hci2: command 0x206a tx timeout [ 185.303948][ T7265] netlink: 'syz.3.460': attribute type 21 has an invalid length. [ 185.315423][ T7274] bridge_slave_1: left allmulticast mode [ 185.323466][ T7274] bridge_slave_1: left promiscuous mode [ 185.335278][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.352929][ T7274] bridge_slave_0: left allmulticast mode [ 185.359265][ T7274] bridge_slave_0: left promiscuous mode [ 185.365468][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.488837][ T7274] bond0: (slave bridge0): Releasing backup interface [ 185.710473][ T7288] syz.2.467[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.710694][ T7288] syz.2.467[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.766025][ T7288] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 185.820330][ T7288] netlink: 51 bytes leftover after parsing attributes in process `syz.2.467'. [ 185.845932][ T7290] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.468'. [ 186.246629][ T7301] syz.2.472[7301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.246864][ T7301] syz.2.472[7301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.266749][ T7301] netlink: 'syz.2.472': attribute type 2 has an invalid length. [ 186.299277][ T7301] netlink: 51 bytes leftover after parsing attributes in process `syz.2.472'. [ 186.504469][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.474'. [ 186.741563][ T7313] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.477'. [ 186.987395][ T7318] syz.3.479[7318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.987627][ T7318] syz.3.479[7318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.078554][ T7318] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 187.130959][ T7318] netlink: 51 bytes leftover after parsing attributes in process `syz.3.479'. [ 187.192472][ T7330] syz.0.482[7330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.192754][ T7330] syz.0.482[7330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.420431][ T7330] netlink: 'syz.0.482': attribute type 2 has an invalid length. [ 187.475431][ T7330] netlink: 51 bytes leftover after parsing attributes in process `syz.0.482'. [ 187.485672][ T7336] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.483'. [ 188.117133][ T7338] lo: entered allmulticast mode [ 188.459707][ T7349] hsr0: VLAN not yet supported [ 188.604385][ T7351] netlink: 'syz.1.491': attribute type 11 has an invalid length. [ 188.618483][ T7351] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.491'. [ 188.806245][ T7359] syz.1.492[7359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.806514][ T7359] syz.1.492[7359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.830575][ T7357] FAULT_INJECTION: forcing a failure. [ 188.830575][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.862595][ T7359] netlink: 'syz.1.492': attribute type 2 has an invalid length. [ 188.887304][ T7359] netlink: 51 bytes leftover after parsing attributes in process `syz.1.492'. [ 188.889348][ T7357] CPU: 1 PID: 7357 Comm: syz.2.493 Not tainted syzkaller #0 [ 188.903695][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.913833][ T7357] Call Trace: [ 188.917262][ T7357] [ 188.920315][ T7357] dump_stack_lvl+0x18c/0x250 [ 188.925088][ T7357] ? show_regs_print_info+0x20/0x20 [ 188.930382][ T7357] ? load_image+0x400/0x400 [ 188.934994][ T7357] ? __might_fault+0xaa/0x120 [ 188.939761][ T7357] ? __lock_acquire+0x7d40/0x7d40 [ 188.944924][ T7357] should_fail_ex+0x39d/0x4d0 [ 188.949923][ T7357] _copy_to_user+0x2f/0xa0 [ 188.954527][ T7357] generic_map_lookup_batch+0x8bd/0xc60 [ 188.960214][ T7357] ? bpf_map_update_value+0x720/0x720 [ 188.965699][ T7357] ? __fdget+0x180/0x210 [ 188.970148][ T7357] ? bpf_map_update_value+0x720/0x720 [ 188.975610][ T7357] bpf_map_do_batch+0x2cb/0x610 [ 188.980551][ T7357] ? bpf_lsm_bpf+0x9/0x10 [ 188.985043][ T7357] ? security_bpf+0x7e/0xa0 [ 188.989806][ T7357] __sys_bpf+0x7d7/0x890 [ 188.994134][ T7357] ? bpf_link_show_fdinfo+0x390/0x390 [ 188.999736][ T7357] ? lock_chain_count+0x20/0x20 [ 189.004804][ T7357] __x64_sys_bpf+0x7c/0x90 [ 189.009305][ T7357] do_syscall_64+0x55/0xa0 [ 189.013797][ T7357] ? clear_bhb_loop+0x40/0x90 [ 189.018543][ T7357] ? clear_bhb_loop+0x40/0x90 [ 189.023385][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.029360][ T7357] RIP: 0033:0x7f7e0c59acb9 [ 189.033843][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.053817][ T7357] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.062405][ T7357] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 189.070482][ T7357] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 189.078652][ T7357] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.086695][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.094822][ T7357] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 189.103042][ T7357] [ 189.388688][ T7373] FAULT_INJECTION: forcing a failure. [ 189.388688][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.404651][ T7373] CPU: 1 PID: 7373 Comm: syz.0.499 Not tainted syzkaller #0 [ 189.412011][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.422191][ T7373] Call Trace: [ 189.425499][ T7373] [ 189.428461][ T7373] dump_stack_lvl+0x18c/0x250 [ 189.433273][ T7373] ? show_regs_print_info+0x20/0x20 [ 189.438517][ T7373] ? load_image+0x400/0x400 [ 189.443057][ T7373] ? __might_fault+0xaa/0x120 [ 189.447771][ T7373] ? __lock_acquire+0x7d40/0x7d40 [ 189.452967][ T7373] should_fail_ex+0x39d/0x4d0 [ 189.457801][ T7373] _copy_from_user+0x2f/0xe0 [ 189.462441][ T7373] csum_and_copy_from_iter+0x1f3/0x14a0 [ 189.468229][ T7373] ? __next_zones_zonelist+0x9d/0x130 [ 189.473744][ T7373] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 189.479512][ T7373] ? __alloc_pages+0x27a/0x460 [ 189.484446][ T7373] ? zone_statistics+0x170/0x170 [ 189.489608][ T7373] ? rcu_is_watching+0x15/0xb0 [ 189.494503][ T7373] ip_generic_getfrag+0x163/0x2f0 [ 189.499659][ T7373] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 189.504546][ T7373] ? skb_page_frag_refill+0x199/0x310 [ 189.510048][ T7373] __ip_append_data+0x1f30/0x3d40 [ 189.515144][ T7373] ? raw_send_hdrinc+0x1170/0x1170 [ 189.520557][ T7373] ? ip_setup_cork+0x860/0x860 [ 189.525463][ T7373] ? ip_setup_cork+0x530/0x860 [ 189.530370][ T7373] ip_append_data+0x10d/0x180 [ 189.535101][ T7373] ? raw_send_hdrinc+0x1170/0x1170 [ 189.540256][ T7373] raw_sendmsg+0x15c1/0x1c00 [ 189.544896][ T7373] ? compat_raw_ioctl+0x70/0x70 [ 189.549874][ T7373] ? __lock_acquire+0x1273/0x7d40 [ 189.555307][ T7373] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 189.562024][ T7373] ? sock_rps_record_flow+0x19/0x3f0 [ 189.567354][ T7373] ? inet_sendmsg+0x7c/0x2f0 [ 189.572188][ T7373] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.577595][ T7373] ? security_socket_sendmsg+0x80/0xa0 [ 189.583174][ T7373] ? inet_send_prepare+0x260/0x260 [ 189.588405][ T7373] ____sys_sendmsg+0x5ba/0x960 [ 189.593214][ T7373] ? __lock_acquire+0x7d40/0x7d40 [ 189.598368][ T7373] ? __asan_memset+0x22/0x40 [ 189.602997][ T7373] ? __sys_sendmsg_sock+0x30/0x30 [ 189.608063][ T7373] ? __import_iovec+0x5f2/0x850 [ 189.612968][ T7373] ? import_iovec+0x73/0xa0 [ 189.617595][ T7373] ___sys_sendmsg+0x2a6/0x360 [ 189.622404][ T7373] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.627416][ T7373] ? __lock_acquire+0x7d40/0x7d40 [ 189.632501][ T7373] __se_sys_sendmsg+0x1c2/0x2b0 [ 189.637546][ T7373] ? __x64_sys_sendmsg+0x80/0x80 [ 189.642640][ T7373] ? lockdep_hardirqs_on+0x98/0x150 [ 189.647970][ T7373] do_syscall_64+0x55/0xa0 [ 189.652540][ T7373] ? clear_bhb_loop+0x40/0x90 [ 189.657291][ T7373] ? clear_bhb_loop+0x40/0x90 [ 189.662017][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.668114][ T7373] RIP: 0033:0x7f4f20f9acb9 [ 189.672736][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.693123][ T7373] RSP: 002b:00007f4f21f23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.701745][ T7373] RAX: ffffffffffffffda RBX: 00007f4f21215fa0 RCX: 00007f4f20f9acb9 [ 189.709768][ T7373] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 189.717875][ T7373] RBP: 00007f4f21f23090 R08: 0000000000000000 R09: 0000000000000000 [ 189.726064][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.734274][ T7373] R13: 00007f4f21216038 R14: 00007f4f21215fa0 R15: 00007ffebdc8c8f8 [ 189.742468][ T7373] [ 189.821485][ T7375] netlink: 'syz.0.501': attribute type 16 has an invalid length. [ 190.400425][ T7387] syzkaller0: entered promiscuous mode [ 190.406355][ T7387] syzkaller0: entered allmulticast mode [ 190.498975][ T7393] netlink: 'syz.3.508': attribute type 2 has an invalid length. [ 190.721565][ T7401] netlink: 'syz.2.509': attribute type 29 has an invalid length. [ 190.733794][ T7401] netlink: 'syz.2.509': attribute type 29 has an invalid length. [ 190.778662][ T7405] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 190.828980][ T7405] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 191.188735][ T7417] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 191.219796][ T7419] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.331666][ T7423] netlink: 'syz.0.518': attribute type 2 has an invalid length. [ 191.361386][ T7423] __nla_validate_parse: 3 callbacks suppressed [ 191.361411][ T7423] netlink: 51 bytes leftover after parsing attributes in process `syz.0.518'. [ 191.421721][ T7422] netlink: 'syz.1.517': attribute type 10 has an invalid length. [ 191.630242][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.664446][ T7422] team0: Port device batadv0 added [ 191.705131][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.519'. [ 192.067421][ T7432] FAULT_INJECTION: forcing a failure. [ 192.067421][ T7432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.108487][ T7432] CPU: 1 PID: 7432 Comm: syz.3.522 Not tainted syzkaller #0 [ 192.116210][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.126449][ T7432] Call Trace: [ 192.129941][ T7432] [ 192.132916][ T7432] dump_stack_lvl+0x18c/0x250 [ 192.137660][ T7432] ? show_regs_print_info+0x20/0x20 [ 192.142937][ T7432] ? load_image+0x400/0x400 [ 192.147565][ T7432] ? __lock_acquire+0x7d40/0x7d40 [ 192.152738][ T7432] ? snprintf+0xe9/0x140 [ 192.157052][ T7432] should_fail_ex+0x39d/0x4d0 [ 192.161854][ T7432] _copy_to_user+0x2f/0xa0 [ 192.166619][ T7432] simple_read_from_buffer+0xe7/0x150 [ 192.172159][ T7432] proc_fail_nth_read+0x1e8/0x260 [ 192.177272][ T7432] ? proc_fault_inject_write+0x360/0x360 [ 192.182987][ T7432] ? fsnotify_perm+0x271/0x5e0 [ 192.188070][ T7432] ? proc_fault_inject_write+0x360/0x360 [ 192.193776][ T7432] vfs_read+0x28b/0x970 [ 192.197993][ T7432] ? kernel_read+0x1e0/0x1e0 [ 192.202724][ T7432] ? __fget_files+0x28/0x4b0 [ 192.207377][ T7432] ? __fget_files+0x28/0x4b0 [ 192.212112][ T7432] ? __fget_files+0x43d/0x4b0 [ 192.216860][ T7432] ? __fdget_pos+0x2a3/0x330 [ 192.221593][ T7432] ? ksys_read+0x75/0x260 [ 192.225998][ T7432] ksys_read+0x150/0x260 [ 192.230308][ T7432] ? vfs_write+0x990/0x990 [ 192.234877][ T7432] ? syscall_enter_from_user_mode+0x2e/0x80 [ 192.240846][ T7432] do_syscall_64+0x55/0xa0 [ 192.245334][ T7432] ? clear_bhb_loop+0x40/0x90 [ 192.250074][ T7432] ? clear_bhb_loop+0x40/0x90 [ 192.254813][ T7432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.260772][ T7432] RIP: 0033:0x7f74d775b58e [ 192.265239][ T7432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.285342][ T7432] RSP: 002b:00007f74d86eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.293939][ T7432] RAX: ffffffffffffffda RBX: 00007f74d86ef6c0 RCX: 00007f74d775b58e [ 192.301969][ T7432] RDX: 000000000000000f RSI: 00007f74d86ef0a0 RDI: 000000000000000b [ 192.310074][ T7432] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 192.318193][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.326212][ T7432] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 192.334527][ T7432] [ 192.657142][ T7451] netlink: 'syz.1.528': attribute type 2 has an invalid length. [ 192.725189][ T7451] netlink: 51 bytes leftover after parsing attributes in process `syz.1.528'. [ 192.780496][ T7450] netlink: 'syz.3.530': attribute type 10 has an invalid length. [ 192.905601][ T7455] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 192.913617][ T7455] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.531'. [ 194.600949][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.607552][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.733667][ T7482] validate_nla: 1 callbacks suppressed [ 195.733687][ T7482] netlink: 'syz.1.540': attribute type 2 has an invalid length. [ 195.775750][ T7482] netlink: 51 bytes leftover after parsing attributes in process `syz.1.540'. [ 196.483218][ T7496] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 196.649017][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.688864][ T7496] team0: Port device batadv0 added [ 197.053561][ T7506] FAULT_INJECTION: forcing a failure. [ 197.053561][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.089895][ T7506] CPU: 1 PID: 7506 Comm: syz.2.547 Not tainted syzkaller #0 [ 197.097579][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.108826][ T7506] Call Trace: [ 197.112156][ T7506] [ 197.115214][ T7506] dump_stack_lvl+0x18c/0x250 [ 197.120050][ T7506] ? show_regs_print_info+0x20/0x20 [ 197.125307][ T7506] ? load_image+0x400/0x400 [ 197.130047][ T7506] ? __might_fault+0xaa/0x120 [ 197.134795][ T7506] should_fail_ex+0x39d/0x4d0 [ 197.139627][ T7506] copyin+0x1a/0x90 [ 197.143496][ T7506] _copy_from_iter+0x404/0x12e0 [ 197.148521][ T7506] ? copyin+0x70/0x90 [ 197.152880][ T7506] ? copyout_mc+0x70/0x70 [ 197.157280][ T7506] ? copyout_mc+0x70/0x70 [ 197.161876][ T7506] ? __virt_addr_valid+0x18c/0x540 [ 197.167223][ T7506] ? page_copy_sane+0x16a/0x270 [ 197.172248][ T7506] copy_page_from_iter+0x7b/0x100 [ 197.177705][ T7506] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 197.184032][ T7506] unix_stream_sendmsg+0x562/0xbf0 [ 197.189497][ T7506] ? unix_show_fdinfo+0x270/0x270 [ 197.194607][ T7506] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 197.201610][ T7506] ? __might_fault+0xaa/0x120 [ 197.206598][ T7506] ? aa_sock_msg_perm+0x94/0x150 [ 197.211622][ T7506] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 197.216976][ T7506] ? security_socket_sendmsg+0x80/0xa0 [ 197.222766][ T7506] ? unix_show_fdinfo+0x270/0x270 [ 197.227974][ T7506] ____sys_sendmsg+0x5ba/0x960 [ 197.233170][ T7506] ? __sys_sendmsg_sock+0x30/0x30 [ 197.238449][ T7506] ? __import_iovec+0x3fa/0x850 [ 197.243472][ T7506] ? import_iovec+0x73/0xa0 [ 197.248064][ T7506] ___sys_sendmsg+0x2a6/0x360 [ 197.252915][ T7506] ? get_pid_task+0x20/0x1e0 [ 197.257578][ T7506] ? __sys_sendmsg+0x2a0/0x2a0 [ 197.262433][ T7506] ? __lock_acquire+0x7d40/0x7d40 [ 197.267583][ T7506] __se_sys_sendmsg+0x1c2/0x2b0 [ 197.273386][ T7506] ? __x64_sys_sendmsg+0x80/0x80 [ 197.278482][ T7506] ? lockdep_hardirqs_on+0x98/0x150 [ 197.284016][ T7506] do_syscall_64+0x55/0xa0 [ 197.288536][ T7506] ? clear_bhb_loop+0x40/0x90 [ 197.293537][ T7506] ? clear_bhb_loop+0x40/0x90 [ 197.298385][ T7506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.305121][ T7506] RIP: 0033:0x7f7e0c59acb9 [ 197.309614][ T7506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.329870][ T7506] RSP: 002b:00007f7e0a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.338397][ T7506] RAX: ffffffffffffffda RBX: 00007f7e0c816090 RCX: 00007f7e0c59acb9 [ 197.346433][ T7506] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 197.354507][ T7506] RBP: 00007f7e0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.362612][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.370723][ T7506] R13: 00007f7e0c816128 R14: 00007f7e0c816090 R15: 00007ffdc0c3b3d8 [ 197.378847][ T7506] [ 197.834140][ T7514] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 197.899454][ T7514] netlink: 51 bytes leftover after parsing attributes in process `syz.1.551'. [ 198.123579][ T7517] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 198.275848][ T7517] team0: Device ipvlan1 failed to register rx_handler [ 198.833610][ T7520] FAULT_INJECTION: forcing a failure. [ 198.833610][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 198.851933][ T7520] CPU: 1 PID: 7520 Comm: syz.0.553 Not tainted syzkaller #0 [ 198.859407][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.869890][ T7520] Call Trace: [ 198.873213][ T7520] [ 198.876187][ T7520] dump_stack_lvl+0x18c/0x250 [ 198.881375][ T7520] ? show_regs_print_info+0x20/0x20 [ 198.886660][ T7520] ? load_image+0x400/0x400 [ 198.891282][ T7520] ? __might_sleep+0xe0/0xe0 [ 198.895951][ T7520] ? __lock_acquire+0x7d40/0x7d40 [ 198.901079][ T7520] should_fail_ex+0x39d/0x4d0 [ 198.906006][ T7520] should_failslab+0x9/0x20 [ 198.910709][ T7520] slab_pre_alloc_hook+0x59/0x310 [ 198.915983][ T7520] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 198.921588][ T7520] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 198.927204][ T7520] __kmem_cache_alloc_node+0x53/0x250 [ 198.932742][ T7520] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 198.938433][ T7520] __kmalloc+0xa4/0x230 [ 198.942755][ T7520] bpf_prog_test_run_skb+0x238/0x12b0 [ 198.948187][ T7520] ? lockdep_hardirqs_on+0x98/0x150 [ 198.953449][ T7520] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.959847][ T7520] ? cpu_online+0x60/0x60 [ 198.964339][ T7520] bpf_prog_test_run+0x321/0x390 [ 198.969438][ T7520] __sys_bpf+0x49d/0x890 [ 198.973732][ T7520] ? bpf_link_show_fdinfo+0x390/0x390 [ 198.979171][ T7520] ? lock_chain_count+0x20/0x20 [ 198.984076][ T7520] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 198.990218][ T7520] __x64_sys_bpf+0x7c/0x90 [ 198.994719][ T7520] do_syscall_64+0x55/0xa0 [ 198.999186][ T7520] ? clear_bhb_loop+0x40/0x90 [ 199.003997][ T7520] ? clear_bhb_loop+0x40/0x90 [ 199.008724][ T7520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.014848][ T7520] RIP: 0033:0x7f4f20f9acb9 [ 199.019324][ T7520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.039086][ T7520] RSP: 002b:00007f4f21f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.047560][ T7520] RAX: ffffffffffffffda RBX: 00007f4f21215fa0 RCX: 00007f4f20f9acb9 [ 199.055582][ T7520] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 199.063612][ T7520] RBP: 00007f4f21f23090 R08: 0000000000000000 R09: 0000000000000000 [ 199.071625][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.080070][ T7520] R13: 00007f4f21216038 R14: 00007f4f21215fa0 R15: 00007ffebdc8c8f8 [ 199.088148][ T7520] [ 199.135466][ T7522] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 199.163832][ T7522] netlink: 16138 bytes leftover after parsing attributes in process `syz.1.554'. [ 199.792209][ T7545] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 199.839456][ T7545] netlink: 51 bytes leftover after parsing attributes in process `syz.0.563'. [ 200.651751][ T7578] netlink: 'syz.3.574': attribute type 2 has an invalid length. [ 200.747105][ T7578] netlink: 51 bytes leftover after parsing attributes in process `syz.3.574'. [ 201.300496][ T5777] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 201.306688][ T5777] Bluetooth: hci2: command 0x206a tx timeout [ 201.596604][ T7605] netlink: 'syz.0.586': attribute type 2 has an invalid length. [ 201.615471][ T7605] netlink: 51 bytes leftover after parsing attributes in process `syz.0.586'. [ 201.742910][ T7610] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.587'. [ 201.855231][ T7612] netlink: 'syz.0.596': attribute type 2 has an invalid length. [ 201.865456][ T7612] netlink: 51 bytes leftover after parsing attributes in process `syz.0.596'. [ 201.997210][ T7614] netlink: 'syz.3.589': attribute type 39 has an invalid length. [ 202.182726][ T5777] Bluetooth: hci0: command 0x206a tx timeout [ 202.189445][ T51] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 202.611370][ T7629] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 202.625004][ T7629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.594'. [ 202.637530][ T7629] bond0: entered promiscuous mode [ 202.643863][ T7629] !1ÿ: entered promiscuous mode [ 202.649762][ T7629] bond_slave_1: entered promiscuous mode [ 202.656166][ T7629] bridge0: port 4(bond0) entered blocking state [ 202.664511][ T7629] bridge0: port 4(bond0) entered disabled state [ 202.675071][ T7629] bond0: entered allmulticast mode [ 202.682701][ T7629] !1ÿ: entered allmulticast mode [ 202.688126][ T7629] bond_slave_1: entered allmulticast mode [ 202.704894][ T7629] bridge0: port 4(bond0) entered blocking state [ 202.711591][ T7629] bridge0: port 4(bond0) entered forwarding state [ 203.032942][ T7640] netlink: 'syz.0.599': attribute type 2 has an invalid length. [ 203.060630][ T7640] netlink: 51 bytes leftover after parsing attributes in process `syz.0.599'. [ 203.219517][ T51] Bluetooth: hci3: command 0x206a tx timeout [ 203.225696][ T5783] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 203.608281][ T7661] netlink: 'syz.3.609': attribute type 3 has an invalid length. [ 203.616607][ T7661] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 203.625397][ T7661] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.609'. [ 203.654539][ T7661] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 203.663397][ T7661] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.609'. [ 203.809654][ T7665] netlink: 'syz.1.610': attribute type 2 has an invalid length. [ 203.831202][ T7665] netlink: 51 bytes leftover after parsing attributes in process `syz.1.610'. [ 203.976480][ T7669] netlink: 'syz.0.612': attribute type 21 has an invalid length. [ 204.523459][ T7680] hsr_slave_0 (unregistering): left promiscuous mode [ 204.638645][ T7682] team0: Port device wlan1 added [ 204.671451][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.886552][ T7691] netlink: 51 bytes leftover after parsing attributes in process `syz.3.621'. [ 205.327768][ T7699] FAULT_INJECTION: forcing a failure. [ 205.327768][ T7699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.342311][ T7699] CPU: 1 PID: 7699 Comm: syz.3.623 Not tainted syzkaller #0 [ 205.349687][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.359974][ T7699] Call Trace: [ 205.363295][ T7699] [ 205.366271][ T7699] dump_stack_lvl+0x18c/0x250 [ 205.371020][ T7699] ? show_regs_print_info+0x20/0x20 [ 205.376291][ T7699] ? load_image+0x400/0x400 [ 205.380854][ T7699] ? __might_fault+0xaa/0x120 [ 205.385590][ T7699] ? __lock_acquire+0x7d40/0x7d40 [ 205.390708][ T7699] should_fail_ex+0x39d/0x4d0 [ 205.395633][ T7699] _copy_from_iter+0x1d9/0x12e0 [ 205.400551][ T7699] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.406772][ T7699] ? lockdep_hardirqs_on+0x98/0x150 [ 205.412135][ T7699] ? copyout_mc+0x70/0x70 [ 205.416545][ T7699] ? __check_object_size+0x506/0xa20 [ 205.421984][ T7699] netlink_sendmsg+0x76b/0xbf0 [ 205.426815][ T7699] ? lockdep_hardirqs_on+0x98/0x150 [ 205.432490][ T7699] ? netlink_getsockopt+0x590/0x590 [ 205.437936][ T7699] ? aa_sock_msg_perm+0x94/0x150 [ 205.443027][ T7699] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.448409][ T7699] ? security_socket_sendmsg+0x80/0xa0 [ 205.454280][ T7699] ? netlink_getsockopt+0x590/0x590 [ 205.459553][ T7699] ____sys_sendmsg+0x5ba/0x960 [ 205.464485][ T7699] ? __asan_memset+0x22/0x40 [ 205.469150][ T7699] ? __sys_sendmsg_sock+0x30/0x30 [ 205.474246][ T7699] ? __import_iovec+0x5f2/0x850 [ 205.479351][ T7699] ? import_iovec+0x73/0xa0 [ 205.483938][ T7699] ___sys_sendmsg+0x2a6/0x360 [ 205.488871][ T7699] ? __sys_sendmsg+0x2a0/0x2a0 [ 205.493727][ T7699] ? perf_trace_preemptirq_template+0xac/0x330 [ 205.500076][ T7699] __se_sys_sendmsg+0x1c2/0x2b0 [ 205.504992][ T7699] ? __x64_sys_sendmsg+0x80/0x80 [ 205.510113][ T7699] ? lockdep_hardirqs_on+0x98/0x150 [ 205.515365][ T7699] do_syscall_64+0x55/0xa0 [ 205.520026][ T7699] ? clear_bhb_loop+0x40/0x90 [ 205.524947][ T7699] ? clear_bhb_loop+0x40/0x90 [ 205.529774][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.535727][ T7699] RIP: 0033:0x7f74d779acb9 [ 205.540556][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.560579][ T7699] RSP: 002b:00007f74d86ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.569687][ T7699] RAX: ffffffffffffffda RBX: 00007f74d7a15fa0 RCX: 00007f74d779acb9 [ 205.577874][ T7699] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000009 [ 205.585967][ T7699] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 205.594068][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.602109][ T7699] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 205.610245][ T7699] [ 205.940220][ T7709] netlink: 55 bytes leftover after parsing attributes in process `syz.0.628'. [ 205.984838][ T7711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.629'. [ 206.014021][ T7711] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 206.551873][ T7724] netlink: 51 bytes leftover after parsing attributes in process `syz.1.632'. [ 206.819189][ T5785] Bluetooth: hci1: command 0x206a tx timeout [ 206.825432][ T5783] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 206.863255][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.636'. [ 206.899382][ T5785] Bluetooth: hci3: command 0x206a tx timeout [ 206.905756][ T5785] Bluetooth: hci2: command 0x206a tx timeout [ 206.911942][ T5776] Bluetooth: hci0: command 0x206a tx timeout [ 206.929265][ T7734] FAULT_INJECTION: forcing a failure. [ 206.929265][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.997595][ T7734] CPU: 0 PID: 7734 Comm: syz.2.635 Not tainted syzkaller #0 [ 207.005237][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.015445][ T7734] Call Trace: [ 207.019068][ T7734] [ 207.022125][ T7734] dump_stack_lvl+0x18c/0x250 [ 207.026885][ T7734] ? show_regs_print_info+0x20/0x20 [ 207.032758][ T7734] ? load_image+0x400/0x400 [ 207.037336][ T7734] ? __might_fault+0xaa/0x120 [ 207.042142][ T7734] ? __lock_acquire+0x7d40/0x7d40 [ 207.047416][ T7734] should_fail_ex+0x39d/0x4d0 [ 207.052287][ T7734] _copy_from_user+0x2f/0xe0 [ 207.057132][ T7734] __sys_bpf+0x23e/0x890 [ 207.061488][ T7734] ? bpf_link_show_fdinfo+0x390/0x390 [ 207.066985][ T7734] ? lock_chain_count+0x20/0x20 [ 207.072091][ T7734] __x64_sys_bpf+0x7c/0x90 [ 207.076725][ T7734] do_syscall_64+0x55/0xa0 [ 207.081435][ T7734] ? clear_bhb_loop+0x40/0x90 [ 207.086243][ T7734] ? clear_bhb_loop+0x40/0x90 [ 207.091216][ T7734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.097243][ T7734] RIP: 0033:0x7f7e0c59acb9 [ 207.101704][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.122078][ T7734] RSP: 002b:00007f7e0a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.130872][ T7734] RAX: ffffffffffffffda RBX: 00007f7e0c816090 RCX: 00007f7e0c59acb9 [ 207.139083][ T7734] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 207.147292][ T7734] RBP: 00007f7e0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.155466][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.163882][ T7734] R13: 00007f7e0c816128 R14: 00007f7e0c816090 R15: 00007ffdc0c3b3d8 [ 207.172213][ T7734] [ 207.307719][ T7742] validate_nla: 5 callbacks suppressed [ 207.307734][ T7742] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 207.694800][ T7750] netlink: 830 bytes leftover after parsing attributes in process `syz.0.642'. [ 207.756352][ T7750] team0: default FDB implementation only supports local addresses [ 207.984645][ T7759] netlink: 'syz.1.644': attribute type 2 has an invalid length. [ 208.152984][ T7763] FAULT_INJECTION: forcing a failure. [ 208.152984][ T7763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.229631][ T7763] CPU: 1 PID: 7763 Comm: syz.3.647 Not tainted syzkaller #0 [ 208.239287][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.249662][ T7763] Call Trace: [ 208.253202][ T7763] [ 208.256372][ T7763] dump_stack_lvl+0x18c/0x250 [ 208.261145][ T7763] ? show_regs_print_info+0x20/0x20 [ 208.266560][ T7763] ? load_image+0x400/0x400 [ 208.271619][ T7763] ? __might_fault+0xaa/0x120 [ 208.277341][ T7763] ? __lock_acquire+0x7d40/0x7d40 [ 208.283162][ T7763] should_fail_ex+0x39d/0x4d0 [ 208.288234][ T7763] _copy_from_iter+0x1d9/0x12e0 [ 208.293342][ T7763] ? slab_post_alloc_hook+0x8a/0x4b0 [ 208.298970][ T7763] ? __virt_addr_valid+0x18c/0x540 [ 208.304650][ T7763] ? __lock_acquire+0x7d40/0x7d40 [ 208.309829][ T7763] ? rcu_is_watching+0x15/0xb0 [ 208.315766][ T7763] ? copyout_mc+0x70/0x70 [ 208.320883][ T7763] ? __virt_addr_valid+0x18c/0x540 [ 208.326344][ T7763] ? __virt_addr_valid+0x18c/0x540 [ 208.331899][ T7763] ? __virt_addr_valid+0x469/0x540 [ 208.337757][ T7763] ? __check_object_size+0x506/0xa20 [ 208.343708][ T7763] netlink_sendmsg+0x76b/0xbf0 [ 208.349019][ T7763] ? netlink_getsockopt+0x590/0x590 [ 208.354420][ T7763] ? aa_sock_msg_perm+0x94/0x150 [ 208.359528][ T7763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 208.365086][ T7763] ? security_socket_sendmsg+0x80/0xa0 [ 208.370727][ T7763] ? netlink_getsockopt+0x590/0x590 [ 208.376015][ T7763] ____sys_sendmsg+0x5ba/0x960 [ 208.380897][ T7763] ? __asan_memset+0x22/0x40 [ 208.386622][ T7763] ? __sys_sendmsg_sock+0x30/0x30 [ 208.392760][ T7763] ? __import_iovec+0x5f2/0x850 [ 208.399406][ T7763] ? import_iovec+0x73/0xa0 [ 208.404845][ T7763] ___sys_sendmsg+0x2a6/0x360 [ 208.410154][ T7763] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.415397][ T7763] ? __lock_acquire+0x7d40/0x7d40 [ 208.420825][ T7763] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.425962][ T7763] ? __x64_sys_sendmsg+0x80/0x80 [ 208.431173][ T7763] ? lockdep_hardirqs_on+0x98/0x150 [ 208.436534][ T7763] do_syscall_64+0x55/0xa0 [ 208.441814][ T7763] ? clear_bhb_loop+0x40/0x90 [ 208.447509][ T7763] ? clear_bhb_loop+0x40/0x90 [ 208.453239][ T7763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.460803][ T7763] RIP: 0033:0x7f74d779acb9 [ 208.465334][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.486146][ T7763] RSP: 002b:00007f74d86ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.495678][ T7763] RAX: ffffffffffffffda RBX: 00007f74d7a15fa0 RCX: 00007f74d779acb9 [ 208.504242][ T7763] RDX: 00000000040000c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 208.512933][ T7763] RBP: 00007f74d86ef090 R08: 0000000000000000 R09: 0000000000000000 [ 208.521570][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.530218][ T7763] R13: 00007f74d7a16038 R14: 00007f74d7a15fa0 R15: 00007ffe222feb98 [ 208.538774][ T7763] [ 208.673280][ T7767] netlink: 'syz.0.649': attribute type 27 has an invalid length. [ 208.686176][ T7767] __nla_validate_parse: 1 callbacks suppressed [ 208.686218][ T7767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.649'. [ 208.746297][ T7765] IPv6: Can't replace route, no match found [ 208.831619][ T7769] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 208.889341][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.650'. [ 208.912295][ T51] Bluetooth: hci1: command 0x206a tx timeout [ 209.059212][ T5777] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 209.065812][ T5783] Bluetooth: hci3: command 0x206a tx timeout [ 209.073317][ T5777] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 209.127121][ T7777] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 209.135853][ T7777] team0: Device bridge0 is up. Set it down before adding it as a team port [ 209.491429][ T7788] netlink: 'syz.3.656': attribute type 2 has an invalid length. [ 209.527643][ T7788] netlink: 51 bytes leftover after parsing attributes in process `syz.3.656'. [ 210.422706][ T7804] netlink: 'syz.2.661': attribute type 14 has an invalid length. [ 210.437034][ T7804] netlink: 164 bytes leftover after parsing attributes in process `syz.2.661'. [ 211.066182][ T7819] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 211.085689][ T7819] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.667'. [ 211.139652][ T5783] Bluetooth: hci3: command 0x206a tx timeout [ 211.355538][ T7826] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.669'. [ 211.366658][ T7825] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.669'. [ 211.516474][ T7826] netlink: 'syz.2.669': attribute type 4 has an invalid length. [ 211.550970][ T7833] FAULT_INJECTION: forcing a failure. [ 211.550970][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 211.551016][ T7833] CPU: 1 PID: 7833 Comm: syz.1.673 Not tainted syzkaller #0 [ 211.551037][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.551049][ T7833] Call Trace: [ 211.551057][ T7833] [ 211.551066][ T7833] dump_stack_lvl+0x18c/0x250 [ 211.551107][ T7833] ? show_regs_print_info+0x20/0x20 [ 211.551138][ T7833] ? load_image+0x400/0x400 [ 211.551167][ T7833] ? verify_lock_unused+0x140/0x140 [ 211.551202][ T7833] should_fail_ex+0x39d/0x4d0 [ 211.551239][ T7833] should_failslab+0x9/0x20 [ 211.551269][ T7833] slab_pre_alloc_hook+0x59/0x310 [ 211.551307][ T7833] kmem_cache_alloc+0x5a/0x2d0 [ 211.551335][ T7833] ? skb_clone+0x1eb/0x370 [ 211.551362][ T7833] skb_clone+0x1eb/0x370 [ 211.551386][ T7833] __netlink_deliver_tap+0x41c/0x830 [ 211.551438][ T7833] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.551470][ T7833] netlink_deliver_tap+0x19c/0x1b0 [ 211.551502][ T7833] netlink_unicast+0x72c/0x8d0 [ 211.551542][ T7833] netlink_sendmsg+0x8d0/0xbf0 [ 211.551582][ T7833] ? netlink_getsockopt+0x590/0x590 [ 211.551615][ T7833] ? aa_sock_msg_perm+0x94/0x150 [ 211.551643][ T7833] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 211.551669][ T7833] ? security_socket_sendmsg+0x80/0xa0 [ 211.551690][ T7833] ? netlink_getsockopt+0x590/0x590 [ 211.551722][ T7833] ____sys_sendmsg+0x5ba/0x960 [ 211.551760][ T7833] ? __asan_memset+0x22/0x40 [ 211.707083][ T7833] ? __sys_sendmsg_sock+0x30/0x30 [ 211.712328][ T7833] ? __import_iovec+0x5f2/0x850 [ 211.717669][ T7833] ? import_iovec+0x73/0xa0 [ 211.722666][ T7833] ___sys_sendmsg+0x2a6/0x360 [ 211.727378][ T7833] ? get_pid_task+0x20/0x1e0 [ 211.732213][ T7833] ? __sys_sendmsg+0x2a0/0x2a0 [ 211.737122][ T7833] ? __lock_acquire+0x7d40/0x7d40 [ 211.742592][ T7833] __se_sys_sendmsg+0x1c2/0x2b0 [ 211.747780][ T7833] ? __x64_sys_sendmsg+0x80/0x80 [ 211.752782][ T7833] ? lockdep_hardirqs_on+0x98/0x150 [ 211.758625][ T7833] do_syscall_64+0x55/0xa0 [ 211.763468][ T7833] ? clear_bhb_loop+0x40/0x90 [ 211.768439][ T7833] ? clear_bhb_loop+0x40/0x90 [ 211.773278][ T7833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.779240][ T7833] RIP: 0033:0x7f203b59acb9 [ 211.783813][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.805240][ T7833] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.814071][ T7833] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 211.823135][ T7833] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 211.831404][ T7833] RBP: 00007f203c3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 211.839403][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.847587][ T7833] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 211.855690][ T7833] [ 212.571233][ T7855] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 212.619123][ T7855] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.681'. [ 213.177229][ T7874] netlink: 'syz.0.689': attribute type 11 has an invalid length. [ 213.185928][ T7874] netlink: 'syz.0.689': attribute type 15 has an invalid length. [ 213.379639][ T5777] Bluetooth: hci1: command 0x206a tx timeout [ 213.385907][ T5783] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 213.453885][ T7882] FAULT_INJECTION: forcing a failure. [ 213.453885][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 213.506036][ T7882] CPU: 1 PID: 7882 Comm: syz.1.692 Not tainted syzkaller #0 [ 213.513595][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.524409][ T7882] Call Trace: [ 213.527914][ T7882] [ 213.530904][ T7882] dump_stack_lvl+0x18c/0x250 [ 213.535756][ T7882] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 213.541295][ T7882] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.547761][ T7882] ? show_regs_print_info+0x20/0x20 [ 213.553101][ T7882] ? load_image+0x400/0x400 [ 213.557908][ T7882] should_fail_ex+0x39d/0x4d0 [ 213.563272][ T7882] should_failslab+0x9/0x20 [ 213.567843][ T7882] slab_pre_alloc_hook+0x59/0x310 [ 213.573635][ T7882] ? nf_ct_ext_add+0x1ab/0x440 [ 213.578542][ T7882] ? nf_ct_ext_add+0x1ab/0x440 [ 213.583512][ T7882] __kmem_cache_alloc_node+0x53/0x250 [ 213.588948][ T7882] ? nf_ct_ext_add+0x1ab/0x440 [ 213.593798][ T7882] __kmalloc_node_track_caller+0xa2/0x230 [ 213.599705][ T7882] krealloc+0x86/0x120 [ 213.603896][ T7882] nf_ct_ext_add+0x1ab/0x440 [ 213.608662][ T7882] init_conntrack+0x69c/0xf10 [ 213.613573][ T7882] ? early_drop+0x7f0/0x7f0 [ 213.618571][ T7882] ? nf_conntrack_find_get+0x650/0x650 [ 213.624451][ T7882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 213.630621][ T7882] ? __siphash_unaligned+0x22e/0x3a0 [ 213.636687][ T7882] nf_conntrack_in+0xc06/0x15c0 [ 213.642459][ T7882] ? nf_ct_pernet+0x270/0x270 [ 213.648389][ T7882] ? ipt_do_table+0x2c1/0x15e0 [ 213.653482][ T7882] ? sctp_packet_singleton+0x235/0x340 [ 213.659168][ T7882] ? sctp_outq_flush+0x50e/0x3120 [ 213.664332][ T7882] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 213.670211][ T7882] ? do_syscall_64+0x55/0xa0 [ 213.674984][ T7882] ? ipv4_conntrack_local+0x123/0x200 [ 213.680440][ T7882] ? ipv4_conntrack_in+0x20/0x20 [ 213.686044][ T7882] nf_hook_slow+0xbd/0x200 [ 213.690696][ T7882] ? nf_hook+0x390/0x390 [ 213.695356][ T7882] nf_hook+0x228/0x390 [ 213.699665][ T7882] ? nf_hook+0xa2/0x390 [ 213.704046][ T7882] ? __ip_local_out+0x5f0/0x5f0 [ 213.710007][ T7882] ? nf_hook+0x390/0x390 [ 213.714480][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 213.719915][ T7882] ? ip_fast_csum+0x1ee/0x2b0 [ 213.724680][ T7882] __ip_local_out+0x4db/0x5f0 [ 213.729811][ T7882] ? nf_hook+0x390/0x390 [ 213.734368][ T7882] ? __ip_queue_xmit+0x5d/0x1950 [ 213.739400][ T7882] __ip_queue_xmit+0xf7c/0x1950 [ 213.744413][ T7882] ? __ip_queue_xmit+0x5d/0x1950 [ 213.749770][ T7882] sctp_packet_transmit+0x247d/0x2a30 [ 213.755397][ T7882] sctp_packet_singleton+0x235/0x340 [ 213.760911][ T7882] ? sctp_outq_select_transport+0x570/0x570 [ 213.767150][ T7882] ? sctp_outq_select_transport+0x45d/0x570 [ 213.773257][ T7882] ? sctp_transport_burst_limited+0x197/0x280 [ 213.779429][ T7882] sctp_outq_flush+0x50e/0x3120 [ 213.784940][ T7882] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 213.791162][ T7882] ? _raw_spin_unlock+0x40/0x40 [ 213.796076][ T7882] ? rcu_is_watching+0x15/0xb0 [ 213.801245][ T7882] ? enqueue_timer+0x23d/0x550 [ 213.806123][ T7882] ? sctp_outq_tail+0x8a0/0x8a0 [ 213.811603][ T7882] ? sctp_outq_tail+0x604/0x8a0 [ 213.816622][ T7882] ? sctp_outq_uncork+0x4d/0xa0 [ 213.821809][ T7882] sctp_do_sm+0x533b/0x5a60 [ 213.826635][ T7882] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 213.833035][ T7882] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 213.838574][ T7882] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 213.844797][ T7882] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 213.850794][ T7882] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 213.856496][ T7882] ? __asan_memcpy+0x40/0x70 [ 213.861220][ T7882] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 213.866724][ T7882] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 213.872575][ T7882] ? __sctp_connect+0xd80/0xd80 [ 213.877484][ T7882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 213.883638][ T7882] ? _local_bh_enable+0xa0/0xa0 [ 213.889148][ T7882] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.895202][ T7882] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.901319][ T7882] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 213.907740][ T7882] ? security_sctp_bind_connect+0x89/0xb0 [ 213.914749][ T7882] sctp_sendmsg+0x1b83/0x28c0 [ 213.920382][ T7882] ? sctp_getsockopt+0xb60/0xb60 [ 213.926432][ T7882] ? aa_sk_perm+0x83c/0x970 [ 213.931250][ T7882] ? aa_af_perm+0x330/0x330 [ 213.936098][ T7882] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 213.943218][ T7882] ? sock_rps_record_flow+0x19/0x3f0 [ 213.949879][ T7882] ? inet_sendmsg+0x7c/0x2f0 [ 213.955053][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.960740][ T7882] ? security_socket_sendmsg+0x80/0xa0 [ 213.966533][ T7882] ? inet_send_prepare+0x260/0x260 [ 213.971938][ T7882] ____sys_sendmsg+0x5ba/0x960 [ 213.976948][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 213.982111][ T7882] ? __asan_memset+0x22/0x40 [ 213.987209][ T7882] ? __sys_sendmsg_sock+0x30/0x30 [ 213.992586][ T7882] ? __import_iovec+0x5f2/0x850 [ 213.997752][ T7882] ? import_iovec+0x73/0xa0 [ 214.002474][ T7882] ___sys_sendmsg+0x2a6/0x360 [ 214.007610][ T7882] ? get_pid_task+0x20/0x1e0 [ 214.012468][ T7882] ? __sys_sendmsg+0x2a0/0x2a0 [ 214.017343][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 214.022546][ T7882] __se_sys_sendmsg+0x1c2/0x2b0 [ 214.027498][ T7882] ? __x64_sys_sendmsg+0x80/0x80 [ 214.032514][ T7882] ? lockdep_hardirqs_on+0x98/0x150 [ 214.038208][ T7882] do_syscall_64+0x55/0xa0 [ 214.043191][ T7882] ? clear_bhb_loop+0x40/0x90 [ 214.048283][ T7882] ? clear_bhb_loop+0x40/0x90 [ 214.053141][ T7882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.059692][ T7882] RIP: 0033:0x7f203b59acb9 [ 214.064498][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.085286][ T7882] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.093937][ T7882] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 214.101988][ T7882] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 214.110225][ T7882] RBP: 00007f203c3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 214.118799][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.126899][ T7882] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 214.134929][ T7882] [ 214.605235][ T7893] netlink: 10 bytes leftover after parsing attributes in process `syz.2.698'. [ 214.674566][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 214.800340][ T7893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.698'. [ 215.199858][ T7914] FAULT_INJECTION: forcing a failure. [ 215.199858][ T7914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.239575][ T7914] CPU: 0 PID: 7914 Comm: syz.2.704 Not tainted syzkaller #0 [ 215.247395][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.257805][ T7914] Call Trace: [ 215.261130][ T7914] [ 215.264211][ T7914] dump_stack_lvl+0x18c/0x250 [ 215.269043][ T7914] ? show_regs_print_info+0x20/0x20 [ 215.274320][ T7914] ? load_image+0x400/0x400 [ 215.282752][ T7914] ? __lock_acquire+0x7d40/0x7d40 [ 215.288171][ T7914] should_fail_ex+0x39d/0x4d0 [ 215.293140][ T7914] prepare_alloc_pages+0x1e2/0x5f0 [ 215.298779][ T7914] __alloc_pages+0x134/0x460 [ 215.303454][ T7914] ? zone_statistics+0x170/0x170 [ 215.308479][ T7914] ? alloc_pages+0x4dc/0x740 [ 215.314064][ T7914] ? do_raw_spin_unlock+0x121/0x230 [ 215.319821][ T7914] __get_free_pages+0xc/0x30 [ 215.324836][ T7914] kasan_populate_vmalloc_pte+0x35/0x100 [ 215.331891][ T7914] __apply_to_page_range+0x860/0xdd0 [ 215.337618][ T7914] ? kasan_populate_vmalloc+0x70/0x70 [ 215.343539][ T7914] ? apply_to_page_range+0x50/0x50 [ 215.348924][ T7914] ? do_raw_spin_unlock+0x121/0x230 [ 215.354375][ T7914] alloc_vmap_area+0x1d0c/0x1e30 [ 215.359599][ T7914] ? vm_map_ram+0xcb0/0xcb0 [ 215.364177][ T7914] ? rcu_is_watching+0x15/0xb0 [ 215.369114][ T7914] __get_vm_area_node+0x162/0x370 [ 215.374315][ T7914] __vmalloc_node_range+0x36e/0x1330 [ 215.379675][ T7914] ? htab_map_alloc+0x3da/0xe80 [ 215.385069][ T7914] ? _raw_spin_unlock+0x40/0x40 [ 215.390154][ T7914] ? pcpu_alloc+0x11db/0x1860 [ 215.394985][ T7914] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 215.400833][ T7914] ? free_vm_area+0x50/0x50 [ 215.405708][ T7914] bpf_map_area_alloc+0xf1/0x110 [ 215.411079][ T7914] ? htab_map_alloc+0x3da/0xe80 [ 215.416235][ T7914] htab_map_alloc+0x3da/0xe80 [ 215.421104][ T7914] htab_of_map_alloc+0x55/0xc0 [ 215.426020][ T7914] map_create+0x877/0x12f0 [ 215.430695][ T7914] ? bpf_lsm_bpf+0x9/0x10 [ 215.435191][ T7914] __sys_bpf+0x651/0x890 [ 215.439598][ T7914] ? bpf_link_show_fdinfo+0x390/0x390 [ 215.445584][ T7914] ? lock_chain_count+0x20/0x20 [ 215.450870][ T7914] __x64_sys_bpf+0x7c/0x90 [ 215.455366][ T7914] do_syscall_64+0x55/0xa0 [ 215.460714][ T7914] ? clear_bhb_loop+0x40/0x90 [ 215.465843][ T7914] ? clear_bhb_loop+0x40/0x90 [ 215.470780][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.477000][ T7914] RIP: 0033:0x7f7e0c59acb9 [ 215.481707][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.502962][ T7914] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.511802][ T7914] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 215.519928][ T7914] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 215.529027][ T7914] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 215.537619][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.545645][ T7914] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 215.554437][ T7914] [ 216.158757][ T7933] netlink: 822 bytes leftover after parsing attributes in process `syz.3.712'. [ 216.211714][ T7933] netlink: 'syz.3.712': attribute type 21 has an invalid length. [ 216.245214][ T7933] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 216.263892][ T7933] netlink: 'syz.3.712': attribute type 2 has an invalid length. [ 216.292121][ T7938] FAULT_INJECTION: forcing a failure. [ 216.292121][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 216.307390][ T7933] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.712'. [ 216.319256][ T7938] CPU: 0 PID: 7938 Comm: syz.2.715 Not tainted syzkaller #0 [ 216.327085][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.337639][ T7938] Call Trace: [ 216.341100][ T7938] [ 216.344219][ T7938] dump_stack_lvl+0x18c/0x250 [ 216.349070][ T7938] ? sctp_sendmsg+0x1575/0x28c0 [ 216.354422][ T7938] ? ___sys_sendmsg+0x2a6/0x360 [ 216.359639][ T7938] ? show_regs_print_info+0x20/0x20 [ 216.365189][ T7938] ? load_image+0x400/0x400 [ 216.369863][ T7938] should_fail_ex+0x39d/0x4d0 [ 216.374621][ T7938] should_failslab+0x9/0x20 [ 216.379338][ T7938] slab_pre_alloc_hook+0x59/0x310 [ 216.384442][ T7938] ? sctp_add_bind_addr+0x8c/0x360 [ 216.389628][ T7938] __kmem_cache_alloc_node+0x53/0x250 [ 216.395251][ T7938] ? sctp_add_bind_addr+0x8c/0x360 [ 216.400543][ T7938] kmalloc_trace+0x2a/0xe0 [ 216.405307][ T7938] sctp_add_bind_addr+0x8c/0x360 [ 216.410863][ T7938] sctp_copy_local_addr_list+0x315/0x4f0 [ 216.417052][ T7938] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 216.423020][ T7938] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 216.429541][ T7938] ? sctp_v4_is_any+0x35/0x60 [ 216.434527][ T7938] ? sctp_copy_one_addr+0x8c/0x350 [ 216.441113][ T7938] sctp_bind_addr_copy+0xb3/0x3c0 [ 216.447272][ T7938] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 216.454397][ T7938] sctp_connect_new_asoc+0x2f9/0x6a0 [ 216.460605][ T7938] ? __sctp_connect+0xd80/0xd80 [ 216.465702][ T7938] ? __local_bh_enable_ip+0x13a/0x1c0 [ 216.471644][ T7938] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 216.477585][ T7938] ? security_sctp_bind_connect+0x89/0xb0 [ 216.484161][ T7938] sctp_sendmsg+0x1575/0x28c0 [ 216.488989][ T7938] ? sctp_getsockopt+0xb60/0xb60 [ 216.494087][ T7938] ? aa_sk_perm+0x83c/0x970 [ 216.498649][ T7938] ? aa_af_perm+0x330/0x330 [ 216.503194][ T7938] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 216.509838][ T7938] ? sock_rps_record_flow+0x19/0x3f0 [ 216.515283][ T7938] ? inet_sendmsg+0xe9/0x2f0 [ 216.520015][ T7938] ? inet_send_prepare+0x260/0x260 [ 216.525357][ T7938] ____sys_sendmsg+0x5ba/0x960 [ 216.530952][ T7938] ? __lock_acquire+0x7d40/0x7d40 [ 216.536248][ T7938] ? __asan_memset+0x22/0x40 [ 216.541630][ T7938] ? __sys_sendmsg_sock+0x30/0x30 [ 216.546895][ T7938] ? __import_iovec+0x5f2/0x850 [ 216.552553][ T7938] ? import_iovec+0x73/0xa0 [ 216.557186][ T7938] ___sys_sendmsg+0x2a6/0x360 [ 216.562141][ T7938] ? __sys_sendmsg+0x2a0/0x2a0 [ 216.567127][ T7938] ? __lock_acquire+0x7d40/0x7d40 [ 216.572417][ T7938] __se_sys_sendmsg+0x1c2/0x2b0 [ 216.577590][ T7938] ? __x64_sys_sendmsg+0x80/0x80 [ 216.582597][ T7938] ? lockdep_hardirqs_on+0x98/0x150 [ 216.588425][ T7938] do_syscall_64+0x55/0xa0 [ 216.594041][ T7938] ? clear_bhb_loop+0x40/0x90 [ 216.599133][ T7938] ? clear_bhb_loop+0x40/0x90 [ 216.604335][ T7938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.610685][ T7938] RIP: 0033:0x7f7e0c59acb9 [ 216.616406][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.638865][ T7938] RSP: 002b:00007f7e0d37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.648685][ T7938] RAX: ffffffffffffffda RBX: 00007f7e0c815fa0 RCX: 00007f7e0c59acb9 [ 216.657440][ T7938] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000003 [ 216.666003][ T7938] RBP: 00007f7e0d37e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.675529][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.685228][ T7938] R13: 00007f7e0c816038 R14: 00007f7e0c815fa0 R15: 00007ffdc0c3b3d8 [ 216.693556][ T7938] [ 217.120272][ T7953] netlink: 168 bytes leftover after parsing attributes in process `syz.3.720'. [ 217.392052][ T7960] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 218.158580][ T7989] FAULT_INJECTION: forcing a failure. [ 218.158580][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 218.172264][ T7989] CPU: 1 PID: 7989 Comm: syz.1.732 Not tainted syzkaller #0 [ 218.180363][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.190621][ T7989] Call Trace: [ 218.193960][ T7989] [ 218.197118][ T7989] dump_stack_lvl+0x18c/0x250 [ 218.201869][ T7989] ? show_regs_print_info+0x20/0x20 [ 218.207236][ T7989] ? load_image+0x400/0x400 [ 218.211783][ T7989] ? __lock_acquire+0x7d40/0x7d40 [ 218.216905][ T7989] should_fail_ex+0x39d/0x4d0 [ 218.221805][ T7989] should_failslab+0x9/0x20 [ 218.226428][ T7989] slab_pre_alloc_hook+0x59/0x310 [ 218.231499][ T7989] ? apparmor_sk_alloc_security+0x77/0x100 [ 218.237350][ T7989] __kmem_cache_alloc_node+0x53/0x250 [ 218.242859][ T7989] ? apparmor_sk_alloc_security+0x77/0x100 [ 218.248877][ T7989] kmalloc_trace+0x2a/0xe0 [ 218.253541][ T7989] apparmor_sk_alloc_security+0x77/0x100 [ 218.259237][ T7989] security_sk_alloc+0x6e/0xa0 [ 218.264068][ T7989] sk_prot_alloc+0x101/0x210 [ 218.268706][ T7989] sk_alloc+0x3a/0x360 [ 218.273043][ T7989] inet6_create+0x7f0/0x11d0 [ 218.278365][ T7989] ? inet6_create+0x83/0x11d0 [ 218.283724][ T7989] __sock_create+0x4a6/0x940 [ 218.288642][ T7989] mptcp_subflow_create_socket+0x10b/0xac0 [ 218.294605][ T7989] ? mark_lock+0x94/0x320 [ 218.299789][ T7989] ? __mptcp_subflow_connect+0x1450/0x1450 [ 218.305992][ T7989] ? lock_chain_count+0x20/0x20 [ 218.311246][ T7989] __mptcp_nmpc_sk+0x157/0x740 [ 218.316137][ T7989] ? __local_bh_enable_ip+0x13a/0x1c0 [ 218.321632][ T7989] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 218.328493][ T7989] mptcp_setsockopt+0xe7a/0x3390 [ 218.333780][ T7989] ? __fget_files+0x28/0x4b0 [ 218.338525][ T7989] ? pm_nl_exit_net+0x230/0x230 [ 218.343689][ T7989] ? aa_af_perm+0x330/0x330 [ 218.348338][ T7989] ? __fget_files+0x28/0x4b0 [ 218.352978][ T7989] ? __fget_files+0x28/0x4b0 [ 218.357636][ T7989] ? aa_sock_opt_perm+0x74/0x100 [ 218.362867][ T7989] ? sock_common_setsockopt+0x36/0xc0 [ 218.368282][ T7989] ? sock_common_recvmsg+0x190/0x190 [ 218.373697][ T7989] do_sock_setsockopt+0x175/0x1a0 [ 218.378763][ T7989] ? __fdget+0x180/0x210 [ 218.383130][ T7989] __x64_sys_setsockopt+0x182/0x200 [ 218.388634][ T7989] do_syscall_64+0x55/0xa0 [ 218.393170][ T7989] ? clear_bhb_loop+0x40/0x90 [ 218.397890][ T7989] ? clear_bhb_loop+0x40/0x90 [ 218.402797][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.408847][ T7989] RIP: 0033:0x7f203b59acb9 [ 218.413684][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.434258][ T7989] RSP: 002b:00007f203c3d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.443778][ T7989] RAX: ffffffffffffffda RBX: 00007f203b815fa0 RCX: 00007f203b59acb9 [ 218.452847][ T7989] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000004 [ 218.463158][ T7989] RBP: 00007f203c3d3090 R08: 0000000000004000 R09: 0000000000000000 [ 218.472312][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.480815][ T7989] R13: 00007f203b816038 R14: 00007f203b815fa0 R15: 00007fffc4654d88 [ 218.489170][ T7989] [ 218.740157][ T5777] Bluetooth: hci1: command 0x206a tx timeout [ 218.743902][ T5783] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 219.066386][ C0] [ 219.066395][ C0] ================================ [ 219.066402][ C0] WARNING: inconsistent lock state [ 219.066419][ C0] syzkaller #0 Not tainted [ 219.066430][ C0] -------------------------------- [ 219.066435][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 219.066443][ C0] syz.0.740/8006 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 219.066465][ C0] ffff88802389bda0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 219.066519][ C0] {INITIAL USE} state was registered at: [ 219.066524][ C0] lock_acquire+0x19e/0x420 [ 219.066543][ C0] _raw_spin_lock+0x2e/0x40 [ 219.066561][ C0] htab_lock_bucket+0x17d/0x300 [ 219.066580][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 219.066598][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 219.066616][ C0] bpf_overflow_handler+0x1fc/0x510 [ 219.066642][ C0] __perf_event_overflow+0x447/0x630 [ 219.066662][ C0] perf_swevent_event+0x324/0x630 [ 219.066681][ C0] perf_bp_event+0x2a7/0x380 [ 219.066707][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 219.066729][ C0] notifier_call_chain+0x197/0x380 [ 219.066752][ C0] atomic_notifier_call_chain+0xda/0x180 [ 219.066774][ C0] notify_die+0x145/0x1a0 [ 219.066795][ C0] notify_debug+0x2e/0x50 [ 219.066810][ C0] noist_exc_debug+0x77/0x120 [ 219.066837][ C0] asm_exc_debug+0x33/0x40 [ 219.066854][ C0] irq event stamp: 1158 [ 219.066860][ C0] hardirqs last enabled at (1157): [] seqcount_lockdep_reader_access+0x10a/0x190 [ 219.066887][ C0] hardirqs last disabled at (1158): [] exc_debug+0x73/0x140 [ 219.066919][ C0] softirqs last enabled at (1114): [] netlink_insert+0x109f/0x13a0 [ 219.066951][ C0] softirqs last disabled at (1112): [] release_sock+0x2f/0x1c0 [ 219.066979][ C0] [ 219.066979][ C0] other info that might help us debug this: [ 219.066985][ C0] Possible unsafe locking scenario: [ 219.066985][ C0] [ 219.066991][ C0] CPU0 [ 219.066994][ C0] ---- [ 219.066997][ C0] lock(&htab->lockdep_key); [ 219.067010][ C0] [ 219.067013][ C0] lock(&htab->lockdep_key); [ 219.067025][ C0] [ 219.067025][ C0] *** DEADLOCK *** [ 219.067025][ C0] [ 219.067028][ C0] no locks held by syz.0.740/8006. [ 219.067036][ C0] [ 219.067036][ C0] stack backtrace: [ 219.067042][ C0] CPU: 0 PID: 8006 Comm: syz.0.740 Not tainted syzkaller #0 [ 219.067060][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.067072][ C0] Call Trace: [ 219.067080][ C0] <#DB> [ 219.067087][ C0] dump_stack_lvl+0x18c/0x250 [ 219.067118][ C0] ? show_regs_print_info+0x20/0x20 [ 219.067151][ C0] ? print_usage_bug+0x475/0x690 [ 219.067174][ C0] ? verify_lock_unused+0x18/0x140 [ 219.067199][ C0] lock_acquire+0x2c2/0x420 [ 219.067225][ C0] ? htab_lock_bucket+0x17d/0x300 [ 219.067248][ C0] ? read_lock_is_recursive+0x20/0x20 [ 219.067282][ C0] _raw_spin_lock+0x2e/0x40 [ 219.067301][ C0] ? htab_lock_bucket+0x17d/0x300 [ 219.067322][ C0] htab_lock_bucket+0x17d/0x300 [ 219.067347][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 219.067372][ C0] ? verify_lock_unused+0x18/0x140 [ 219.067396][ C0] ? jhash+0x34e/0x740 [ 219.067419][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 219.067445][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 219.067467][ C0] ? perf_callchain+0x1f0/0x1f0 [ 219.067493][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 219.067510][ C0] bpf_overflow_handler+0x1fc/0x510 [ 219.067538][ C0] ? bpf_overflow_handler+0xde/0x510 [ 219.067566][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 219.067599][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 219.067625][ C0] __perf_event_overflow+0x447/0x630 [ 219.067653][ C0] perf_swevent_event+0x324/0x630 [ 219.067680][ C0] ? perf_tp_event+0x1450/0x1450 [ 219.067708][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 219.067744][ C0] perf_bp_event+0x2a7/0x380 [ 219.067771][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 219.067793][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.067819][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 219.067848][ C0] ? lock_release+0xb5/0x8c0 [ 219.067889][ C0] ? lock_acquire+0x2c2/0x420 [ 219.067916][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 219.067946][ C0] notifier_call_chain+0x197/0x380 [ 219.067974][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 219.068000][ C0] atomic_notifier_call_chain+0xda/0x180 [ 219.068027][ C0] notify_die+0x145/0x1a0 [ 219.068055][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 219.068087][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.068116][ C0] notify_debug+0x2e/0x50 [ 219.068135][ C0] exc_debug+0xde/0x140 [ 219.068166][ C0] asm_exc_debug+0x1e/0x40 [ 219.068185][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 219.068216][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 219.068234][ C0] RSP: 0018:ffffc900192e7938 EFLAGS: 00050206 [ 219.068250][ C0] RAX: ffffffff84271301 RBX: 000000000000fe33 RCX: 000000000000fdf2 [ 219.068264][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc900193ec041 [ 219.068278][ C0] RBP: ffffc900192e7a90 R08: ffffc900193fbe32 R09: 1ffff9200327f7c6 [ 219.068292][ C0] R10: dffffc0000000000 R11: fffff5200327f7c7 R12: ffffc900193ec000 [ 219.068307][ C0] R13: 00002000000002c0 R14: ffffc900192e7c18 R15: 1ffff9200325cf83 [ 219.068328][ C0] ? _copy_from_iter+0x201/0x12e0 [ 219.068363][ C0] [ 219.068369][ C0] [ 219.068374][ C0] _copy_from_iter+0x24e/0x12e0 [ 219.068423][ C0] ? find_vmap_area+0xfc/0x110 [ 219.068449][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 219.068476][ C0] ? copyout_mc+0x70/0x70 [ 219.068502][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 219.068530][ C0] ? _raw_spin_unlock+0x28/0x40 [ 219.068549][ C0] ? find_vmap_area+0xfc/0x110 [ 219.068575][ C0] ? __check_object_size+0x506/0xa20 [ 219.068610][ C0] netlink_sendmsg+0x76b/0xbf0 [ 219.068645][ C0] ? netlink_getsockopt+0x590/0x590 [ 219.068676][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 219.068708][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 219.068733][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 219.068757][ C0] sock_write_iter+0x2df/0x420 [ 219.068779][ C0] ? sock_read_iter+0x3e0/0x3e0 [ 219.068806][ C0] ? common_file_perm+0x198/0x1f0 [ 219.068835][ C0] vfs_write+0x46c/0x990 [ 219.068866][ C0] ? file_end_write+0x250/0x250 [ 219.068896][ C0] ? __fget_files+0x43d/0x4b0 [ 219.068929][ C0] ? __fdget_pos+0x1d8/0x330 [ 219.068953][ C0] ? ksys_write+0x75/0x260 [ 219.068981][ C0] ksys_write+0x150/0x260 [ 219.069014][ C0] ? __ia32_sys_read+0x90/0x90 [ 219.069041][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 219.069063][ C0] do_syscall_64+0x55/0xa0 [ 219.069089][ C0] ? clear_bhb_loop+0x40/0x90 [ 219.069109][ C0] ? clear_bhb_loop+0x40/0x90 [ 219.069132][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.069152][ C0] RIP: 0033:0x7f4f20f9acb9 [ 219.069168][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.069184][ C0] RSP: 002b:00007f4f21f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.069202][ C0] RAX: ffffffffffffffda RBX: 00007f4f21215fa0 RCX: 00007f4f20f9acb9 [ 219.069215][ C0] RDX: 000000000000fe33 RSI: 00002000000002c0 RDI: 0000000000000003 [ 219.069227][ C0] RBP: 00007f4f21008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 219.069239][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.069250][ C0] R13: 00007f4f21216038 R14: 00007f4f21215fa0 R15: 00007ffebdc8c8f8 [ 219.069274][ C0] [ 219.142752][ T8004] netlink: 'syz.2.739': attribute type 16 has an invalid length. [ 219.869401][ T51] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 219.889163][ T51] Bluetooth: hci0: command 0x206a tx timeout [ 220.808412][ T8004] netlink: 'syz.2.739': attribute type 3 has an invalid length. [ 220.816656][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.739'. [ 221.059157][ T51] Bluetooth: hci3: command 0x206a tx timeout [ 221.059377][ T5777] Bluetooth: hci3: Opcode 0x206a failed: -110