last executing test programs: 16m36.627938877s ago: executing program 0 (id=1046): socketpair(0x8, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2b, &(0x7f0000000040)=@raw=[@ldst={0x1, 0x0, 0x6, 0x0, 0x6, 0x50, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe46}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x98, &(0x7f0000000200)=""/152, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0xb, 0x8}, {0x4, 0x3, 0xb, 0x3}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={r1, r2}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000440)={r1, r2}) r4 = syz_clone(0x1000, &(0x7f0000000480)="5bb66f9775b1c73b82e5c8150adba366557deeefa63b1fba6567cd74e5d506d0fdfbd0e0f1b81b578b68d8a840d5121236132c50cc8790679af4e5824d4a8284c6289c28591d16608209cf1937c4c263def342a7ed4bbc04a91baa140dc4d6ce7b0caf7c6cf8bedb", 0x68, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d9588fc372b475325be77092e5015f6f4f4d25584d0d8d199957c22aa32ca2e2a8b8b9c5a5ae557bb6540a13fa52745bde52b61e2615e9751515abd3c948dc8a775dda6370751ff72771bb7cfcffab044a371523c64184e0e77d29eb32b92cece7f2d28b1db1d817ea258d5c0837533e706c6bd3b63452788a0fea91bf13e0516037e980941f56e398f1d9dd1394b650c9513021f6dffe3e4dff5e4b14efa9f3b69eeed6cb422123942098201355623833d0ab88b3da31b6689fddaafc21e5ec644e2ccfd1c9d7269567cb2a517c01f8d55741fd8ff44ced5fd76660f55859cafc500341") syz_open_procfs$namespace(r4, &(0x7f0000000680)='ns/ipc\x00') r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) recvmsg$kcm(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/206, 0xce}, {&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x7, &(0x7f0000001bc0)=""/214, 0xd6}, 0x121) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={r2, 0xe0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000001e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001e40), &(0x7f0000001e80), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000001ec0)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002040)=r8, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002080)=r4, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000021c0)={@cgroup=r5, 0xf2017cb810f8df7c, 0x1, 0x0, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002140)=[0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@o_path={&(0x7f0000002200)='./file0\x00', 0x0, 0x10, r9}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)={@ifindex=r7, r5, 0x17, 0x32, 0x0, @void, @void, @void, @value=r6, r11}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0xd, &(0x7f00000022c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x91ae, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002340)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000002380)=""/195, 0x41000, 0x4, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x3, 0xa, 0x5, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002500)=[r12, r5, r12, r12, r5], &(0x7f0000002540)=[{0x3, 0x5, 0x2}, {0x2, 0x2, 0x5, 0x4}, {0x1, 0x4, 0x0, 0x1}, {0x3, 0x1, 0xc, 0x2}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={r13, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000002680)=[0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000002700)=[{}], 0x8, 0x10, &(0x7f0000002740), &(0x7f0000002780), 0x8, 0x99, 0x8, 0x8, &(0x7f00000027c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002980)={r4, r5, 0x0, 0x4, &(0x7f0000002940)='+[/\x00'}, 0x30) sendmsg(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000029c0)="60288f12de3e5b8122eb8cd944eefbb1033f393c163b7c082baf21e9e142e47f41f6756da2e97cfbafbf43522de3e62c4990659041a8b0c69fed13a45ab74fae280060758f38b733b81550cc12e924bf96371beb3fea55928f52113d2ca3d38f9a34c17f4d7dcfb7f9295e1246e46e98fc6b9b44735aa9813d93534a27e31e36d8ec", 0x82}, {&(0x7f0000002a80)}], 0x2, &(0x7f0000002b00)=[{0x18, 0x88, 0x7, "841b2f"}, {0x90, 0x10d, 0x9, "5205fd7bfd352e418540615e5e7edd0d90f9d218010f0c2f1fa147f649b0970ea84e01d6a9b6f61ff15716345f0bf2b1d3308a069fbd820521a00403471b6d671b318fec5094ba6356b79bcf00fcaace4ffbccb1c0d9e88297266f722c55cc5cab9cd25fd6743ef2953e7381f80aa8d1392591d3a512a8eb626d"}, {0x1010, 0x10c, 0x8, "1253a693c8ba3e6de7076222df9a7659aea798c8092bd538d028f5c509504f9908a0bcac3e71283b5cba88ebf684c4428145057242365bc9fbcc7c908bc2d121bed769e64353e6f117d4409d738d1682a97404101f6dc18f88c3bacbd9f05fe3a5cf6e5e9ca22687af28104896349d4661e60c166a8e8e52808ce86814c76341c2a2844b3d685056ba9d143e736f77ca92fd0712ca5dd0a175557ca0d95f3cc0f434d2fdaa2a142a50b6cdc2fc7bb3d1869b8d112f93de4aa47dbffb69f3a277d913c86e5186d3957ac7904e98dd7a0625b33520248df4e62e63e1f6d324eb2c22d8254bb7df8bb5b87ee11f2db0feae5cc9af7322874e9b35c9e4fcd5387a94e860c6eab62f32ea027adab21eb2a8e6180f3c1d333d99a5c30f2e0a8cf31f54394591347ee25c67309eb1d15945a4d85fe212530444a95670df1ab17a0863029d0267f1ff1c7b49c4add0bccac7d80d9ec70319072c3528d697163612e12ffffea423c354729ba476b40d4b316a3107936b6e5b7240fdddd75e5110a80cc3d6fe959f216736a0787640232084ff064d965432d75d7a94f42a493749fff3bcf4994af73171dca4b4100d51e83b1dd2966a75726650f452f748878fba610fa0905fdfd9173545b0a88e806c0be56d77bea69e91d9277a7d2bec6641e3539658783b54f5bb6186ec52640c7071f0a63ded3c2f0744edfed5d4664f8d896e2e87a76452e8a0cb39bcada6287bb72d5f3f1a516a65e78bba32790670e2f5e3ad9ef97ad37293d5ce0d99a26dde7e0658a4e02d22c7285bed5488bdfdfa5d6d2ba57a4c9ed5a79277c5a16118b053d60cdc091445eeca5eb29d71de2fdb6a15c833eb60455acbd3459a1c2f39baf6d0883bdda6976c2cef2aaa6ccd6b79169b81033aa75018accd9a7c5a985f4947956c4e451b0307e258c3ff9c45f3d1aee25621c425003b752b436cacc86ae6abd6167566699d5b169e326c2c78cbd92ad99a017865d8d40e08777c012059cf26eeff5502776bf643a5c498313476e880d248ae3a602be9ce4177d037c901a4b552ca60eb764266bf19312761a7e1ac49d02d6631210e2cb26f0129258b3311890521ff0d42f2631834aa84602b6623e4aad0d7182e19d9b66e5f4fad4096bf7bd35eb4c4acaff49720c9b53bfc8364b1a3f284c6b8526d7f07e7a20d069f1d280d6bda0144fc12f72fe013fa6b4515868c51a0c469db30a4f9919ca0ecb9e2f91dbdae4cfa9d628e096deb5d2b5e4346e9f0dc742237cbea0f4b92db0a7e3cd25c3f59631dbaa31df177f0ec39b210c450f86feb4783f406fed30dc44915af9b75bb63bf8c281942a2606c4243dfa0f98c0515740a8c61af883ad7e3e086160b950ba295e4d434464f06545360716a7832b2d55398168c5d7a463d0f7257976c80d996458f93024749d66cfa80004aa4a80ebff9356d73d79cbee6386ff9cae767a3c3d0a793747da6c1f972ac1aed7399a6b15eec1c09995ee55212e197720852228e7db6bff30031eb8a3c13827912112cd7ef18a26b551d0c1c1a486df45557e0dfc1f6c0975b7eddbc095c93288c5694123e542d9ddd31ec8eba22e6fd43e6cb6bf22fcec3bb5f2b0aa311ceafc6a7bcb6281f6d31385d17068dca09dc4a9e8dd10a96ea6027d764d34fd905dcaafe01baa601f2623694b7195204ea06e7d02d028431354d53b99c44ebf32580c564a9a6c404e6f4ed873c7c9c7cfdd57182c8e3bc0b77b950d933a7a44f599db18c984549e5fd8001e1cb60ecb3aab8ffe580f7f0579ff8e4207ae28202430579c3a29dbc45ca082e8bb582356467ac20ba1e7528979084120a09ea5f034924a382691c29a97ba27df423c319cb7c40dc72eea929c9e260ae5df7178689c9184551015cefa9a08e34780123533db838cbdd71174d327f618487456ec3fbf4b7c582be1101cf2272065da703473c6e1d2dad55a15531b846d288b54cb92046cba713bde3990c0885311aafd94b39d04a82255b8163d814045101125302102fbb7f3c2354895c0469680e7a71d9eef72de915d803ffa313ea9117a7b284971a70933871f26b6061da46e4563d31a5d61e9d8312f5a0626775fd5a7299a8fac043bf625f3c06f4d761c89b6b0fb1238c2cf9f1e6fb6304891a7179d2b79a9fc36e09f8556c3f734ca6f7b82d3e2c97b2de7b3426622ae45f0caa8ef7f8c51405613926d0937fb5f9400c4de1eccbe51954b9ae24fe00fdddc2f1844976238a36f4738f4742413f5640daf49b0689dd2036981ee846eb82ace7d70be5fca454875ce1da9d6b4dbba657fe426d7ddebdc6dc1e68468eb89444a019c75619b0622ae1b6d45fb48e723a51a4b8dac72d50934f1dc9a23b9a59ff09b71da5ebecceb3e35baefc4b9a06446a215e1d2d9b700585135f1ce44b4af45fe846ca83ce6c1783847e2817572c40f11b7da562d56a945d565ea464213a231c3a72eff94e00559cc55a3a3b140d939fd21460ff64b1d70ae14c3369d2f054ff392c6ebbe8b7ff362bfaac8cfd5666bfaf299224bc85a6ab3f36fbd99d75c09f6094fd19325117784324daeb6711d84c94e70b9474c3ea77e301098c9ff66e491940f4853b2583cbe052f36ee3fd7edfa3bde53629cd4335d9f3863799e0383b6055d71d08cce39af93bbca48cb58bda728c8d1a610c01a817004fc503dd3fb961072dcd8027e1695e87846f373436c2943c8b70e52ca20753a57d887e70d2e9af9bcf6151f769d8a01e2692e43ae83482b941f929a5067fc0cdc64a7d1967c9f166cce1298f27ca08d1711db46ebcfabc8f4912c03d8a4531da207e480f721379d0ca5f821b353c7114423e712ac05437e94b3a331e4ad8c221db9d142911e5a1e5676310946c574705a1bdc6d75abd0eb49e48aae0e5e84b04feab2f1040f8d657db16bcd6f639e4b128663afe4f0784b6d12ebf0870b5fb55197b4dcf86d6a60780b38f3407a9d9433d0f80775836e4854fa6a8c7527cbdc64e57726c18f05875757fd5ed3c4c2e2e5fc5abe58730f38e9303b4bbab5ecf209de689ebc236686a84532e676d3acee793cf7afc1d4c0643f3f9b29a7b9a178386856d15f72846deb2aefa1b2115969be7bec8d4b1acdd4aa2583f712e01f6886512159122bf4067b5e54db101e7595e3813052471650b5fe4aa9eef6b46334e5f2ab2f80ed6c213a9f974eb1e4019918eaef0836117cb5398f8b0166a5306144fdd9771347772dcd53808e601a586be6c75a458933343bf1303d315197fb763e9ed07ba364203d9386db4c2636967741b55d770015b767cb9b08151334d9888164aa15d1b8a7a73af1f2e14a5360f35912e88e06e59eb0707e565663ee8f60dad1000d57692635341385ea7fe7d7769534badd92cc719ea9a31057c987c832908fd3a6c85e7c4f0a8c555cc33ee83a90c04f76137561d74fef91618de513bd77433c6e945378cfbc92f1f35665cec0bf16983ebf49ae62b14dc7c3e51fb091cd3819e00101101b567ab24220c283cb22df1c8a16b954ccd8117f24e5919e7a9243cf145ddd36d392c64d28058caceb8be975fe8bba3124d838e2617f272e596190c1fc26c10b39ab5e9f019ee0b712ca634187fa6b630b3d5ffdd0f65c2734d08ea8f0b21859910a13c92fbe0215128819d5bc4b5f3d24cebf8aa3f08944487f264654a837b2c41db3ccbb78da561dbc7877461b25373c6aee33e79ec6857ead3a6589ac6103f536a1779d2be86ee97cb74e75a928546029bec1843904a827515835cedd1031ef4015608fbb57d2dab9042fc8a74099d951f67cec5822f449c2559d37d38de5d9d288d2d1dc1b89579e7f5ab1e1f2abddca172f771b223233a6264d69bdb4c105babeac9b88a802a69e27e66263104a095b91c66d081db49da98b6dd8ad7d4ffd120b07e608927017b789e390f92e4166133dfff4e1a704d543d2bac56110281c5fc7eaa482d880ecd55e2e1d06f4a5b55f2f45b1e1be494d63fbcc63a3fe61de69923b0dff6bf20ab610e0e00712de47dbb402bfe411470b0533396699a77077b465fe3c9802225d236e2e7c6614ecfc4398c52350a93b9b1b85ff8a9d9242f49feb7c93f1f7326c46077ffebcd09d052563e2d935275e9d784d32f1e9d965e7f6f50af7cadf8be9dcbecf45e49487fd7a482a73c484e0544f532a01714ee7c4db54e7c74fb9164d6cbae3a42d623e564828df46c06b8c6428ae7ca22b1837dff15ff1af5ef2a8d7686103d0263f437aa8db16662340daa33661cebeb0df5f4485b0ee99abe048555de8f1814e1f449feca37c95db2c4ff75ae3f877e471fdfdf90521565aa077b3fbec116a1f1f72e95a178bcfb4336a4e14ef4e3f2e270ffc200171767465897c1c8075d31cf8bb39ffd8b7209f8dd6944e85254ecd3de6710e28dc084c910cc2e48b21c520cacc58a096c77d63c66b83fdf56a554d714e884ae29a540417bc060e6d0df9e5f09d80548dcc62f0292c12faeef832170671a718ee93a0eb4a39e6b75e097e4126fe24978198fb711f180b102303777d976895b136f3934e1a929cdcb6a93536b88b42a30f3c768dc537c387c234800531576507cfc60b2f2f44f91b672415da7f78519ec2d43ab3f71a0a2fae2fe0f0581e8380095ac1cdf62b93a7662a75ff4aa8b14b02ad46bc903a1aaaeb20d50f33e92718cf7558b15473ee66a595da7a904fb815187c3c789ce42dea3945cf1ed0153da806b30477b6da08660b51a14f68206b9df67e799438f322f77a5913406cf5cd44f7cecfb30f959e2e32161e6d0e9409af0e2dbdbf417640a59f5082d548e72c109b4b4a45e4a330e22c127149e326adb790a48c025d552ff1cac0b1e847def7128f8bcbcef233e223dbdeff54f55e5d5b2bae77b222554f19e0c49325c19ea29a95be20fd937c4b794eaf698c6a83ac3e765a543c89a5be22cc3136c789ad1b3e2fa33e6dc0317dcb07b0e160a2368cd8fa98fb228dcccd464e690dff40576f4699baaf0a3fe0f6b8fee41475885598cbba7d1f46ae5a6af6c167abc4d71f840622c9fd0fd2ed96c58e9f5e474d8a314fe81645c43db8ac8cd357b0e2b270410816c7db3f21645c9efe097bfe625abe08be6ce655525a006a34ba0270aebcb61c7c901a69dc8e411bf90ba73284fce270c18d99ec02f6f07216ba0a805b0c9d0ed054786e3705622cb7096f92583241339c6aff8db032c810205b309859ef56af391728f18bc961a0679dedbaa381cedfd9a01b49a5868267491a9c2d4b665c863723eb18cee549da3ba5f56df21a4f49520321e759277a30d393eceadaf2de9ed8da6e6bf88fa41b20b62737650a01a90a82a35789d32c5cb339c7f7e2495f6b6c9b84456c64742b4fccaa34ed64eee0ef953bbe223af129bc6661abde1e16cfcf4dcb39e94b272190069e544029c29342a957b237a66558fa1e948faeb2920105e345650936d413a0f932306b040f13ec417bd2592b83facedf09d41ce5dac753703aec80f6016694baa95d295ff7c8b9c35cba93f7393c3cde1adb2bac05b1f61a3eee6fe16da617e1349ad01321b58b1cdd054264ff9b7286284fb785da47f6a0d2b657c8a8d361c1aa98c8b57d4d1db2ab51e4bec0ec098aee4ab070c6b69e99632aef33a4b47d67779ac145156aa3e4e33c8f0f9ae92ace8b3e551e2ada84ac59069a9a09965344edd00178aa6f3354dcbbb118817edbe29e7f066c2c8124c651959b7bf6f82bb28ebd464f947b19e45da69aab7e64efe2e26bd3900f84af0082cf2a6da44fc925f"}, {0x78, 0x14a, 0x0, "10727f3b5717d19eb8f46c62b8b8ca9f115c321d68d227cbee87287da5aa8ce8b5babc34fd472eed3448229a5b1954472b6d936ebecd2de407f807cbd661a92a6c32f982abcc7cb8b1558655cfbfdc83bde7ca71c6e310dd8d3e71b212b387d664bfe799ef3ed9"}, {0xe0, 0x84, 0x0, "635106822ed8d744249558ed1f9ed282c87d035cac9e7a0bd734792e1984428756621dfb5bb7e87f7d2a75e43f5bf1c531a31e13c51e28a50d3609641c735842a193962aa39f183ed37cf5827e3765c46687522c8f90cb99d41f0c53bf6314010071c1dd33012c7dfda23a2c5dbaef4fd1c9bd475ba1ad550d48612e95197d0f7ebf694ae87d3b600ddbf0e292557988f72d483a28ea98a1e332203147274e9d890fb100234a6e1e371801596e8182e467237a5f1dcef26e3d5e776cb3a3e0a397de6c47990e9407f2290307570d30fa"}], 0x1210}, 0x0) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003dc0)=@o_path={&(0x7f0000003d80)='./file0/file0\x00', 0x0, 0x8, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003f00)={r15, &(0x7f0000003e00)="f3", &(0x7f0000003e40)=""/148, 0x4}, 0x20) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000003f40)={'veth0_vlan\x00', 0x400}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003f80)={@cgroup=r10, r13, 0x1c, 0x14, 0x0, @void, @value=r2, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003fc0)={@fallback=r1, r5, 0x1a, 0x21, r5, @void, @void, @void, @value=r14, r11}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004040)=@o_path={&(0x7f0000004000)='./file0\x00', r5}, 0x18) mkdir(&(0x7f0000004080)='./file0\x00', 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_tracing={0x1a, 0x11, &(0x7f00000040c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa0000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004180)='syzkaller\x00', 0x40, 0x2a, &(0x7f00000041c0)=""/42, 0x40f00, 0x40, '\x00', 0x0, 0x19, r5, 0x8, &(0x7f0000004200)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2d82b, r5, 0x3, &(0x7f0000004240)=[r12, r12], &(0x7f0000004280)=[{0x4, 0x5, 0xb, 0xb}, {0x4, 0x3, 0xf, 0xa}, {0x4, 0x3, 0x0, 0x5}], 0x10, 0x3}, 0x94) recvmsg$kcm(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004380)=""/103, 0x67}, {&(0x7f0000004400)=""/195, 0xc3}, {&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/255, 0xff}], 0x4, &(0x7f0000004700)=""/32, 0x20}, 0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc94, '\x00', r7, r9, 0x0, 0x4, 0x5}, 0x50) 16m35.61543569s ago: executing program 0 (id=1055): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xfffffffffffffe91, &(0x7f0000000740)}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m34.467363606s ago: executing program 0 (id=1059): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x18}, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x4008804) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1}, 0x4040851) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb6) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/47, 0x2f}, {0x0}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/113, 0x71}], 0x5}, 0x40000100) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381a989347033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21368fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000", 0x89}], 0x1}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0015003c00000002001000000000000100000d00000000000000000300000000000000000000000003000000000200000002000000feffffff000028d9fb0140cda0d158525553090dc4dc3070c126bcdfa987ceb1b6777dfae4d801000000000000005f1ae505714251fe6e6882f7e0b454d699b23664171aa2dfd6418853a1f9d83fa9c9237a9e"], 0x0, 0x56}, 0x28) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000caa688e19848e871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) 16m32.650341568s ago: executing program 0 (id=1068): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891f, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}, 0xff0f000020000080) 16m32.032358013s ago: executing program 0 (id=1071): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x30, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89fc, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000340)=""/59, 0x3b, 0x0, &(0x7f0000000380)=""/117, 0x75}}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) 16m31.308151969s ago: executing program 0 (id=1075): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x17, &(0x7f0000000340), 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffff6, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r5, 0x0, 0x4080) sendmsg$sock(r5, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)}, 0x800) write$cgroup_subtree(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f00000002c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="b1a5616f7099af02cce0b77ff634929fbeff807b40b522231616616a49a9969438fa80418bfc6f1fd559636174a5f5a15d8dfa643ca555b0b4e57803217aacedc42070f393b41b41b2aac13f28798d5ad8aa4246906fc1e42bb8289ea30862c57e68d11944ce5c8b36b4b3051bd2affc2aca820fc7709604a1cc5b60f3ccf8fc86ce0453a3942d8b23c3b450751cf94f78bba69da43cd11b4fead116e434ecfc489b3c9c46e4ddffae20c0", 0xab}], 0x1, &(0x7f0000000580)=[{0x68, 0x10a, 0x2, "71ce80c703d512905be0a070f17cb75e1a7217e4266b262d944f9b67c296a00e5871d78b229082d4e2990bc676da7b013f97500cd51a2991ab5c3a3416a88a388f6e66b3b0c9602b060c56f3d17fe85efabb4437e736"}], 0x68}, 0x4000010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2180, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 16m16.039981203s ago: executing program 32 (id=1075): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x17, &(0x7f0000000340), 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffff6, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r5, 0x0, 0x4080) sendmsg$sock(r5, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)}, 0x800) write$cgroup_subtree(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f00000002c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="b1a5616f7099af02cce0b77ff634929fbeff807b40b522231616616a49a9969438fa80418bfc6f1fd559636174a5f5a15d8dfa643ca555b0b4e57803217aacedc42070f393b41b41b2aac13f28798d5ad8aa4246906fc1e42bb8289ea30862c57e68d11944ce5c8b36b4b3051bd2affc2aca820fc7709604a1cc5b60f3ccf8fc86ce0453a3942d8b23c3b450751cf94f78bba69da43cd11b4fead116e434ecfc489b3c9c46e4ddffae20c0", 0xab}], 0x1, &(0x7f0000000580)=[{0x68, 0x10a, 0x2, "71ce80c703d512905be0a070f17cb75e1a7217e4266b262d944f9b67c296a00e5871d78b229082d4e2990bc676da7b013f97500cd51a2991ab5c3a3416a88a388f6e66b3b0c9602b060c56f3d17fe85efabb4437e736"}], 0x68}, 0x4000010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2180, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 6m51.356559863s ago: executing program 2 (id=6058): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x14010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000c00)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="65f2c0b6e8d7ac40bd3b419c14f529e49afb503200b423e6e0b6ceda14440623f542da698c3e3fa7f732cbc165e54c38c0d198c1d663770ef8aa437444ce77aaa050a0a348986e6fa94dfcd80a68ee9a00", 0x51}, {&(0x7f0000000480)}, {&(0x7f0000000500)="01b681f8904091750da7399fab5dd421e8d266756afeac16fa038b810db62445021486ca3f98a30cd10304659924c0bbcaf5eadf0bb53f62", 0x38}, {&(0x7f0000000540)="5b0006cded9d3adce9ce2479ee99", 0xe}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/720], 0x2d0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1e, 0x0, &(0x7f00000007c0)="060000000344268cb899eb6e0800779d5daad5a04acb8e578cb946efeb0a", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 6m50.774137896s ago: executing program 2 (id=6060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x80, 0xffff, 0x0, 0x0, 0xfbf, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x33, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000d40), 0x0}, 0x20) 6m50.182588729s ago: executing program 2 (id=6066): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x107, 0x16, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000500000000001001000001000000dc00000000000000f585c4d190a9f9e444fd46bd7c6a158d69d5558c20e2901debe7fd1aa3738d52aed4729ec55d97aac373f1915528c9aa4afa474fe8238aa9181ebb23f4dff74963e319035a67fc9722dcc01955d808677fcb5b2b3dec35e62e7974bd111ce25e9812271251b66bb6f741e551b1e3c3a86f71bcc09fdc04d62e3315c64a42320a5245063de66025788efeec7302f1d5"], 0x18}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5, 0x0, 0x1}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="01e755e0ea89", 0x6}], 0x1}, 0x20044080) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x92, &(0x7f0000000340), &(0x7f0000000380)=""/146, 0xfffffff7, 0x0, 0x43, 0x0, &(0x7f0000000500)="2f236cf2c0d863964405c047fb56ed826a114a741b55ef6100ec65d065b669557db42b785ffc5fb0bf3998b4c5d804b6dfb7155cd7c2b5e23fa63a63d23a04ab540ae1", &(0x7f0000000580), 0x0, 0x0, 0x800}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r5}}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m49.563148823s ago: executing program 2 (id=6072): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0xff7b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x404c8d0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2, 0xa, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x13, 0x0, 0x26) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0xfa, 0x0, 0x9, 0xe, 0x0, 0x6, 0x2100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000003c0), 0x7}, 0x8000, 0x8, 0x4, 0x8, 0x81, 0x80000000, 0x1, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x9, r4, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0xa) 6m48.900215028s ago: executing program 2 (id=6078): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0xc5c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000021"], 0x66) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044944, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)}, 0x10040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700"], 0xfdef) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r5, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000003000000000000006f73000018116400", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018470000070000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x13, &(0x7f0000000500)=""/19, 0x41100, 0x10, '\x00', r6, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r2, r2, r2, r2], &(0x7f0000000640)=[{0x2, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x5, 0x7}, {0x3, 0x2, 0x4, 0x8}], 0x10, 0x7}, 0x94) 6m48.134774745s ago: executing program 2 (id=6089): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 6m32.999467055s ago: executing program 33 (id=6089): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 13.601116254s ago: executing program 4 (id=9132): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 10.382435487s ago: executing program 4 (id=9136): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0xa, 0x0, 0x4) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x3, 0xe, 0x8, 0x47, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000001180)}, 0x840, 0x8, 0x1e1, 0x8, 0x3, 0xe, 0x1, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1900000004d113ff86d00700000000000000000008000000080000007577fcb1fcfeffcac584e1452146e1a3a81e3965fc9f461884682b494b82a2c2f4096b8b37ae99ec256f34f82fc5415543dda8da4d66df412efd52fbbeb8c21d73bcfaf8d0e2d31f6f0730a7cd3e4228", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x7bb6, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = socket$kcm(0x10, 0x3, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 9.475736327s ago: executing program 4 (id=9143): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$kcm(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000440), &(0x7f0000000500)}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) 8.991386808s ago: executing program 3 (id=9146): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0x9, 0x8, 0xa, 0x6, 0x9}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3efd7ab4c41335d9, @perf_config_ext={0x2000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6, 0xe, 0xfd, 0x1ff}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'team0\x00', 0x400}) 8.548168788s ago: executing program 4 (id=9149): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x300}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000014", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) 8.535091358s ago: executing program 5 (id=9150): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) 8.534645228s ago: executing program 6 (id=9151): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 8.395652251s ago: executing program 6 (id=9152): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRES64=r6, @ANYBLOB="00000000000000000000000000000000df7e0000", @ANYRES64=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x69, 0x0, &(0x7f0000000400)="e0b9547ed387dbb816d48283bb26a53f9e44ef056d06719fbcc467dcd3b914fc6008c7ec75098f3569c15f2c4d9be8528cd1f8d7dad327fd8c7f3c23bbb9cac17f27e231036e9b1f92c7f7eb042798f85001e8daa734a757f760e6451577ba2b2c83ea42b306fd1fb1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0x70) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x49) 8.243281695s ago: executing program 5 (id=9153): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xa}, 0x100100, 0x0, 0x8, 0x1189d4c6500500a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0xffff8880b8727a20, 0x1}, 0x11018, 0xfffffffffffffffc, 0x6, 0x5, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x106) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0xfe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10823, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x14428, 0x9, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x2000000000000546}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000100000001000000c13505f03a345625b569dfd7090e9aeaf5b688e27b6fdb3e932d67869ced7cf7be9e1a24ae9c8f508dc3d8ed24ba3941e296dd3ff5484bb876318b3b2320c31037bed41fec1dba50c2d368f866de0fa574a6fda6c0f74c64551e13ec3db27a2df18fa020a27314aa49f6890ab72e4826443ea88a44a007abd4ec0974dc63d72c9024560b01f771d9b951bd79336b6d3660a2bf8742da3e3e7dea371ca732b6c0132bfa4eb2402ee1e86d393ad3647127b451555c6ae8a4e1ddb60da7dbe793f990bd0779a9054e1520466debc95a4e85a30e63867b73e3d98adb3f582b977f6b5ad4f789d409b8290e34186e75065fabd78d60", @ANYRES32=r0, @ANYRESOCT], 0x18, 0x4800}, 0x24008080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) 7.974897281s ago: executing program 4 (id=9154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x10020) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x41, 0x0, 0x8f00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 7.814082984s ago: executing program 6 (id=9155): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 7.772548575s ago: executing program 5 (id=9156): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200", 0x4}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRES64=r6, @ANYBLOB="00000000000000000000000000000000df7e0000", @ANYRES64=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x69, 0x0, &(0x7f0000000400)="e0b9547ed387dbb816d48283bb26a53f9e44ef056d06719fbcc467dcd3b914fc6008c7ec75098f3569c15f2c4d9be8528cd1f8d7dad327fd8c7f3c23bbb9cac17f27e231036e9b1f92c7f7eb042798f85001e8daa734a757f760e6451577ba2b2c83ea42b306fd1fb1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0x70) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x49) 7.772337235s ago: executing program 1 (id=9157): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f042b067c55a1bc0009000800060000000000b0000500fe8081780d000500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb9041c1d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x30004881) 4.714294204s ago: executing program 5 (id=9158): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da3, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x181a3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000415a1943bffc2a3e62f1fae91be396c83c48d4f9348b408dc44b7688639fe03409be9686ce30addfcb0dbe33", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000c3d9763480000000000000000100"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8918, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.585911687s ago: executing program 3 (id=9159): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$kcm(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000440), &(0x7f0000000500)}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) 4.550921138s ago: executing program 6 (id=9160): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 4.520155308s ago: executing program 1 (id=9161): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x7, &(0x7f0000000000), 0x4) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20044818) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x1800, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1000, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x32}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000040)=r6, 0x4) write$cgroup_subtree(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000380)=@nl, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="ecca07fec4f8", 0x6}], 0x1}, 0x200000c0) 3.704154797s ago: executing program 1 (id=9162): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x71, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) 3.668211378s ago: executing program 1 (id=9163): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) 3.578314329s ago: executing program 1 (id=9164): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x300}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000014", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) 1.427678418s ago: executing program 6 (id=9165): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)='Q', 0x1}], 0x1}, 0x4000) 1.408125928s ago: executing program 5 (id=9166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44000) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x1a00, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x3d, 0xfd, 0x1, 0x20}]}) 1.31819402s ago: executing program 3 (id=9167): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x3, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1400000015000b63d25a9a648c0f9de7172e4a1d", 0x14}], 0x1}, 0x2000c884) 1.212761433s ago: executing program 1 (id=9168): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37438e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x29, 0x2f, 0x0, 0x0) 1.120858475s ago: executing program 5 (id=9169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)}, 0x10020) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x41, 0x0, 0x8f00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 1.080281646s ago: executing program 3 (id=9170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0xc4880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x10, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xa}, 0x8a43, 0x2, 0x0, 0x0, 0xffffffffffff7cb3}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x1, 0x10005}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 920.525269ms ago: executing program 4 (id=9171): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 693.757194ms ago: executing program 3 (id=9173): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x7, &(0x7f0000000000), 0x4) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20044818) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x1800, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1000, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x32}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000040)=r6, 0x4) write$cgroup_subtree(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000380)=@nl, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="ecca07fec4f8", 0x6}], 0x1}, 0x200000c0) 443.97408ms ago: executing program 6 (id=9174): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) 0s ago: executing program 3 (id=9175): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa01, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="d800000018008105e00212ba0d8105040a020200030f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x400, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000007f44000000000000630a04fe0000000071330000000000009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) kernel console output (not intermixed with test programs): 04153][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.811348][ T8671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.908705][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 822.993323][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.022847][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.066026][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.073664][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.124557][T23308] netlink: 'syz.4.6214': attribute type 10 has an invalid length. [ 823.137551][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.164431][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.196070][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.234050][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.263604][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.295506][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.330862][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.363930][T23308] netlink: 'syz.4.6214': attribute type 10 has an invalid length. [ 823.478354][T23305] device syzkaller0 entered promiscuous mode [ 823.547487][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.556813][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.579444][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 823.611523][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.725081][T23319] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6217'. [ 823.790983][T23319] openvswitch: netlink: Tunnel attr 4 has unexpected len 8 expected 1 [ 824.780370][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 824.807753][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.837131][T23355] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6223'. [ 824.891415][T23357] netlink: 'syz.3.6223': attribute type 4 has an invalid length. [ 824.979197][T23108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.003820][T23357] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6223'. [ 825.996449][T23393] netlink: 'syz.5.6233': attribute type 10 has an invalid length. [ 826.188202][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.222495][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.350647][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.401759][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.447350][T23108] device veth0_vlan entered promiscuous mode [ 826.469643][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.501030][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.550069][T23404] netlink: 'syz.3.6236': attribute type 10 has an invalid length. [ 826.858831][T23404] team0 (unregistering): Port device team_slave_0 removed [ 827.010109][T23404] team0 (unregistering): Port device team_slave_1 removed [ 827.123825][T23409] netlink: 'syz.3.6236': attribute type 25 has an invalid length. [ 827.152361][T23409] netlink: 'syz.3.6236': attribute type 25 has an invalid length. [ 827.352560][T23108] device veth1_vlan entered promiscuous mode [ 827.359562][T23431] FAULT_INJECTION: forcing a failure. [ 827.359562][T23431] name failslab, interval 1, probability 0, space 0, times 0 [ 827.457808][T23431] CPU: 1 PID: 23431 Comm: syz.5.6241 Not tainted syzkaller #0 [ 827.465364][T23431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.475478][T23431] Call Trace: [ 827.478815][T23431] [ 827.481794][T23431] dump_stack_lvl+0x188/0x250 [ 827.486519][T23431] ? show_regs_print_info+0x20/0x20 [ 827.491776][T23431] ? load_image+0x410/0x410 [ 827.496343][T23431] ? __might_sleep+0xf0/0xf0 [ 827.500991][T23431] ? __lock_acquire+0x7b50/0x7b50 [ 827.506056][T23431] ? netlink_insert+0xe90/0x11f0 [ 827.511051][T23431] should_fail+0x383/0x4b0 [ 827.515520][T23431] should_failslab+0x5/0x20 [ 827.520099][T23431] slab_pre_alloc_hook+0x51/0xc0 [ 827.525089][T23431] kmem_cache_alloc_node+0x47/0x2c0 [ 827.530326][T23431] ? __alloc_skb+0xf4/0x750 [ 827.534887][T23431] __alloc_skb+0xf4/0x750 [ 827.539264][T23431] netlink_sendmsg+0x654/0xbe0 [ 827.544086][T23431] ? netlink_getsockopt+0x570/0x570 [ 827.549338][T23431] ? aa_sock_msg_perm+0x94/0x150 [ 827.554320][T23431] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 827.559633][T23431] ? security_socket_sendmsg+0x7c/0xa0 [ 827.565117][T23431] ? netlink_getsockopt+0x570/0x570 [ 827.570351][T23431] ____sys_sendmsg+0x5be/0x8f0 [ 827.575157][T23431] ? __sys_sendmsg_sock+0x30/0x30 [ 827.580256][T23431] ? import_iovec+0x6f/0xa0 [ 827.584796][T23431] ___sys_sendmsg+0x236/0x2e0 [ 827.589510][T23431] ? __sys_sendmsg+0x290/0x290 [ 827.594364][T23431] ? trace_event_raw_event_lock+0x250/0x250 [ 827.600324][T23431] __se_sys_sendmsg+0x1b7/0x2a0 [ 827.605200][T23431] ? __x64_sys_sendmsg+0x80/0x80 [ 827.610162][T23431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 827.616185][T23431] ? lockdep_hardirqs_on+0x94/0x140 [ 827.621409][T23431] do_syscall_64+0x4c/0xa0 [ 827.625855][T23431] ? clear_bhb_loop+0x30/0x80 [ 827.630555][T23431] ? clear_bhb_loop+0x30/0x80 [ 827.635254][T23431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 827.641170][T23431] RIP: 0033:0x7f5175177e59 [ 827.645623][T23431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.665278][T23431] RSP: 002b:00007f51733d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.673729][T23431] RAX: ffffffffffffffda RBX: 00007f51753fffa0 RCX: 00007f5175177e59 [ 827.681759][T23431] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 827.689747][T23431] RBP: 00007f51733d0090 R08: 0000000000000000 R09: 0000000000000000 [ 827.697743][T23431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.705765][T23431] R13: 00007f5175400038 R14: 00007f51753fffa0 R15: 00007fffb1efb708 [ 827.713803][T23431] [ 827.757101][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.791522][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.819802][T23108] device veth0_macvtap entered promiscuous mode [ 827.841010][T23108] device veth1_macvtap entered promiscuous mode [ 827.879184][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.903596][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.924165][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.945159][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.965554][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.986475][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.005541][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.025738][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.045987][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.071594][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.097035][T23108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.127690][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 828.141389][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 828.159414][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 828.182947][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 828.243993][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.260838][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.290842][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.368874][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.463912][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.518508][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.600379][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.660494][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.691171][T23108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.722392][T23108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.761923][T23108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.794594][T23449] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6247'. [ 828.832499][T23450] netlink: 'syz.5.6247': attribute type 21 has an invalid length. [ 828.858275][T23450] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.6247'. [ 828.895394][T23447] netlink: 'syz.3.6246': attribute type 10 has an invalid length. [ 828.925461][T23447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6246'. [ 828.987031][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 829.023702][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 829.078580][T23455] netlink: 'syz.4.6248': attribute type 17 has an invalid length. [ 829.086594][T23455] netlink: 'syz.4.6248': attribute type 16 has an invalid length. [ 829.118562][T23455] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6248'. [ 829.139657][T23456] netlink: 'syz.4.6248': attribute type 10 has an invalid length. [ 829.217652][T23456] team0: Device hsr_slave_0 failed to register rx_handler [ 829.249002][T23463] netlink: 'syz.3.6251': attribute type 10 has an invalid length. [ 829.338412][T23458] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6249'. [ 829.380136][T23108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.398629][T23108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.417753][T23108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.489098][T23108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.551907][T23475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 829.620357][T23463] netlink: 'syz.3.6251': attribute type 10 has an invalid length. [ 830.229895][T12549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.266400][T12549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.383147][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 830.430078][T23502] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6259'. [ 830.530378][ T8674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.538266][ T8674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.554514][T23503] netlink: 175768 bytes leftover after parsing attributes in process `syz.3.6259'. [ 830.588136][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 830.635899][T23503] netlink: zone id is out of range [ 830.678102][T23503] netlink: zone id is out of range [ 830.706218][T23503] netlink: get zone limit has 8 unknown bytes [ 830.733175][T23507] netlink: 'syz.5.6260': attribute type 10 has an invalid length. [ 830.749342][T23507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6260'. [ 830.963908][T23521] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6162'. [ 831.461812][T23534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 831.489374][T23539] netlink: 'syz.5.6266': attribute type 9 has an invalid length. [ 831.504173][T23539] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.6266'. [ 831.750620][T23535] netlink: 'syz.5.6266': attribute type 9 has an invalid length. [ 832.564828][T23560] device syzkaller0 entered promiscuous mode [ 834.160431][T23570] chnl_net:caif_netlink_parms(): no params data found [ 834.658712][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 834.772979][T23630] __nla_validate_parse: 6 callbacks suppressed [ 834.773017][T23630] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6287'. [ 834.846727][T23570] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.854104][T23570] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.862491][T23570] device bridge_slave_0 entered promiscuous mode [ 834.874235][T23570] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.882981][T23570] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.891357][T23570] device bridge_slave_1 entered promiscuous mode [ 834.927879][T23570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.960879][T23570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.002910][T23570] team0: Port device team_slave_0 added [ 835.021537][T23570] team0: Port device team_slave_1 added [ 835.145651][T23570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.264797][T23570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.316110][T23570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.397832][T23570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.460696][T23570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.543850][T23570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.744349][T23570] device hsr_slave_0 entered promiscuous mode [ 835.853514][T23570] device hsr_slave_1 entered promiscuous mode [ 835.890281][T23570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.928360][T23570] Cannot create hsr debugfs directory [ 835.954973][T23661] validate_nla: 6 callbacks suppressed [ 835.955007][T23661] netlink: 'syz.4.6298': attribute type 10 has an invalid length. [ 836.016399][T23661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6298'. [ 836.103503][T23661] batman_adv: batadv0: Adding interface: virt_wifi0 [ 836.120917][T23661] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.149042][T23681] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6303'. [ 836.182204][T23661] batman_adv: batadv0: Interface activated: virt_wifi0 [ 836.618097][ T8671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 836.742537][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 836.904393][T23570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.995738][T23702] FAULT_INJECTION: forcing a failure. [ 836.995738][T23702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.052141][T23702] CPU: 1 PID: 23702 Comm: syz.5.6309 Not tainted syzkaller #0 [ 837.059721][T23702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.069825][T23702] Call Trace: [ 837.073155][T23702] [ 837.076125][T23702] dump_stack_lvl+0x188/0x250 [ 837.080857][T23702] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 837.087165][T23702] ? show_regs_print_info+0x20/0x20 [ 837.092444][T23702] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 837.098658][T23702] should_fail+0x383/0x4b0 [ 837.103142][T23702] _copy_from_user+0x2e/0x170 [ 837.107864][T23702] __sys_bpf+0x26d/0x6f0 [ 837.112158][T23702] ? bpf_link_show_fdinfo+0x380/0x380 [ 837.117612][T23702] __x64_sys_bpf+0x78/0x90 [ 837.122093][T23702] do_syscall_64+0x4c/0xa0 [ 837.126547][T23702] ? clear_bhb_loop+0x30/0x80 [ 837.131260][T23702] ? clear_bhb_loop+0x30/0x80 [ 837.136079][T23702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 837.142013][T23702] RIP: 0033:0x7f5175177e59 [ 837.146466][T23702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.166106][T23702] RSP: 002b:00007f51733d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.174566][T23702] RAX: ffffffffffffffda RBX: 00007f51753fffa0 RCX: 00007f5175177e59 [ 837.182671][T23702] RDX: 0000000000000048 RSI: 0000200000000b00 RDI: 2000000000000000 [ 837.190671][T23702] RBP: 00007f51733d0090 R08: 0000000000000000 R09: 0000000000000000 [ 837.198797][T23702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.207061][T23702] R13: 00007f5175400038 R14: 00007f51753fffa0 R15: 00007fffb1efb708 [ 837.215097][T23702] [ 837.336647][T23570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.476528][T23711] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6312'. [ 837.523367][T23570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.609436][T23720] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6315'. [ 837.644213][T23570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.828281][T23722] netlink: 'syz.6.6316': attribute type 10 has an invalid length. [ 837.852704][T23722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6316'. [ 837.924224][T23722] batman_adv: batadv0: Adding interface: virt_wifi0 [ 837.958621][T23722] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.068351][T23722] batman_adv: batadv0: Interface activated: virt_wifi0 [ 838.263987][T23570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 838.451800][T23748] netlink: 'syz.4.6321': attribute type 11 has an invalid length. [ 838.487269][T23570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 838.810149][T23570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 838.828880][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 838.905846][T23570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 839.226472][T23766] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6326'. [ 839.361736][T23570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.437782][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 839.461372][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 839.494946][T23570] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.546744][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 839.570696][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 839.610599][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.617888][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.687165][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 839.715485][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 839.753104][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 839.817730][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.824926][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.915474][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 839.995356][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 840.041077][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 840.088391][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 840.099650][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 840.120350][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 840.139650][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 840.186399][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 840.213794][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 840.244013][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 840.259917][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 840.309883][T23570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 840.711483][T23803] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6337'. [ 840.816528][T23810] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6338'. [ 840.963645][T23486] Bluetooth: hci2: command 0x0419 tx timeout [ 841.083241][T23821] netlink: 'syz.6.6340': attribute type 10 has an invalid length. [ 841.184502][T23821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.263671][T23821] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 841.365145][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 841.388809][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 841.444081][T23570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.557054][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.603726][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.715495][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 841.741525][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 841.778280][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 841.796619][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 841.852996][T23570] device veth0_vlan entered promiscuous mode [ 842.040944][T23570] device veth1_vlan entered promiscuous mode [ 842.169663][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 842.192083][T23848] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.6351'. [ 842.199931][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 842.220395][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.229518][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.315330][T23570] device veth0_macvtap entered promiscuous mode [ 842.327676][T23570] device veth1_macvtap entered promiscuous mode [ 842.522356][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 842.542098][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 842.558977][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.577848][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.588876][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.607236][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.619822][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.650434][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.691357][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.707489][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.720024][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.744954][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.760222][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.771500][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.785492][T23570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.813394][T23858] netlink: 'syz.4.6355': attribute type 21 has an invalid length. [ 842.834156][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 842.876732][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 842.901175][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.928570][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.949551][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.975248][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.000462][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.022522][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.043773][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.100659][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.130993][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.157033][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.169665][T23570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.180234][T23570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.192071][T23570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.224231][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 843.253279][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 843.292567][T23570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.319678][T23570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.339013][T23570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.347799][T23570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.659508][ T8690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.667388][ T8690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.764352][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 843.795921][ T8676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.821152][ T8676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.854475][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 844.090147][T23894] netlink: 'syz.1.6267': attribute type 17 has an invalid length. [ 844.124267][T23894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6267'. [ 844.171206][T23894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.324962][T23897] netlink: 'syz.4.6369': attribute type 10 has an invalid length. [ 844.388732][T23897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6369'. [ 844.464695][T23904] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 845.019101][ T8682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.026646][ T8682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.068082][ T8682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.089597][ T8682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.132366][ T8682] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 845.149886][ T8682] batman_adv: batadv0: Removing interface: virt_wifi0 [ 845.157790][ T8682] device bridge_slave_0 left promiscuous mode [ 845.187419][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.248593][ T8682] device veth1_vlan left promiscuous mode [ 845.268737][ T8682] device veth0_vlan left promiscuous mode [ 845.577418][ T8682] team0 (unregistering): Port device team_slave_1 removed [ 845.594710][ T8682] team0 (unregistering): Port device team_slave_0 removed [ 845.755848][T23941] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6378'. [ 846.307789][T23969] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6385'. [ 846.329987][T23973] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6386'. [ 846.354681][T23973] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 846.414998][T23973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.718629][T23994] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.6392'. [ 846.719956][T23988] netlink: 'syz.4.6389': attribute type 10 has an invalid length. [ 846.926543][T23988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.991816][T23988] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 847.195968][T24004] netlink: 'syz.5.6396': attribute type 10 has an invalid length. [ 847.276481][T24004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6396'. [ 847.390358][T24016] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6400'. [ 848.332953][T24048] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6412'. [ 848.366818][T24047] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6411'. [ 848.398906][T24047] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 848.554328][T24058] netlink: 'syz.6.6414': attribute type 29 has an invalid length. [ 848.741899][T24058] netlink: 'syz.6.6414': attribute type 29 has an invalid length. [ 848.814526][T24071] netlink: 'syz.4.6418': attribute type 10 has an invalid length. [ 848.943780][T24077] FAULT_INJECTION: forcing a failure. [ 848.943780][T24077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.978105][T24071] team0: Port device geneve1 added [ 848.988600][T24077] CPU: 0 PID: 24077 Comm: syz.3.6420 Not tainted syzkaller #0 [ 848.996126][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.006236][T24077] Call Trace: [ 849.009545][T24077] [ 849.012502][T24077] dump_stack_lvl+0x188/0x250 [ 849.017228][T24077] ? show_regs_print_info+0x20/0x20 [ 849.022466][T24077] ? load_image+0x410/0x410 [ 849.027012][T24077] ? __lock_acquire+0x7b50/0x7b50 [ 849.032083][T24077] should_fail+0x383/0x4b0 [ 849.036541][T24077] _copy_from_user+0x2e/0x170 [ 849.041254][T24077] bpf_test_init+0x136/0x1b0 [ 849.045883][T24077] bpf_prog_test_run_skb+0x181/0x1190 [ 849.051290][T24077] ? __fget_files+0x402/0x470 [ 849.056012][T24077] ? cpu_online+0x60/0x60 [ 849.060379][T24077] bpf_prog_test_run+0x31c/0x390 [ 849.065363][T24077] __sys_bpf+0x5a5/0x6f0 [ 849.069648][T24077] ? bpf_link_show_fdinfo+0x380/0x380 [ 849.075078][T24077] __x64_sys_bpf+0x78/0x90 [ 849.079529][T24077] do_syscall_64+0x4c/0xa0 [ 849.084079][T24077] ? clear_bhb_loop+0x30/0x80 [ 849.088787][T24077] ? clear_bhb_loop+0x30/0x80 [ 849.093498][T24077] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 849.099426][T24077] RIP: 0033:0x7f4a8c83ce59 [ 849.103921][T24077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.123560][T24077] RSP: 002b:00007f4a8aa95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.132024][T24077] RAX: ffffffffffffffda RBX: 00007f4a8cac4fa0 RCX: 00007f4a8c83ce59 [ 849.140029][T24077] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 849.148032][T24077] RBP: 00007f4a8aa95090 R08: 0000000000000000 R09: 0000000000000000 [ 849.156044][T24077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.164056][T24077] R13: 00007f4a8cac5038 R14: 00007f4a8cac4fa0 R15: 00007fff5bb55f98 [ 849.172103][T24077] [ 849.224194][T24076] netlink: 'syz.5.6419': attribute type 7 has an invalid length. [ 849.419784][T24085] device syzkaller0 entered promiscuous mode [ 849.464200][T24095] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6425'. [ 849.761222][T24106] netlink: 'syz.4.6428': attribute type 3 has an invalid length. [ 849.783490][T24106] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.6428'. [ 850.653868][T24134] netlink: 'syz.1.6436': attribute type 3 has an invalid length. [ 850.702390][T24134] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 850.766912][T24134] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6436'. [ 850.917964][T24149] FAULT_INJECTION: forcing a failure. [ 850.917964][T24149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.990733][T24147] netlink: 'syz.6.6442': attribute type 2 has an invalid length. [ 851.018594][T24149] CPU: 0 PID: 24149 Comm: syz.4.6441 Not tainted syzkaller #0 [ 851.026142][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.027448][T24147] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6442'. [ 851.036242][T24149] Call Trace: [ 851.036255][T24149] [ 851.036268][T24149] dump_stack_lvl+0x188/0x250 [ 851.036313][T24149] ? show_regs_print_info+0x20/0x20 [ 851.036347][T24149] ? load_image+0x410/0x410 [ 851.036386][T24149] ? __lock_acquire+0x7b50/0x7b50 [ 851.036432][T24149] should_fail+0x383/0x4b0 [ 851.036475][T24149] _copy_from_user+0x2e/0x170 [ 851.036517][T24149] __copy_msghdr_from_user+0x48a/0x630 [ 851.085664][T24149] ? verify_lock_unused+0x140/0x140 [ 851.090939][T24149] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 851.096400][T24149] ___sys_sendmsg+0x19a/0x2e0 [ 851.101165][T24149] ? __sys_sendmsg+0x290/0x290 [ 851.106094][T24149] __se_sys_sendmsg+0x1b7/0x2a0 [ 851.111002][T24149] ? __x64_sys_sendmsg+0x80/0x80 [ 851.115986][T24149] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 851.122077][T24149] ? lockdep_hardirqs_on+0x94/0x140 [ 851.127344][T24149] do_syscall_64+0x4c/0xa0 [ 851.131808][T24149] ? clear_bhb_loop+0x30/0x80 [ 851.136543][T24149] ? clear_bhb_loop+0x30/0x80 [ 851.141273][T24149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.147208][T24149] RIP: 0033:0x7f8ed3366e59 [ 851.151665][T24149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.171415][T24149] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.179878][T24149] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 851.187880][T24149] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 851.195875][T24149] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 851.203902][T24149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.211902][T24149] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 851.219943][T24149] [ 851.906509][T24176] netlink: 'syz.6.6451': attribute type 21 has an invalid length. [ 851.980667][T24176] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.6451'. [ 852.297986][T24180] netlink: 'syz.3.6454': attribute type 3 has an invalid length. [ 852.338852][T24180] netlink: 'syz.3.6454': attribute type 1 has an invalid length. [ 852.347278][T24180] netlink: 150432 bytes leftover after parsing attributes in process `syz.3.6454'. [ 852.427742][T24190] FAULT_INJECTION: forcing a failure. [ 852.427742][T24190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.457338][T24190] CPU: 0 PID: 24190 Comm: syz.1.6456 Not tainted syzkaller #0 [ 852.464879][T24190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.475054][T24190] Call Trace: [ 852.478375][T24190] [ 852.481450][T24190] dump_stack_lvl+0x188/0x250 [ 852.486177][T24190] ? show_regs_print_info+0x20/0x20 [ 852.491427][T24190] ? load_image+0x410/0x410 [ 852.495979][T24190] ? __lock_acquire+0x7b50/0x7b50 [ 852.501052][T24190] should_fail+0x383/0x4b0 [ 852.505506][T24190] _copy_to_user+0x2e/0x130 [ 852.510050][T24190] put_user_ifreq+0x74/0xb0 [ 852.514593][T24190] sock_ioctl+0x6a8/0x700 [ 852.518971][T24190] ? sock_poll+0x420/0x420 [ 852.523437][T24190] ? bpf_lsm_file_ioctl+0x5/0x10 [ 852.528407][T24190] ? security_file_ioctl+0x7c/0xa0 [ 852.533542][T24190] ? sock_poll+0x420/0x420 [ 852.538077][T24190] __se_sys_ioctl+0xfa/0x170 [ 852.542825][T24190] do_syscall_64+0x4c/0xa0 [ 852.547285][T24190] ? clear_bhb_loop+0x30/0x80 [ 852.551988][T24190] ? clear_bhb_loop+0x30/0x80 [ 852.556707][T24190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 852.562724][T24190] RIP: 0033:0x7f6671ebbe59 [ 852.567180][T24190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.586817][T24190] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.595284][T24190] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 852.603284][T24190] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 852.611279][T24190] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 852.619274][T24190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.627269][T24190] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 852.635280][T24190] [ 852.700212][T24196] netlink: set zone limit has 8 unknown bytes [ 853.032380][T24209] FAULT_INJECTION: forcing a failure. [ 853.032380][T24209] name failslab, interval 1, probability 0, space 0, times 0 [ 853.062887][T24214] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6465'. [ 853.332630][T24209] CPU: 1 PID: 24209 Comm: syz.1.6461 Not tainted syzkaller #0 [ 853.340187][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.350433][T24209] Call Trace: [ 853.353760][T24209] [ 853.356744][T24209] dump_stack_lvl+0x188/0x250 [ 853.361511][T24209] ? show_regs_print_info+0x20/0x20 [ 853.366774][T24209] ? load_image+0x410/0x410 [ 853.371362][T24209] ? __might_sleep+0xf0/0xf0 [ 853.376007][T24209] ? __lock_acquire+0x7b50/0x7b50 [ 853.381098][T24209] ? __lock_acquire+0x7b50/0x7b50 [ 853.386209][T24209] should_fail+0x383/0x4b0 [ 853.390706][T24209] should_failslab+0x5/0x20 [ 853.395391][T24209] slab_pre_alloc_hook+0x51/0xc0 [ 853.400383][T24209] ? __sys_setsockopt+0x2bf/0x3d0 [ 853.405467][T24209] __kmalloc_track_caller+0x69/0x330 [ 853.410812][T24209] ? __sys_setsockopt+0x2bf/0x3d0 [ 853.415919][T24209] sctp_setsockopt+0x7d/0xf80 [ 853.420736][T24209] ? sock_common_recvmsg+0x1c0/0x1c0 [ 853.426087][T24209] __sys_setsockopt+0x2bf/0x3d0 [ 853.431011][T24209] __x64_sys_setsockopt+0xb1/0xc0 [ 853.436101][T24209] do_syscall_64+0x4c/0xa0 [ 853.440573][T24209] ? clear_bhb_loop+0x30/0x80 [ 853.445309][T24209] ? clear_bhb_loop+0x30/0x80 [ 853.450081][T24209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 853.456037][T24209] RIP: 0033:0x7f6671ebbe59 [ 853.460518][T24209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.481016][T24209] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 853.489604][T24209] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 853.497635][T24209] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 853.505754][T24209] RBP: 00007f6670114090 R08: 000000000000001c R09: 0000000000000000 [ 853.513787][T24209] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.521904][T24209] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 853.529984][T24209] [ 853.573843][T24219] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6466'. [ 854.325585][T24248] netlink: 'syz.4.6473': attribute type 3 has an invalid length. [ 854.346411][T24248] netlink: 'syz.4.6473': attribute type 1 has an invalid length. [ 854.357243][T24248] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6473'. [ 854.688151][T24265] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6478'. [ 854.882510][T24267] netlink: 'syz.5.6479': attribute type 10 has an invalid length. [ 854.905227][T24267] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6479'. [ 854.928207][T24274] netlink: 'syz.4.6482': attribute type 3 has an invalid length. [ 854.967223][T24264] netlink: 'syz.3.6477': attribute type 10 has an invalid length. [ 854.976561][T24264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6477'. [ 855.475892][T24285] netlink: 'syz.5.6484': attribute type 21 has an invalid length. [ 855.518547][T24285] netlink: 'syz.5.6484': attribute type 7 has an invalid length. [ 855.975827][T24309] team0: Port device geneve1 added [ 855.986740][T24314] __nla_validate_parse: 2 callbacks suppressed [ 855.986779][T24314] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6491'. [ 856.322740][T24327] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.6496'. [ 856.530382][T24331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6495'. [ 857.774058][T24370] validate_nla: 5 callbacks suppressed [ 857.774076][T24370] netlink: 'syz.4.6507': attribute type 27 has an invalid length. [ 857.885002][T24370] netlink: 'syz.4.6507': attribute type 4 has an invalid length. [ 857.916457][T24370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6507'. [ 858.591174][T24374] netlink: 'syz.6.6509': attribute type 10 has an invalid length. [ 858.631935][T24374] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6509'. [ 859.629603][T24423] netlink: 'syz.3.6521': attribute type 1 has an invalid length. [ 859.637651][T24423] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6521'. [ 859.908903][T24437] netlink: 'syz.6.6524': attribute type 1 has an invalid length. [ 859.963992][T24437] netlink: 101600 bytes leftover after parsing attributes in process `syz.6.6524'. [ 860.051539][T24441] netlink: 'syz.6.6524': attribute type 1 has an invalid length. [ 860.081094][T24441] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.6524'. [ 860.275574][T24449] netlink: 'syz.3.6526': attribute type 10 has an invalid length. [ 860.339631][T24453] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6539'. [ 860.349163][T24449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6526'. [ 860.915898][T24484] delete_channel: no stack [ 860.923917][T24484] delete_channel: no stack [ 862.564409][T24510] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6543'. [ 865.483542][T24535] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.6551'. [ 865.533462][T24540] FAULT_INJECTION: forcing a failure. [ 865.533462][T24540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.569795][T24528] device wlan1 entered promiscuous mode [ 865.608379][T24540] CPU: 1 PID: 24540 Comm: syz.4.6552 Not tainted syzkaller #0 [ 865.615955][T24540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.626083][T24540] Call Trace: [ 865.629428][T24540] [ 865.632421][T24540] dump_stack_lvl+0x188/0x250 [ 865.637189][T24540] ? show_regs_print_info+0x20/0x20 [ 865.642466][T24540] ? load_image+0x410/0x410 [ 865.647073][T24540] ? __lock_acquire+0x7b50/0x7b50 [ 865.652163][T24540] ? trace_call_bpf+0x515/0x5b0 [ 865.657136][T24540] should_fail+0x383/0x4b0 [ 865.661665][T24540] _copy_from_user+0x2e/0x170 [ 865.666437][T24540] __copy_msghdr_from_user+0xc9/0x630 [ 865.671924][T24540] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 865.677910][T24540] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 865.683378][T24540] ___sys_sendmsg+0x19a/0x2e0 [ 865.688182][T24540] ? __sys_sendmsg+0x290/0x290 [ 865.693103][T24540] ? trace_event_raw_event_lock+0x250/0x250 [ 865.699226][T24540] __se_sys_sendmsg+0x1b7/0x2a0 [ 865.704178][T24540] ? __x64_sys_sendmsg+0x80/0x80 [ 865.709189][T24540] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 865.715350][T24540] ? lockdep_hardirqs_on+0x94/0x140 [ 865.720651][T24540] do_syscall_64+0x4c/0xa0 [ 865.725132][T24540] ? clear_bhb_loop+0x30/0x80 [ 865.729875][T24540] ? clear_bhb_loop+0x30/0x80 [ 865.734637][T24540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 865.740600][T24540] RIP: 0033:0x7f8ed3366e59 [ 865.745092][T24540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.764769][T24540] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.773277][T24540] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 865.781315][T24540] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 865.789353][T24540] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 865.797399][T24540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.805441][T24540] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 865.813597][T24540] [ 865.841968][T24530] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.6550'. [ 866.683341][T24558] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6556'. [ 867.116475][T24569] netlink: 'syz.4.6559': attribute type 3 has an invalid length. [ 867.215918][T24569] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.6559'. [ 867.311542][T24571] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.676686][T24587] tap0: tun_chr_ioctl cmd 1074025678 [ 867.691249][T24588] FAULT_INJECTION: forcing a failure. [ 867.691249][T24588] name failslab, interval 1, probability 0, space 0, times 0 [ 867.697193][T24587] tap0: group set to 0 [ 867.751317][T24588] CPU: 0 PID: 24588 Comm: syz.4.6564 Not tainted syzkaller #0 [ 867.758874][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.768993][T24588] Call Trace: [ 867.772323][T24588] [ 867.775303][T24588] dump_stack_lvl+0x188/0x250 [ 867.780057][T24588] ? show_regs_print_info+0x20/0x20 [ 867.785325][T24588] ? load_image+0x410/0x410 [ 867.789893][T24588] ? __might_sleep+0xf0/0xf0 [ 867.794545][T24588] ? __lock_acquire+0x7b50/0x7b50 [ 867.799646][T24588] should_fail+0x383/0x4b0 [ 867.804141][T24588] should_failslab+0x5/0x20 [ 867.808701][T24588] slab_pre_alloc_hook+0x51/0xc0 [ 867.813703][T24588] __kmalloc_node+0x6d/0x3a0 [ 867.818343][T24588] ? kvmalloc_node+0x84/0x130 [ 867.823170][T24588] kvmalloc_node+0x84/0x130 [ 867.827735][T24588] generic_map_delete_batch+0x22d/0x660 [ 867.833345][T24588] ? bpf_map_inc_not_zero+0x100/0x100 [ 867.838785][T24588] ? __fdget+0x18b/0x210 [ 867.843086][T24588] ? bpf_map_inc_not_zero+0x100/0x100 [ 867.848504][T24588] bpf_map_do_batch+0x475/0x5f0 [ 867.853401][T24588] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 867.858908][T24588] __sys_bpf+0x671/0x6f0 [ 867.863198][T24588] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 867.869583][T24588] ? bpf_link_show_fdinfo+0x380/0x380 [ 867.875163][T24588] ? rcu_nmi_exit+0x6f/0xf0 [ 867.879766][T24588] __x64_sys_bpf+0x78/0x90 [ 867.884233][T24588] do_syscall_64+0x4c/0xa0 [ 867.888764][T24588] ? clear_bhb_loop+0x30/0x80 [ 867.893466][T24588] ? clear_bhb_loop+0x30/0x80 [ 867.898212][T24588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 867.904153][T24588] RIP: 0033:0x7f8ed3366e59 [ 867.908610][T24588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.928283][T24588] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.936739][T24588] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 867.944741][T24588] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 867.952756][T24588] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 867.960759][T24588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.968761][T24588] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 867.976825][T24588] [ 867.988086][T24571] netlink: 'syz.1.6561': attribute type 21 has an invalid length. [ 867.997945][T24571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6561'. [ 868.007608][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6561'. [ 869.326370][T24615] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6568'. [ 869.375763][T24618] FAULT_INJECTION: forcing a failure. [ 869.375763][T24618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.407296][T24615] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 869.498844][T24618] CPU: 0 PID: 24618 Comm: syz.3.6571 Not tainted syzkaller #0 [ 869.506411][T24618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.516524][T24618] Call Trace: [ 869.519863][T24618] [ 869.522848][T24618] dump_stack_lvl+0x188/0x250 [ 869.527602][T24618] ? show_regs_print_info+0x20/0x20 [ 869.532863][T24618] ? load_image+0x410/0x410 [ 869.537445][T24618] ? __lock_acquire+0x7b50/0x7b50 [ 869.542566][T24618] should_fail+0x383/0x4b0 [ 869.547061][T24618] _copy_from_user+0x2e/0x170 [ 869.551814][T24618] bpf_obj_get_info_by_fd+0x448/0x2df0 [ 869.557380][T24618] ? perf_trace_lock+0xe4/0x390 [ 869.562298][T24618] ? bpf_map_get_fd_by_id+0x330/0x330 [ 869.567758][T24618] ? trace_event_raw_event_lock+0x250/0x250 [ 869.573880][T24618] ? __might_fault+0xb3/0x110 [ 869.578643][T24618] ? bpf_lsm_bpf+0x5/0x10 [ 869.583037][T24618] ? security_bpf+0x7a/0xa0 [ 869.587617][T24618] __sys_bpf+0x484/0x6f0 [ 869.591931][T24618] ? bpf_link_show_fdinfo+0x380/0x380 [ 869.597465][T24618] __x64_sys_bpf+0x78/0x90 [ 869.601953][T24618] do_syscall_64+0x4c/0xa0 [ 869.606424][T24618] ? clear_bhb_loop+0x30/0x80 [ 869.611155][T24618] ? clear_bhb_loop+0x30/0x80 [ 869.615905][T24618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.621851][T24618] RIP: 0033:0x7f4a8c83ce59 [ 869.626330][T24618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.646000][T24618] RSP: 002b:00007f4a8aa95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 869.654493][T24618] RAX: ffffffffffffffda RBX: 00007f4a8cac4fa0 RCX: 00007f4a8c83ce59 [ 869.662535][T24618] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 869.670564][T24618] RBP: 00007f4a8aa95090 R08: 0000000000000000 R09: 0000000000000000 [ 869.678579][T24618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.686606][T24618] R13: 00007f4a8cac5038 R14: 00007f4a8cac4fa0 R15: 00007fff5bb55f98 [ 869.694680][T24618] [ 869.779060][ T8690] wlan1: Trigger new scan to find an IBSS to join [ 870.469261][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.475744][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.200904][T24652] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.6579'. [ 872.642382][T24658] FAULT_INJECTION: forcing a failure. [ 872.642382][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 872.719568][T24658] CPU: 0 PID: 24658 Comm: syz.1.6581 Not tainted syzkaller #0 [ 872.727283][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.737407][T24658] Call Trace: [ 872.740839][T24658] [ 872.743912][T24658] dump_stack_lvl+0x188/0x250 [ 872.748680][T24658] ? show_regs_print_info+0x20/0x20 [ 872.754237][T24658] ? load_image+0x410/0x410 [ 872.758840][T24658] ? __lock_acquire+0x7b50/0x7b50 [ 872.763993][T24658] should_fail+0x383/0x4b0 [ 872.768606][T24658] should_failslab+0x5/0x20 [ 872.773170][T24658] slab_pre_alloc_hook+0x51/0xc0 [ 872.778192][T24658] kmem_cache_alloc_trace+0x47/0x290 [ 872.783534][T24658] ? apparmor_sk_alloc_security+0x74/0x100 [ 872.789448][T24658] apparmor_sk_alloc_security+0x74/0x100 [ 872.795169][T24658] security_sk_alloc+0x6a/0xa0 [ 872.800023][T24658] sk_prot_alloc+0x101/0x210 [ 872.804687][T24658] ? sk_alloc+0x1d/0x310 [ 872.809024][T24658] sk_alloc+0x2f/0x310 [ 872.813184][T24658] bpf_prog_test_run_skb+0x23c/0x1190 [ 872.818650][T24658] ? __fget_files+0x402/0x470 [ 872.823467][T24658] ? cpu_online+0x60/0x60 [ 872.827886][T24658] bpf_prog_test_run+0x31c/0x390 [ 872.832923][T24658] __sys_bpf+0x5a5/0x6f0 [ 872.837236][T24658] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 872.843555][T24658] ? bpf_link_show_fdinfo+0x380/0x380 [ 872.848997][T24658] ? rcu_nmi_exit+0x6f/0xf0 [ 872.853708][T24658] __x64_sys_bpf+0x78/0x90 [ 872.858209][T24658] do_syscall_64+0x4c/0xa0 [ 872.862694][T24658] ? clear_bhb_loop+0x30/0x80 [ 872.867431][T24658] ? clear_bhb_loop+0x30/0x80 [ 872.872187][T24658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 872.878144][T24658] RIP: 0033:0x7f6671ebbe59 [ 872.882635][T24658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.902392][T24658] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 872.910896][T24658] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 872.918931][T24658] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 872.926966][T24658] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 872.935003][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.943084][T24658] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 872.951219][T24658] [ 873.658786][T24664] netlink: 'syz.6.6582': attribute type 10 has an invalid length. [ 873.701787][T24664] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6582'. [ 873.992946][T24671] sctp: [Deprecated]: syz.5.6586 (pid 24671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.992946][T24671] Use struct sctp_sack_info instead [ 874.459771][T24703] FAULT_INJECTION: forcing a failure. [ 874.459771][T24703] name failslab, interval 1, probability 0, space 0, times 0 [ 874.533830][T24703] CPU: 1 PID: 24703 Comm: syz.5.6595 Not tainted syzkaller #0 [ 874.541366][T24703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 874.551461][T24703] Call Trace: [ 874.554807][T24703] [ 874.557767][T24703] dump_stack_lvl+0x188/0x250 [ 874.562489][T24703] ? show_regs_print_info+0x20/0x20 [ 874.567725][T24703] ? load_image+0x410/0x410 [ 874.572262][T24703] ? __might_sleep+0xf0/0xf0 [ 874.576881][T24703] ? __lock_acquire+0x7b50/0x7b50 [ 874.581974][T24703] should_fail+0x383/0x4b0 [ 874.586429][T24703] should_failslab+0x5/0x20 [ 874.590975][T24703] slab_pre_alloc_hook+0x51/0xc0 [ 874.595962][T24703] __kmalloc_node+0x6d/0x3a0 [ 874.600595][T24703] ? kvmalloc_node+0x84/0x130 [ 874.605313][T24703] kvmalloc_node+0x84/0x130 [ 874.609848][T24703] generic_map_delete_batch+0x22d/0x660 [ 874.615436][T24703] ? bpf_map_inc_not_zero+0x100/0x100 [ 874.620845][T24703] ? __fdget+0x18b/0x210 [ 874.625123][T24703] ? bpf_map_inc_not_zero+0x100/0x100 [ 874.630531][T24703] bpf_map_do_batch+0x475/0x5f0 [ 874.635419][T24703] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 874.640920][T24703] __sys_bpf+0x671/0x6f0 [ 874.645201][T24703] ? bpf_link_show_fdinfo+0x380/0x380 [ 874.650610][T24703] ? rcu_nmi_exit+0x6f/0xf0 [ 874.655184][T24703] __x64_sys_bpf+0x78/0x90 [ 874.659637][T24703] do_syscall_64+0x4c/0xa0 [ 874.664091][T24703] ? clear_bhb_loop+0x30/0x80 [ 874.668812][T24703] ? clear_bhb_loop+0x30/0x80 [ 874.673519][T24703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 874.679442][T24703] RIP: 0033:0x7f5175177e59 [ 874.683889][T24703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.703523][T24703] RSP: 002b:00007f51733d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.711982][T24703] RAX: ffffffffffffffda RBX: 00007f51753fffa0 RCX: 00007f5175177e59 [ 874.719991][T24703] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 874.728004][T24703] RBP: 00007f51733d0090 R08: 0000000000000000 R09: 0000000000000000 [ 874.736016][T24703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.744044][T24703] R13: 00007f5175400038 R14: 00007f51753fffa0 R15: 00007fffb1efb708 [ 874.752093][T24703] [ 874.818577][ T8690] wlan1: Trigger new scan to find an IBSS to join [ 874.992984][T24708] netlink: 'syz.1.6598': attribute type 10 has an invalid length. [ 875.002029][T24708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6598'. [ 875.033202][T24708] batman_adv: batadv0: Adding interface: virt_wifi0 [ 875.043577][T24708] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.066308][T24715] netlink: 'syz.3.6597': attribute type 27 has an invalid length. [ 875.076826][T24708] batman_adv: batadv0: Interface activated: virt_wifi0 [ 875.119072][T24716] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6599'. [ 875.130818][T24715] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.6597'. [ 875.229956][T24716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.307061][T24716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.384112][T24716] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 875.519364][T24716] bond0 (unregistering): Released all slaves [ 875.758935][T24729] FAULT_INJECTION: forcing a failure. [ 875.758935][T24729] name failslab, interval 1, probability 0, space 0, times 0 [ 875.775724][T24728] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6602'. [ 875.789325][T12549] wlan1: Creating new IBSS network, BSSID 6a:09:24:d9:b9:d8 [ 875.802721][T24729] CPU: 1 PID: 24729 Comm: syz.3.6603 Not tainted syzkaller #0 [ 875.810262][T24729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 875.820356][T24729] Call Trace: [ 875.823684][T24729] [ 875.826643][T24729] dump_stack_lvl+0x188/0x250 [ 875.831359][T24729] ? show_regs_print_info+0x20/0x20 [ 875.836591][T24729] ? load_image+0x410/0x410 [ 875.841131][T24729] ? __might_sleep+0xf0/0xf0 [ 875.845758][T24729] ? __lock_acquire+0x7b50/0x7b50 [ 875.850884][T24729] should_fail+0x383/0x4b0 [ 875.855350][T24729] should_failslab+0x5/0x20 [ 875.856463][T24728] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 875.859886][T24729] slab_pre_alloc_hook+0x51/0xc0 [ 875.859913][T24729] __kmalloc+0x6b/0x340 [ 875.859931][T24729] ? tomoyo_encode+0x28a/0x550 [ 875.859962][T24729] tomoyo_encode+0x28a/0x550 [ 875.859988][T24729] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 875.860025][T24729] tomoyo_path_number_perm+0x251/0x6b0 [ 875.860052][T24729] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 875.860074][T24729] ? ksys_write+0x1d4/0x260 [ 875.860157][T24729] security_file_ioctl+0x6c/0xa0 [ 875.912746][T24729] __se_sys_ioctl+0x48/0x170 [ 875.917374][T24729] do_syscall_64+0x4c/0xa0 [ 875.921823][T24729] ? clear_bhb_loop+0x30/0x80 [ 875.926538][T24729] ? clear_bhb_loop+0x30/0x80 [ 875.931275][T24729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.937216][T24729] RIP: 0033:0x7f4a8c83ce59 [ 875.941667][T24729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.961498][T24729] RSP: 002b:00007f4a8aa74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.971186][T24729] RAX: ffffffffffffffda RBX: 00007f4a8cac5090 RCX: 00007f4a8c83ce59 [ 875.979188][T24729] RDX: 0000000000000002 RSI: 0000000000002400 RDI: 0000000000000004 [ 875.987192][T24729] RBP: 00007f4a8aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 875.995193][T24729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.003192][T24729] R13: 00007f4a8cac5128 R14: 00007f4a8cac5090 R15: 00007fff5bb55f98 [ 876.011208][T24729] [ 876.064929][T24729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 876.374115][T24741] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6605'. [ 876.878884][T24756] netlink: 'syz.5.6611': attribute type 10 has an invalid length. [ 876.903294][T24756] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6611'. [ 877.723711][T24783] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6618'. [ 878.403601][T24807] netlink: 'syz.4.6626': attribute type 10 has an invalid length. [ 878.439754][T24807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6626'. [ 878.496178][T24811] netlink: 186996 bytes leftover after parsing attributes in process `syz.5.6627'. [ 878.815293][T24819] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6630'. [ 879.410780][T24839] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6638'. [ 879.950562][T24845] netlink: 'syz.4.6641': attribute type 10 has an invalid length. [ 880.014924][T24845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6641'. [ 880.044122][T24852] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6643'. [ 880.242118][T24856] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6655'. [ 880.439224][T24862] netlink: 186996 bytes leftover after parsing attributes in process `syz.4.6645'. [ 881.894827][T24896] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6658'. [ 881.931171][T24893] netlink: 'syz.6.6656': attribute type 10 has an invalid length. [ 881.961265][T24893] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6656'. [ 882.037652][T24897] sctp: [Deprecated]: syz.3.6657 (pid 24897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.037652][T24897] Use struct sctp_sack_info instead [ 882.234192][T24903] netlink: 'syz.1.6660': attribute type 10 has an invalid length. [ 882.253833][T24903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6660'. [ 882.604743][T24918] netlink: 186996 bytes leftover after parsing attributes in process `syz.6.6661'. [ 883.621888][T24947] netlink: 'syz.5.6677': attribute type 10 has an invalid length. [ 884.164915][T24974] __nla_validate_parse: 1 callbacks suppressed [ 884.164938][T24974] netlink: 186996 bytes leftover after parsing attributes in process `syz.1.6683'. [ 884.187787][T24971] netlink: 132096 bytes leftover after parsing attributes in process `syz.3.6682'. [ 884.582892][T24988] netlink: 'syz.3.6690': attribute type 1 has an invalid length. [ 884.598470][T24988] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6690'. [ 884.753371][T24988] netlink: 'syz.3.6690': attribute type 19 has an invalid length. [ 885.009851][T25003] netlink: 'syz.6.6695': attribute type 10 has an invalid length. [ 885.025851][T25003] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6695'. [ 885.098937][T25016] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6701'. [ 885.670658][T25026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6704'. [ 886.608467][T25060] FAULT_INJECTION: forcing a failure. [ 886.608467][T25060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.659395][T25060] CPU: 0 PID: 25060 Comm: syz.4.6716 Not tainted syzkaller #0 [ 886.666939][T25060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.677092][T25060] Call Trace: [ 886.680417][T25060] [ 886.683373][T25060] dump_stack_lvl+0x188/0x250 [ 886.688084][T25060] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 886.694277][T25060] ? show_regs_print_info+0x20/0x20 [ 886.699517][T25060] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 886.705734][T25060] should_fail+0x383/0x4b0 [ 886.710187][T25060] _copy_from_user+0x2e/0x170 [ 886.714913][T25060] packet_setsockopt+0xc5f/0x1af0 [ 886.719980][T25060] ? packet_ioctl+0x240/0x240 [ 886.724701][T25060] ? aa_sk_perm+0x5d1/0x910 [ 886.729237][T25060] ? aa_sk_perm+0x7dc/0x910 [ 886.733784][T25060] ? aa_af_perm+0x340/0x340 [ 886.738347][T25060] ? aa_sock_opt_perm+0x74/0x100 [ 886.743323][T25060] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 886.748902][T25060] ? security_socket_setsockopt+0x7a/0xa0 [ 886.754651][T25060] ? packet_ioctl+0x240/0x240 [ 886.759368][T25060] __sys_setsockopt+0x2bf/0x3d0 [ 886.764271][T25060] __x64_sys_setsockopt+0xb1/0xc0 [ 886.769337][T25060] do_syscall_64+0x4c/0xa0 [ 886.773786][T25060] ? clear_bhb_loop+0x30/0x80 [ 886.778499][T25060] ? clear_bhb_loop+0x30/0x80 [ 886.783221][T25060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 886.789161][T25060] RIP: 0033:0x7f8ed3366e59 [ 886.793610][T25060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.813339][T25060] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 886.821803][T25060] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 886.829816][T25060] RDX: 0000000000000009 RSI: 0000000000000107 RDI: 0000000000000006 [ 886.837822][T25060] RBP: 00007f8ed15bf090 R08: 0000000000000004 R09: 0000000000000000 [ 886.845838][T25060] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.853870][T25060] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 886.861897][T25060] [ 887.572317][T25085] netlink: 208572 bytes leftover after parsing attributes in process `syz.6.6721'. [ 888.358034][T25109] netlink: 'syz.4.6730': attribute type 10 has an invalid length. [ 888.370001][T25109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6730'. [ 890.436025][T25161] netlink: 'syz.3.6748': attribute type 10 has an invalid length. [ 890.455959][T25161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6748'. [ 890.704235][T25171] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.6752'. [ 890.770572][T25177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6752'. [ 890.808369][T25177] : renamed from caif0 [ 890.886516][T25177] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 896.807564][T25179] netlink: 'syz.3.6753': attribute type 6 has an invalid length. [ 896.823125][T25179] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6753'. [ 896.836241][T25184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6754'. [ 896.863137][T25184] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.223526][T25198] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6757'. [ 897.766067][T25212] netlink: 'syz.5.6763': attribute type 10 has an invalid length. [ 897.795002][T25212] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6763'. [ 897.860437][T25210] netlink: 'syz.3.6762': attribute type 10 has an invalid length. [ 897.885865][T25210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6762'. [ 898.914036][T25243] netlink: 'syz.3.6775': attribute type 10 has an invalid length. [ 898.938286][T25243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6775'. [ 899.389968][T25254] FAULT_INJECTION: forcing a failure. [ 899.389968][T25254] name failslab, interval 1, probability 0, space 0, times 0 [ 899.401560][T25250] netlink: 'syz.1.6778': attribute type 10 has an invalid length. [ 899.427288][T25250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6778'. [ 899.437770][T25254] CPU: 1 PID: 25254 Comm: syz.3.6779 Not tainted syzkaller #0 [ 899.445273][T25254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 899.455373][T25254] Call Trace: [ 899.458695][T25254] [ 899.461844][T25254] dump_stack_lvl+0x188/0x250 [ 899.466575][T25254] ? show_regs_print_info+0x20/0x20 [ 899.471818][T25254] ? load_image+0x410/0x410 [ 899.476360][T25254] ? __might_sleep+0xf0/0xf0 [ 899.480987][T25254] ? __lock_acquire+0x7b50/0x7b50 [ 899.486056][T25254] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 899.492695][T25254] should_fail+0x383/0x4b0 [ 899.497197][T25254] should_failslab+0x5/0x20 [ 899.501737][T25254] slab_pre_alloc_hook+0x51/0xc0 [ 899.506717][T25254] __kmalloc+0x6b/0x340 [ 899.510912][T25254] ? bpf_test_init+0xf8/0x1b0 [ 899.515637][T25254] bpf_test_init+0xf8/0x1b0 [ 899.520183][T25254] bpf_prog_test_run_xdp+0x1ca/0x900 [ 899.525514][T25254] ? dev_put+0x70/0x70 [ 899.529630][T25254] ? dev_put+0x70/0x70 [ 899.533733][T25254] bpf_prog_test_run+0x31c/0x390 [ 899.538713][T25254] __sys_bpf+0x5a5/0x6f0 [ 899.542994][T25254] ? bpf_link_show_fdinfo+0x380/0x380 [ 899.548434][T25254] __x64_sys_bpf+0x78/0x90 [ 899.552893][T25254] do_syscall_64+0x4c/0xa0 [ 899.557341][T25254] ? clear_bhb_loop+0x30/0x80 [ 899.562049][T25254] ? clear_bhb_loop+0x30/0x80 [ 899.566774][T25254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.572701][T25254] RIP: 0033:0x7f4a8c83ce59 [ 899.577151][T25254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.596797][T25254] RSP: 002b:00007f4a8aa95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.605253][T25254] RAX: ffffffffffffffda RBX: 00007f4a8cac4fa0 RCX: 00007f4a8c83ce59 [ 899.613259][T25254] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 899.621269][T25254] RBP: 00007f4a8aa95090 R08: 0000000000000000 R09: 0000000000000000 [ 899.629272][T25254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.637325][T25254] R13: 00007f4a8cac5038 R14: 00007f4a8cac4fa0 R15: 00007fff5bb55f98 [ 899.645443][T25254] [ 900.351917][T25273] netlink: 'syz.3.6787': attribute type 25 has an invalid length. [ 900.384824][T25273] netlink: 'syz.3.6787': attribute type 6 has an invalid length. [ 900.570010][T25278] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6787'. [ 900.590638][T25281] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6790'. [ 901.232100][T25295] netlink: 'syz.5.6805': attribute type 10 has an invalid length. [ 901.453276][T25295] team0: Port device geneve1 added [ 901.686857][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.704768][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.735717][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.747094][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.756434][ T8669] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 901.766682][ T8669] batman_adv: batadv0: Removing interface: virt_wifi0 [ 901.775034][ T8669] device bridge_slave_1 left promiscuous mode [ 901.797425][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.808108][ T8669] device bridge_slave_0 left promiscuous mode [ 901.824263][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.862438][ T8669] device veth1_vlan left promiscuous mode [ 901.868305][ T8669] device veth0_vlan left promiscuous mode [ 902.126934][ T8669] device team_slave_1 left promiscuous mode [ 902.139883][ T8669] team0 (unregistering): Port device team_slave_1 removed [ 902.156152][ T8669] device team_slave_0 left promiscuous mode [ 902.164179][ T8669] team0 (unregistering): Port device team_slave_0 removed [ 902.635824][T25335] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6810'. [ 902.639090][T25334] netlink: 'syz.3.6809': attribute type 10 has an invalid length. [ 902.675353][T25334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6809'. [ 902.934541][T25347] netlink: 'syz.3.6814': attribute type 21 has an invalid length. [ 902.965088][T25347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6814'. [ 903.270334][T25358] delete_channel: no stack [ 903.277421][T25351] device syzkaller0 entered promiscuous mode [ 903.304726][T25347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6814'. [ 905.048756][T25385] netlink: 'syz.5.6824': attribute type 10 has an invalid length. [ 905.058712][T25385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6824'. [ 905.210181][T25396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6827'. [ 905.780680][T25412] delete_channel: no stack [ 906.594699][T25431] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.6842'. [ 906.676100][T25429] netlink: 'syz.5.6841': attribute type 10 has an invalid length. [ 906.696531][T25431] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 906.712853][T25429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6841'. [ 907.100881][T25448] netlink: 'syz.6.6848': attribute type 21 has an invalid length. [ 907.134714][T25448] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6848'. [ 907.378378][T25451] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6848'. [ 909.250698][T25470] delete_channel: no stack [ 909.462665][T25477] FAULT_INJECTION: forcing a failure. [ 909.462665][T25477] name failslab, interval 1, probability 0, space 0, times 0 [ 909.553465][T25477] CPU: 1 PID: 25477 Comm: syz.5.6858 Not tainted syzkaller #0 [ 909.561017][T25477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 909.571117][T25477] Call Trace: [ 909.574463][T25477] [ 909.577427][T25477] dump_stack_lvl+0x188/0x250 [ 909.582168][T25477] ? show_regs_print_info+0x20/0x20 [ 909.587416][T25477] ? load_image+0x410/0x410 [ 909.591980][T25477] ? __might_sleep+0xf0/0xf0 [ 909.596619][T25477] ? __lock_acquire+0x7b50/0x7b50 [ 909.601708][T25477] should_fail+0x383/0x4b0 [ 909.606172][T25477] should_failslab+0x5/0x20 [ 909.610719][T25477] slab_pre_alloc_hook+0x51/0xc0 [ 909.615707][T25477] __kmalloc_node_track_caller+0x68/0x3a0 [ 909.621464][T25477] ? netlink_sendmsg+0x654/0xbe0 [ 909.626443][T25477] ? __alloc_skb+0xf4/0x750 [ 909.630995][T25477] ? netlink_sendmsg+0x654/0xbe0 [ 909.635982][T25477] __alloc_skb+0x22c/0x750 [ 909.640449][T25477] netlink_sendmsg+0x654/0xbe0 [ 909.645286][T25477] ? netlink_getsockopt+0x570/0x570 [ 909.650536][T25477] ? aa_sock_msg_perm+0x94/0x150 [ 909.655529][T25477] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 909.660943][T25477] ? security_socket_sendmsg+0x7c/0xa0 [ 909.666439][T25477] ? netlink_getsockopt+0x570/0x570 [ 909.671682][T25477] ____sys_sendmsg+0x5be/0x8f0 [ 909.676502][T25477] ? __sys_sendmsg_sock+0x30/0x30 [ 909.681592][T25477] ? import_iovec+0x6f/0xa0 [ 909.686156][T25477] ___sys_sendmsg+0x236/0x2e0 [ 909.690899][T25477] ? __sys_sendmsg+0x290/0x290 [ 909.695759][T25477] ? trace_event_raw_event_lock+0x250/0x250 [ 909.701774][T25477] __se_sys_sendmsg+0x1b7/0x2a0 [ 909.706677][T25477] ? __x64_sys_sendmsg+0x80/0x80 [ 909.711657][T25477] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 909.717704][T25477] ? lockdep_hardirqs_on+0x94/0x140 [ 909.722953][T25477] do_syscall_64+0x4c/0xa0 [ 909.727412][T25477] ? clear_bhb_loop+0x30/0x80 [ 909.732138][T25477] ? clear_bhb_loop+0x30/0x80 [ 909.736900][T25477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 909.742836][T25477] RIP: 0033:0x7f5175177e59 [ 909.747301][T25477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.766958][T25477] RSP: 002b:00007f51733d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.775421][T25477] RAX: ffffffffffffffda RBX: 00007f51753fffa0 RCX: 00007f5175177e59 [ 909.783440][T25477] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000004 [ 909.791459][T25477] RBP: 00007f51733d0090 R08: 0000000000000000 R09: 0000000000000000 [ 909.799477][T25477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.807519][T25477] R13: 00007f5175400038 R14: 00007f51753fffa0 R15: 00007fffb1efb708 [ 909.815575][T25477] [ 910.141311][T25491] netlink: 'syz.3.6864': attribute type 10 has an invalid length. [ 910.212151][T25491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6864'. [ 910.319110][T25496] netlink: 'syz.1.6867': attribute type 21 has an invalid length. [ 910.388187][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6867'. [ 910.475722][T25490] netlink: 'syz.4.6865': attribute type 10 has an invalid length. [ 910.490215][T25490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6865'. [ 910.831704][ T8676] tipc: Subscription rejected, illegal request [ 911.050319][T25532] netlink: 'syz.3.6876': attribute type 29 has an invalid length. [ 911.079353][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6867'. [ 911.105940][T25532] netlink: 'syz.3.6876': attribute type 29 has an invalid length. [ 911.143142][T25539] netlink: 'syz.6.6878': attribute type 29 has an invalid length. [ 911.155689][T25537] netlink: 'syz.3.6876': attribute type 29 has an invalid length. [ 911.173807][T25539] netlink: 'syz.6.6878': attribute type 29 has an invalid length. [ 911.185149][T25535] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6877'. [ 911.208813][T25539] netlink: 'syz.6.6878': attribute type 29 has an invalid length. [ 911.311529][T25537] netlink: 'syz.3.6876': attribute type 29 has an invalid length. [ 911.455024][T25546] netlink: 63595 bytes leftover after parsing attributes in process `syz.1.6880'. [ 912.077607][T25559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6884'. [ 912.156512][T25571] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6887'. [ 912.291478][T25573] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6888'. [ 912.319363][T25573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6888'. [ 914.695680][T25644] FAULT_INJECTION: forcing a failure. [ 914.695680][T25644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.745795][T25644] CPU: 1 PID: 25644 Comm: syz.4.6911 Not tainted syzkaller #0 [ 914.753339][T25644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 914.763426][T25644] Call Trace: [ 914.766747][T25644] [ 914.769704][T25644] dump_stack_lvl+0x188/0x250 [ 914.774422][T25644] ? show_regs_print_info+0x20/0x20 [ 914.779659][T25644] ? load_image+0x410/0x410 [ 914.784213][T25644] ? __lock_acquire+0x7b50/0x7b50 [ 914.789302][T25644] should_fail+0x383/0x4b0 [ 914.793761][T25644] _copy_from_user+0x2e/0x170 [ 914.798486][T25644] __copy_msghdr_from_user+0xc9/0x630 [ 914.803934][T25644] ? verify_lock_unused+0x140/0x140 [ 914.809158][T25644] ? mark_lock+0x94/0x320 [ 914.813505][T25644] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 914.818806][T25644] ? __lock_acquire+0x13dc/0x7b50 [ 914.823864][T25644] ___sys_sendmsg+0x19a/0x2e0 [ 914.828570][T25644] ? __sys_sendmsg+0x290/0x290 [ 914.833400][T25644] __se_sys_sendmsg+0x1b7/0x2a0 [ 914.838280][T25644] ? __x64_sys_sendmsg+0x80/0x80 [ 914.843254][T25644] ? syscall_enter_from_user_mode+0x2a/0x70 [ 914.849175][T25644] do_syscall_64+0x4c/0xa0 [ 914.853612][T25644] ? clear_bhb_loop+0x30/0x80 [ 914.858303][T25644] ? clear_bhb_loop+0x30/0x80 [ 914.863001][T25644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 914.868905][T25644] RIP: 0033:0x7f8ed3366e59 [ 914.873365][T25644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.892988][T25644] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.901422][T25644] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 914.909410][T25644] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 914.917398][T25644] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 914.925394][T25644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.933376][T25644] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 914.941384][T25644] [ 915.320041][T25649] validate_nla: 8 callbacks suppressed [ 915.320061][T25649] netlink: 'syz.3.6915': attribute type 10 has an invalid length. [ 915.352975][T25649] __nla_validate_parse: 7 callbacks suppressed [ 915.352997][T25649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6915'. [ 915.532877][T25662] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6922'. [ 915.602241][T25661] netlink: 'syz.4.6922': attribute type 10 has an invalid length. [ 915.642125][T25661] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6922'. [ 915.777205][T25671] netlink: 'syz.3.6924': attribute type 4 has an invalid length. [ 915.824991][T25671] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6924'. [ 916.709171][T25689] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6931'. [ 917.228811][T25694] netlink: 'syz.4.6931': attribute type 19 has an invalid length. [ 917.238641][T25694] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.6931'. [ 917.670089][T25717] netlink: 'syz.6.6940': attribute type 10 has an invalid length. [ 917.678050][T25717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6940'. [ 918.123978][T25726] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6945'. [ 918.157823][T25726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.195032][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 919.876621][T25786] netlink: 'syz.5.6960': attribute type 4 has an invalid length. [ 919.888624][T25786] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6960'. [ 920.156330][T25791] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6962'. [ 920.184158][T25791] netlink: 'syz.5.6962': attribute type 10 has an invalid length. [ 920.877519][T25821] netlink: 'syz.6.6975': attribute type 4 has an invalid length. [ 920.964532][T25821] __nla_validate_parse: 1 callbacks suppressed [ 920.964569][T25821] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.6975'. [ 922.147624][T25831] netlink: 'syz.6.6978': attribute type 28 has an invalid length. [ 922.186659][T25831] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6978'. [ 922.278565][T25836] netlink: 'syz.6.6978': attribute type 21 has an invalid length. [ 922.321165][T25836] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6978'. [ 922.368611][T25836] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6978'. [ 922.616542][T25842] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6981'. [ 922.627780][T25843] netlink: 'syz.3.6981': attribute type 10 has an invalid length. [ 922.627808][T25843] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6981'. [ 922.835192][T25845] sctp: [Deprecated]: syz.4.6983 (pid 25845) Use of int in max_burst socket option deprecated. [ 922.835192][T25845] Use struct sctp_assoc_value instead [ 924.119557][T25881] netlink: 'syz.3.6997': attribute type 10 has an invalid length. [ 924.132294][T25881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6997'. [ 924.343192][T25871] chnl_net:caif_netlink_parms(): no params data found [ 924.738195][ T8669] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.788057][T25871] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.795856][T25871] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.804479][T25871] device bridge_slave_0 entered promiscuous mode [ 924.820203][ T8669] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.842047][T25871] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.849618][T25871] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.860044][T25871] device bridge_slave_1 entered promiscuous mode [ 924.891468][T25871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.918854][ T8669] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.942298][T25871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.026224][ T8669] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.083477][T25871] team0: Port device team_slave_0 added [ 925.109803][T25871] team0: Port device team_slave_1 added [ 925.227097][T25871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.275829][T25871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.440525][T25871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.525036][T25871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.577083][T25871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.676439][T25871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.692727][T25919] netlink: 'syz.4.7012': attribute type 10 has an invalid length. [ 925.711829][T25919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7012'. [ 925.736953][T25917] netlink: 751 bytes leftover after parsing attributes in process `syz.1.7010'. [ 925.779556][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 925.919246][T25871] device hsr_slave_0 entered promiscuous mode [ 925.966886][T25871] device hsr_slave_1 entered promiscuous mode [ 925.988689][T25871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.007930][T25871] Cannot create hsr debugfs directory [ 926.135475][T25929] netlink: 'syz.6.7014': attribute type 10 has an invalid length. [ 926.156846][T25929] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7014'. [ 926.392112][T25942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7019'. [ 926.463651][T25947] netlink: 'syz.3.7019': attribute type 10 has an invalid length. [ 926.486286][T25947] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7019'. [ 927.018699][T25972] netlink: 'syz.1.7027': attribute type 10 has an invalid length. [ 927.041394][T25972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7027'. [ 927.097421][T25970] netlink: 'syz.3.7026': attribute type 10 has an invalid length. [ 927.123953][T25970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7026'. [ 927.244995][T25975] netlink: 'syz.6.7028': attribute type 10 has an invalid length. [ 927.259098][T25975] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7028'. [ 927.325115][T25986] netlink: 'syz.1.7030': attribute type 10 has an invalid length. [ 927.382800][T25986] team0: Device hsr_slave_0 failed to register rx_handler [ 927.585755][T25989] netlink: 'syz.3.7031': attribute type 10 has an invalid length. [ 927.610060][T25989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7031'. [ 927.858750][T23486] Bluetooth: hci3: command 0x041b tx timeout [ 927.888737][T25871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 927.960026][T25871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 928.043913][T25871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 928.122608][T25871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 928.398967][T26018] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7037'. [ 928.427685][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 928.507439][T26018] netlink: 'syz.6.7037': attribute type 10 has an invalid length. [ 928.560249][T26018] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7037'. [ 928.798009][T26029] netlink: 'syz.3.7040': attribute type 10 has an invalid length. [ 928.836680][T26029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7040'. [ 928.900637][T25871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.954243][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.984997][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.033701][T25871] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.119293][ T8669] device hsr_slave_1 left promiscuous mode [ 929.129311][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.169552][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.237593][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.282879][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.339207][ T8669] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 929.394086][ T8669] batman_adv: batadv0: Removing interface: virt_wifi0 [ 929.442057][ T8669] device bridge_slave_0 left promiscuous mode [ 929.476346][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.811763][ T8669] team0 (unregistering): Port device geneve1 removed [ 929.886085][ T8669] team0 (unregistering): Port device team_slave_1 removed [ 929.904162][ T8669] team0 (unregistering): Port device team_slave_0 removed [ 929.948757][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 930.097244][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 930.111301][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 930.128004][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.135187][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.149406][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 930.158207][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 930.169142][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.176240][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.295762][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 930.311785][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 930.324591][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 930.335371][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 930.347918][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 930.373674][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 930.416708][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.449919][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.461579][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 930.470544][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 930.630244][T25871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.701185][T25871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.722779][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 930.762971][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 930.961266][T26081] netlink: 'syz.1.7055': attribute type 10 has an invalid length. [ 931.325912][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 931.345225][T26096] validate_nla: 1 callbacks suppressed [ 931.345244][T26096] netlink: 'syz.4.7059': attribute type 9 has an invalid length. [ 931.366284][T26096] __nla_validate_parse: 6 callbacks suppressed [ 931.366303][T26096] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7059'. [ 931.388859][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 931.426182][T25871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.454026][T26090] netlink: 'syz.3.7057': attribute type 10 has an invalid length. [ 931.473430][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.479904][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.483811][T26090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7057'. [ 931.752825][T26099] netlink: 'syz.4.7059': attribute type 9 has an invalid length. [ 931.769903][T26099] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7059'. [ 931.875209][T26106] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.7062'. [ 931.995153][T26103] netlink: 209860 bytes leftover after parsing attributes in process `syz.6.7061'. [ 932.019334][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 932.046110][T26103] openvswitch: netlink: Message has 4 unknown bytes. [ 932.080891][T26114] netlink: 'syz.3.7063': attribute type 21 has an invalid length. [ 932.106735][T26114] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.7063'. [ 932.447039][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 932.457490][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 932.482039][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.493132][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.525201][T25871] device veth0_vlan entered promiscuous mode [ 932.537518][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.552381][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.606397][T25871] device veth1_vlan entered promiscuous mode [ 932.742908][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 932.799619][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 932.819151][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 932.853922][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 932.876291][T25871] device veth0_macvtap entered promiscuous mode [ 932.920122][T26126] netlink: 'syz.1.7069': attribute type 10 has an invalid length. [ 932.928120][T26126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7069'. [ 932.961181][T25871] device veth1_macvtap entered promiscuous mode [ 933.007465][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.027087][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.044796][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.056805][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.075586][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.086625][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.104692][T25871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.114379][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 933.130103][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 933.145752][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.194036][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.246041][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.288531][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.305386][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.316997][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.335007][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.345915][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.363397][T25871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.375803][T25871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.415157][T25871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.436408][T26137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7071'. [ 933.460860][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 933.485956][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.507279][T25871] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.523247][T25871] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.534325][T25871] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.561865][T25871] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.580510][T26137] netlink: 'syz.1.7071': attribute type 10 has an invalid length. [ 933.594448][T26137] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7071'. [ 933.760098][ T8671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.767996][ T8671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.811213][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 933.879769][T26145] netlink: 'syz.6.7075': attribute type 10 has an invalid length. [ 934.063704][T26145] team0 (unregistering): Port device team_slave_0 removed [ 934.094953][T26152] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.7077'. [ 934.136862][T26145] team0 (unregistering): Port device team_slave_1 removed [ 934.204773][T26144] netlink: 'syz.1.7074': attribute type 10 has an invalid length. [ 934.213677][ T8671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.230134][ T8671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.265035][T26140] netlink: 'syz.6.7075': attribute type 25 has an invalid length. [ 934.280382][T26140] netlink: 'syz.6.7075': attribute type 25 has an invalid length. [ 934.297458][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.371195][T26206] team0 (unregistering): Port device team_slave_0 removed [ 936.612054][T26206] team0 (unregistering): Port device team_slave_1 removed [ 936.959975][T26206] team0 (unregistering): Port device geneve1 removed [ 937.109828][T26211] validate_nla: 3 callbacks suppressed [ 937.109847][T26211] netlink: 'syz.4.7093': attribute type 25 has an invalid length. [ 937.132241][T26211] netlink: 'syz.4.7093': attribute type 25 has an invalid length. [ 937.148044][T26216] netlink: 'syz.6.7096': attribute type 10 has an invalid length. [ 937.160136][T26215] netlink: 'syz.3.7095': attribute type 10 has an invalid length. [ 937.168277][T26215] __nla_validate_parse: 4 callbacks suppressed [ 937.168292][T26215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7095'. [ 937.351347][T26233] netlink: 'syz.4.7102': attribute type 4 has an invalid length. [ 937.393998][T26233] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7102'. [ 937.418291][T26236] FAULT_INJECTION: forcing a failure. [ 937.418291][T26236] name failslab, interval 1, probability 0, space 0, times 0 [ 937.441834][T26236] CPU: 0 PID: 26236 Comm: syz.6.7104 Not tainted syzkaller #0 [ 937.449445][T26236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 937.459535][T26236] Call Trace: [ 937.462850][T26236] [ 937.465807][T26236] dump_stack_lvl+0x188/0x250 [ 937.470529][T26236] ? show_regs_print_info+0x20/0x20 [ 937.475774][T26236] ? load_image+0x410/0x410 [ 937.480323][T26236] ? __might_sleep+0xf0/0xf0 [ 937.484949][T26236] ? __lock_acquire+0x7b50/0x7b50 [ 937.490045][T26236] should_fail+0x383/0x4b0 [ 937.494503][T26236] should_failslab+0x5/0x20 [ 937.499041][T26236] slab_pre_alloc_hook+0x51/0xc0 [ 937.504019][T26236] ? sk_prot_alloc+0x57/0x210 [ 937.508735][T26236] kmem_cache_alloc+0x3d/0x280 [ 937.513535][T26236] sk_prot_alloc+0x57/0x210 [ 937.518074][T26236] ? sk_alloc+0x1d/0x310 [ 937.522352][T26236] sk_alloc+0x2f/0x310 [ 937.526457][T26236] ? inet_create+0x702/0xee0 [ 937.531216][T26236] inet_create+0x71e/0xee0 [ 937.535766][T26236] __sock_create+0x473/0x910 [ 937.540399][T26236] __sys_socketpair+0x1bd/0x540 [ 937.545283][T26236] __x64_sys_socketpair+0x97/0xb0 [ 937.550346][T26236] do_syscall_64+0x4c/0xa0 [ 937.554798][T26236] ? clear_bhb_loop+0x30/0x80 [ 937.559515][T26236] ? clear_bhb_loop+0x30/0x80 [ 937.564223][T26236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 937.570151][T26236] RIP: 0033:0x7f8cb501de59 [ 937.574697][T26236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.594328][T26236] RSP: 002b:00007f8cb3276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 937.602820][T26236] RAX: ffffffffffffffda RBX: 00007f8cb52a5fa0 RCX: 00007f8cb501de59 [ 937.610828][T26236] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 937.618834][T26236] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 937.626835][T26236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.634844][T26236] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 937.642851][T26236] [ 938.328110][T26264] netlink: 'syz.5.7112': attribute type 3 has an invalid length. [ 938.347941][T26264] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7112'. [ 938.627260][T26271] netlink: 'syz.6.7113': attribute type 10 has an invalid length. [ 938.669320][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 938.706507][T26271] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7113'. [ 938.764727][T26281] netlink: 'syz.3.7114': attribute type 10 has an invalid length. [ 938.843073][T26266] netlink: 'syz.3.7114': attribute type 25 has an invalid length. [ 938.855929][T26266] netlink: 'syz.3.7114': attribute type 25 has an invalid length. [ 939.439610][T26302] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7121'. [ 939.505531][T26299] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 939.697250][T26298] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7122'. [ 939.756315][T26298] batman_adv: batadv0: Adding interface: virt_wifi0 [ 939.778330][T26298] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.810694][T26298] batman_adv: batadv0: Interface activated: virt_wifi0 [ 940.919452][T26350] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.7139'. [ 941.007653][T26332] team0 (unregistering): Port device team_slave_0 removed [ 941.066686][T26332] team0 (unregistering): Port device team_slave_1 removed [ 941.230348][T26344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7138'. [ 941.913927][T26365] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7144'. [ 942.166333][T26374] validate_nla: 8 callbacks suppressed [ 942.166373][T26374] netlink: 'syz.1.7147': attribute type 10 has an invalid length. [ 942.524469][T26374] team0 (unregistering): Port device team_slave_0 removed [ 942.593421][T26374] team0 (unregistering): Port device team_slave_1 removed [ 942.643537][T26374] team0 (unregistering): Port device geneve1 removed [ 942.694871][T26377] netlink: 'syz.3.7150': attribute type 10 has an invalid length. [ 942.707861][T26377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7150'. [ 943.871041][T26426] netlink: 'syz.4.7167': attribute type 10 has an invalid length. [ 943.884736][T26426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7167'. [ 943.895233][T26419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7164'. [ 943.924216][T26419] netlink: 'syz.3.7164': attribute type 1 has an invalid length. [ 943.934743][T26419] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7164'. [ 944.882121][T26461] netlink: 'syz.3.7180': attribute type 10 has an invalid length. [ 944.910571][T26461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7180'. [ 945.292961][T26481] netlink: 'syz.5.7187': attribute type 10 has an invalid length. [ 945.327913][T26481] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7187'. [ 946.353497][T26518] netlink: 'syz.1.7200': attribute type 10 has an invalid length. [ 946.368578][T26518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7200'. [ 946.534135][T26535] netlink: 'syz.3.7207': attribute type 29 has an invalid length. [ 946.563339][T26535] netlink: 'syz.3.7207': attribute type 29 has an invalid length. [ 946.635378][T26532] netlink: 'syz.6.7206': attribute type 10 has an invalid length. [ 946.655760][T26532] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7206'. [ 946.877133][T26546] device syzkaller0 entered promiscuous mode [ 947.173472][T26567] netlink: 'syz.5.7221': attribute type 10 has an invalid length. [ 947.480633][T26588] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7236'. [ 947.768840][T26590] netlink: 'syz.1.7227': attribute type 10 has an invalid length. [ 947.796289][T26590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7227'. [ 948.470439][T26614] netlink: 'syz.1.7238': attribute type 1 has an invalid length. [ 948.480463][T26614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7238'. [ 949.224402][T26649] FAULT_INJECTION: forcing a failure. [ 949.224402][T26649] name failslab, interval 1, probability 0, space 0, times 0 [ 949.242651][T26649] CPU: 0 PID: 26649 Comm: syz.5.7248 Not tainted syzkaller #0 [ 949.250174][T26649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 949.260256][T26649] Call Trace: [ 949.263552][T26649] [ 949.266502][T26649] dump_stack_lvl+0x188/0x250 [ 949.271203][T26649] ? show_regs_print_info+0x20/0x20 [ 949.276413][T26649] ? load_image+0x410/0x410 [ 949.280940][T26649] ? __might_sleep+0xf0/0xf0 [ 949.285544][T26649] ? __lock_acquire+0x7b50/0x7b50 [ 949.290598][T26649] should_fail+0x383/0x4b0 [ 949.295031][T26649] should_failslab+0x5/0x20 [ 949.299570][T26649] slab_pre_alloc_hook+0x51/0xc0 [ 949.304532][T26649] __kmalloc+0x6b/0x340 [ 949.308700][T26649] ? sk_prot_alloc+0xe7/0x210 [ 949.313400][T26649] sk_prot_alloc+0xe7/0x210 [ 949.317912][T26649] ? sk_alloc+0x1d/0x310 [ 949.322174][T26649] sk_alloc+0x2f/0x310 [ 949.326266][T26649] bpf_prog_test_run_skb+0x23c/0x1190 [ 949.331655][T26649] ? __fget_files+0x402/0x470 [ 949.336352][T26649] ? cpu_online+0x60/0x60 [ 949.340696][T26649] bpf_prog_test_run+0x31c/0x390 [ 949.345662][T26649] __sys_bpf+0x5a5/0x6f0 [ 949.349918][T26649] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 949.356180][T26649] ? bpf_link_show_fdinfo+0x380/0x380 [ 949.361564][T26649] ? rcu_nmi_exit+0x6f/0xf0 [ 949.366091][T26649] __x64_sys_bpf+0x78/0x90 [ 949.370521][T26649] do_syscall_64+0x4c/0xa0 [ 949.374946][T26649] ? clear_bhb_loop+0x30/0x80 [ 949.379639][T26649] ? clear_bhb_loop+0x30/0x80 [ 949.384336][T26649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 949.390246][T26649] RIP: 0033:0x7fd5b931ce59 [ 949.394677][T26649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.414294][T26649] RSP: 002b:00007fd5b7575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 949.422737][T26649] RAX: ffffffffffffffda RBX: 00007fd5b95a4fa0 RCX: 00007fd5b931ce59 [ 949.430729][T26649] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 949.438845][T26649] RBP: 00007fd5b7575090 R08: 0000000000000000 R09: 0000000000000000 [ 949.446844][T26649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.454841][T26649] R13: 00007fd5b95a5038 R14: 00007fd5b95a4fa0 R15: 00007ffc39190c78 [ 949.462852][T26649] [ 949.552273][T26643] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7247'. [ 951.005830][T26688] netlink: 'syz.4.7263': attribute type 10 has an invalid length. [ 951.013891][T26688] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7263'. [ 951.024701][T26691] netlink: 'syz.6.7264': attribute type 10 has an invalid length. [ 951.037020][T26692] netlink: 'syz.6.7264': attribute type 3 has an invalid length. [ 951.045510][T26691] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7264'. [ 951.055854][T26692] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7264'. [ 951.318310][T26695] tap0: tun_chr_ioctl cmd 1074025677 [ 951.358937][T26695] tap0: linktype set to 270 [ 951.499068][T26707] IPv6: NLM_F_CREATE should be specified when creating new route [ 951.506914][T26707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 951.514239][T26707] IPv6: NLM_F_CREATE should be set when creating new route [ 951.521543][T26707] IPv6: NLM_F_CREATE should be set when creating new route [ 951.528813][T26707] IPv6: NLM_F_CREATE should be set when creating new route [ 951.618011][T26699] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7265'. [ 951.645672][T26707] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7269'. [ 952.308934][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7278'. [ 952.452136][T26740] netlink: 'syz.1.7280': attribute type 10 has an invalid length. [ 952.472565][T26740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7280'. [ 952.675973][T26754] FAULT_INJECTION: forcing a failure. [ 952.675973][T26754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.718902][T26754] CPU: 1 PID: 26754 Comm: syz.6.7285 Not tainted syzkaller #0 [ 952.726463][T26754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 952.736557][T26754] Call Trace: [ 952.739872][T26754] [ 952.742834][T26754] dump_stack_lvl+0x188/0x250 [ 952.747555][T26754] ? show_regs_print_info+0x20/0x20 [ 952.752788][T26754] ? load_image+0x410/0x410 [ 952.757318][T26754] ? __lock_acquire+0x7b50/0x7b50 [ 952.762362][T26754] should_fail+0x383/0x4b0 [ 952.766801][T26754] _copy_to_user+0x2e/0x130 [ 952.771330][T26754] simple_read_from_buffer+0xe3/0x150 [ 952.776726][T26754] proc_fail_nth_read+0x1a6/0x220 [ 952.781792][T26754] ? proc_fault_inject_write+0x310/0x310 [ 952.787444][T26754] ? fsnotify_perm+0x254/0x560 [ 952.792232][T26754] ? proc_fault_inject_write+0x310/0x310 [ 952.797885][T26754] vfs_read+0x2ff/0xd50 [ 952.802061][T26754] ? __lock_acquire+0x7b50/0x7b50 [ 952.807105][T26754] ? kernel_read+0x1e0/0x1e0 [ 952.811720][T26754] ? mutex_lock_nested+0x17/0x20 [ 952.816674][T26754] ? __fdget_pos+0x2bf/0x370 [ 952.821272][T26754] ? ksys_read+0x70/0x260 [ 952.825617][T26754] ksys_read+0x153/0x260 [ 952.829896][T26754] ? vfs_write+0xd70/0xd70 [ 952.834334][T26754] ? lockdep_hardirqs_on+0x94/0x140 [ 952.839546][T26754] do_syscall_64+0x4c/0xa0 [ 952.843984][T26754] ? clear_bhb_loop+0x30/0x80 [ 952.848674][T26754] ? clear_bhb_loop+0x30/0x80 [ 952.853376][T26754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 952.859278][T26754] RIP: 0033:0x7f8cb4fde68e [ 952.863705][T26754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 952.883346][T26754] RSP: 002b:00007f8cb3275fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.891794][T26754] RAX: ffffffffffffffda RBX: 00007f8cb32766c0 RCX: 00007f8cb4fde68e [ 952.899796][T26754] RDX: 000000000000000f RSI: 00007f8cb32760a0 RDI: 0000000000000008 [ 952.907798][T26754] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 952.915782][T26754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.923769][T26754] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 952.931772][T26754] [ 953.072511][T26764] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.7289'. [ 953.230225][T26774] FAULT_INJECTION: forcing a failure. [ 953.230225][T26774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.286629][T26774] CPU: 0 PID: 26774 Comm: syz.4.7292 Not tainted syzkaller #0 [ 953.294180][T26774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.304276][T26774] Call Trace: [ 953.307590][T26774] [ 953.310559][T26774] dump_stack_lvl+0x188/0x250 [ 953.315373][T26774] ? show_regs_print_info+0x20/0x20 [ 953.320629][T26774] ? load_image+0x410/0x410 [ 953.325220][T26774] ? __lock_acquire+0x7b50/0x7b50 [ 953.330308][T26774] should_fail+0x383/0x4b0 [ 953.334770][T26774] _copy_from_user+0x2e/0x170 [ 953.339484][T26774] sctp_setsockopt+0x191/0xf80 [ 953.344286][T26774] ? sock_common_recvmsg+0x1c0/0x1c0 [ 953.349607][T26774] __sys_setsockopt+0x2bf/0x3d0 [ 953.354490][T26774] __x64_sys_setsockopt+0xb1/0xc0 [ 953.359567][T26774] do_syscall_64+0x4c/0xa0 [ 953.364008][T26774] ? clear_bhb_loop+0x30/0x80 [ 953.368708][T26774] ? clear_bhb_loop+0x30/0x80 [ 953.373497][T26774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 953.379417][T26774] RIP: 0033:0x7f8ed3366e59 [ 953.383859][T26774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.403487][T26774] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 953.411921][T26774] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 953.419914][T26774] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 953.427901][T26774] RBP: 00007f8ed15bf090 R08: 000000000000001c R09: 0000000000000000 [ 953.435895][T26774] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.443890][T26774] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 953.451920][T26774] [ 953.608187][T26783] netlink: 'syz.1.7294': attribute type 39 has an invalid length. [ 953.712883][T26783] device hsr_slave_0 left promiscuous mode [ 953.932463][T26792] netlink: 'syz.4.7299': attribute type 10 has an invalid length. [ 954.048812][T26792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7299'. [ 954.467485][T26817] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7308'. [ 954.528306][T26817] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 954.586329][T26826] netlink: 'syz.3.7311': attribute type 39 has an invalid length. [ 954.657766][T26826] device hsr_slave_0 left promiscuous mode [ 954.670449][T26825] netlink: 'syz.5.7310': attribute type 21 has an invalid length. [ 954.685758][T26825] netlink: 'syz.5.7310': attribute type 7 has an invalid length. [ 955.566315][T26852] netlink: 'syz.3.7320': attribute type 10 has an invalid length. [ 955.660201][T26852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7320'. [ 956.592110][T26882] FAULT_INJECTION: forcing a failure. [ 956.592110][T26882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.680414][T26882] CPU: 0 PID: 26882 Comm: syz.4.7331 Not tainted syzkaller #0 [ 956.687963][T26882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.698067][T26882] Call Trace: [ 956.701389][T26882] [ 956.704369][T26882] dump_stack_lvl+0x188/0x250 [ 956.709115][T26882] ? show_regs_print_info+0x20/0x20 [ 956.714360][T26882] ? load_image+0x410/0x410 [ 956.718915][T26882] ? __lock_acquire+0x7b50/0x7b50 [ 956.724015][T26882] should_fail+0x383/0x4b0 [ 956.728518][T26882] _copy_from_user+0x2e/0x170 [ 956.733256][T26882] __copy_msghdr_from_user+0xc9/0x630 [ 956.738670][T26882] ? verify_lock_unused+0x140/0x140 [ 956.743927][T26882] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 956.749305][T26882] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 956.755281][T26882] ___sys_sendmsg+0x19a/0x2e0 [ 956.760019][T26882] ? __sys_sendmsg+0x290/0x290 [ 956.764928][T26882] __se_sys_sendmsg+0x1b7/0x2a0 [ 956.769835][T26882] ? __x64_sys_sendmsg+0x80/0x80 [ 956.774808][T26882] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 956.780862][T26882] ? lockdep_hardirqs_on+0x94/0x140 [ 956.786096][T26882] do_syscall_64+0x4c/0xa0 [ 956.790545][T26882] ? clear_bhb_loop+0x30/0x80 [ 956.795260][T26882] ? clear_bhb_loop+0x30/0x80 [ 956.799997][T26882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 956.805925][T26882] RIP: 0033:0x7f8ed3366e59 [ 956.810375][T26882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.830040][T26882] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.838509][T26882] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 956.846526][T26882] RDX: 0000000020004004 RSI: 0000200000000080 RDI: 0000000000000006 [ 956.854544][T26882] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 956.862558][T26882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.870566][T26882] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 956.878642][T26882] [ 957.502693][T26899] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.7336'. [ 957.626869][T26909] netlink: 'syz.3.7340': attribute type 25 has an invalid length. [ 957.650219][T26909] netlink: 'syz.3.7340': attribute type 9 has an invalid length. [ 958.387299][T26912] netlink: 'syz.3.7340': attribute type 25 has an invalid length. [ 958.408189][T26912] netlink: 'syz.3.7340': attribute type 9 has an invalid length. [ 958.514811][T26927] veth0_to_hsr: mtu greater than device maximum [ 958.622381][T26927] netlink: 'syz.6.7354': attribute type 21 has an invalid length. [ 958.655260][T26927] netlink: 14478 bytes leftover after parsing attributes in process `syz.6.7354'. [ 959.140848][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 959.784789][T26952] netlink: 'syz.6.7350': attribute type 10 has an invalid length. [ 959.828098][T26952] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7350'. [ 959.910453][T26964] netlink: 'syz.1.7358': attribute type 1 has an invalid length. [ 959.937278][T26964] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7358'. [ 960.125733][T26967] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7357'. [ 960.163122][T26960] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7367'. [ 960.725488][T26994] delete_channel: no stack [ 960.808668][T26994] delete_channel: no stack [ 961.121090][T27002] netlink: 'syz.3.7370': attribute type 10 has an invalid length. [ 961.158818][T27002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7370'. [ 961.229745][T27009] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7374'. [ 961.264207][T27009] netlink: 'syz.6.7374': attribute type 10 has an invalid length. [ 961.273282][T27009] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7374'. [ 961.719096][T27022] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7377'. [ 962.517381][T27047] netlink: 'syz.6.7386': attribute type 10 has an invalid length. [ 962.558130][T27047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7386'. [ 963.933963][T27092] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.7398'. [ 964.104019][T27094] netlink: 'syz.6.7400': attribute type 10 has an invalid length. [ 964.124111][T27094] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7400'. [ 964.179533][T27097] netlink: 'syz.3.7399': attribute type 10 has an invalid length. [ 964.229211][T27097] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7399'. [ 964.237863][T27102] netlink: 'syz.4.7398': attribute type 29 has an invalid length. [ 964.301286][T27100] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.7401'. [ 964.398275][T27102] netlink: 'syz.4.7398': attribute type 29 has an invalid length. [ 964.705684][T27115] device wlan1 entered promiscuous mode [ 964.751056][T27111] delete_channel: no stack [ 964.772746][T27111] delete_channel: no stack [ 964.814282][T27115] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.7405'. [ 965.406653][T27136] netlink: 'syz.6.7413': attribute type 10 has an invalid length. [ 965.480059][T27136] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7413'. [ 965.517968][T27131] netlink: 'syz.5.7412': attribute type 10 has an invalid length. [ 965.553409][T27131] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7412'. [ 965.979474][T27146] FAULT_INJECTION: forcing a failure. [ 965.979474][T27146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.096101][T27146] CPU: 1 PID: 27146 Comm: syz.1.7417 Not tainted syzkaller #0 [ 966.103644][T27146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 966.113737][T27146] Call Trace: [ 966.117044][T27146] [ 966.120040][T27146] dump_stack_lvl+0x188/0x250 [ 966.124760][T27146] ? show_regs_print_info+0x20/0x20 [ 966.130021][T27146] ? load_image+0x410/0x410 [ 966.134599][T27146] ? __lock_acquire+0x7b50/0x7b50 [ 966.139674][T27146] should_fail+0x383/0x4b0 [ 966.144135][T27146] _copy_from_user+0x2e/0x170 [ 966.148855][T27146] __copy_msghdr_from_user+0xc9/0x630 [ 966.154259][T27146] ? verify_lock_unused+0x140/0x140 [ 966.159503][T27146] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 966.164837][T27146] ___sys_sendmsg+0x19a/0x2e0 [ 966.169564][T27146] ? __sys_sendmsg+0x290/0x290 [ 966.174462][T27146] ? trace_event_raw_event_lock+0x250/0x250 [ 966.180416][T27146] __se_sys_sendmsg+0x1b7/0x2a0 [ 966.185293][T27146] ? __x64_sys_sendmsg+0x80/0x80 [ 966.190245][T27146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 966.196285][T27146] ? lockdep_hardirqs_on+0x94/0x140 [ 966.201506][T27146] do_syscall_64+0x4c/0xa0 [ 966.205941][T27146] ? clear_bhb_loop+0x30/0x80 [ 966.210641][T27146] ? clear_bhb_loop+0x30/0x80 [ 966.215331][T27146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 966.221234][T27146] RIP: 0033:0x7f6671ebbe59 [ 966.225663][T27146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.245293][T27146] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.253733][T27146] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 966.261730][T27146] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 966.269727][T27146] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 966.277714][T27146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.285712][T27146] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 966.293714][T27146] [ 969.523546][T27160] netlink: 'syz.6.7420': attribute type 3 has an invalid length. [ 969.586799][T27170] netlink: 'syz.1.7424': attribute type 10 has an invalid length. [ 969.601621][T27160] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7420'. [ 969.674477][T27170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7424'. [ 969.812303][T27174] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.7425'. [ 969.900479][T27177] FAULT_INJECTION: forcing a failure. [ 969.900479][T27177] name failslab, interval 1, probability 0, space 0, times 0 [ 969.948260][T27177] CPU: 0 PID: 27177 Comm: syz.4.7426 Not tainted syzkaller #0 [ 969.955841][T27177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.965945][T27177] Call Trace: [ 969.969275][T27177] [ 969.972253][T27177] dump_stack_lvl+0x188/0x250 [ 969.977001][T27177] ? show_regs_print_info+0x20/0x20 [ 969.982263][T27177] ? load_image+0x410/0x410 [ 969.986835][T27177] ? __might_sleep+0xf0/0xf0 [ 969.991491][T27177] ? __lock_acquire+0x7b50/0x7b50 [ 969.996561][T27177] ? __local_bh_enable_ip+0x136/0x1c0 [ 970.002086][T27177] should_fail+0x383/0x4b0 [ 970.006584][T27177] should_failslab+0x5/0x20 [ 970.011139][T27177] slab_pre_alloc_hook+0x51/0xc0 [ 970.016134][T27177] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 970.021900][T27177] ? __get_vm_area_node+0x119/0x2d0 [ 970.027203][T27177] __get_vm_area_node+0x119/0x2d0 [ 970.032304][T27177] __vmalloc_node_range+0xef/0x8b0 [ 970.037470][T27177] ? netlink_sendmsg+0x5ec/0xbe0 [ 970.042455][T27177] ? netlink_data_ready+0x10/0x10 [ 970.047558][T27177] ? netlink_sendmsg+0x5ec/0xbe0 [ 970.052687][T27177] vmalloc+0x75/0x80 [ 970.056645][T27177] ? netlink_sendmsg+0x5ec/0xbe0 [ 970.061646][T27177] netlink_sendmsg+0x5ec/0xbe0 [ 970.066498][T27177] ? netlink_getsockopt+0x570/0x570 [ 970.071765][T27177] ? aa_sock_msg_perm+0x94/0x150 [ 970.076782][T27177] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 970.082132][T27177] ? security_socket_sendmsg+0x7c/0xa0 [ 970.087648][T27177] ? netlink_getsockopt+0x570/0x570 [ 970.092925][T27177] ____sys_sendmsg+0x5be/0x8f0 [ 970.097778][T27177] ? __sys_sendmsg_sock+0x30/0x30 [ 970.102897][T27177] ? import_iovec+0x6f/0xa0 [ 970.107475][T27177] ___sys_sendmsg+0x236/0x2e0 [ 970.112237][T27177] ? __sys_sendmsg+0x290/0x290 [ 970.117182][T27177] __se_sys_sendmsg+0x1b7/0x2a0 [ 970.122188][T27177] ? __x64_sys_sendmsg+0x80/0x80 [ 970.127178][T27177] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 970.133254][T27177] ? lockdep_hardirqs_on+0x94/0x140 [ 970.138518][T27177] do_syscall_64+0x4c/0xa0 [ 970.142978][T27177] ? clear_bhb_loop+0x30/0x80 [ 970.147708][T27177] ? clear_bhb_loop+0x30/0x80 [ 970.152444][T27177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.158507][T27177] RIP: 0033:0x7f8ed3366e59 [ 970.163085][T27177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.182765][T27177] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.191275][T27177] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 970.199298][T27177] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 970.207325][T27177] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 970.215350][T27177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.223371][T27177] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 970.231442][T27177] [ 970.522243][T27177] syz.4.7426: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 970.759049][T27177] CPU: 1 PID: 27177 Comm: syz.4.7426 Not tainted syzkaller #0 [ 970.766676][T27177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 970.776777][T27177] Call Trace: [ 970.780099][T27177] [ 970.783064][T27177] dump_stack_lvl+0x188/0x250 [ 970.787784][T27177] ? rcu_lock_release+0x5/0x20 [ 970.792618][T27177] ? show_regs_print_info+0x20/0x20 [ 970.797858][T27177] ? load_image+0x410/0x410 [ 970.802414][T27177] warn_alloc+0x245/0x320 [ 970.806786][T27177] ? zone_watermark_ok_safe+0x250/0x250 [ 970.812476][T27177] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 970.818524][T27177] ? __get_vm_area_node+0x119/0x2d0 [ 970.823776][T27177] __vmalloc_node_range+0x2b1/0x8b0 [ 970.829003][T27177] ? netlink_data_ready+0x10/0x10 [ 970.834069][T27177] ? netlink_sendmsg+0x5ec/0xbe0 [ 970.839027][T27177] vmalloc+0x75/0x80 [ 970.842942][T27177] ? netlink_sendmsg+0x5ec/0xbe0 [ 970.847895][T27177] netlink_sendmsg+0x5ec/0xbe0 [ 970.852683][T27177] ? netlink_getsockopt+0x570/0x570 [ 970.857899][T27177] ? aa_sock_msg_perm+0x94/0x150 [ 970.862864][T27177] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 970.868183][T27177] ? security_socket_sendmsg+0x7c/0xa0 [ 970.873663][T27177] ? netlink_getsockopt+0x570/0x570 [ 970.878882][T27177] ____sys_sendmsg+0x5be/0x8f0 [ 970.883674][T27177] ? __sys_sendmsg_sock+0x30/0x30 [ 970.888725][T27177] ? import_iovec+0x6f/0xa0 [ 970.893250][T27177] ___sys_sendmsg+0x236/0x2e0 [ 970.897955][T27177] ? __sys_sendmsg+0x290/0x290 [ 970.902766][T27177] __se_sys_sendmsg+0x1b7/0x2a0 [ 970.907733][T27177] ? __x64_sys_sendmsg+0x80/0x80 [ 970.912686][T27177] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 970.918700][T27177] ? lockdep_hardirqs_on+0x94/0x140 [ 970.923928][T27177] do_syscall_64+0x4c/0xa0 [ 970.928361][T27177] ? clear_bhb_loop+0x30/0x80 [ 970.933061][T27177] ? clear_bhb_loop+0x30/0x80 [ 970.937775][T27177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.943690][T27177] RIP: 0033:0x7f8ed3366e59 [ 970.948224][T27177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.967851][T27177] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.976292][T27177] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 970.984279][T27177] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 970.992272][T27177] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 971.000253][T27177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.008235][T27177] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 971.016238][T27177] [ 971.105852][T27177] Mem-Info: [ 971.112237][T27177] active_anon:292 inactive_anon:10281 isolated_anon:0 [ 971.112237][T27177] active_file:26386 inactive_file:35945 isolated_file:0 [ 971.112237][T27177] unevictable:768 dirty:158 writeback:0 [ 971.112237][T27177] slab_reclaimable:21159 slab_unreclaimable:98169 [ 971.112237][T27177] mapped:30419 shmem:1655 pagetables:778 bounce:0 [ 971.112237][T27177] kernel_misc_reclaimable:0 [ 971.112237][T27177] free:1359312 free_pcp:10593 free_cma:0 [ 971.180911][T27195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7432'. [ 971.415995][T27177] Node 0 active_anon:1136kB inactive_anon:40712kB active_file:105312kB inactive_file:143764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121628kB dirty:632kB writeback:0kB shmem:4540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11548kB pagetables:3212kB all_unreclaimable? no [ 971.487002][T27177] Node 1 active_anon:32kB inactive_anon:512kB active_file:232kB inactive_file:16kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 971.517043][T27177] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.547335][T27177] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 971.553532][T27177] Node 0 DMA32 free:1492112kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1136kB inactive_anon:40812kB active_file:105312kB inactive_file:143764kB unevictable:1536kB writepending:632kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:40656kB local_pcp:19708kB free_cma:0kB [ 971.587587][T27177] lowmem_reserve[]: 0 0 0 0 0 [ 971.593865][T27177] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 971.668552][T27177] lowmem_reserve[]: 0 0 0 0 0 [ 971.673375][T27177] Node 1 Normal free:3930008kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:232kB inactive_file:16kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 971.744035][T27177] lowmem_reserve[]: 0 0 0 0 0 [ 971.752030][T27177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 971.782784][T27177] Node 0 DMA32: 3663*4kB (UME) 1610*8kB (UME) 476*16kB (UME) 1197*32kB (UME) 709*64kB (UME) 934*128kB (UME) 302*256kB (UME) 110*512kB (UM) 29*1024kB (UME) 18*2048kB (UME) 257*4096kB (UM) = 1491244kB [ 971.833601][T27177] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 971.883623][T27177] Node 1 Normal: 184*4kB (UME) 51*8kB (UE) 34*16kB (UE) 178*32kB (UME) 83*64kB (UME) 28*128kB (UE) 12*256kB (UM) 8*512kB (UE) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3930008kB [ 971.924700][T27177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 971.957640][T27177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.017895][T27177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.035941][T27177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.079552][T27177] 63986 total pagecache pages [ 972.118805][T27177] 0 pages in swap cache [ 972.123036][T27177] Swap cache stats: add 0, delete 0, find 0/0 [ 972.164713][T27177] Free swap = 124996kB [ 972.174962][T27217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.183840][T27177] Total swap = 124996kB [ 972.189027][T27217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.196370][T27177] 2097051 pages RAM [ 972.202046][T27177] 0 pages HighMem/MovableOnly [ 972.210127][T27217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.218944][T27217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.226273][T27177] 411497 pages reserved [ 972.232258][T27177] 0 pages cma reserved [ 972.244037][T27217] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 972.302612][T27217] batman_adv: batadv0: Removing interface: virt_wifi0 [ 972.383765][T27223] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.7441'. [ 972.764758][T27238] FAULT_INJECTION: forcing a failure. [ 972.764758][T27238] name failslab, interval 1, probability 0, space 0, times 0 [ 972.846550][T27238] CPU: 1 PID: 27238 Comm: syz.1.7448 Not tainted syzkaller #0 [ 972.854099][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 972.864203][T27238] Call Trace: [ 972.867519][T27238] [ 972.870480][T27238] dump_stack_lvl+0x188/0x250 [ 972.875210][T27238] ? show_regs_print_info+0x20/0x20 [ 972.880448][T27238] ? load_image+0x410/0x410 [ 972.885020][T27238] should_fail+0x383/0x4b0 [ 972.889482][T27238] should_failslab+0x5/0x20 [ 972.894020][T27238] slab_pre_alloc_hook+0x51/0xc0 [ 972.899094][T27238] ? __build_skb+0x26/0x2e0 [ 972.903641][T27238] kmem_cache_alloc+0x3d/0x280 [ 972.908451][T27238] __build_skb+0x26/0x2e0 [ 972.912828][T27238] build_skb+0x1e/0x160 [ 972.917034][T27238] bpf_prog_test_run_skb+0x25c/0x1190 [ 972.922469][T27238] ? __fget_files+0x402/0x470 [ 972.927195][T27238] ? cpu_online+0x60/0x60 [ 972.931650][T27238] bpf_prog_test_run+0x31c/0x390 [ 972.936739][T27238] __sys_bpf+0x5a5/0x6f0 [ 972.941042][T27238] ? bpf_link_show_fdinfo+0x380/0x380 [ 972.946450][T27238] ? rcu_nmi_exit+0x6f/0xf0 [ 972.951011][T27238] __x64_sys_bpf+0x78/0x90 [ 972.955468][T27238] do_syscall_64+0x4c/0xa0 [ 972.959919][T27238] ? clear_bhb_loop+0x30/0x80 [ 972.964629][T27238] ? clear_bhb_loop+0x30/0x80 [ 972.969345][T27238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 972.975270][T27238] RIP: 0033:0x7f6671ebbe59 [ 972.979723][T27238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.999399][T27238] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.007866][T27238] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 973.015882][T27238] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 973.023896][T27238] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 973.031951][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.039959][T27238] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 973.047996][T27238] [ 973.750093][T27252] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.7453'. [ 974.984802][T27283] netlink: 'syz.1.7464': attribute type 10 has an invalid length. [ 975.022707][T27283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7464'. [ 975.216658][T27287] netlink: 'syz.3.7465': attribute type 10 has an invalid length. [ 975.250547][T27287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7465'. [ 975.275318][T27287] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 975.731307][T27317] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7476'. [ 975.774740][T27319] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7477'. [ 976.043775][T27325] netlink: 'syz.6.7480': attribute type 10 has an invalid length. [ 976.080535][T27325] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7480'. [ 976.796279][T27344] netlink: 'syz.1.7487': attribute type 29 has an invalid length. [ 976.869122][T27339] netlink: 'syz.4.7486': attribute type 10 has an invalid length. [ 976.877016][T27339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7486'. [ 976.932420][T27344] netlink: 'syz.1.7487': attribute type 29 has an invalid length. [ 976.978760][T27346] netlink: 'syz.1.7487': attribute type 29 has an invalid length. [ 977.003843][T27347] netlink: 'syz.1.7487': attribute type 29 has an invalid length. [ 977.380856][T27362] netlink: 'syz.6.7493': attribute type 10 has an invalid length. [ 977.437977][T27362] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7493'. [ 977.610535][T27370] netlink: 'syz.5.7496': attribute type 1 has an invalid length. [ 977.625080][T27370] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7496'. [ 978.666568][T27391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7500'. [ 978.791800][T27397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 978.854265][T27397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 979.720938][T27422] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7513'. [ 979.762594][T25511] syzkaller0: tun_net_xmit 76 [ 979.768223][T25511] syzkaller0: tun_net_xmit 48 [ 979.788737][T17192] syzkaller0: tun_net_xmit 76 [ 979.817805][T27413] syzkaller0: delete flow: hash 1150975632 index 1 [ 979.979834][T27435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.027031][T27435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.047089][T27438] validate_nla: 1 callbacks suppressed [ 980.047107][T27438] netlink: 'syz.5.7520': attribute type 29 has an invalid length. [ 980.106745][T27438] netlink: 'syz.5.7520': attribute type 29 has an invalid length. [ 980.124232][T27442] netlink: 'syz.5.7520': attribute type 29 has an invalid length. [ 980.164360][T27438] netlink: 'syz.5.7520': attribute type 29 has an invalid length. [ 980.651114][T27465] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7530'. [ 980.671463][T27467] syz.1.7532[27467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.671629][T27467] syz.1.7532[27467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.706533][T27467] syz.1.7532[27467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.778688][T27467] syz.1.7532[27467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 981.426764][T27486] device syzkaller0 entered promiscuous mode [ 981.570845][T27494] netlink: 'syz.4.7541': attribute type 21 has an invalid length. [ 981.622335][T27494] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7541'. [ 981.663337][T27494] netlink: 'syz.4.7541': attribute type 3 has an invalid length. [ 981.738910][T27494] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7541'. [ 982.316648][ T8690] tipc: Subscription rejected, illegal request [ 982.412551][T27511] netlink: 156684 bytes leftover after parsing attributes in process `syz.4.7547'. [ 982.482856][T27511] netlink: zone id is out of range [ 982.488295][T27511] netlink: zone id is out of range [ 982.513835][T27511] netlink: zone id is out of range [ 982.525284][T27511] netlink: zone id is out of range [ 982.533257][T27511] netlink: zone id is out of range [ 982.563146][T27511] netlink: zone id is out of range [ 982.602143][T27511] netlink: zone id is out of range [ 982.607490][T27511] netlink: zone id is out of range [ 982.651381][T27511] netlink: zone id is out of range [ 982.656750][T27511] netlink: zone id is out of range [ 983.010790][T27541] FAULT_INJECTION: forcing a failure. [ 983.010790][T27541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.099257][T27541] CPU: 0 PID: 27541 Comm: syz.1.7558 Not tainted syzkaller #0 [ 983.106798][T27541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 983.116893][T27541] Call Trace: [ 983.120214][T27541] [ 983.123179][T27541] dump_stack_lvl+0x188/0x250 [ 983.128425][T27541] ? show_regs_print_info+0x20/0x20 [ 983.133704][T27541] ? load_image+0x410/0x410 [ 983.138238][T27541] ? __lock_acquire+0x7b50/0x7b50 [ 983.143320][T27541] should_fail+0x383/0x4b0 [ 983.147759][T27541] _copy_from_user+0x2e/0x170 [ 983.152463][T27541] bpf_test_init+0x136/0x1b0 [ 983.157071][T27541] bpf_prog_test_run_xdp+0x1ca/0x900 [ 983.162381][T27541] ? dev_put+0x70/0x70 [ 983.166482][T27541] ? dev_put+0x70/0x70 [ 983.170566][T27541] bpf_prog_test_run+0x31c/0x390 [ 983.175621][T27541] __sys_bpf+0x5a5/0x6f0 [ 983.179884][T27541] ? bpf_link_show_fdinfo+0x380/0x380 [ 983.185290][T27541] __x64_sys_bpf+0x78/0x90 [ 983.189753][T27541] do_syscall_64+0x4c/0xa0 [ 983.194187][T27541] ? clear_bhb_loop+0x30/0x80 [ 983.198882][T27541] ? clear_bhb_loop+0x30/0x80 [ 983.203571][T27541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 983.209482][T27541] RIP: 0033:0x7f6671ebbe59 [ 983.213917][T27541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.233539][T27541] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.241980][T27541] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 983.249963][T27541] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 983.257956][T27541] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 983.265971][T27541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.273955][T27541] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 983.281960][T27541] [ 984.491608][T27591] TCP: TCP_TX_DELAY enabled [ 984.507787][T27594] netlink: 'syz.1.7578': attribute type 40 has an invalid length. [ 984.635233][T27594] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.7578'. [ 984.687401][T27591] netlink: 'syz.5.7577': attribute type 25 has an invalid length. [ 984.748070][T27597] netlink: 65031 bytes leftover after parsing attributes in process `syz.1.7578'. [ 984.833857][T27600] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.7579'. [ 985.031129][T27609] netlink: 'syz.5.7580': attribute type 21 has an invalid length. [ 985.646677][T27620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7585'. [ 985.816440][T27630] netlink: 'syz.3.7589': attribute type 10 has an invalid length. [ 985.891641][T27630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7589'. [ 986.823553][T27659] netlink: 279 bytes leftover after parsing attributes in process `syz.4.7598'. [ 987.197849][T27668] FAULT_INJECTION: forcing a failure. [ 987.197849][T27668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.249772][T27668] CPU: 0 PID: 27668 Comm: syz.3.7601 Not tainted syzkaller #0 [ 987.257410][T27668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 987.267497][T27668] Call Trace: [ 987.270802][T27668] [ 987.273758][T27668] dump_stack_lvl+0x188/0x250 [ 987.278470][T27668] ? show_regs_print_info+0x20/0x20 [ 987.283710][T27668] ? load_image+0x410/0x410 [ 987.288252][T27668] ? __lock_acquire+0x7b50/0x7b50 [ 987.293316][T27668] should_fail+0x383/0x4b0 [ 987.297769][T27668] _copy_to_user+0x2e/0x130 [ 987.302309][T27668] simple_read_from_buffer+0xe3/0x150 [ 987.307803][T27668] proc_fail_nth_read+0x1a6/0x220 [ 987.312861][T27668] ? proc_fault_inject_write+0x310/0x310 [ 987.318533][T27668] ? fsnotify_perm+0x254/0x560 [ 987.323329][T27668] ? proc_fault_inject_write+0x310/0x310 [ 987.329002][T27668] vfs_read+0x2ff/0xd50 [ 987.333190][T27668] ? __lock_acquire+0x7b50/0x7b50 [ 987.338251][T27668] ? kernel_read+0x1e0/0x1e0 [ 987.342888][T27668] ? mutex_lock_nested+0x17/0x20 [ 987.347858][T27668] ? __fdget_pos+0x2bf/0x370 [ 987.352472][T27668] ? ksys_read+0x70/0x260 [ 987.356833][T27668] ksys_read+0x153/0x260 [ 987.361109][T27668] ? vfs_write+0xd70/0xd70 [ 987.365559][T27668] ? lockdep_hardirqs_on+0x94/0x140 [ 987.370791][T27668] do_syscall_64+0x4c/0xa0 [ 987.375237][T27668] ? clear_bhb_loop+0x30/0x80 [ 987.379952][T27668] ? clear_bhb_loop+0x30/0x80 [ 987.384667][T27668] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 987.390605][T27668] RIP: 0033:0x7f4a8c7fd68e [ 987.395056][T27668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 987.414784][T27668] RSP: 002b:00007f4a8aa94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.423245][T27668] RAX: ffffffffffffffda RBX: 00007f4a8aa956c0 RCX: 00007f4a8c7fd68e [ 987.431256][T27668] RDX: 000000000000000f RSI: 00007f4a8aa950a0 RDI: 0000000000000007 [ 987.439268][T27668] RBP: 00007f4a8aa95090 R08: 0000000000000000 R09: 0000000000000000 [ 987.447303][T27668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.455305][T27668] R13: 00007f4a8cac5038 R14: 00007f4a8cac4fa0 R15: 00007fff5bb55f98 [ 987.463329][T27668] [ 988.529610][T27687] netlink: 'syz.3.7608': attribute type 11 has an invalid length. [ 988.537860][T27687] netlink: 'syz.3.7608': attribute type 5 has an invalid length. [ 988.592513][T27691] netlink: 204732 bytes leftover after parsing attributes in process `syz.5.7610'. [ 989.292199][T27713] netlink: 'syz.6.7616': attribute type 40 has an invalid length. [ 991.914402][T27713] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.001749][T27717] netlink: 279 bytes leftover after parsing attributes in process `syz.5.7617'. [ 992.077715][T27723] netlink: 14552 bytes leftover after parsing attributes in process `syz.6.7616'. [ 992.770500][T27754] netlink: 279 bytes leftover after parsing attributes in process `syz.3.7630'. [ 992.900993][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.907384][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.565264][T27798] netlink: 'syz.6.7644': attribute type 40 has an invalid length. [ 994.637432][T27796] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7645'. [ 995.072353][T27812] device syzkaller0 entered promiscuous mode [ 996.779263][T27856] netlink: 'syz.3.7664': attribute type 11 has an invalid length. [ 996.818853][T27856] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1001.099033][T27912] netlink: 'syz.6.7681': attribute type 11 has an invalid length. [ 1001.106998][T27912] netlink: 140 bytes leftover after parsing attributes in process `syz.6.7681'. [ 1001.457749][T27928] netlink: 'syz.3.7685': attribute type 10 has an invalid length. [ 1001.478171][T27928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7685'. [ 1001.501496][T27928] net_ratelimit: 11 callbacks suppressed [ 1001.501515][T27928] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1002.715084][T27968] netlink: 'syz.3.7704': attribute type 25 has an invalid length. [ 1002.732489][T27968] netlink: 'syz.3.7704': attribute type 6 has an invalid length. [ 1002.910456][T27971] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1003.037677][T27979] FAULT_INJECTION: forcing a failure. [ 1003.037677][T27979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.057383][T27979] CPU: 0 PID: 27979 Comm: syz.6.7706 Not tainted syzkaller #0 [ 1003.064911][T27979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1003.075004][T27979] Call Trace: [ 1003.078306][T27979] [ 1003.081264][T27979] dump_stack_lvl+0x188/0x250 [ 1003.085986][T27979] ? show_regs_print_info+0x20/0x20 [ 1003.091221][T27979] ? load_image+0x410/0x410 [ 1003.095763][T27979] ? __lock_acquire+0x7b50/0x7b50 [ 1003.100840][T27979] should_fail+0x383/0x4b0 [ 1003.105291][T27979] _copy_from_user+0x2e/0x170 [ 1003.110005][T27979] bpf_test_init+0x136/0x1b0 [ 1003.114624][T27979] bpf_prog_test_run_xdp+0x1ca/0x900 [ 1003.119942][T27979] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.126145][T27979] ? dev_put+0x70/0x70 [ 1003.130259][T27979] ? dev_put+0x70/0x70 [ 1003.134352][T27979] bpf_prog_test_run+0x31c/0x390 [ 1003.139324][T27979] __sys_bpf+0x5a5/0x6f0 [ 1003.143605][T27979] ? bpf_link_show_fdinfo+0x380/0x380 [ 1003.149023][T27979] __x64_sys_bpf+0x78/0x90 [ 1003.153481][T27979] do_syscall_64+0x4c/0xa0 [ 1003.157921][T27979] ? clear_bhb_loop+0x30/0x80 [ 1003.162627][T27979] ? clear_bhb_loop+0x30/0x80 [ 1003.167339][T27979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.173264][T27979] RIP: 0033:0x7f8cb501de59 [ 1003.177704][T27979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.197427][T27979] RSP: 002b:00007f8cb3276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.205880][T27979] RAX: ffffffffffffffda RBX: 00007f8cb52a5fa0 RCX: 00007f8cb501de59 [ 1003.213883][T27979] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1003.221882][T27979] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.229887][T27979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.237887][T27979] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 1003.245908][T27979] [ 1003.441504][T27985] netlink: 'syz.1.7707': attribute type 10 has an invalid length. [ 1003.460535][T27985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1004.096663][T28013] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7718'. [ 1004.418000][T28023] netlink: 'syz.3.7721': attribute type 25 has an invalid length. [ 1004.427807][T28023] netlink: 'syz.3.7721': attribute type 6 has an invalid length. [ 1004.540839][T28029] netlink: 'syz.1.7724': attribute type 40 has an invalid length. [ 1004.577491][T28027] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1005.871391][T28059] netlink: 140 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1005.886275][T28059] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7737'. [ 1005.967293][T28059] bond0: (slave bond_slave_0): Releasing backup interface [ 1006.050895][T28059] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.901630][T28086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7745'. [ 1008.133580][T28114] macvtap0: refused to change device tx_queue_len [ 1008.209871][T28111] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1009.783541][T28163] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7766'. [ 1011.352533][T28195] netlink: 'syz.3.7777': attribute type 40 has an invalid length. [ 1011.390775][T28195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.385703][T28231] netlink: 'syz.3.7792': attribute type 40 has an invalid length. [ 1012.985027][T28247] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.7798'. [ 1013.156788][T28245] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 1013.200367][T28245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1013.696669][T28262] mac80211_hwsim hwsim62 »»»»»»: renamed from wlan0 [ 1014.143860][T28275] FAULT_INJECTION: forcing a failure. [ 1014.143860][T28275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.157942][T28275] CPU: 0 PID: 28275 Comm: syz.6.7819 Not tainted syzkaller #0 [ 1014.165469][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.175570][T28275] Call Trace: [ 1014.178903][T28275] [ 1014.181870][T28275] dump_stack_lvl+0x188/0x250 [ 1014.186601][T28275] ? show_regs_print_info+0x20/0x20 [ 1014.191858][T28275] ? load_image+0x410/0x410 [ 1014.196529][T28275] ? __lock_acquire+0x7b50/0x7b50 [ 1014.201628][T28275] should_fail+0x383/0x4b0 [ 1014.206108][T28275] _copy_from_iter+0x234/0x1160 [ 1014.211026][T28275] ? __lock_acquire+0x7b50/0x7b50 [ 1014.216127][T28275] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1014.221556][T28275] ? __virt_addr_valid+0x3c6/0x470 [ 1014.226714][T28275] ? __phys_addr_symbol+0x2b/0x70 [ 1014.231789][T28275] ? __check_object_size+0x30c/0x410 [ 1014.237149][T28275] netlink_sendmsg+0x758/0xbe0 [ 1014.241986][T28275] ? netlink_getsockopt+0x570/0x570 [ 1014.247248][T28275] ? aa_sock_msg_perm+0x94/0x150 [ 1014.252238][T28275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1014.257570][T28275] ? security_socket_sendmsg+0x7c/0xa0 [ 1014.263085][T28275] ? netlink_getsockopt+0x570/0x570 [ 1014.268349][T28275] ____sys_sendmsg+0x5be/0x8f0 [ 1014.273174][T28275] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.278434][T28275] ? import_iovec+0x6f/0xa0 [ 1014.282997][T28275] ___sys_sendmsg+0x236/0x2e0 [ 1014.287740][T28275] ? __sys_sendmsg+0x290/0x290 [ 1014.292580][T28275] ? trace_event_raw_event_lock+0x250/0x250 [ 1014.298582][T28275] __se_sys_sendmsg+0x1b7/0x2a0 [ 1014.303493][T28275] ? __x64_sys_sendmsg+0x80/0x80 [ 1014.308475][T28275] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1014.314531][T28275] ? lockdep_hardirqs_on+0x94/0x140 [ 1014.319784][T28275] do_syscall_64+0x4c/0xa0 [ 1014.324242][T28275] ? clear_bhb_loop+0x30/0x80 [ 1014.328964][T28275] ? clear_bhb_loop+0x30/0x80 [ 1014.333698][T28275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1014.339642][T28275] RIP: 0033:0x7f8cb501de59 [ 1014.344098][T28275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.363752][T28275] RSP: 002b:00007f8cb3276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.372226][T28275] RAX: ffffffffffffffda RBX: 00007f8cb52a5fa0 RCX: 00007f8cb501de59 [ 1014.380258][T28275] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000004 [ 1014.388285][T28275] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.396315][T28275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.404335][T28275] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 1014.412387][T28275] [ 1015.072475][T28304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1015.096538][T28301] netlink: 'syz.3.7818': attribute type 10 has an invalid length. [ 1015.133177][T28301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7818'. [ 1015.162477][T28301] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1015.325857][T28305] netlink: 175 bytes leftover after parsing attributes in process `syz.5.7821'. [ 1015.378731][T28304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1015.494321][T28308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1016.256438][T28338] netlink: 'syz.3.7830': attribute type 5 has an invalid length. [ 1017.933241][T28369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7842'. [ 1018.180619][T28379] netlink: 'syz.3.7845': attribute type 29 has an invalid length. [ 1018.234086][T28379] netlink: 'syz.3.7845': attribute type 29 has an invalid length. [ 1018.344264][T28381] sctp: [Deprecated]: syz.5.7844 (pid 28381) Use of int in max_burst socket option deprecated. [ 1018.344264][T28381] Use struct sctp_assoc_value instead [ 1018.423199][T28382] netlink: 'syz.3.7845': attribute type 29 has an invalid length. [ 1018.665289][T28388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7847'. [ 1018.723636][T28389] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7847'. [ 1019.488172][T28410] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.7854'. [ 1019.512859][T28410] netlink: 'syz.3.7854': attribute type 13 has an invalid length. [ 1019.536970][T28410] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7854'. [ 1020.240240][T28420] netlink: 'syz.5.7858': attribute type 1 has an invalid length. [ 1020.276966][T28420] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.7858'. [ 1021.897263][T28462] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.7872'. [ 1021.915513][T28461] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.7872'. [ 1023.123501][T28492] netlink: 'syz.4.7884': attribute type 10 has an invalid length. [ 1023.140006][T28492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7884'. [ 1024.451651][T28538] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7903'. [ 1024.477443][T28538] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7903'. [ 1024.514773][T28538] netlink: 13 bytes leftover after parsing attributes in process `syz.6.7903'. [ 1027.507765][T28553] netlink: 'syz.1.7906': attribute type 10 has an invalid length. [ 1027.528056][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1027.651330][T28558] netlink: 'syz.6.7908': attribute type 10 has an invalid length. [ 1027.664534][T28558] netlink: 55 bytes leftover after parsing attributes in process `syz.6.7908'. [ 1027.956199][T28570] netlink: 'syz.4.7910': attribute type 3 has an invalid length. [ 1027.984802][T28570] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7910'. [ 1030.363896][T28589] netlink: 'syz.1.7917': attribute type 10 has an invalid length. [ 1030.388628][T28589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7917'. [ 1031.214941][T28623] netlink: 'syz.5.7928': attribute type 10 has an invalid length. [ 1031.245279][T28623] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7928'. [ 1032.660558][T28645] netlink: 'syz.4.7934': attribute type 10 has an invalid length. [ 1032.669542][T28645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7934'. [ 1040.873729][T28830] device syzkaller0 entered promiscuous mode [ 1041.945011][T28885] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8024'. [ 1042.177474][T28894] netlink: 'syz.3.8031': attribute type 29 has an invalid length. [ 1042.216553][T28894] netlink: 'syz.3.8031': attribute type 29 has an invalid length. [ 1042.278325][T28901] netlink: 'syz.3.8031': attribute type 29 has an invalid length. [ 1042.313437][T28894] netlink: 'syz.3.8031': attribute type 29 has an invalid length. [ 1042.323757][T28900] sock: sock_set_timeout: `syz.4.8033' (pid 28900) tries to set negative timeout [ 1043.044518][T28926] netlink: 'syz.3.8043': attribute type 9 has an invalid length. [ 1043.083462][T28926] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1043.405864][T28931] netlink: 'syz.3.8043': attribute type 9 has an invalid length. [ 1043.497930][T28931] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1044.449829][T28953] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8051'. [ 1045.294699][T28965] device syzkaller0 entered promiscuous mode [ 1045.718785][T28984] netlink: 'syz.1.8061': attribute type 10 has an invalid length. [ 1045.768515][T28984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8061'. [ 1046.216572][T25509] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.870717][T29001] netlink: 64519 bytes leftover after parsing attributes in process `syz.4.8066'. [ 1046.944885][T29017] netlink: 207496 bytes leftover after parsing attributes in process `syz.5.8070'. [ 1048.628613][T29051] netlink: 'syz.6.8078': attribute type 10 has an invalid length. [ 1048.671751][T29051] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8078'. [ 1049.777344][T29072] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1051.207596][T29106] netlink: 'syz.1.8100': attribute type 10 has an invalid length. [ 1052.103470][T29127] netlink: 207496 bytes leftover after parsing attributes in process `syz.6.8108'. [ 1053.693465][T29165] netlink: 'syz.4.8119': attribute type 10 has an invalid length. [ 1054.608939][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.615369][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.080171][T29189] netlink: 'syz.1.8129': attribute type 39 has an invalid length. [ 1055.248674][T29187] netlink: 'syz.4.8128': attribute type 10 has an invalid length. [ 1055.268552][T29187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8128'. [ 1055.458526][T29206] netlink: 'syz.4.8135': attribute type 17 has an invalid length. [ 1055.476834][T29206] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8135'. [ 1055.511134][T29206] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1055.540327][T29206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1055.955623][T29216] netlink: 'syz.6.8140': attribute type 10 has an invalid length. [ 1056.825987][T29241] netlink: 'syz.1.8146': attribute type 10 has an invalid length. [ 1056.860070][T29241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8146'. [ 1056.882660][T29244] IPv6: NLM_F_CREATE should be specified when creating new route [ 1056.918822][T29244] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8148'. [ 1057.854654][T29279] netlink: 'syz.1.8161': attribute type 10 has an invalid length. [ 1057.873971][T29279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1058.052857][T29288] netlink: 'syz.5.8167': attribute type 39 has an invalid length. [ 1058.401619][T29293] device syzkaller0 entered promiscuous mode [ 1058.788266][T29317] netlink: 'syz.1.8176': attribute type 10 has an invalid length. [ 1058.828298][T29317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1059.254950][T29335] netlink: 'syz.1.8181': attribute type 10 has an invalid length. [ 1059.359461][T29338] FAULT_INJECTION: forcing a failure. [ 1059.359461][T29338] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.375928][T29335] netlink: 'syz.1.8181': attribute type 2 has an invalid length. [ 1059.396642][T29338] CPU: 1 PID: 29338 Comm: syz.5.8183 Not tainted syzkaller #0 [ 1059.404323][T29338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1059.415034][T29338] Call Trace: [ 1059.418353][T29338] [ 1059.421315][T29338] dump_stack_lvl+0x188/0x250 [ 1059.426038][T29338] ? show_regs_print_info+0x20/0x20 [ 1059.431285][T29338] ? load_image+0x410/0x410 [ 1059.435832][T29338] ? __lock_acquire+0x7b50/0x7b50 [ 1059.440902][T29338] should_fail+0x383/0x4b0 [ 1059.445492][T29338] should_failslab+0x5/0x20 [ 1059.450052][T29338] slab_pre_alloc_hook+0x51/0xc0 [ 1059.455058][T29338] kmem_cache_alloc_trace+0x47/0x290 [ 1059.460406][T29338] ? apparmor_sk_alloc_security+0x74/0x100 [ 1059.466274][T29338] apparmor_sk_alloc_security+0x74/0x100 [ 1059.471965][T29338] security_sk_alloc+0x6a/0xa0 [ 1059.476802][T29338] sk_prot_alloc+0x101/0x210 [ 1059.481444][T29338] ? sk_alloc+0x1d/0x310 [ 1059.485815][T29338] sk_alloc+0x2f/0x310 [ 1059.489942][T29338] bpf_prog_test_run_skb+0x23c/0x1190 [ 1059.495364][T29338] ? __fget_files+0x402/0x470 [ 1059.500098][T29338] ? cpu_online+0x60/0x60 [ 1059.504486][T29338] bpf_prog_test_run+0x31c/0x390 [ 1059.509490][T29338] __sys_bpf+0x5a5/0x6f0 [ 1059.513792][T29338] ? bpf_link_show_fdinfo+0x380/0x380 [ 1059.519300][T29338] ? rcu_nmi_exit+0x6f/0xf0 [ 1059.523879][T29338] __x64_sys_bpf+0x78/0x90 [ 1059.528355][T29338] do_syscall_64+0x4c/0xa0 [ 1059.532844][T29338] ? clear_bhb_loop+0x30/0x80 [ 1059.537566][T29338] ? clear_bhb_loop+0x30/0x80 [ 1059.542288][T29338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1059.548243][T29338] RIP: 0033:0x7fd5b931ce59 [ 1059.552704][T29338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.559340][T29335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1059.572348][T29338] RSP: 002b:00007fd5b7575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1059.572379][T29338] RAX: ffffffffffffffda RBX: 00007fd5b95a4fa0 RCX: 00007fd5b931ce59 [ 1059.572395][T29338] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1059.572408][T29338] RBP: 00007fd5b7575090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.572421][T29338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.572434][T29338] R13: 00007fd5b95a5038 R14: 00007fd5b95a4fa0 R15: 00007ffc39190c78 [ 1059.572466][T29338] [ 1059.943392][T29354] netlink: 'syz.6.8191': attribute type 10 has an invalid length. [ 1059.999143][T29354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8191'. [ 1060.476650][T29373] FAULT_INJECTION: forcing a failure. [ 1060.476650][T29373] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.531824][T29373] CPU: 0 PID: 29373 Comm: syz.3.8196 Not tainted syzkaller #0 [ 1060.539361][T29373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1060.549463][T29373] Call Trace: [ 1060.552778][T29373] [ 1060.555754][T29373] dump_stack_lvl+0x188/0x250 [ 1060.560484][T29373] ? show_regs_print_info+0x20/0x20 [ 1060.565728][T29373] ? load_image+0x410/0x410 [ 1060.570277][T29373] ? __might_sleep+0xf0/0xf0 [ 1060.574914][T29373] ? __lock_acquire+0x7b50/0x7b50 [ 1060.579987][T29373] should_fail+0x383/0x4b0 [ 1060.584458][T29373] should_failslab+0x5/0x20 [ 1060.588997][T29373] slab_pre_alloc_hook+0x51/0xc0 [ 1060.593977][T29373] __kmalloc+0x6b/0x340 [ 1060.598168][T29373] ? kernfs_fop_write_iter+0x14f/0x500 [ 1060.604022][T29373] kernfs_fop_write_iter+0x14f/0x500 [ 1060.609351][T29373] ? iov_iter_init+0xb4/0x170 [ 1060.614072][T29373] vfs_write+0x748/0xd70 [ 1060.618366][T29373] ? file_end_write+0x250/0x250 [ 1060.623301][T29373] ? mutex_lock_nested+0x17/0x20 [ 1060.628286][T29373] ? __fdget_pos+0x2bf/0x370 [ 1060.632911][T29373] ? ksys_write+0x70/0x260 [ 1060.637412][T29373] ksys_write+0x153/0x260 [ 1060.641789][T29373] ? __ia32_sys_read+0x80/0x80 [ 1060.646601][T29373] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.651840][T29373] do_syscall_64+0x4c/0xa0 [ 1060.656288][T29373] ? clear_bhb_loop+0x30/0x80 [ 1060.661015][T29373] ? clear_bhb_loop+0x30/0x80 [ 1060.665729][T29373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1060.671668][T29373] RIP: 0033:0x7f4a8c83ce59 [ 1060.676116][T29373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.695761][T29373] RSP: 002b:00007f4a8aa74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1060.704310][T29373] RAX: ffffffffffffffda RBX: 00007f4a8cac5090 RCX: 00007f4a8c83ce59 [ 1060.712323][T29373] RDX: 000000000000002f RSI: 0000200000000080 RDI: 0000000000000009 [ 1060.720339][T29373] RBP: 00007f4a8aa74090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.728349][T29373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.736363][T29373] R13: 00007f4a8cac5128 R14: 00007f4a8cac5090 R15: 00007fff5bb55f98 [ 1060.744397][T29373] [ 1061.566100][T29402] netlink: 'syz.6.8205': attribute type 10 has an invalid length. [ 1061.626823][T29402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8205'. [ 1062.759249][T29454] netlink: 'syz.5.8226': attribute type 10 has an invalid length. [ 1062.767582][T29454] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8226'. [ 1063.061133][T29468] FAULT_INJECTION: forcing a failure. [ 1063.061133][T29468] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.076153][T29468] CPU: 0 PID: 29468 Comm: syz.6.8231 Not tainted syzkaller #0 [ 1063.083692][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.093788][T29468] Call Trace: [ 1063.097095][T29468] [ 1063.100050][T29468] dump_stack_lvl+0x188/0x250 [ 1063.104772][T29468] ? show_regs_print_info+0x20/0x20 [ 1063.110039][T29468] ? load_image+0x410/0x410 [ 1063.114568][T29468] ? perf_trace_lock+0xe4/0x390 [ 1063.119496][T29468] ? trace_event_raw_event_lock+0x250/0x250 [ 1063.125431][T29468] should_fail+0x383/0x4b0 [ 1063.129887][T29468] should_failslab+0x5/0x20 [ 1063.134425][T29468] slab_pre_alloc_hook+0x51/0xc0 [ 1063.139391][T29468] kmem_cache_alloc_node+0x47/0x2c0 [ 1063.144638][T29468] ? __alloc_skb+0xf4/0x750 [ 1063.149209][T29468] __alloc_skb+0xf4/0x750 [ 1063.153582][T29468] tipc_msg_create+0x46/0x4b0 [ 1063.158413][T29468] tipc_group_proto_xmit+0xcd/0x870 [ 1063.163691][T29468] tipc_group_cong+0x4d4/0x5d0 [ 1063.168483][T29468] ? tipc_group_update_bc_members+0x4f0/0x4f0 [ 1063.174606][T29468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1063.180617][T29468] ? tipc_dest_find+0xfe/0x120 [ 1063.185413][T29468] tipc_send_group_unicast+0x31c/0x550 [ 1063.190968][T29468] ? tipc_send_group_bcast+0xad0/0xad0 [ 1063.196467][T29468] ? wait_woken+0x1b0/0x1b0 [ 1063.201151][T29468] ? tipc_dest_pop+0x198/0x230 [ 1063.205974][T29468] __tipc_sendmsg+0x14f2/0x2b60 [ 1063.210905][T29468] ? local_bh_enable+0x20/0x20 [ 1063.215732][T29468] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1063.221493][T29468] ? verify_lock_unused+0x140/0x140 [ 1063.226727][T29468] ? perf_trace_lock_acquire+0x341/0x3f0 [ 1063.232589][T29468] ? mark_lock+0x94/0x320 [ 1063.236977][T29468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1063.243010][T29468] ? lock_chain_count+0x20/0x20 [ 1063.247935][T29468] ? __local_bh_enable_ip+0x136/0x1c0 [ 1063.253336][T29468] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.258588][T29468] ? __local_bh_enable_ip+0x136/0x1c0 [ 1063.263987][T29468] ? _local_bh_enable+0xa0/0xa0 [ 1063.268881][T29468] tipc_sendmsg+0x51/0x70 [ 1063.273244][T29468] ? tipc_recvmsg+0x13d0/0x13d0 [ 1063.278124][T29468] ____sys_sendmsg+0x5be/0x8f0 [ 1063.282945][T29468] ? __sys_sendmsg_sock+0x30/0x30 [ 1063.288018][T29468] ? import_iovec+0x6f/0xa0 [ 1063.292556][T29468] ___sys_sendmsg+0x236/0x2e0 [ 1063.297279][T29468] ? __sys_sendmsg+0x290/0x290 [ 1063.302125][T29468] ? trace_event_raw_event_lock+0x250/0x250 [ 1063.308214][T29468] __se_sys_sendmsg+0x1b7/0x2a0 [ 1063.313102][T29468] ? __x64_sys_sendmsg+0x80/0x80 [ 1063.318058][T29468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1063.324095][T29468] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.329329][T29468] do_syscall_64+0x4c/0xa0 [ 1063.333787][T29468] ? clear_bhb_loop+0x30/0x80 [ 1063.338487][T29468] ? clear_bhb_loop+0x30/0x80 [ 1063.343194][T29468] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1063.349106][T29468] RIP: 0033:0x7f8cb501de59 [ 1063.353552][T29468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.373182][T29468] RSP: 002b:00007f8cb3276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.381629][T29468] RAX: ffffffffffffffda RBX: 00007f8cb52a5fa0 RCX: 00007f8cb501de59 [ 1063.389623][T29468] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1063.397618][T29468] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.405609][T29468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.413615][T29468] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 1063.421777][T29468] [ 1064.267263][T29497] netlink: 'syz.3.8236': attribute type 3 has an invalid length. [ 1064.304800][T29497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1064.434928][T29499] netlink: 'syz.5.8240': attribute type 10 has an invalid length. [ 1064.462270][T29499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8240'. [ 1064.475799][T29503] netlink: 'syz.6.8243': attribute type 10 has an invalid length. [ 1064.496407][T29503] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8243'. [ 1064.563930][T29494] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1065.963492][T29543] netlink: 'syz.5.8256': attribute type 10 has an invalid length. [ 1066.004359][T29543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8256'. [ 1066.538918][T29578] FAULT_INJECTION: forcing a failure. [ 1066.538918][T29578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.561648][T29578] CPU: 0 PID: 29578 Comm: syz.6.8267 Not tainted syzkaller #0 [ 1066.569212][T29578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.579308][T29578] Call Trace: [ 1066.582628][T29578] [ 1066.585601][T29578] dump_stack_lvl+0x188/0x250 [ 1066.590352][T29578] ? show_regs_print_info+0x20/0x20 [ 1066.595608][T29578] ? load_image+0x410/0x410 [ 1066.600192][T29578] ? __lock_acquire+0x7b50/0x7b50 [ 1066.605314][T29578] should_fail+0x383/0x4b0 [ 1066.609805][T29578] _copy_to_user+0x2e/0x130 [ 1066.614376][T29578] simple_read_from_buffer+0xe3/0x150 [ 1066.619817][T29578] proc_fail_nth_read+0x1a6/0x220 [ 1066.624951][T29578] ? proc_fault_inject_write+0x310/0x310 [ 1066.630659][T29578] ? fsnotify_perm+0x254/0x560 [ 1066.635476][T29578] ? proc_fault_inject_write+0x310/0x310 [ 1066.641160][T29578] vfs_read+0x2ff/0xd50 [ 1066.645380][T29578] ? __lock_acquire+0x7b50/0x7b50 [ 1066.650473][T29578] ? kernel_read+0x1e0/0x1e0 [ 1066.655163][T29578] ? mutex_lock_nested+0x17/0x20 [ 1066.660145][T29578] ? __fdget_pos+0x2bf/0x370 [ 1066.664780][T29578] ? ksys_read+0x70/0x260 [ 1066.669161][T29578] ksys_read+0x153/0x260 [ 1066.673483][T29578] ? vfs_write+0xd70/0xd70 [ 1066.677973][T29578] ? lockdep_hardirqs_on+0x94/0x140 [ 1066.683238][T29578] do_syscall_64+0x4c/0xa0 [ 1066.687787][T29578] ? clear_bhb_loop+0x30/0x80 [ 1066.692510][T29578] ? clear_bhb_loop+0x30/0x80 [ 1066.697240][T29578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1066.703184][T29578] RIP: 0033:0x7f8cb4fde68e [ 1066.707662][T29578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.727362][T29578] RSP: 002b:00007f8cb3275fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1066.736029][T29578] RAX: ffffffffffffffda RBX: 00007f8cb32766c0 RCX: 00007f8cb4fde68e [ 1066.744075][T29578] RDX: 000000000000000f RSI: 00007f8cb32760a0 RDI: 0000000000000004 [ 1066.752088][T29578] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.760118][T29578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.768166][T29578] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 1066.776246][T29578] [ 1067.336849][T29590] netlink: 'syz.4.8272': attribute type 10 has an invalid length. [ 1067.364087][T29590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8272'. [ 1067.574537][T29600] netlink: 'syz.5.8276': attribute type 1 has an invalid length. [ 1067.608857][T29600] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.8276'. [ 1068.109856][T29618] FAULT_INJECTION: forcing a failure. [ 1068.109856][T29618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.168321][T29618] CPU: 1 PID: 29618 Comm: syz.1.8281 Not tainted syzkaller #0 [ 1068.176007][T29618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1068.186120][T29618] Call Trace: [ 1068.189454][T29618] [ 1068.192434][T29618] dump_stack_lvl+0x188/0x250 [ 1068.197180][T29618] ? show_regs_print_info+0x20/0x20 [ 1068.202584][T29618] ? load_image+0x410/0x410 [ 1068.207163][T29618] ? __lock_acquire+0x7b50/0x7b50 [ 1068.212274][T29618] should_fail+0x383/0x4b0 [ 1068.216791][T29618] _copy_from_user+0x2e/0x170 [ 1068.221543][T29618] iovec_from_user+0x142/0x370 [ 1068.226411][T29618] __import_iovec+0x70/0x490 [ 1068.231092][T29618] import_iovec+0x6f/0xa0 [ 1068.235494][T29618] ___sys_sendmsg+0x1fd/0x2e0 [ 1068.240259][T29618] ? __sys_sendmsg+0x290/0x290 [ 1068.245117][T29618] ? trace_event_raw_event_lock+0x250/0x250 [ 1068.251143][T29618] __se_sys_sendmsg+0x1b7/0x2a0 [ 1068.256066][T29618] ? __x64_sys_sendmsg+0x80/0x80 [ 1068.261058][T29618] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1068.267146][T29618] ? lockdep_hardirqs_on+0x94/0x140 [ 1068.272416][T29618] do_syscall_64+0x4c/0xa0 [ 1068.276882][T29618] ? clear_bhb_loop+0x30/0x80 [ 1068.281612][T29618] ? clear_bhb_loop+0x30/0x80 [ 1068.286345][T29618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1068.292287][T29618] RIP: 0033:0x7f6671ebbe59 [ 1068.296764][T29618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.316529][T29618] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.325006][T29618] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 1068.333034][T29618] RDX: 0000000020004004 RSI: 0000200000000080 RDI: 0000000000000006 [ 1068.341066][T29618] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.349091][T29618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.357127][T29618] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 1068.365210][T29618] [ 1068.887311][T29640] netlink: 'syz.1.8289': attribute type 6 has an invalid length. [ 1068.912102][T29640] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1068.966382][T29637] netlink: 'syz.6.8288': attribute type 10 has an invalid length. [ 1068.991150][T29637] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8288'. [ 1069.040465][T29646] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1069.303269][T29654] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8294'. [ 1069.314618][T29654] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.926502][T29666] netlink: 'syz.4.8299': attribute type 5 has an invalid length. [ 1070.993172][T29678] netlink: 'syz.3.8304': attribute type 10 has an invalid length. [ 1071.018078][T29678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1071.059884][T29678] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1074.288293][T29702] netlink: 'syz.4.8311': attribute type 6 has an invalid length. [ 1074.296893][T29702] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8311'. [ 1074.382043][T29702] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8311'. [ 1075.231495][T29724] netlink: 'syz.5.8320': attribute type 10 has an invalid length. [ 1075.249467][T29724] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8320'. [ 1075.655261][T29738] netlink: 'syz.5.8325': attribute type 6 has an invalid length. [ 1075.677304][T29738] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8325'. [ 1075.734197][T29741] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8325'. [ 1076.506049][T29752] netlink: 'syz.1.8329': attribute type 10 has an invalid length. [ 1076.570866][T29752] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.595814][T29752] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.612994][T29752] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.633051][T29752] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.654686][T29752] device geneve0 entered promiscuous mode [ 1077.000605][T29752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.009621][T29752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.018821][T29752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.027752][T29752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.045009][T29752] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1077.265234][T29772] netlink: 'syz.3.8335': attribute type 10 has an invalid length. [ 1077.273776][T29772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8335'. [ 1077.319733][T29772] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1077.568957][T29785] netlink: 'syz.3.8338': attribute type 6 has an invalid length. [ 1077.596131][T29785] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1077.638844][T29788] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1077.650848][T29780] netlink: 'syz.5.8348': attribute type 10 has an invalid length. [ 1077.665048][T29780] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8348'. [ 1077.823894][T29792] netlink: 'syz.1.8341': attribute type 17 has an invalid length. [ 1077.866269][T29792] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1078.799698][T29822] netlink: 'syz.5.8353': attribute type 10 has an invalid length. [ 1079.215187][T29836] netlink: 'syz.5.8370': attribute type 10 has an invalid length. [ 1080.173065][T29871] delete_channel: no stack [ 1080.177756][T29871] delete_channel: no stack [ 1080.935054][T29886] netlink: 'syz.3.8376': attribute type 10 has an invalid length. [ 1080.974088][T29886] __nla_validate_parse: 4 callbacks suppressed [ 1080.974140][T29886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8376'. [ 1081.009526][T29886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1081.189663][T29893] netlink: 'syz.4.8378': attribute type 10 has an invalid length. [ 1081.231846][T29893] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.294418][T29893] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.325383][T29893] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.338245][T29893] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.353400][T29893] device geneve0 entered promiscuous mode [ 1081.873129][T29919] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8387'. [ 1082.192704][T29927] netlink: 'syz.6.8391': attribute type 10 has an invalid length. [ 1082.220428][T29927] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8391'. [ 1082.671584][T29945] netlink: 'syz.1.8396': attribute type 8 has an invalid length. [ 1083.032256][T29947] netlink: 'syz.5.8398': attribute type 10 has an invalid length. [ 1083.123787][T29947] device geneve0 entered promiscuous mode [ 1083.219578][T29964] netlink: 'syz.6.8403': attribute type 3 has an invalid length. [ 1083.284038][T29964] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.8403'. [ 1083.415109][T29947] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1083.546467][T29947] syz.5.8398 (29947) used greatest stack depth: 18608 bytes left [ 1084.028133][T29976] netlink: 'syz.1.8407': attribute type 10 has an invalid length. [ 1084.055650][T29976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1084.125398][T29983] sctp: [Deprecated]: syz.3.8409 (pid 29983) Use of int in max_burst socket option deprecated. [ 1084.125398][T29983] Use struct sctp_assoc_value instead [ 1084.263664][T29989] FAULT_INJECTION: forcing a failure. [ 1084.263664][T29989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.364040][T29989] CPU: 1 PID: 29989 Comm: syz.4.8412 Not tainted syzkaller #0 [ 1084.371586][T29989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1084.381690][T29989] Call Trace: [ 1084.385002][T29989] [ 1084.387965][T29989] dump_stack_lvl+0x188/0x250 [ 1084.392688][T29989] ? show_regs_print_info+0x20/0x20 [ 1084.397928][T29989] ? load_image+0x410/0x410 [ 1084.402540][T29989] ? __lock_acquire+0x7b50/0x7b50 [ 1084.407610][T29989] should_fail+0x383/0x4b0 [ 1084.412103][T29989] _copy_to_user+0x2e/0x130 [ 1084.416709][T29989] simple_read_from_buffer+0xe3/0x150 [ 1084.422128][T29989] proc_fail_nth_read+0x1a6/0x220 [ 1084.427209][T29989] ? proc_fault_inject_write+0x310/0x310 [ 1084.432906][T29989] ? fsnotify_perm+0x254/0x560 [ 1084.437794][T29989] ? proc_fault_inject_write+0x310/0x310 [ 1084.443465][T29989] vfs_read+0x2ff/0xd50 [ 1084.447662][T29989] ? __lock_acquire+0x7b50/0x7b50 [ 1084.452730][T29989] ? kernel_read+0x1e0/0x1e0 [ 1084.457383][T29989] ? mutex_lock_nested+0x17/0x20 [ 1084.462361][T29989] ? __fdget_pos+0x2bf/0x370 [ 1084.466985][T29989] ? ksys_read+0x70/0x260 [ 1084.471358][T29989] ksys_read+0x153/0x260 [ 1084.475648][T29989] ? vfs_write+0xd70/0xd70 [ 1084.480101][T29989] ? lockdep_hardirqs_on+0x94/0x140 [ 1084.485348][T29989] do_syscall_64+0x4c/0xa0 [ 1084.489800][T29989] ? clear_bhb_loop+0x30/0x80 [ 1084.494511][T29989] ? clear_bhb_loop+0x30/0x80 [ 1084.499230][T29989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1084.505171][T29989] RIP: 0033:0x7f8ed332768e [ 1084.509644][T29989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1084.529291][T29989] RSP: 002b:00007f8ed15befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1084.537758][T29989] RAX: ffffffffffffffda RBX: 00007f8ed15bf6c0 RCX: 00007f8ed332768e [ 1084.545782][T29989] RDX: 000000000000000f RSI: 00007f8ed15bf0a0 RDI: 0000000000000006 [ 1084.553786][T29989] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.561790][T29989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.569798][T29989] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1084.577826][T29989] [ 1085.213137][T30009] netlink: 'syz.6.8418': attribute type 3 has an invalid length. [ 1085.265229][T30009] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.8418'. [ 1085.898209][T30021] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8421'. [ 1085.934701][T30027] FAULT_INJECTION: forcing a failure. [ 1085.934701][T30027] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.977030][T30025] netlink: 'syz.5.8423': attribute type 10 has an invalid length. [ 1086.018604][T30027] CPU: 0 PID: 30027 Comm: syz.4.8424 Not tainted syzkaller #0 [ 1086.024290][T30025] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8423'. [ 1086.026142][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.026169][T30027] Call Trace: [ 1086.026178][T30027] [ 1086.026188][T30027] dump_stack_lvl+0x188/0x250 [ 1086.026222][T30027] ? show_regs_print_info+0x20/0x20 [ 1086.026248][T30027] ? load_image+0x410/0x410 [ 1086.066097][T30027] should_fail+0x383/0x4b0 [ 1086.070558][T30027] should_failslab+0x5/0x20 [ 1086.075097][T30027] slab_pre_alloc_hook+0x51/0xc0 [ 1086.080099][T30027] ? skb_clone+0x1bd/0x350 [ 1086.084543][T30027] kmem_cache_alloc+0x3d/0x280 [ 1086.089335][T30027] ? stack_trace_save+0xf0/0xf0 [ 1086.094236][T30027] skb_clone+0x1bd/0x350 [ 1086.098518][T30027] bpf_clone_redirect+0x166/0x460 [ 1086.103598][T30027] bpf_prog_c6f54bbad6dab1ee+0x56/0x574 [ 1086.109188][T30027] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1086.115219][T30027] ? lock_chain_count+0x20/0x20 [ 1086.120106][T30027] ? __kasan_slab_alloc+0xa9/0xc0 [ 1086.125179][T30027] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1086.131456][T30027] ? lockdep_hardirqs_on+0x94/0x140 [ 1086.136689][T30027] ? ktime_get+0x7b/0x270 [ 1086.141052][T30027] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1086.147330][T30027] ? ktime_get_real_ts64+0x440/0x440 [ 1086.152662][T30027] ? read_lock_is_recursive+0x10/0x10 [ 1086.158117][T30027] ? __cant_sleep+0x220/0x220 [ 1086.162839][T30027] ? ktime_get+0x247/0x270 [ 1086.167296][T30027] bpf_test_run+0x2a8/0x800 [ 1086.171848][T30027] ? convert___skb_to_skb+0x4c0/0x4c0 [ 1086.177263][T30027] ? eth_get_headlen+0x200/0x200 [ 1086.182340][T30027] ? convert___skb_to_skb+0x3d/0x4c0 [ 1086.187665][T30027] bpf_prog_test_run_skb+0x9fb/0x1190 [ 1086.193082][T30027] ? cpu_online+0x60/0x60 [ 1086.197449][T30027] bpf_prog_test_run+0x31c/0x390 [ 1086.202515][T30027] __sys_bpf+0x5a5/0x6f0 [ 1086.206784][T30027] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 1086.213047][T30027] ? bpf_link_show_fdinfo+0x380/0x380 [ 1086.218447][T30027] ? rcu_nmi_exit+0x6f/0xf0 [ 1086.222991][T30027] __x64_sys_bpf+0x78/0x90 [ 1086.227426][T30027] do_syscall_64+0x4c/0xa0 [ 1086.231858][T30027] ? clear_bhb_loop+0x30/0x80 [ 1086.236547][T30027] ? clear_bhb_loop+0x30/0x80 [ 1086.241244][T30027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1086.247192][T30027] RIP: 0033:0x7f8ed3366e59 [ 1086.251625][T30027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.271361][T30027] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1086.279800][T30027] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1086.287808][T30027] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 1086.295814][T30027] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.303814][T30027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.311807][T30027] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1086.319819][T30027] [ 1086.691588][T30041] FAULT_INJECTION: forcing a failure. [ 1086.691588][T30041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.764319][T30041] CPU: 0 PID: 30041 Comm: syz.4.8429 Not tainted syzkaller #0 [ 1086.771867][T30041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.781957][T30041] Call Trace: [ 1086.785270][T30041] [ 1086.788234][T30041] dump_stack_lvl+0x188/0x250 [ 1086.792960][T30041] ? show_regs_print_info+0x20/0x20 [ 1086.798296][T30041] ? load_image+0x410/0x410 [ 1086.802844][T30041] ? __lock_acquire+0x7b50/0x7b50 [ 1086.807894][T30041] ? kasan_set_free_info+0x1f/0x40 [ 1086.813057][T30041] ? slab_free_freelist_hook+0xec/0x170 [ 1086.818626][T30041] ? kfree+0xef/0x2a0 [ 1086.822630][T30041] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 1086.828327][T30041] should_fail+0x383/0x4b0 [ 1086.832782][T30041] _copy_from_user+0x2e/0x170 [ 1086.837490][T30041] ipmr_ioctl+0x1f5/0x7f0 [ 1086.841942][T30041] ? copy_to_sockptr+0x90/0x90 [ 1086.846737][T30041] ? inet_ioctl+0x258/0x460 [ 1086.851284][T30041] ? raw_close+0x20/0x20 [ 1086.855571][T30041] ? raw_ioctl+0xfb/0x190 [ 1086.859919][T30041] ? raw_close+0x20/0x20 [ 1086.864182][T30041] inet_ioctl+0x265/0x460 [ 1086.868535][T30041] ? inet_shutdown+0x370/0x370 [ 1086.873336][T30041] ? kfree+0xef/0x2a0 [ 1086.877352][T30041] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1086.883356][T30041] sock_do_ioctl+0xfb/0x320 [ 1086.887875][T30041] ? sock_show_fdinfo+0xb0/0xb0 [ 1086.892758][T30041] sock_ioctl+0x48a/0x700 [ 1086.897123][T30041] ? sock_poll+0x420/0x420 [ 1086.901568][T30041] ? security_file_ioctl+0x41/0xa0 [ 1086.906701][T30041] ? security_file_ioctl+0x7c/0xa0 [ 1086.911829][T30041] ? sock_poll+0x420/0x420 [ 1086.916262][T30041] __se_sys_ioctl+0xfa/0x170 [ 1086.920872][T30041] do_syscall_64+0x4c/0xa0 [ 1086.925307][T30041] ? clear_bhb_loop+0x30/0x80 [ 1086.930000][T30041] ? clear_bhb_loop+0x30/0x80 [ 1086.934725][T30041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1086.940636][T30041] RIP: 0033:0x7f8ed3366e59 [ 1086.945069][T30041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.964689][T30041] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.973124][T30041] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1086.981111][T30041] RDX: 0000200000000080 RSI: 00000000000089e1 RDI: 0000000000000004 [ 1086.989098][T30041] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.997088][T30041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.005076][T30041] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1087.013077][T30041] [ 1087.712438][T30064] netlink: 'syz.4.8438': attribute type 10 has an invalid length. [ 1087.725468][T30064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8438'. [ 1091.285311][T30099] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8450'. [ 1091.542369][T30099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.608710][T30099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.690545][T30099] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1091.755870][T30099] bond0 (unregistering): Released all slaves [ 1092.041466][T30110] netlink: 'syz.3.8455': attribute type 10 has an invalid length. [ 1092.065535][T30110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1092.083292][T30110] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1096.147863][T30158] netlink: 'syz.4.8471': attribute type 10 has an invalid length. [ 1096.198762][T30158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8471'. [ 1099.569270][T30209] netlink: 'syz.1.8484': attribute type 10 has an invalid length. [ 1099.587150][T30209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8484'. [ 1103.157717][T30256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8503'. [ 1103.413488][T30260] netlink: 'syz.1.8504': attribute type 10 has an invalid length. [ 1103.432295][T30260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8504'. [ 1104.273146][T30292] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8517'. [ 1104.547145][T30289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.555138][T30289] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.563793][T30289] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.571716][T30289] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.601466][T30295] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8516'. [ 1104.941109][T30305] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.8521'. [ 1104.960370][T30301] netlink: 'syz.1.8520': attribute type 10 has an invalid length. [ 1104.988636][T30301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1105.004624][T30305] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1106.318131][T30349] netlink: 'syz.4.8533': attribute type 10 has an invalid length. [ 1106.345667][T30349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8533'. [ 1106.703062][T30360] netlink: 'syz.1.8537': attribute type 10 has an invalid length. [ 1106.724380][T30360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8537'. [ 1107.171327][T30378] FAULT_INJECTION: forcing a failure. [ 1107.171327][T30378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.238045][T30378] CPU: 1 PID: 30378 Comm: syz.1.8544 Not tainted syzkaller #0 [ 1107.245583][T30378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1107.255722][T30378] Call Trace: [ 1107.259042][T30378] [ 1107.262021][T30378] dump_stack_lvl+0x188/0x250 [ 1107.266738][T30378] ? show_regs_print_info+0x20/0x20 [ 1107.271976][T30378] ? load_image+0x410/0x410 [ 1107.276516][T30378] ? __lock_acquire+0x7b50/0x7b50 [ 1107.281667][T30378] ? bpf_test_run+0x78e/0x800 [ 1107.286395][T30378] should_fail+0x383/0x4b0 [ 1107.290863][T30378] _copy_to_user+0x2e/0x130 [ 1107.295414][T30378] bpf_test_finish+0x1b7/0x2f0 [ 1107.300217][T30378] ? convert_skb_to___skb+0x360/0x360 [ 1107.305634][T30378] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 1107.311231][T30378] bpf_prog_test_run_xdp+0x61b/0x900 [ 1107.316736][T30378] ? dev_put+0x70/0x70 [ 1107.320861][T30378] ? dev_put+0x70/0x70 [ 1107.324971][T30378] bpf_prog_test_run+0x31c/0x390 [ 1107.329958][T30378] __sys_bpf+0x5a5/0x6f0 [ 1107.334247][T30378] ? bpf_link_show_fdinfo+0x380/0x380 [ 1107.339693][T30378] __x64_sys_bpf+0x78/0x90 [ 1107.344162][T30378] do_syscall_64+0x4c/0xa0 [ 1107.348608][T30378] ? clear_bhb_loop+0x30/0x80 [ 1107.353319][T30378] ? clear_bhb_loop+0x30/0x80 [ 1107.358034][T30378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1107.364055][T30378] RIP: 0033:0x7f6671ebbe59 [ 1107.368507][T30378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.388145][T30378] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1107.396694][T30378] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 1107.404696][T30378] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1107.412699][T30378] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.420778][T30378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.428763][T30378] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 1107.436773][T30378] [ 1108.117535][T30396] netlink: 'syz.5.8551': attribute type 10 has an invalid length. [ 1108.135328][T30396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8551'. [ 1111.193700][T30408] netlink: 'syz.5.8555': attribute type 10 has an invalid length. [ 1111.214304][T30408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8555'. [ 1111.360739][T30414] netlink: 'syz.4.8556': attribute type 10 has an invalid length. [ 1111.428001][T30414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8556'. [ 1111.608898][T30430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.744372][T30422] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8558'. [ 1112.155920][T30442] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.8563'. [ 1112.924117][T30453] netlink: 'syz.3.8565': attribute type 10 has an invalid length. [ 1112.975749][T30453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8565'. [ 1113.089247][T30453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1113.570957][T30456] netlink: 'syz.5.8568': attribute type 9 has an invalid length. [ 1113.615488][T30456] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.8568'. [ 1113.720699][T30461] netlink: 'syz.5.8568': attribute type 9 has an invalid length. [ 1113.739650][T30461] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.8568'. [ 1113.804295][T30469] netlink: 'syz.6.8570': attribute type 10 has an invalid length. [ 1113.816972][T30469] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8570'. [ 1113.840900][T30468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1114.725740][T30493] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.8579'. [ 1115.038669][T30507] netlink: 'syz.4.8583': attribute type 10 has an invalid length. [ 1115.781929][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.788692][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.815941][T30541] netlink: 'syz.3.8596': attribute type 10 has an invalid length. [ 1116.898095][T30541] __nla_validate_parse: 2 callbacks suppressed [ 1116.898116][T30541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8596'. [ 1116.979386][T30541] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1117.026901][T30550] netlink: 'syz.1.8600': attribute type 10 has an invalid length. [ 1117.040359][T30550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1120.003676][T30562] netlink: 'syz.5.8605': attribute type 29 has an invalid length. [ 1120.073009][T30562] netlink: 'syz.5.8605': attribute type 29 has an invalid length. [ 1120.097586][T30566] netlink: 'syz.5.8605': attribute type 29 has an invalid length. [ 1120.214597][T30566] netlink: 'syz.5.8605': attribute type 10 has an invalid length. [ 1120.562421][T30576] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8607'. [ 1121.050940][T30592] netlink: 'syz.4.8612': attribute type 10 has an invalid length. [ 1121.076357][T30592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1124.200393][T30615] FAULT_INJECTION: forcing a failure. [ 1124.200393][T30615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.331027][T30615] CPU: 1 PID: 30615 Comm: syz.5.8621 Not tainted syzkaller #0 [ 1124.338594][T30615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.348692][T30615] Call Trace: [ 1124.352003][T30615] [ 1124.354971][T30615] dump_stack_lvl+0x188/0x250 [ 1124.359713][T30615] ? show_regs_print_info+0x20/0x20 [ 1124.364954][T30615] ? load_image+0x410/0x410 [ 1124.369508][T30615] ? __lock_acquire+0x7b50/0x7b50 [ 1124.374592][T30615] should_fail+0x383/0x4b0 [ 1124.379052][T30615] _copy_from_user+0x2e/0x170 [ 1124.383772][T30615] __copy_msghdr_from_user+0xc9/0x630 [ 1124.389183][T30615] ? verify_lock_unused+0x140/0x140 [ 1124.394418][T30615] ? mark_lock+0x94/0x320 [ 1124.398793][T30615] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1124.404110][T30615] ? __lock_acquire+0x13dc/0x7b50 [ 1124.409189][T30615] ___sys_sendmsg+0x19a/0x2e0 [ 1124.413950][T30615] ? __sys_sendmsg+0x290/0x290 [ 1124.418790][T30615] __se_sys_sendmsg+0x1b7/0x2a0 [ 1124.423721][T30615] ? __x64_sys_sendmsg+0x80/0x80 [ 1124.428717][T30615] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1124.434763][T30615] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.440015][T30615] do_syscall_64+0x4c/0xa0 [ 1124.444590][T30615] ? clear_bhb_loop+0x30/0x80 [ 1124.449332][T30615] ? clear_bhb_loop+0x30/0x80 [ 1124.454042][T30615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1124.459975][T30615] RIP: 0033:0x7fd5b931ce59 [ 1124.464427][T30615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.484086][T30615] RSP: 002b:00007fd5b7575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.492541][T30615] RAX: ffffffffffffffda RBX: 00007fd5b95a4fa0 RCX: 00007fd5b931ce59 [ 1124.500547][T30615] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 1124.508549][T30615] RBP: 00007fd5b7575090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.516563][T30615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.524571][T30615] R13: 00007fd5b95a5038 R14: 00007fd5b95a4fa0 R15: 00007ffc39190c78 [ 1124.532664][T30615] [ 1125.414096][T30650] netlink: 'syz.1.8633': attribute type 21 has an invalid length. [ 1125.476749][T30655] netlink: 'syz.6.8635': attribute type 3 has an invalid length. [ 1125.494570][T30655] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.8635'. [ 1125.633295][T30659] netlink: 208644 bytes leftover after parsing attributes in process `syz.5.8636'. [ 1125.722831][T30659] netlink: 'syz.5.8636': attribute type 1 has an invalid length. [ 1125.806090][T30664] netlink: 'syz.4.8638': attribute type 22 has an invalid length. [ 1125.850778][T30664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8638'. [ 1126.208898][T30679] netlink: 'syz.1.8640': attribute type 10 has an invalid length. [ 1126.216802][T30679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8640'. [ 1126.236381][T30677] FAULT_INJECTION: forcing a failure. [ 1126.236381][T30677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.312895][T30677] CPU: 0 PID: 30677 Comm: syz.4.8643 Not tainted syzkaller #0 [ 1126.320560][T30677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1126.330702][T30677] Call Trace: [ 1126.334038][T30677] [ 1126.337020][T30677] dump_stack_lvl+0x188/0x250 [ 1126.341781][T30677] ? show_regs_print_info+0x20/0x20 [ 1126.347037][T30677] ? load_image+0x410/0x410 [ 1126.351605][T30677] ? __lock_acquire+0x7b50/0x7b50 [ 1126.356716][T30677] should_fail+0x383/0x4b0 [ 1126.361202][T30677] _copy_from_user+0x2e/0x170 [ 1126.365944][T30677] __copy_msghdr_from_user+0xc9/0x630 [ 1126.371372][T30677] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1126.377161][T30677] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1126.382549][T30677] ? preempt_schedule_notrace+0xfc/0x120 [ 1126.388230][T30677] ? preempt_schedule_common+0xd0/0xd0 [ 1126.393783][T30677] ___sys_sendmsg+0x19a/0x2e0 [ 1126.398507][T30677] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 1126.404694][T30677] ? __sys_sendmsg+0x290/0x290 [ 1126.409686][T30677] __se_sys_sendmsg+0x1b7/0x2a0 [ 1126.414597][T30677] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.419594][T30677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1126.425692][T30677] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.431055][T30677] do_syscall_64+0x4c/0xa0 [ 1126.435516][T30677] ? clear_bhb_loop+0x30/0x80 [ 1126.440243][T30677] ? clear_bhb_loop+0x30/0x80 [ 1126.444990][T30677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.450946][T30677] RIP: 0033:0x7f8ed3366e59 [ 1126.455429][T30677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.475106][T30677] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.483582][T30677] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1126.491610][T30677] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1126.499639][T30677] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.507654][T30677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.515666][T30677] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1126.523757][T30677] [ 1128.465590][T30752] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8669'. [ 1129.017641][T30777] netlink: 'syz.5.8676': attribute type 10 has an invalid length. [ 1129.285589][T30777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.422499][T30777] device bridge_slave_1 left promiscuous mode [ 1129.454949][T30777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.799582][T30787] netlink: 'syz.4.8680': attribute type 11 has an invalid length. [ 1129.807753][T30787] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1130.408200][T30793] netlink: 'syz.5.8683': attribute type 10 has an invalid length. [ 1130.428632][T30793] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8683'. [ 1134.527147][T30850] netlink: 'syz.5.8701': attribute type 10 has an invalid length. [ 1134.607163][T30850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8701'. [ 1138.719366][T30890] netlink: 'syz.6.8716': attribute type 10 has an invalid length. [ 1138.849597][T30890] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8716'. [ 1139.706475][T30924] netlink: 'syz.4.8728': attribute type 7 has an invalid length. [ 1139.768572][T30924] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8728'. [ 1142.425161][T30938] netlink: 'syz.4.8733': attribute type 10 has an invalid length. [ 1142.470274][T30938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8733'. [ 1143.504507][T30969] netlink: 'syz.3.8743': attribute type 1 has an invalid length. [ 1143.555921][T30969] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.8743'. [ 1144.211809][T30988] netlink: 'syz.1.8750': attribute type 10 has an invalid length. [ 1144.264460][T30988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8750'. [ 1144.632175][T31011] FAULT_INJECTION: forcing a failure. [ 1144.632175][T31011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.669471][T31011] CPU: 1 PID: 31011 Comm: syz.1.8758 Not tainted syzkaller #0 [ 1144.677014][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1144.687106][T31011] Call Trace: [ 1144.690423][T31011] [ 1144.693375][T31011] dump_stack_lvl+0x188/0x250 [ 1144.698083][T31011] ? show_regs_print_info+0x20/0x20 [ 1144.703316][T31011] ? load_image+0x410/0x410 [ 1144.707848][T31011] ? __lock_acquire+0x7b50/0x7b50 [ 1144.712893][T31011] ? bpf_test_run+0x78e/0x800 [ 1144.717677][T31011] should_fail+0x383/0x4b0 [ 1144.722123][T31011] _copy_to_user+0x2e/0x130 [ 1144.726647][T31011] bpf_test_finish+0x1b7/0x2f0 [ 1144.731433][T31011] ? convert_skb_to___skb+0x360/0x360 [ 1144.736849][T31011] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 1144.742416][T31011] bpf_prog_test_run_xdp+0x61b/0x900 [ 1144.747729][T31011] ? dev_put+0x70/0x70 [ 1144.751839][T31011] ? dev_put+0x70/0x70 [ 1144.755924][T31011] bpf_prog_test_run+0x31c/0x390 [ 1144.760888][T31011] __sys_bpf+0x5a5/0x6f0 [ 1144.765151][T31011] ? bpf_link_show_fdinfo+0x380/0x380 [ 1144.770561][T31011] __x64_sys_bpf+0x78/0x90 [ 1144.775003][T31011] do_syscall_64+0x4c/0xa0 [ 1144.779472][T31011] ? clear_bhb_loop+0x30/0x80 [ 1144.784169][T31011] ? clear_bhb_loop+0x30/0x80 [ 1144.788864][T31011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1144.794773][T31011] RIP: 0033:0x7f6671ebbe59 [ 1144.799206][T31011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.818828][T31011] RSP: 002b:00007f6670114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.827264][T31011] RAX: ffffffffffffffda RBX: 00007f6672143fa0 RCX: 00007f6671ebbe59 [ 1144.835252][T31011] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1144.843236][T31011] RBP: 00007f6670114090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.851228][T31011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.859222][T31011] R13: 00007f6672144038 R14: 00007f6672143fa0 R15: 00007ffe210f9a88 [ 1144.867224][T31011] [ 1144.903953][T31012] netlink: 'syz.4.8757': attribute type 1 has an invalid length. [ 1144.912133][T31012] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.8757'. [ 1144.929506][T31000] netlink: 'syz.5.8752': attribute type 10 has an invalid length. [ 1145.506061][T31036] netlink: 'syz.3.8766': attribute type 46 has an invalid length. [ 1145.640871][T31036] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8766'. [ 1145.884197][T31042] netlink: 'syz.6.8767': attribute type 10 has an invalid length. [ 1145.931719][T31042] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8767'. [ 1146.257281][T31052] netlink: 'syz.3.8769': attribute type 25 has an invalid length. [ 1146.292454][T31052] netlink: 'syz.3.8769': attribute type 6 has an invalid length. [ 1146.361420][T31054] netlink: 'syz.6.8770': attribute type 1 has an invalid length. [ 1146.402150][T31054] netlink: 191376 bytes leftover after parsing attributes in process `syz.6.8770'. [ 1146.402878][T31052] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1146.663791][T31061] netlink: 'syz.1.8771': attribute type 13 has an invalid length. [ 1146.698751][T31061] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8771'. [ 1147.456965][T31085] netlink: 'syz.3.8782': attribute type 10 has an invalid length. [ 1147.487863][T31085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8782'. [ 1147.508212][T31085] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1148.200668][T31117] netlink: 'syz.6.8794': attribute type 25 has an invalid length. [ 1148.342101][T31109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8790'. [ 1148.386666][T31109] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8790'. [ 1148.464620][T31120] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.8794'. [ 1150.161887][T31167] __nla_validate_parse: 2 callbacks suppressed [ 1150.162062][T31167] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8810'. [ 1150.661975][T31174] delete_channel: no stack [ 1151.239880][T31191] validate_nla: 3 callbacks suppressed [ 1151.239901][T31191] netlink: 'syz.5.8815': attribute type 10 has an invalid length. [ 1151.364048][T31191] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8815'. [ 1152.727114][T31250] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1152.807452][T31251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1155.835143][T31257] netlink: 'syz.4.8834': attribute type 1 has an invalid length. [ 1155.928834][T31257] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.8834'. [ 1156.089246][T31265] netlink: 'syz.1.8836': attribute type 10 has an invalid length. [ 1156.108493][T31265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8836'. [ 1156.712493][T31291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8847'. [ 1157.609713][T31316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8855'. [ 1157.716962][T31320] tap0: tun_chr_ioctl cmd 2148553947 [ 1157.961036][T31324] netlink: 'syz.5.8859': attribute type 10 has an invalid length. [ 1157.981962][T31324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8859'. [ 1158.302540][T31334] delete_channel: no stack [ 1159.443069][T31373] netlink: 'syz.5.8878': attribute type 10 has an invalid length. [ 1159.468520][T31373] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8878'. [ 1160.460554][T31413] FAULT_INJECTION: forcing a failure. [ 1160.460554][T31413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.508985][T31413] CPU: 0 PID: 31413 Comm: syz.4.8890 Not tainted syzkaller #0 [ 1160.516517][T31413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1160.526607][T31413] Call Trace: [ 1160.529918][T31413] [ 1160.532875][T31413] dump_stack_lvl+0x188/0x250 [ 1160.537606][T31413] ? show_regs_print_info+0x20/0x20 [ 1160.542844][T31413] ? load_image+0x410/0x410 [ 1160.547394][T31413] ? __lock_acquire+0x7b50/0x7b50 [ 1160.552469][T31413] should_fail+0x383/0x4b0 [ 1160.556958][T31413] _copy_from_user+0x2e/0x170 [ 1160.561677][T31413] __copy_msghdr_from_user+0xc9/0x630 [ 1160.567084][T31413] ? verify_lock_unused+0x140/0x140 [ 1160.572325][T31413] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1160.577658][T31413] ? perf_tp_event+0xa7e/0xbe0 [ 1160.582467][T31413] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1160.588359][T31413] ___sys_sendmsg+0x19a/0x2e0 [ 1160.593110][T31413] ? __sys_sendmsg+0x290/0x290 [ 1160.597949][T31413] __se_sys_sendmsg+0x1b7/0x2a0 [ 1160.602843][T31413] ? __x64_sys_sendmsg+0x80/0x80 [ 1160.607826][T31413] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1160.613867][T31413] ? lockdep_hardirqs_on+0x94/0x140 [ 1160.619104][T31413] do_syscall_64+0x4c/0xa0 [ 1160.623555][T31413] ? clear_bhb_loop+0x30/0x80 [ 1160.628265][T31413] ? clear_bhb_loop+0x30/0x80 [ 1160.632995][T31413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1160.638920][T31413] RIP: 0033:0x7f8ed3366e59 [ 1160.643372][T31413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.663131][T31413] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.671583][T31413] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1160.679599][T31413] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1160.687634][T31413] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.695635][T31413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.703637][T31413] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1160.711750][T31413] [ 1160.762291][T31415] netlink: 'syz.5.8891': attribute type 21 has an invalid length. [ 1161.097628][T31422] netlink: 'syz.5.8894': attribute type 10 has an invalid length. [ 1161.125359][T31422] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8894'. [ 1161.588560][T31452] netlink: 'syz.1.8905': attribute type 10 has an invalid length. [ 1161.659154][T31452] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8905'. [ 1161.900530][T31466] tap0: tun_chr_ioctl cmd 1074025673 [ 1162.010246][T31469] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.8911'. [ 1162.074964][T31473] FAULT_INJECTION: forcing a failure. [ 1162.074964][T31473] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.106703][T31473] CPU: 1 PID: 31473 Comm: syz.5.8912 Not tainted syzkaller #0 [ 1162.114246][T31473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.124387][T31473] Call Trace: [ 1162.127708][T31473] [ 1162.130666][T31473] dump_stack_lvl+0x188/0x250 [ 1162.135386][T31473] ? show_regs_print_info+0x20/0x20 [ 1162.140614][T31473] ? load_image+0x410/0x410 [ 1162.145188][T31473] ? __might_sleep+0xf0/0xf0 [ 1162.149817][T31473] ? __lock_acquire+0x7b50/0x7b50 [ 1162.154890][T31473] should_fail+0x383/0x4b0 [ 1162.159363][T31473] should_failslab+0x5/0x20 [ 1162.163906][T31473] slab_pre_alloc_hook+0x51/0xc0 [ 1162.168882][T31473] __kmalloc+0x6b/0x340 [ 1162.173065][T31473] ? tomoyo_encode+0x28a/0x550 [ 1162.177921][T31473] tomoyo_encode+0x28a/0x550 [ 1162.182554][T31473] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 1162.188254][T31473] tomoyo_path_number_perm+0x251/0x6b0 [ 1162.193749][T31473] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1162.199242][T31473] ? perf_trace_lock+0xe4/0x390 [ 1162.204314][T31473] security_file_ioctl+0x6c/0xa0 [ 1162.209288][T31473] __se_sys_ioctl+0x48/0x170 [ 1162.213923][T31473] do_syscall_64+0x4c/0xa0 [ 1162.218387][T31473] ? clear_bhb_loop+0x30/0x80 [ 1162.223096][T31473] ? clear_bhb_loop+0x30/0x80 [ 1162.227796][T31473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.233713][T31473] RIP: 0033:0x7fd5b931ce59 [ 1162.238177][T31473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.257821][T31473] RSP: 002b:00007fd5b7575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.266282][T31473] RAX: ffffffffffffffda RBX: 00007fd5b95a4fa0 RCX: 00007fd5b931ce59 [ 1162.274289][T31473] RDX: 00002000000013c0 RSI: 000000004008240b RDI: 0000000000000003 [ 1162.282299][T31473] RBP: 00007fd5b7575090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.290307][T31473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.298316][T31473] R13: 00007fd5b95a5038 R14: 00007fd5b95a4fa0 R15: 00007ffc39190c78 [ 1162.306353][T31473] [ 1162.440732][T31473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.466213][T31483] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.8918'. [ 1162.583098][T31490] FAULT_INJECTION: forcing a failure. [ 1162.583098][T31490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.638682][T31490] CPU: 1 PID: 31490 Comm: syz.4.8920 Not tainted syzkaller #0 [ 1162.646221][T31490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.656302][T31490] Call Trace: [ 1162.659652][T31490] [ 1162.662612][T31490] dump_stack_lvl+0x188/0x250 [ 1162.667331][T31490] ? show_regs_print_info+0x20/0x20 [ 1162.672563][T31490] ? load_image+0x410/0x410 [ 1162.677107][T31490] ? __lock_acquire+0x7b50/0x7b50 [ 1162.682217][T31490] should_fail+0x383/0x4b0 [ 1162.686782][T31490] _copy_from_user+0x2e/0x170 [ 1162.691507][T31490] __copy_msghdr_from_user+0xc9/0x630 [ 1162.696955][T31490] ? verify_lock_unused+0x140/0x140 [ 1162.702182][T31490] ? mark_lock+0x94/0x320 [ 1162.706542][T31490] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1162.711865][T31490] ? __lock_acquire+0x13dc/0x7b50 [ 1162.716942][T31490] ___sys_sendmsg+0x19a/0x2e0 [ 1162.721652][T31490] ? __sys_sendmsg+0x290/0x290 [ 1162.726456][T31490] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1162.732755][T31490] __se_sys_sendmsg+0x1b7/0x2a0 [ 1162.737674][T31490] ? __x64_sys_sendmsg+0x80/0x80 [ 1162.742738][T31490] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1162.748674][T31490] do_syscall_64+0x4c/0xa0 [ 1162.753129][T31490] ? clear_bhb_loop+0x30/0x80 [ 1162.757830][T31490] ? clear_bhb_loop+0x30/0x80 [ 1162.762536][T31490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.768472][T31490] RIP: 0033:0x7f8ed3366e59 [ 1162.772922][T31490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.792563][T31490] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.801033][T31490] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1162.809041][T31490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1162.817080][T31490] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.825082][T31490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.833080][T31490] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1162.841106][T31490] [ 1163.118983][T31503] FAULT_INJECTION: forcing a failure. [ 1163.118983][T31503] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.194340][T31503] CPU: 0 PID: 31503 Comm: syz.4.8925 Not tainted syzkaller #0 [ 1163.201882][T31503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1163.210584][T31505] netlink: 'syz.5.8926': attribute type 10 has an invalid length. [ 1163.211965][T31503] Call Trace: [ 1163.211975][T31503] [ 1163.226020][T31503] dump_stack_lvl+0x188/0x250 [ 1163.230745][T31503] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1163.236944][T31503] ? show_regs_print_info+0x20/0x20 [ 1163.242178][T31503] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1163.248381][T31503] ? dump_stack+0x5/0x20 [ 1163.252669][T31503] should_fail+0x383/0x4b0 [ 1163.257131][T31503] should_failslab+0x5/0x20 [ 1163.261669][T31503] slab_pre_alloc_hook+0x51/0xc0 [ 1163.266653][T31503] kmem_cache_alloc_node+0x47/0x2c0 [ 1163.271889][T31503] ? __alloc_skb+0xf4/0x750 [ 1163.276475][T31503] __alloc_skb+0xf4/0x750 [ 1163.280839][T31503] netlink_sendmsg+0x654/0xbe0 [ 1163.285626][T31503] ? lockdep_hardirqs_on+0x94/0x140 [ 1163.290898][T31503] ? netlink_getsockopt+0x570/0x570 [ 1163.296123][T31503] ? netlink_getsockopt+0x570/0x570 [ 1163.301344][T31503] ? netlink_getsockopt+0x570/0x570 [ 1163.306560][T31503] ____sys_sendmsg+0x5be/0x8f0 [ 1163.311346][T31503] ? __sys_sendmsg_sock+0x30/0x30 [ 1163.316393][T31503] ? import_iovec+0x6f/0xa0 [ 1163.320921][T31503] ___sys_sendmsg+0x236/0x2e0 [ 1163.325626][T31503] ? __sys_sendmsg+0x290/0x290 [ 1163.330412][T31503] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1163.336163][T31503] __se_sys_sendmsg+0x1b7/0x2a0 [ 1163.341040][T31503] ? __x64_sys_sendmsg+0x80/0x80 [ 1163.346006][T31503] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1163.351923][T31503] do_syscall_64+0x4c/0xa0 [ 1163.356423][T31503] ? clear_bhb_loop+0x30/0x80 [ 1163.361134][T31503] ? clear_bhb_loop+0x30/0x80 [ 1163.365844][T31503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1163.371752][T31503] RIP: 0033:0x7f8ed3366e59 [ 1163.376183][T31503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.395824][T31503] RSP: 002b:00007f8ed15bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.404259][T31503] RAX: ffffffffffffffda RBX: 00007f8ed35eefa0 RCX: 00007f8ed3366e59 [ 1163.412246][T31503] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1163.420225][T31503] RBP: 00007f8ed15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.428210][T31503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.436194][T31503] R13: 00007f8ed35ef038 R14: 00007f8ed35eefa0 R15: 00007ffc781e8c68 [ 1163.444197][T31503] [ 1163.475799][T31505] netlink: 'syz.5.8926': attribute type 25 has an invalid length. [ 1163.484245][T31505] netlink: 'syz.5.8926': attribute type 25 has an invalid length. [ 1163.826132][T31520] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8931'. [ 1163.930177][T31520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.951775][T31520] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1163.973119][T31520] bond0 (unregistering): Released all slaves [ 1164.650501][T31546] sock: sock_set_timeout: `syz.1.8940' (pid 31546) tries to set negative timeout [ 1165.077769][T31561] netlink: 'syz.4.8945': attribute type 19 has an invalid length. [ 1165.135067][T31561] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.8945'. [ 1166.283470][T31592] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8958'. [ 1167.823317][T31599] chnl_net:caif_netlink_parms(): no params data found [ 1168.367472][T31599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.438446][T31599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.457344][T31599] device bridge_slave_0 entered promiscuous mode [ 1168.501970][T31599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.528712][T31599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.549819][T31599] device bridge_slave_1 entered promiscuous mode [ 1168.578443][T27059] Bluetooth: hci0: command 0x0409 tx timeout [ 1168.658240][T31599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.776347][T31599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.881715][T31599] team0: Port device team_slave_0 added [ 1168.922369][T31599] team0: Port device team_slave_1 added [ 1168.998851][T31599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.013829][T31599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.207828][T31599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.221635][T31599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.230179][T31599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.256967][T31599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.285754][T31640] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8974'. [ 1169.417963][T31599] device hsr_slave_0 entered promiscuous mode [ 1169.441287][T31599] device hsr_slave_1 entered promiscuous mode [ 1169.455616][T31599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.514385][T31599] Cannot create hsr debugfs directory [ 1169.782659][T31657] device syzkaller0 entered promiscuous mode [ 1170.147542][T31599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.231166][T31599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.401032][T31599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.628581][T31599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.658699][T25511] Bluetooth: hci0: command 0x041b tx timeout [ 1170.838266][T31599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1170.954517][T31599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1170.979585][T31599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1171.012430][T31599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1171.152489][T31699] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1171.232386][T31599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.310977][T31599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.318512][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1171.335889][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1171.355234][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1171.365032][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1171.377378][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.384548][ T8674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.430139][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1171.440711][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1171.449886][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.457101][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.590266][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1171.602534][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1171.616028][T31712] FAULT_INJECTION: forcing a failure. [ 1171.616028][T31712] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.666189][T31712] CPU: 1 PID: 31712 Comm: syz.6.9000 Not tainted syzkaller #0 [ 1171.673738][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1171.683829][T31712] Call Trace: [ 1171.687140][T31712] [ 1171.690107][T31712] dump_stack_lvl+0x188/0x250 [ 1171.694838][T31712] ? show_regs_print_info+0x20/0x20 [ 1171.700087][T31712] ? load_image+0x410/0x410 [ 1171.704637][T31712] ? __might_sleep+0xf0/0xf0 [ 1171.709264][T31712] ? __lock_acquire+0x7b50/0x7b50 [ 1171.714332][T31712] should_fail+0x383/0x4b0 [ 1171.718790][T31712] should_failslab+0x5/0x20 [ 1171.723456][T31712] slab_pre_alloc_hook+0x51/0xc0 [ 1171.728446][T31712] __kmalloc+0x6b/0x340 [ 1171.732634][T31712] ? bpf_test_init+0xf8/0x1b0 [ 1171.737363][T31712] bpf_test_init+0xf8/0x1b0 [ 1171.741911][T31712] bpf_prog_test_run_skb+0x181/0x1190 [ 1171.747317][T31712] ? __fget_files+0x402/0x470 [ 1171.752040][T31712] ? cpu_online+0x60/0x60 [ 1171.756403][T31712] bpf_prog_test_run+0x31c/0x390 [ 1171.761401][T31712] __sys_bpf+0x5a5/0x6f0 [ 1171.765702][T31712] ? bpf_link_show_fdinfo+0x380/0x380 [ 1171.771143][T31712] __x64_sys_bpf+0x78/0x90 [ 1171.775606][T31712] do_syscall_64+0x4c/0xa0 [ 1171.780067][T31712] ? clear_bhb_loop+0x30/0x80 [ 1171.784779][T31712] ? clear_bhb_loop+0x30/0x80 [ 1171.789485][T31712] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1171.795412][T31712] RIP: 0033:0x7f8cb501de59 [ 1171.799860][T31712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.819511][T31712] RSP: 002b:00007f8cb3276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1171.827965][T31712] RAX: ffffffffffffffda RBX: 00007f8cb52a5fa0 RCX: 00007f8cb501de59 [ 1171.835976][T31712] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1171.843991][T31712] RBP: 00007f8cb3276090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.852003][T31712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.860010][T31712] R13: 00007f8cb52a6038 R14: 00007f8cb52a5fa0 R15: 00007fff311205c8 [ 1171.868049][T31712] [ 1171.883137][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1171.899793][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1171.914553][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1171.962224][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1171.971155][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1171.980595][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1171.994143][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1172.007689][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1172.023227][T31599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1172.036030][T31599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1172.062802][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1172.089528][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1172.401433][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.422639][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1172.492968][T31599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.516596][T31731] device lo entered promiscuous mode [ 1172.596907][ T8684] device hsr_slave_1 left promiscuous mode [ 1172.620220][ T8684] device bridge_slave_1 left promiscuous mode [ 1172.626511][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.675114][ T8684] device bridge_slave_0 left promiscuous mode [ 1172.689078][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.708040][T31738] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.9009'. [ 1172.739686][T25509] Bluetooth: hci0: command 0x040f tx timeout [ 1172.775982][ T8684] device veth1_macvtap left promiscuous mode [ 1172.824488][ T8684] device veth0_macvtap left promiscuous mode [ 1173.562373][ T8684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.589694][ T8684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.728585][ T8684] bond0 (unregistering): Released all slaves [ 1173.925389][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1173.969054][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1174.055978][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1174.075106][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1174.113962][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1174.152474][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1174.214191][T31599] device veth0_vlan entered promiscuous mode [ 1174.281215][T31599] device veth1_vlan entered promiscuous mode [ 1174.427037][T31766] device syzkaller0 entered promiscuous mode [ 1174.448915][T31762] netlink: 'syz.4.9016': attribute type 10 has an invalid length. [ 1174.473158][T31762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9016'. [ 1174.807455][T31760] netlink: 'syz.1.9017': attribute type 20 has an invalid length. [ 1174.821315][T25515] Bluetooth: hci0: command 0x0419 tx timeout [ 1174.832892][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1174.860161][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1174.887408][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1174.911617][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1174.942423][T31599] device veth0_macvtap entered promiscuous mode [ 1174.998149][T31599] device veth1_macvtap entered promiscuous mode [ 1175.052185][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.064248][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.075358][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.086281][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.096612][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.118006][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.137847][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.155071][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.167273][T31599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.259150][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1175.283620][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1175.344189][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.404870][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.443302][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.474064][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.499730][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.526272][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.551235][T31599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.574011][T31599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.589150][T31599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.608082][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1175.617859][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1175.643268][T31599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.658972][T31599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.715968][T31599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.754970][T31599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.810084][T31790] netlink: 'syz.5.9026': attribute type 10 has an invalid length. [ 1176.182290][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.198069][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.230668][T31798] netlink: 'syz.5.9029': attribute type 10 has an invalid length. [ 1176.249507][T31798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9029'. [ 1176.274806][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1176.393772][T31799] device lo entered promiscuous mode [ 1176.454125][ T8690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.495558][ T8690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.528693][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1177.229794][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.236219][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.212633][T31842] device lo entered promiscuous mode [ 1180.277668][T31842] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1180.369492][T31849] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9046'. [ 1180.715943][T31849] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1181.123180][T31864] netlink: 'syz.3.9049': attribute type 20 has an invalid length. [ 1181.257558][T31869] netlink: 'syz.6.9052': attribute type 3 has an invalid length. [ 1181.266285][T31869] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9052'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.