last executing test programs: 9.499727317s ago: executing program 1 (id=5292): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0xff, 0x20, 0xffffffffffffffc0}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x6}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x37b0}, 0x1084c0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004", @ANYBLOB, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) 8.963217059s ago: executing program 4 (id=5299): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x2f000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.557148352s ago: executing program 1 (id=5302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000050008"], 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa000065"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 8.465852087s ago: executing program 4 (id=5303): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 'hsr0\x00'}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[{0x28, 0x112, 0x8, "b6d28f298c101ca6243be88fd8f688a12f82b41f92e4ca"}], 0x28}, 0x4000) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"}) 8.208430183s ago: executing program 2 (id=5306): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000060, 0xac14140c}, 0x0, 0x60}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 8.057906611s ago: executing program 2 (id=5308): syz_clone(0x1040000, &(0x7f0000000300)="d1a8d004456b3a73e58ddb3e6e2b6e896fd4725e01bb7894d6685f437f208b0e533b92b6cc68dac960f7f7ab4fd20ed9ae6deb2cb5de51050d6ff00ffd860e5d2fed457302ebc4ddfb137c85a6024296c4677b6f846e1f7322abf88b77eb519558fa5fcdfdb062f3d7c68cce2bf21253dbdb44c7c9092fe47617c15e9413c4ed35bc6fe982ba68d44be6a588aea04cc99d2b5881750788fe1101991f4d16f835bcaebae6e39a086c1542b1d1149bf732", 0xb0, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000700)="a39ba48a9ce614d58423086b101900ce57b2eda171fff0a3566be87a5b961b6e7c0039c17786b7093382678cd32131d3183f81a169fbf1bb1529cfd3e71d4d091ea2fae04627ff49aa4037b1c94379ac63aefa5c3e1b63aca2510d3bff03486bb66e7b9326f9eb9c9f55076d8bf5ef6271ae6ce0d8a3e39be232744baf448a1268954054e88e6da8fdde8172fade47f08ef109d18dead6e443e07503c070e27e065416bca8f90f145da78c6a85bbe25aea") (async) syz_clone(0x1040000, &(0x7f0000000300)="d1a8d004456b3a73e58ddb3e6e2b6e896fd4725e01bb7894d6685f437f208b0e533b92b6cc68dac960f7f7ab4fd20ed9ae6deb2cb5de51050d6ff00ffd860e5d2fed457302ebc4ddfb137c85a6024296c4677b6f846e1f7322abf88b77eb519558fa5fcdfdb062f3d7c68cce2bf21253dbdb44c7c9092fe47617c15e9413c4ed35bc6fe982ba68d44be6a588aea04cc99d2b5881750788fe1101991f4d16f835bcaebae6e39a086c1542b1d1149bf732", 0xb0, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000700)="a39ba48a9ce614d58423086b101900ce57b2eda171fff0a3566be87a5b961b6e7c0039c17786b7093382678cd32131d3183f81a169fbf1bb1529cfd3e71d4d091ea2fae04627ff49aa4037b1c94379ac63aefa5c3e1b63aca2510d3bff03486bb66e7b9326f9eb9c9f55076d8bf5ef6271ae6ce0d8a3e39be232744baf448a1268954054e88e6da8fdde8172fade47f08ef109d18dead6e443e07503c070e27e065416bca8f90f145da78c6a85bbe25aea") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x9, [@datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x76b, 0xffff}, {0x3, 0x10000, 0xf085}, {0x4, 0xe, 0x5}, {0x1, 0x1, 0xd6d}, {0x5, 0x5}], "3bea"}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x1, 0x2e, 0x2e, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000480)=""/209, 0x89, 0xd1, 0x0, 0x3, 0x10000}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x9, [@datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x76b, 0xffff}, {0x3, 0x10000, 0xf085}, {0x4, 0xe, 0x5}, {0x1, 0x1, 0xd6d}, {0x5, 0x5}], "3bea"}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x1, 0x2e, 0x2e, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000480)=""/209, 0x89, 0xd1, 0x0, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0xffffffff, 0x4f, 0x800, r0, 0x7, '\x00', r1, r2, 0x3, 0x0, 0x2, 0x6}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0xffffffff, 0x4f, 0x800, r0, 0x7, '\x00', r1, r2, 0x3, 0x0, 0x2, 0x6}, 0x50) close(r3) (async) close(r3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 7.979571695s ago: executing program 0 (id=5309): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x3, &(0x7f0000000700)=""/56, 0x38}, 0x60) 7.829126034s ago: executing program 0 (id=5310): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="c1e8a4f01d513b58111e1cb3f49dfbd2e696", @ANYBLOB="a1cb735b158af5a8083242d0487320d38e2b0fa5652b0da63e216e2103203bb501d964a370f944e0f7dcaeb28f57b8e5d3df671480d4a0418b00e0e6099b5523", @ANYRESOCT, @ANYRES32], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x2, 0x0, 0xfffffc60, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r4, 0x0, 0x40010122) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 5.689753999s ago: executing program 3 (id=5316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.523065779s ago: executing program 3 (id=5317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x6b}, 0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r4, 0x8927, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001300)=r5, 0x4) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4.078633073s ago: executing program 0 (id=5318): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000e80)=""/4055, 0xfd7}, {&(0x7f0000002fc0)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/238, 0xee}], 0x4}, 0x100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x4000000) 4.014017456s ago: executing program 2 (id=5319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="d85865001a0081044e81f782db4cb904021d0800fe007c05e8fe55a10a0009000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 3.985727808s ago: executing program 1 (id=5320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB='\"\x00\n'], 0x9a) 3.874485985s ago: executing program 4 (id=5321): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x3, &(0x7f0000000700)=""/56, 0x38}, 0x60) 3.78667491s ago: executing program 3 (id=5322): socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802400100000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rc={0x1f, @any, 0xd}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRESHEX=r0], 0x10b8}, 0xff00) 3.737877462s ago: executing program 0 (id=5323): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce011000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.695748415s ago: executing program 1 (id=5324): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0xff, 0x20, 0xffffffffffffffc0}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x6}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x37b0}, 0x1084c0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004", @ANYRES32=0x0, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) 3.60415614s ago: executing program 4 (id=5325): socketpair(0x1d, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a7", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xff, 0x20, 0xffffffffffffffc0}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x6}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x37b0}, 0x1084c0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x4, &(0x7f0000000200)=r10, 0x21) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x10) 3.10218954s ago: executing program 3 (id=5326): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x400a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x2, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000018400000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="50b5bc4200000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x37, "1e"}], 0x18}, 0x97) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 2.801414267s ago: executing program 4 (id=5327): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'geneve0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"}) 2.588045899s ago: executing program 1 (id=5328): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x49, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="a9be12c5b15f94bf5efc5f9d925da175079e972e0352aff92cf1568360cb29874381e61fb1073296f5d7b92090cbe20fdf0c0a5d26f9a8daaf91793ebfe0d495718471a3b798deb9d656b37d019d8b615a44f6bb6c64c3ba06283817d169c3cd2dca06bddf66860eb02a6f199e212071e091eb085ab3f6535bc2e5a9ac12280d9d8fd04290ba2a19f6b3160f43fb7dc4b9eeca8a82b7e157fe1809a9b5e29ff0"], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000030000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) 2.399246181s ago: executing program 2 (id=5329): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="c1e8a4f01d513b58111e1cb3f49dfbd2e696", @ANYBLOB="a1cb735b158af5a8083242d0487320d38e2b0fa5652b0da63e216e2103203bb501d964a370f944e0f7dcaeb28f57b8e5d3df671480d4a0418b00e0e6099b5523", @ANYRESOCT, @ANYRES32], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x2, 0x0, 0xfffffc60, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r4, 0x0, 0x40010122) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 2.399002981s ago: executing program 3 (id=5330): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x4040054) 590.572386ms ago: executing program 0 (id=5331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000780)=r5}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=r3, 0x11, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0]}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r7 = socket$kcm(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000000000006b113e00000000009c003300000000009500a5050000000000000000000000000000000000000000920835"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) setsockopt$sock_attach_bpf(r7, 0x1, 0x3c, &(0x7f0000000640), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) 564.517657ms ago: executing program 3 (id=5332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x40844) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x6b}, 0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r4, 0x8927, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001300)=r5, 0x4) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 477.852653ms ago: executing program 1 (id=5333): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0xff, 0x20, 0xffffffffffffffc0}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x6}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x37b0}, 0x1084c0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004", @ANYBLOB, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x10) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) 428.551565ms ago: executing program 2 (id=5334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) close(r3) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB='\"\x00\n'], 0x9a) 300.955683ms ago: executing program 4 (id=5335): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x3, &(0x7f0000000700)=""/56, 0x38}, 0x60) 92.933085ms ago: executing program 0 (id=5336): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32], 0x68}, 0x84) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x11, 0x0, 0x40019) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) 0s ago: executing program 2 (id=5337): socketpair(0x1d, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x31) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a7", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xff, 0x20, 0xffffffffffffffc0}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x6}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x37b0}, 0x1084c0, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x4, &(0x7f0000000200)=r10, 0x21) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x10) kernel console output (not intermixed with test programs): 02 [ 719.883747][T15670] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 719.891857][T15670] [ 722.079905][T15651] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 722.091157][T15651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3621'. [ 722.100777][T15651] device team0 entered promiscuous mode [ 722.106379][T15651] device team_slave_0 entered promiscuous mode [ 722.113152][T15651] device team_slave_1 entered promiscuous mode [ 722.119762][T15651] device vlan0 entered promiscuous mode [ 722.126332][T15651] bridge0: port 3(team0) entered blocking state [ 722.133298][T15651] bridge0: port 3(team0) entered disabled state [ 722.143889][T15651] bridge0: port 3(team0) entered blocking state [ 722.150351][T15651] bridge0: port 3(team0) entered forwarding state [ 722.177038][T15680] tap0: tun_chr_ioctl cmd 2147767517 [ 730.775212][T15850] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3689'. [ 731.911431][ T4362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.962417][T15872] FAULT_INJECTION: forcing a failure. [ 731.962417][T15872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.978632][T15872] CPU: 1 PID: 15872 Comm: syz.0.3696 Not tainted syzkaller #0 [ 731.986174][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.996286][T15872] Call Trace: [ 731.999609][T15872] [ 732.002582][T15872] dump_stack_lvl+0x188/0x24e [ 732.007408][T15872] ? show_regs_print_info+0x12/0x12 [ 732.012674][T15872] ? load_image+0x400/0x400 [ 732.017238][T15872] ? __lock_acquire+0x7d10/0x7d10 [ 732.022319][T15872] ? trace_call_bpf+0x5d6/0x6b0 [ 732.027235][T15872] should_fail_ex+0x399/0x4d0 [ 732.032082][T15872] _copy_from_user+0x2c/0x170 [ 732.036856][T15872] __sys_bpf+0x2ea/0x780 [ 732.041168][T15872] ? bpf_link_show_fdinfo+0x380/0x380 [ 732.046618][T15872] ? lock_chain_count+0x20/0x20 [ 732.051556][T15872] __x64_sys_bpf+0x78/0x90 [ 732.056050][T15872] do_syscall_64+0x4c/0xa0 [ 732.060541][T15872] ? clear_bhb_loop+0x60/0xb0 [ 732.065274][T15872] ? clear_bhb_loop+0x60/0xb0 [ 732.070007][T15872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.075959][T15872] RIP: 0033:0x7fd2b159aeb9 [ 732.080429][T15872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.100098][T15872] RSP: 002b:00007fd2b2469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 732.108662][T15872] RAX: ffffffffffffffda RBX: 00007fd2b1816090 RCX: 00007fd2b159aeb9 [ 732.116691][T15872] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 732.124720][T15872] RBP: 00007fd2b2469090 R08: 0000000000000000 R09: 0000000000000000 [ 732.132749][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.140784][T15872] R13: 00007fd2b1816128 R14: 00007fd2b1816090 R15: 00007ffdf1036218 [ 732.148836][T15872] [ 733.016137][ T4362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 735.237972][T15898] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3706'. [ 735.405073][T15900] device syzkaller0 entered promiscuous mode [ 736.251715][T15925] netlink: 'syz.3.3716': attribute type 13 has an invalid length. [ 736.291880][T15925] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3716'. [ 736.379467][T15925] syz_tun: refused to change device tx_queue_len [ 736.452044][T15925] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 737.214066][T15938] netlink: 'syz.3.3719': attribute type 9 has an invalid length. [ 737.288760][T15938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3719'. [ 737.525650][T15947] device veth1_macvtap left promiscuous mode [ 738.078144][T15961] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3726'. [ 738.118592][T15960] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3726'. [ 738.491247][T15970] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.3731'. [ 739.048426][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 739.569741][T15994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3741'. [ 741.407316][T16035] netlink: 183964 bytes leftover after parsing attributes in process `syz.3.3753'. [ 741.461390][T16035] netlink: zone id is out of range [ 741.536796][T16035] netlink: zone id is out of range [ 741.549880][T16035] netlink: zone id is out of range [ 741.555099][T16035] netlink: zone id is out of range [ 741.570641][T16035] netlink: zone id is out of range [ 741.575858][T16035] netlink: zone id is out of range [ 741.581602][T16035] netlink: zone id is out of range [ 741.598437][T16035] netlink: zone id is out of range [ 741.605421][T16035] netlink: zone id is out of range [ 741.641206][T16035] netlink: zone id is out of range [ 744.495445][T16047] netlink: 'syz.4.3757': attribute type 39 has an invalid length. [ 744.540182][T16047] device veth0_macvtap left promiscuous mode [ 744.745293][T16048] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 744.758773][T16048] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 744.769574][T16048] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 745.964883][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3770'. [ 746.009387][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3770'. [ 746.049094][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3770'. [ 746.109751][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3770'. [ 746.433673][T16101] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3776'. [ 746.474536][T16103] netlink: 'syz.1.3777': attribute type 21 has an invalid length. [ 746.487255][T16103] netlink: 'syz.1.3777': attribute type 1 has an invalid length. [ 746.502698][T16101] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 746.518397][T16101] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3776'. [ 747.719362][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.725816][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.703397][T16134] FAULT_INJECTION: forcing a failure. [ 748.703397][T16134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.756283][T16134] CPU: 1 PID: 16134 Comm: syz.0.3787 Not tainted syzkaller #0 [ 748.763838][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.773942][T16134] Call Trace: [ 748.777258][T16134] [ 748.780228][T16134] dump_stack_lvl+0x188/0x24e [ 748.784975][T16134] ? show_regs_print_info+0x12/0x12 [ 748.790236][T16134] ? load_image+0x400/0x400 [ 748.794790][T16134] ? __lock_acquire+0x7d10/0x7d10 [ 748.799871][T16134] ? __rcu_read_unlock+0x78/0xd0 [ 748.804862][T16134] should_fail_ex+0x399/0x4d0 [ 748.809602][T16134] _copy_to_user+0x2c/0x130 [ 748.814156][T16134] bpf_test_finish+0x198/0x600 [ 748.818975][T16134] ? convert___skb_to_skb+0x580/0x580 [ 748.824401][T16134] ? convert_skb_to___skb+0x420/0x420 [ 748.829830][T16134] ? __build_skb+0x257/0x3c0 [ 748.834488][T16134] bpf_prog_test_run_skb+0xc99/0x12a0 [ 748.839927][T16134] ? cpu_online+0xa0/0xa0 [ 748.844307][T16134] bpf_prog_test_run+0x31e/0x390 [ 748.849315][T16134] __sys_bpf+0x62b/0x780 [ 748.853614][T16134] ? bpf_link_show_fdinfo+0x380/0x380 [ 748.859053][T16134] ? lock_chain_count+0x20/0x20 [ 748.863962][T16134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 748.870013][T16134] __x64_sys_bpf+0x78/0x90 [ 748.874484][T16134] do_syscall_64+0x4c/0xa0 [ 748.878949][T16134] ? clear_bhb_loop+0x60/0xb0 [ 748.883691][T16134] ? clear_bhb_loop+0x60/0xb0 [ 748.888438][T16134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.894385][T16134] RIP: 0033:0x7fd2b159aeb9 [ 748.898857][T16134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.918518][T16134] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.926985][T16134] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 748.935013][T16134] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 748.943040][T16134] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 748.951418][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.959451][T16134] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 748.967495][T16134] [ 751.663509][T16130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3788'. [ 751.688910][T16153] netlink: 'syz.0.3792': attribute type 10 has an invalid length. [ 751.714030][T16153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.757068][T16153] device batadv0 entered promiscuous mode [ 751.771465][T16153] team0: Port device batadv0 added [ 752.076353][ T9399] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 752.086143][ T9399] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 752.659094][T16166] delete_channel: no stack [ 753.006847][T16183] netlink: 'syz.1.3803': attribute type 21 has an invalid length. [ 754.409306][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 755.297145][T16183] netlink: 'syz.1.3803': attribute type 10 has an invalid length. [ 755.317330][T16183] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 755.334304][T16189] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 755.364129][T16189] team0: Port device vlan0 added [ 758.487695][T16243] netlink: 'syz.4.3821': attribute type 21 has an invalid length. [ 761.778602][T16243] netlink: 'syz.4.3821': attribute type 10 has an invalid length. [ 761.799772][T16243] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 761.983951][T16283] FAULT_INJECTION: forcing a failure. [ 761.983951][T16283] name failslab, interval 1, probability 0, space 0, times 0 [ 762.018053][T16283] CPU: 0 PID: 16283 Comm: syz.4.3832 Not tainted syzkaller #0 [ 762.025624][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.035834][T16283] Call Trace: [ 762.039212][T16283] [ 762.042187][T16283] dump_stack_lvl+0x188/0x24e [ 762.046923][T16283] ? sctp_sendmsg+0x15b0/0x2940 [ 762.051845][T16283] ? ___sys_sendmsg+0x2a2/0x360 [ 762.056769][T16283] ? show_regs_print_info+0x12/0x12 [ 762.062042][T16283] ? load_image+0x400/0x400 [ 762.066618][T16283] should_fail_ex+0x399/0x4d0 [ 762.071371][T16283] should_failslab+0x5/0x20 [ 762.075949][T16283] slab_pre_alloc_hook+0x59/0x310 [ 762.081124][T16283] ? sctp_add_bind_addr+0x89/0x350 [ 762.086298][T16283] __kmem_cache_alloc_node+0x4f/0x260 [ 762.091171][T16285] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.3834'. [ 762.091709][T16283] ? sctp_add_bind_addr+0x89/0x350 [ 762.106162][T16283] kmalloc_trace+0x26/0xe0 [ 762.110653][T16283] sctp_add_bind_addr+0x89/0x350 [ 762.115657][T16283] sctp_copy_local_addr_list+0x311/0x4e0 [ 762.121355][T16283] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 762.127142][T16283] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 762.133279][T16283] ? sctp_v4_is_any+0x31/0x50 [ 762.138010][T16283] ? sctp_copy_one_addr+0x93/0x660 [ 762.143174][T16283] sctp_bind_addr_copy+0xaf/0x3c0 [ 762.148253][T16283] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 762.154645][T16283] sctp_connect_new_asoc+0x2f5/0x6a0 [ 762.159985][T16283] ? __sctp_connect+0xd80/0xd80 [ 762.164890][T16283] ? __local_bh_enable_ip+0x136/0x1c0 [ 762.170308][T16283] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 762.175902][T16283] ? security_sctp_bind_connect+0x85/0xb0 [ 762.181672][T16283] sctp_sendmsg+0x15b0/0x2940 [ 762.186440][T16283] ? sctp_getsockopt+0x8a0/0x8a0 [ 762.191448][T16283] ? __lock_acquire+0x7d10/0x7d10 [ 762.196525][T16283] ? aa_af_perm+0x340/0x340 [ 762.201076][T16283] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 762.207551][T16283] ? inet_sendmsg+0xe5/0x2f0 [ 762.212193][T16283] ? inet_send_prepare+0x260/0x260 [ 762.217365][T16283] ____sys_sendmsg+0x5be/0x970 [ 762.222234][T16283] ? __sys_sendmsg_sock+0x30/0x30 [ 762.227310][T16283] ? __import_iovec+0x315/0x500 [ 762.232209][T16283] ? import_iovec+0x6f/0xa0 [ 762.236754][T16283] ___sys_sendmsg+0x2a2/0x360 [ 762.241490][T16283] ? __sys_sendmsg+0x290/0x290 [ 762.246332][T16283] ? __lock_acquire+0x7d10/0x7d10 [ 762.251471][T16283] __se_sys_sendmsg+0x1bb/0x2a0 [ 762.256402][T16283] ? __x64_sys_sendmsg+0x80/0x80 [ 762.261436][T16283] ? lockdep_hardirqs_on+0x94/0x140 [ 762.266724][T16283] do_syscall_64+0x4c/0xa0 [ 762.271211][T16283] ? clear_bhb_loop+0x60/0xb0 [ 762.275942][T16283] ? clear_bhb_loop+0x60/0xb0 [ 762.280675][T16283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.286663][T16283] RIP: 0033:0x7ffa6179aeb9 [ 762.291132][T16283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.310797][T16283] RSP: 002b:00007ffa62662028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.319270][T16283] RAX: ffffffffffffffda RBX: 00007ffa61a15fa0 RCX: 00007ffa6179aeb9 [ 762.327305][T16283] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003 [ 762.335475][T16283] RBP: 00007ffa62662090 R08: 0000000000000000 R09: 0000000000000000 [ 762.343502][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.351532][T16283] R13: 00007ffa61a16038 R14: 00007ffa61a15fa0 R15: 00007ffc48528b68 [ 762.359584][T16283] [ 762.467629][T16289] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.675949][T16301] netlink: 'syz.2.3840': attribute type 3 has an invalid length. [ 762.736493][T16301] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3840'. [ 764.818696][ T30] wlan1: Trigger new scan to find an IBSS to join [ 765.993621][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 767.862460][T16330] netlink: 'syz.2.3844': attribute type 21 has an invalid length. [ 767.871164][T16336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3846'. [ 767.892060][T16337] netlink: 'syz.2.3844': attribute type 10 has an invalid length. [ 767.927910][T16337] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 767.942911][T16340] netlink: 'syz.0.3846': attribute type 39 has an invalid length. [ 767.960473][T16340] device veth0_macvtap left promiscuous mode [ 768.117875][T16350] netlink: 'syz.4.3850': attribute type 21 has an invalid length. [ 768.812630][ T30] wlan1: Trigger new scan to find an IBSS to join [ 769.624178][T16381] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3858'. [ 770.671728][ T30] wlan1: Creating new IBSS network, BSSID fa:0d:66:7d:3e:ad [ 771.008188][T16394] netlink: 'syz.3.3864': attribute type 10 has an invalid length. [ 771.086137][T16394] bridge0: port 3(team0) entered disabled state [ 771.129759][T16394] device team0 left promiscuous mode [ 771.145448][T16394] device team_slave_0 left promiscuous mode [ 771.173272][T16394] device team_slave_1 left promiscuous mode [ 771.180120][T16394] device geneve1 left promiscuous mode [ 771.186259][T16394] bridge0: port 3(team0) entered disabled state [ 771.534472][T16413] FAULT_INJECTION: forcing a failure. [ 771.534472][T16413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.595672][T16413] CPU: 0 PID: 16413 Comm: syz.2.3870 Not tainted syzkaller #0 [ 771.603223][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.613333][T16413] Call Trace: [ 771.616650][T16413] [ 771.619609][T16413] dump_stack_lvl+0x188/0x24e [ 771.624422][T16413] ? show_regs_print_info+0x12/0x12 [ 771.629659][T16413] ? load_image+0x400/0x400 [ 771.634195][T16413] ? __lock_acquire+0x7d10/0x7d10 [ 771.639264][T16413] should_fail_ex+0x399/0x4d0 [ 771.643985][T16413] _copy_from_user+0x2c/0x170 [ 771.648695][T16413] iovec_from_user+0x143/0x360 [ 771.653486][T16413] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 771.659690][T16413] __import_iovec+0x6d/0x500 [ 771.664315][T16413] ? import_iovec+0x55/0xa0 [ 771.668943][T16413] import_iovec+0x6f/0xa0 [ 771.673299][T16413] ___sys_sendmsg+0x252/0x360 [ 771.678016][T16413] ? __sys_sendmsg+0x290/0x290 [ 771.682856][T16413] __se_sys_sendmsg+0x1bb/0x2a0 [ 771.687748][T16413] ? __x64_sys_sendmsg+0x80/0x80 [ 771.692745][T16413] do_syscall_64+0x4c/0xa0 [ 771.697192][T16413] ? clear_bhb_loop+0x60/0xb0 [ 771.701898][T16413] ? clear_bhb_loop+0x60/0xb0 [ 771.707302][T16413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.713228][T16413] RIP: 0033:0x7f8a3259aeb9 [ 771.717670][T16413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.737303][T16413] RSP: 002b:00007f8a334a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.745749][T16413] RAX: ffffffffffffffda RBX: 00007f8a32815fa0 RCX: 00007f8a3259aeb9 [ 771.753751][T16413] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 771.761747][T16413] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 771.769744][T16413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.777742][T16413] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 771.785755][T16413] [ 772.039279][T16422] FAULT_INJECTION: forcing a failure. [ 772.039279][T16422] name failslab, interval 1, probability 0, space 0, times 0 [ 772.084369][T16422] CPU: 1 PID: 16422 Comm: syz.2.3874 Not tainted syzkaller #0 [ 772.091938][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.102054][T16422] Call Trace: [ 772.105373][T16422] [ 772.108344][T16422] dump_stack_lvl+0x188/0x24e [ 772.113079][T16422] ? show_regs_print_info+0x12/0x12 [ 772.118330][T16422] ? load_image+0x400/0x400 [ 772.122875][T16422] ? __lock_acquire+0x7d10/0x7d10 [ 772.127942][T16422] should_fail_ex+0x399/0x4d0 [ 772.132663][T16422] should_failslab+0x5/0x20 [ 772.137204][T16422] slab_pre_alloc_hook+0x59/0x310 [ 772.142255][T16422] ? verify_lock_unused+0x140/0x140 [ 772.147516][T16422] ? bpf_test_init+0x9f/0x140 [ 772.152241][T16422] __kmem_cache_alloc_node+0x4f/0x260 [ 772.157661][T16422] ? bpf_test_init+0x9f/0x140 [ 772.162409][T16422] __kmalloc+0xa0/0x240 [ 772.166618][T16422] bpf_test_init+0x9f/0x140 [ 772.171159][T16422] bpf_prog_test_run_xdp+0x484/0xf10 [ 772.176504][T16422] ? dev_put+0x80/0x80 [ 772.180612][T16422] ? dev_put+0x80/0x80 [ 772.184712][T16422] bpf_prog_test_run+0x31e/0x390 [ 772.189779][T16422] __sys_bpf+0x62b/0x780 [ 772.194060][T16422] ? bpf_link_show_fdinfo+0x380/0x380 [ 772.199497][T16422] ? lock_chain_count+0x20/0x20 [ 772.204399][T16422] __x64_sys_bpf+0x78/0x90 [ 772.208860][T16422] do_syscall_64+0x4c/0xa0 [ 772.213316][T16422] ? clear_bhb_loop+0x60/0xb0 [ 772.218026][T16422] ? clear_bhb_loop+0x60/0xb0 [ 772.222742][T16422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.228665][T16422] RIP: 0033:0x7f8a3259aeb9 [ 772.233111][T16422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.252851][T16422] RSP: 002b:00007f8a334a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.261339][T16422] RAX: ffffffffffffffda RBX: 00007f8a32815fa0 RCX: 00007f8a3259aeb9 [ 772.269354][T16422] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 772.277365][T16422] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 772.285370][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.293368][T16422] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 772.301380][T16422] [ 772.494902][T16428] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 772.523310][T16428] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3875'. [ 774.137378][T16458] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 774.174383][T16458] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3885'. [ 774.197578][T16464] netlink: 'syz.0.3885': attribute type 29 has an invalid length. [ 774.232959][T16464] netlink: 'syz.0.3885': attribute type 29 has an invalid length. [ 774.331538][T16465] netlink: 'syz.2.3886': attribute type 10 has an invalid length. [ 774.947216][T16479] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3891'. [ 775.686455][T16496] netlink: 'syz.2.3896': attribute type 10 has an invalid length. [ 775.700259][T16496] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3896'. [ 776.032469][T16505] FAULT_INJECTION: forcing a failure. [ 776.032469][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 776.085653][T16505] CPU: 1 PID: 16505 Comm: syz.4.3899 Not tainted syzkaller #0 [ 776.093213][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 776.103353][T16505] Call Trace: [ 776.106696][T16505] [ 776.109676][T16505] dump_stack_lvl+0x188/0x24e [ 776.114420][T16505] ? sctp_sendmsg+0x15b0/0x2940 [ 776.119355][T16505] ? ___sys_sendmsg+0x2a2/0x360 [ 776.124295][T16505] ? show_regs_print_info+0x12/0x12 [ 776.129583][T16505] ? load_image+0x400/0x400 [ 776.134592][T16505] should_fail_ex+0x399/0x4d0 [ 776.139471][T16505] should_failslab+0x5/0x20 [ 776.144040][T16505] slab_pre_alloc_hook+0x59/0x310 [ 776.149138][T16505] ? sctp_add_bind_addr+0x89/0x350 [ 776.154311][T16505] __kmem_cache_alloc_node+0x4f/0x260 [ 776.159740][T16505] ? sctp_add_bind_addr+0x89/0x350 [ 776.164895][T16505] kmalloc_trace+0x26/0xe0 [ 776.169368][T16505] sctp_add_bind_addr+0x89/0x350 [ 776.174363][T16505] sctp_copy_local_addr_list+0x311/0x4e0 [ 776.180040][T16505] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 776.185801][T16505] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 776.192031][T16505] ? sctp_v4_is_any+0x31/0x50 [ 776.196770][T16505] ? sctp_copy_one_addr+0x93/0x660 [ 776.201930][T16505] sctp_bind_addr_copy+0xaf/0x3c0 [ 776.207009][T16505] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 776.213406][T16505] sctp_connect_new_asoc+0x2f5/0x6a0 [ 776.218748][T16505] ? __sctp_connect+0xd80/0xd80 [ 776.223661][T16505] ? __local_bh_enable_ip+0x136/0x1c0 [ 776.229085][T16505] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 776.234683][T16505] ? security_sctp_bind_connect+0x85/0xb0 [ 776.240458][T16505] sctp_sendmsg+0x15b0/0x2940 [ 776.245210][T16505] ? sctp_getsockopt+0x8a0/0x8a0 [ 776.250196][T16505] ? __lock_acquire+0x7d10/0x7d10 [ 776.255277][T16505] ? aa_af_perm+0x340/0x340 [ 776.259826][T16505] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 776.266305][T16505] ? inet_sendmsg+0xe5/0x2f0 [ 776.270962][T16505] ? inet_send_prepare+0x260/0x260 [ 776.276133][T16505] ____sys_sendmsg+0x5be/0x970 [ 776.280984][T16505] ? __sys_sendmsg_sock+0x30/0x30 [ 776.286144][T16505] ? __import_iovec+0x315/0x500 [ 776.291040][T16505] ? import_iovec+0x6f/0xa0 [ 776.295577][T16505] ___sys_sendmsg+0x2a2/0x360 [ 776.300300][T16505] ? __sys_sendmsg+0x290/0x290 [ 776.305151][T16505] ? __lock_acquire+0x7d10/0x7d10 [ 776.310295][T16505] __se_sys_sendmsg+0x1bb/0x2a0 [ 776.315217][T16505] ? ct_nmi_exit+0x145/0x1c0 [ 776.319859][T16505] ? __x64_sys_sendmsg+0x80/0x80 [ 776.324853][T16505] ? lockdep_hardirqs_on+0x94/0x140 [ 776.330171][T16505] do_syscall_64+0x4c/0xa0 [ 776.334682][T16505] ? clear_bhb_loop+0x60/0xb0 [ 776.339411][T16505] ? clear_bhb_loop+0x60/0xb0 [ 776.344248][T16505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.350230][T16505] RIP: 0033:0x7ffa6179aeb9 [ 776.354686][T16505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.374320][T16505] RSP: 002b:00007ffa62662028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.382763][T16505] RAX: ffffffffffffffda RBX: 00007ffa61a15fa0 RCX: 00007ffa6179aeb9 [ 776.390761][T16505] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003 [ 776.398759][T16505] RBP: 00007ffa62662090 R08: 0000000000000000 R09: 0000000000000000 [ 776.406750][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.414747][T16505] R13: 00007ffa61a16038 R14: 00007ffa61a15fa0 R15: 00007ffc48528b68 [ 776.422760][T16505] [ 776.914154][T16507] netlink: 'syz.3.3900': attribute type 19 has an invalid length. [ 776.928813][T16508] netlink: 'syz.3.3900': attribute type 19 has an invalid length. [ 779.235307][T16544] netlink: 'syz.3.3913': attribute type 17 has an invalid length. [ 781.005210][T16569] netlink: 'syz.2.3922': attribute type 10 has an invalid length. [ 781.094645][T16573] netlink: 'syz.2.3922': attribute type 3 has an invalid length. [ 781.191368][T16573] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3922'. [ 781.725771][T16569] team0: Port device dummy0 added [ 781.758431][T16576] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3926'. [ 782.129494][T16579] device wg2 entered promiscuous mode [ 783.110526][T16610] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3938'. [ 783.178633][T16610] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3938'. [ 783.231468][T16615] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3938'. [ 783.380532][T16610] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3938'. [ 783.447338][T16620] FAULT_INJECTION: forcing a failure. [ 783.447338][T16620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.505390][T16620] CPU: 0 PID: 16620 Comm: syz.4.3941 Not tainted syzkaller #0 [ 783.512948][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.523048][T16620] Call Trace: [ 783.526359][T16620] [ 783.529325][T16620] dump_stack_lvl+0x188/0x24e [ 783.534050][T16620] ? show_regs_print_info+0x12/0x12 [ 783.539297][T16620] ? load_image+0x400/0x400 [ 783.543836][T16620] ? __lock_acquire+0x7d10/0x7d10 [ 783.548912][T16620] ? snprintf+0xe5/0x140 [ 783.553186][T16620] should_fail_ex+0x399/0x4d0 [ 783.557911][T16620] _copy_to_user+0x2c/0x130 [ 783.562459][T16620] simple_read_from_buffer+0xe3/0x150 [ 783.567878][T16620] proc_fail_nth_read+0x1a6/0x220 [ 783.572938][T16620] ? proc_fault_inject_write+0x310/0x310 [ 783.578614][T16620] ? fsnotify_perm+0x248/0x550 [ 783.583444][T16620] ? proc_fault_inject_write+0x310/0x310 [ 783.589111][T16620] vfs_read+0x2de/0xa00 [ 783.593327][T16620] ? kernel_read+0x1e0/0x1e0 [ 783.597956][T16620] ? __fget_files+0x28/0x4b0 [ 783.602588][T16620] ? __fget_files+0x28/0x4b0 [ 783.607229][T16620] ? __fget_files+0x43d/0x4b0 [ 783.611962][T16620] ? __fdget_pos+0x2ae/0x360 [ 783.616622][T16620] ? ksys_read+0x71/0x250 [ 783.620996][T16620] ksys_read+0x14c/0x250 [ 783.625282][T16620] ? vfs_write+0xa30/0xa30 [ 783.629746][T16620] ? lockdep_hardirqs_on+0x94/0x140 [ 783.635025][T16620] do_syscall_64+0x4c/0xa0 [ 783.639517][T16620] ? clear_bhb_loop+0x60/0xb0 [ 783.644235][T16620] ? clear_bhb_loop+0x60/0xb0 [ 783.648960][T16620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.654889][T16620] RIP: 0033:0x7ffa6175b78e [ 783.659335][T16620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.678989][T16620] RSP: 002b:00007ffa62661fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.687447][T16620] RAX: ffffffffffffffda RBX: 00007ffa626626c0 RCX: 00007ffa6175b78e [ 783.695449][T16620] RDX: 000000000000000f RSI: 00007ffa626620a0 RDI: 000000000000000b [ 783.703449][T16620] RBP: 00007ffa62662090 R08: 0000000000000000 R09: 0000000000000000 [ 783.711447][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.719473][T16620] R13: 00007ffa61a16038 R14: 00007ffa61a15fa0 R15: 00007ffc48528b68 [ 783.727491][T16620] [ 786.763150][T16704] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3966'. [ 787.352089][T16704] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.369231][T16704] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.383572][T16704] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.405735][T16704] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.461074][T16708] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 787.612631][T16709] device syzkaller0 entered promiscuous mode [ 787.660476][T16713] tipc: Started in network mode [ 787.665782][T16713] tipc: Node identity 9215a268, cluster identity 4711 [ 787.686232][T16713] tipc: Node number set to 2450891368 [ 794.384776][T16760] netlink: 'syz.0.3983': attribute type 3 has an invalid length. [ 794.438941][T16760] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3983'. [ 796.119980][T16725] netlink: 'syz.2.3973': attribute type 10 has an invalid length. [ 796.129553][T16725] device syz_tun entered promiscuous mode [ 796.165129][T16725] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 796.227425][T16759] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 796.258050][T16759] device dummy0 entered promiscuous mode [ 796.293653][T16759] team0: Port device dummy0 added [ 796.627070][T16767] Q±6ã×\b‹¡Y­4: renamed from lo [ 797.019825][ T1304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 797.034341][T16780] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3989'. [ 797.063619][T16777] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3989'. [ 797.102725][T16777] net_ratelimit: 18 callbacks suppressed [ 797.102765][T16777] netlink: zone id is out of range [ 797.154910][T16780] netlink: zone id is out of range [ 797.198161][T16780] netlink: zone id is out of range [ 797.218937][T16780] netlink: zone id is out of range [ 797.256354][T16777] netlink: zone id is out of range [ 797.272172][T16780] netlink: get zone limit has 8 unknown bytes [ 797.288997][T16777] netlink: zone id is out of range [ 797.309330][T16777] netlink: get zone limit has 8 unknown bytes [ 797.443238][T16790] netlink: 'syz.1.3993': attribute type 10 has an invalid length. [ 797.472278][T16790] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3993'. [ 797.530498][T16792] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 797.592562][T16792] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3993'. [ 797.674756][T16796] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 797.715642][T16796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3995'. [ 797.939288][T16798] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3996'. [ 798.025681][T16798] device team_slave_0 left promiscuous mode [ 798.094004][T16802] netlink: 'syz.0.3997': attribute type 11 has an invalid length. [ 798.141511][T16802] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3997'. [ 798.234072][T16798] team0: Port device team_slave_0 removed [ 798.254019][T16798] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 798.305501][T16810] netlink: 'syz.4.3998': attribute type 3 has an invalid length. [ 798.338601][T16810] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3998'. [ 798.366901][T16806] netlink: 'syz.4.3998': attribute type 10 has an invalid length. [ 798.671592][T16806] team0: Port device dummy0 added [ 799.364483][T16831] Dead loop on virtual device ip6_vti0, fix it urgently! [ 799.775297][T16846] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4013'. [ 799.911964][T16846] team0: Port device team_slave_0 removed [ 799.926642][T16850] netlink: 'syz.2.4012': attribute type 10 has an invalid length. [ 800.135953][T16852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4012'. [ 800.155633][T16855] netlink: 'syz.3.4015': attribute type 10 has an invalid length. [ 800.166701][T16858] netlink: 'syz.3.4015': attribute type 3 has an invalid length. [ 800.194473][T16858] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4015'. [ 800.840075][T16872] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4020'. [ 801.224119][T16872] netlink: 'syz.2.4020': attribute type 10 has an invalid length. [ 801.272817][T16872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4020'. [ 801.373396][T16872] device team0 entered promiscuous mode [ 801.406164][T16872] device team_slave_0 entered promiscuous mode [ 801.497195][T16872] device team_slave_1 entered promiscuous mode [ 801.556159][T16872] device dummy0 entered promiscuous mode [ 801.888798][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.918676][T16872] batman_adv: batadv0: Interface activated: team0 [ 801.925326][T16872] batman_adv: batadv0: Interface deactivated: team0 [ 801.988416][T16872] batman_adv: batadv0: Removing interface: team0 [ 802.034758][T16894] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4028'. [ 802.173780][T16894] team0: Port device team_slave_0 removed [ 802.181764][T16894] net_ratelimit: 2 callbacks suppressed [ 802.181799][T16894] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 803.811853][T16931] netlink: 'syz.2.4034': attribute type 11 has an invalid length. [ 803.839844][T16931] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4034'. [ 805.870279][T16913] netlink: 'syz.4.4031': attribute type 10 has an invalid length. [ 805.894317][T16918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.930425][T16936] netlink: 'syz.0.4035': attribute type 10 has an invalid length. [ 805.970216][T16936] device wlan1 entered promiscuous mode [ 806.027808][T16936] team0: Port device wlan1 added [ 807.613979][T16973] netlink: 'syz.4.4051': attribute type 29 has an invalid length. [ 807.853055][T16973] netlink: 'syz.4.4051': attribute type 29 has an invalid length. [ 808.394762][T16997] netlink: 'syz.4.4058': attribute type 11 has an invalid length. [ 808.431530][T16997] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4058'. [ 808.667908][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.674386][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.863573][T14061] wlan1: Trigger new scan to find an IBSS to join [ 811.001944][T16990] netlink: 'syz.1.4056': attribute type 2 has an invalid length. [ 811.010069][T16990] netlink: 'syz.1.4056': attribute type 8 has an invalid length. [ 811.017841][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4056'. [ 812.518004][T17044] netlink: 'syz.2.4072': attribute type 10 has an invalid length. [ 812.804416][T17044] device wlan1 entered promiscuous mode [ 812.915831][T17044] team0: Port device wlan1 added [ 813.673778][T17065] netlink: 'syz.1.4077': attribute type 11 has an invalid length. [ 813.721879][T17065] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4077'. [ 813.872380][ T4362] wlan1: Trigger new scan to find an IBSS to join [ 813.965813][ T65] wlan1: Creating new IBSS network, BSSID 6e:d7:30:81:7d:e9 [ 814.012240][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 814.031943][T17075] netlink: 'syz.3.4084': attribute type 10 has an invalid length. [ 814.052834][T17075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4084'. [ 814.076030][T17073] device syzkaller0 entered promiscuous mode [ 814.139480][T17073] syzkaller0: refused to change device tx_queue_len [ 814.365869][T17084] netlink: 'syz.3.4086': attribute type 13 has an invalid length. [ 814.382289][T17084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4086'. [ 814.417008][T17084] syz_tun: refused to change device tx_queue_len [ 814.444408][T17084] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 814.482158][T17085] netlink: 'syz.4.4085': attribute type 2 has an invalid length. [ 814.504850][T17085] netlink: 'syz.4.4085': attribute type 8 has an invalid length. [ 814.523427][T17085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4085'. [ 814.798388][T17091] netlink: 'syz.3.4087': attribute type 10 has an invalid length. [ 814.989161][T17091] team0: Port device wlan1 added [ 816.233007][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.258591][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.278513][T17121] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.328817][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.351011][T17121] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.370616][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.390943][T17121] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4099'. [ 816.443436][T17130] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4101'. [ 816.825511][T17138] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 816.967853][T17138] team0: Port device wlan1 added [ 817.774182][T17159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4109'. [ 817.814236][T17159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4109'. [ 817.898046][T17165] FAULT_INJECTION: forcing a failure. [ 817.898046][T17165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.936491][T17165] CPU: 0 PID: 17165 Comm: syz.0.4113 Not tainted syzkaller #0 [ 817.944054][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.954168][T17165] Call Trace: [ 817.957483][T17165] [ 817.960452][T17165] dump_stack_lvl+0x188/0x24e [ 817.965183][T17165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.971399][T17165] ? show_regs_print_info+0x12/0x12 [ 817.976655][T17165] ? load_image+0x400/0x400 [ 817.981234][T17165] should_fail_ex+0x399/0x4d0 [ 817.985994][T17165] _copy_from_user+0x2c/0x170 [ 817.990735][T17165] generic_map_update_batch+0x4f3/0x810 [ 817.996386][T17165] ? rcu_read_unlock+0xa0/0xa0 [ 818.001212][T17165] ? __fdget+0x17c/0x200 [ 818.005542][T17165] ? rcu_read_unlock+0xa0/0xa0 [ 818.010793][T17165] bpf_map_do_batch+0x466/0x600 [ 818.015708][T17165] __sys_bpf+0x6f7/0x780 [ 818.020010][T17165] ? bpf_link_show_fdinfo+0x380/0x380 [ 818.025457][T17165] ? lock_chain_count+0x20/0x20 [ 818.030367][T17165] ? trace_irq_enable_rcuidle+0xb/0x140 [ 818.035968][T17165] __x64_sys_bpf+0x78/0x90 [ 818.040449][T17165] do_syscall_64+0x4c/0xa0 [ 818.044923][T17165] ? clear_bhb_loop+0x60/0xb0 [ 818.049658][T17165] ? clear_bhb_loop+0x60/0xb0 [ 818.054401][T17165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.060373][T17165] RIP: 0033:0x7fd2b159aeb9 [ 818.064842][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.084531][T17165] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.093372][T17165] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 818.101411][T17165] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 818.109447][T17165] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 818.117485][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.125527][T17165] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 818.133586][T17165] [ 819.200961][T17197] netlink: 'syz.4.4123': attribute type 10 has an invalid length. [ 826.199978][T17320] __nla_validate_parse: 3 callbacks suppressed [ 826.200000][T17320] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.4160'. [ 829.476678][T17380] device syzkaller0 entered promiscuous mode [ 831.901007][T17444] netlink: 'syz.2.4206': attribute type 21 has an invalid length. [ 834.562555][T17499] netlink: 'syz.1.4222': attribute type 21 has an invalid length. [ 835.300175][T17517] netlink: 'syz.3.4229': attribute type 10 has an invalid length. [ 835.317320][T17517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4229'. [ 835.339468][T17517] device team0 entered promiscuous mode [ 835.350485][T17517] device team_slave_1 entered promiscuous mode [ 835.358219][T17517] device geneve1 entered promiscuous mode [ 835.366672][T17517] device wlan1 entered promiscuous mode [ 835.424809][T17517] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.465756][T17517] bridge0: port 3(team0) entered blocking state [ 835.496340][T17517] bridge0: port 3(team0) entered disabled state [ 835.548289][T17517] bridge0: port 3(team0) entered blocking state [ 835.555473][T17517] bridge0: port 3(team0) entered forwarding state [ 836.616204][T17534] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 838.268027][T17538] netlink: 'syz.1.4246': attribute type 21 has an invalid length. [ 838.308493][T17538] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4246'. [ 838.866492][T17559] netlink: 'syz.0.4244': attribute type 10 has an invalid length. [ 838.887769][T17559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4244'. [ 839.136586][T17567] netlink: 'syz.2.4248': attribute type 4 has an invalid length. [ 839.612906][T17573] FAULT_INJECTION: forcing a failure. [ 839.612906][T17573] name failslab, interval 1, probability 0, space 0, times 0 [ 839.763959][T17573] CPU: 1 PID: 17573 Comm: syz.0.4249 Not tainted syzkaller #0 [ 839.771538][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 839.781671][T17573] Call Trace: [ 839.785015][T17573] [ 839.788008][T17573] dump_stack_lvl+0x188/0x24e [ 839.792790][T17573] ? show_regs_print_info+0x12/0x12 [ 839.798079][T17573] ? load_image+0x400/0x400 [ 839.802661][T17573] ? __might_sleep+0xd0/0xd0 [ 839.807394][T17573] ? __lock_acquire+0x7d10/0x7d10 [ 839.812496][T17573] should_fail_ex+0x399/0x4d0 [ 839.817254][T17573] should_failslab+0x5/0x20 [ 839.821810][T17573] slab_pre_alloc_hook+0x59/0x310 [ 839.826882][T17573] ? trace_call_bpf+0x5d6/0x6b0 [ 839.831795][T17573] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 839.837572][T17573] __kmem_cache_alloc_node+0x4f/0x260 [ 839.843009][T17573] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 839.848815][T17573] __kmalloc+0xa0/0x240 [ 839.853037][T17573] tomoyo_realpath_from_path+0xdf/0x5d0 [ 839.858677][T17573] ? tomoyo_path_number_perm+0x205/0x650 [ 839.864407][T17573] tomoyo_path_number_perm+0x22f/0x650 [ 839.869924][T17573] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 839.875480][T17573] ? ksys_write+0x1c0/0x250 [ 839.880037][T17573] ? common_file_perm+0x171/0x1c0 [ 839.885189][T17573] ? __fget_files+0x28/0x4b0 [ 839.889826][T17573] ? __fget_files+0x28/0x4b0 [ 839.894515][T17573] security_file_ioctl+0x6c/0xa0 [ 839.899519][T17573] __se_sys_ioctl+0x48/0x170 [ 839.904179][T17573] do_syscall_64+0x4c/0xa0 [ 839.908647][T17573] ? clear_bhb_loop+0x60/0xb0 [ 839.913458][T17573] ? clear_bhb_loop+0x60/0xb0 [ 839.918195][T17573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.924134][T17573] RIP: 0033:0x7fd2b159aeb9 [ 839.928592][T17573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.948340][T17573] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.956797][T17573] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 839.964812][T17573] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 839.972819][T17573] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 839.980830][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.988841][T17573] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 839.996896][T17573] [ 840.041060][T17573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 840.771808][T17590] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 841.335444][T17616] netlink: 177648 bytes leftover after parsing attributes in process `syz.3.4266'. [ 842.135014][T17630] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.4269'. [ 844.233398][T17623] netlink: 'syz.4.4267': attribute type 17 has an invalid length. [ 844.241385][T17623] netlink: 'syz.4.4267': attribute type 16 has an invalid length. [ 844.249811][T17623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4267'. [ 845.088882][T17676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4285'. [ 845.166533][T17676] netlink: 'syz.3.4285': attribute type 39 has an invalid length. [ 845.567342][T17676] device veth0_macvtap left promiscuous mode [ 850.077559][T17701] netlink: 'syz.0.4292': attribute type 17 has an invalid length. [ 850.085719][T17701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4292'. [ 850.096169][T17701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.165352][T17738] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4302'. [ 850.333078][T17745] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 850.384868][T17745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.462009][T17747] netlink: 'syz.2.4304': attribute type 27 has an invalid length. [ 850.528120][T17745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.553323][T17747] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.4304'. [ 850.585101][T17745] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 850.750299][T17760] FAULT_INJECTION: forcing a failure. [ 850.750299][T17760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.808419][T17760] CPU: 1 PID: 17760 Comm: syz.1.4309 Not tainted syzkaller #0 [ 850.815976][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.826085][T17760] Call Trace: [ 850.829423][T17760] [ 850.832391][T17760] dump_stack_lvl+0x188/0x24e [ 850.837115][T17760] ? show_regs_print_info+0x12/0x12 [ 850.842363][T17760] ? load_image+0x400/0x400 [ 850.846899][T17760] ? __lock_acquire+0x7d10/0x7d10 [ 850.851960][T17760] ? __virt_addr_valid+0x188/0x540 [ 850.857114][T17760] should_fail_ex+0x399/0x4d0 [ 850.861839][T17760] _copy_from_user+0x2c/0x170 [ 850.866553][T17760] bpf_test_init+0xde/0x140 [ 850.871101][T17760] bpf_prog_test_run_xdp+0x484/0xf10 [ 850.876430][T17760] ? dev_put+0x80/0x80 [ 850.880541][T17760] ? dev_put+0x80/0x80 [ 850.884646][T17760] bpf_prog_test_run+0x31e/0x390 [ 850.889624][T17760] __sys_bpf+0x62b/0x780 [ 850.893910][T17760] ? bpf_link_show_fdinfo+0x380/0x380 [ 850.899416][T17760] ? lock_chain_count+0x20/0x20 [ 850.904308][T17760] __x64_sys_bpf+0x78/0x90 [ 850.908761][T17760] do_syscall_64+0x4c/0xa0 [ 850.913269][T17760] ? clear_bhb_loop+0x60/0xb0 [ 850.917995][T17760] ? clear_bhb_loop+0x60/0xb0 [ 850.922721][T17760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.928667][T17760] RIP: 0033:0x7fc3bcf9aeb9 [ 850.933132][T17760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.952791][T17760] RSP: 002b:00007fc3bddd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.961239][T17760] RAX: ffffffffffffffda RBX: 00007fc3bd215fa0 RCX: 00007fc3bcf9aeb9 [ 850.969262][T17760] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 850.977276][T17760] RBP: 00007fc3bddd4090 R08: 0000000000000000 R09: 0000000000000000 [ 850.985369][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.993363][T17760] R13: 00007fc3bd216038 R14: 00007fc3bd215fa0 R15: 00007fff98c93388 [ 851.001377][T17760] [ 851.066799][T17764] netlink: 'syz.0.4311': attribute type 10 has an invalid length. [ 851.108422][T17764] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4311'. [ 851.751607][T17777] netlink: 'syz.4.4315': attribute type 3 has an invalid length. [ 851.788849][T17777] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 852.136111][T17780] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 852.170277][T17780] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4316'. [ 852.203720][T17783] netlink: 'syz.3.4316': attribute type 29 has an invalid length. [ 852.304623][T17783] netlink: 'syz.3.4316': attribute type 29 has an invalid length. [ 852.752959][T17794] netlink: 'syz.3.4320': attribute type 10 has an invalid length. [ 852.784714][T17794] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.795751][T17794] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.816979][T17794] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.857161][T17794] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.701802][T17810] can: request_module (can-proto-0) failed. [ 856.057014][T17823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.341357][T17826] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4330'. [ 856.381837][T17826] device hsr_slave_0 left promiscuous mode [ 856.423769][T17826] device hsr_slave_1 left promiscuous mode [ 860.422556][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.478618][T17923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.499293][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.507043][T17923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.181588][T17992] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.4398'. [ 866.531525][T18002] ref_ctr_offset mismatch. inode: 0x4ae offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 868.227395][T18040] netlink: 'syz.2.4402': attribute type 3 has an invalid length. [ 868.241042][T18039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4405'. [ 868.255526][T18040] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4402'. [ 869.516672][T18070] device syzkaller0 entered promiscuous mode [ 869.800282][T18075] device wg2 left promiscuous mode [ 870.100009][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.106443][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.251143][T18085] netlink: 'syz.2.4423': attribute type 14 has an invalid length. [ 870.283190][T18085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4423'. [ 870.384553][T18089] netlink: 'syz.2.4423': attribute type 2 has an invalid length. [ 870.550692][T18093] netlink: 'syz.0.4427': attribute type 10 has an invalid length. [ 871.113783][T18093] bridge0: port 3(team0) entered disabled state [ 871.151589][T18093] device team0 left promiscuous mode [ 871.157328][T18093] device team_slave_0 left promiscuous mode [ 871.170213][T18093] device team_slave_1 left promiscuous mode [ 871.176440][T18093] device vlan0 left promiscuous mode [ 871.191151][T18093] device batadv0 left promiscuous mode [ 871.197062][T18093] device dummy0 left promiscuous mode [ 871.205466][T18093] device wlan1 left promiscuous mode [ 871.230880][T18093] bridge0: port 3(team0) entered disabled state [ 871.271637][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.301988][T18093] bond0: (slave team0): Enslaving as an active interface with an up link [ 871.370018][T18103] netlink: 'syz.4.4429': attribute type 29 has an invalid length. [ 871.471807][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4429'. [ 871.485426][T18103] netlink: 'syz.4.4429': attribute type 29 has an invalid length. [ 871.554887][T18108] netlink: 'syz.4.4429': attribute type 29 has an invalid length. [ 871.613145][T18101] pimreg1: tun_chr_ioctl cmd 1074025677 [ 871.628046][T18101] pimreg1: linktype set to 769 [ 871.684440][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4433'. [ 871.761158][T18101] netlink: 'syz.4.4429': attribute type 3 has an invalid length. [ 871.811156][T18117] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4434'. [ 871.872233][T18101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4429'. [ 873.623964][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 875.002104][T18181] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4455'. [ 876.481710][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 877.081645][T18222] netlink: 'syz.0.4469': attribute type 2 has an invalid length. [ 877.129039][T18222] netlink: 'syz.0.4469': attribute type 8 has an invalid length. [ 877.136864][T18222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4469'. [ 878.442951][T18252] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4479'. [ 878.658990][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 878.798684][T18255] netlink: 'syz.1.4479': attribute type 10 has an invalid length. [ 878.955377][T18255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4479'. [ 879.037017][T18255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 879.795945][T18288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4490'. [ 879.809719][T18288] openvswitch: netlink: Message has 6 unknown bytes. [ 883.344030][T18343] sctp: [Deprecated]: syz.4.4507 (pid 18343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.344030][T18343] Use struct sctp_sack_info instead [ 883.995421][T18355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'. [ 884.028548][T18355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'. [ 884.051580][T18355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'. [ 884.079419][T18355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4512'. [ 884.097135][T18359] FAULT_INJECTION: forcing a failure. [ 884.097135][T18359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.132238][T18361] netlink: 'syz.0.4514': attribute type 9 has an invalid length. [ 884.167191][T18359] CPU: 0 PID: 18359 Comm: syz.3.4515 Not tainted syzkaller #0 [ 884.174842][T18359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.184959][T18359] Call Trace: [ 884.188319][T18359] [ 884.191314][T18359] dump_stack_lvl+0x188/0x24e [ 884.196161][T18359] ? show_regs_print_info+0x12/0x12 [ 884.201435][T18359] ? load_image+0x400/0x400 [ 884.206008][T18359] ? __lock_acquire+0x7d10/0x7d10 [ 884.211125][T18359] should_fail_ex+0x399/0x4d0 [ 884.215878][T18359] _copy_from_user+0x2c/0x170 [ 884.220630][T18359] generic_map_update_batch+0x4a1/0x810 [ 884.226268][T18359] ? rcu_read_unlock+0xa0/0xa0 [ 884.231130][T18359] ? __fdget+0x17c/0x200 [ 884.235469][T18359] ? rcu_read_unlock+0xa0/0xa0 [ 884.240310][T18359] bpf_map_do_batch+0x466/0x600 [ 884.245242][T18359] __sys_bpf+0x6f7/0x780 [ 884.249549][T18359] ? bpf_link_show_fdinfo+0x380/0x380 [ 884.255002][T18359] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.261254][T18359] __x64_sys_bpf+0x78/0x90 [ 884.265735][T18359] do_syscall_64+0x4c/0xa0 [ 884.270212][T18359] ? clear_bhb_loop+0x60/0xb0 [ 884.274956][T18359] ? clear_bhb_loop+0x60/0xb0 [ 884.279701][T18359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.285846][T18359] RIP: 0033:0x7f2c3419aeb9 [ 884.290336][T18359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.310165][T18359] RSP: 002b:00007f2c34f72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 884.318649][T18359] RAX: ffffffffffffffda RBX: 00007f2c34415fa0 RCX: 00007f2c3419aeb9 [ 884.326680][T18359] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 884.334720][T18359] RBP: 00007f2c34f72090 R08: 0000000000000000 R09: 0000000000000000 [ 884.342751][T18359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.350784][T18359] R13: 00007f2c34416038 R14: 00007f2c34415fa0 R15: 00007fff4b8f6c88 [ 884.358832][T18359] [ 884.380990][T18361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4514'. [ 887.517055][T18408] delete_channel: no stack [ 892.847832][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4546'. [ 892.921878][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4546'. [ 893.036688][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4546'. [ 893.102124][T18465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4546'. [ 896.734769][T18486] netlink: 'syz.3.4551': attribute type 19 has an invalid length. [ 897.176741][T18494] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 897.188148][T18494] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4554'. [ 897.318491][ T4279] Bluetooth: hci2: ISO packet for unknown connection handle 3084 [ 898.163596][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4563'. [ 898.217581][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4563'. [ 898.300684][T18514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4563'. [ 898.412237][T18517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4563'. [ 899.076478][T18527] netlink: 'syz.0.4566': attribute type 2 has an invalid length. [ 899.132978][T18527] netlink: 'syz.0.4566': attribute type 8 has an invalid length. [ 899.205747][T18527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4566'. [ 899.279191][T18531] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4566'. [ 902.555569][T18594] netlink: 'syz.4.4590': attribute type 21 has an invalid length. [ 904.082831][T18617] FAULT_INJECTION: forcing a failure. [ 904.082831][T18617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.155730][T18617] CPU: 0 PID: 18617 Comm: syz.4.4597 Not tainted syzkaller #0 [ 904.163661][T18617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.173786][T18617] Call Trace: [ 904.177137][T18617] [ 904.180140][T18617] dump_stack_lvl+0x188/0x24e [ 904.184926][T18617] ? show_regs_print_info+0x12/0x12 [ 904.190214][T18617] ? load_image+0x400/0x400 [ 904.194936][T18617] ? __lock_acquire+0x7d10/0x7d10 [ 904.200059][T18617] ? snprintf+0xe5/0x140 [ 904.204385][T18617] should_fail_ex+0x399/0x4d0 [ 904.209173][T18617] _copy_to_user+0x2c/0x130 [ 904.213780][T18617] simple_read_from_buffer+0xe3/0x150 [ 904.219350][T18617] proc_fail_nth_read+0x1a6/0x220 [ 904.224477][T18617] ? proc_fault_inject_write+0x310/0x310 [ 904.230304][T18617] ? fsnotify_perm+0x248/0x550 [ 904.235169][T18617] ? proc_fault_inject_write+0x310/0x310 [ 904.240896][T18617] vfs_read+0x2de/0xa00 [ 904.245161][T18617] ? kernel_read+0x1e0/0x1e0 [ 904.249858][T18617] ? __fget_files+0x28/0x4b0 [ 904.254537][T18617] ? __fget_files+0x28/0x4b0 [ 904.259520][T18617] ? __fget_files+0x43d/0x4b0 [ 904.264520][T18617] ? __fdget_pos+0x2ae/0x360 [ 904.269471][T18617] ? ksys_read+0x71/0x250 [ 904.274173][T18617] ksys_read+0x14c/0x250 [ 904.279145][T18617] ? vfs_write+0xa30/0xa30 [ 904.283853][T18617] ? lockdep_hardirqs_on+0x94/0x140 [ 904.289534][T18617] do_syscall_64+0x4c/0xa0 [ 904.294052][T18617] ? clear_bhb_loop+0x60/0xb0 [ 904.299080][T18617] ? clear_bhb_loop+0x60/0xb0 [ 904.303942][T18617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.310177][T18617] RIP: 0033:0x7ffa6175b78e [ 904.314860][T18617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.334850][T18617] RSP: 002b:00007ffa62661fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.343795][T18617] RAX: ffffffffffffffda RBX: 00007ffa626626c0 RCX: 00007ffa6175b78e [ 904.352039][T18617] RDX: 000000000000000f RSI: 00007ffa626620a0 RDI: 0000000000000009 [ 904.360359][T18617] RBP: 00007ffa62662090 R08: 0000000000000000 R09: 0000000000000000 [ 904.369036][T18617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.377099][T18617] R13: 00007ffa61a16038 R14: 00007ffa61a15fa0 R15: 00007ffc48528b68 [ 904.385317][T18617] [ 905.559272][T18643] netlink: 'syz.0.4605': attribute type 21 has an invalid length. [ 906.245227][T18655] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.4610'. [ 906.318084][T18655] openvswitch: netlink: Message has 48126 unknown bytes. [ 907.298581][T18676] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 908.104466][T18698] netlink: 'syz.2.4628': attribute type 21 has an invalid length. [ 908.141989][T18698] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4628'. [ 908.580401][T18711] FAULT_INJECTION: forcing a failure. [ 908.580401][T18711] name failslab, interval 1, probability 0, space 0, times 0 [ 908.615151][T18711] CPU: 0 PID: 18711 Comm: syz.1.4634 Not tainted syzkaller #0 [ 908.622848][T18711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 908.634211][T18711] Call Trace: [ 908.637533][T18711] [ 908.640682][T18711] dump_stack_lvl+0x188/0x24e [ 908.645983][T18711] ? sctp_sendmsg+0x15b0/0x2940 [ 908.651031][T18711] ? ___sys_sendmsg+0x2a2/0x360 [ 908.656229][T18711] ? show_regs_print_info+0x12/0x12 [ 908.661768][T18711] ? load_image+0x400/0x400 [ 908.666970][T18711] should_fail_ex+0x399/0x4d0 [ 908.672349][T18711] should_failslab+0x5/0x20 [ 908.678377][T18711] slab_pre_alloc_hook+0x59/0x310 [ 908.683723][T18711] ? sctp_add_bind_addr+0x89/0x350 [ 908.689525][T18711] __kmem_cache_alloc_node+0x4f/0x260 [ 908.694968][T18711] ? sctp_add_bind_addr+0x89/0x350 [ 908.701108][T18711] kmalloc_trace+0x26/0xe0 [ 908.705682][T18711] sctp_add_bind_addr+0x89/0x350 [ 908.710769][T18711] sctp_copy_local_addr_list+0x311/0x4e0 [ 908.716621][T18711] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 908.722416][T18711] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 908.728525][T18711] ? sctp_v4_is_any+0x31/0x50 [ 908.733426][T18711] ? sctp_copy_one_addr+0x93/0x660 [ 908.739126][T18711] sctp_bind_addr_copy+0xaf/0x3c0 [ 908.744474][T18711] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 908.750951][T18711] sctp_connect_new_asoc+0x2f5/0x6a0 [ 908.756570][T18711] ? __sctp_connect+0xd80/0xd80 [ 908.761729][T18711] ? __local_bh_enable_ip+0x136/0x1c0 [ 908.767518][T18711] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 908.773144][T18711] ? security_sctp_bind_connect+0x85/0xb0 [ 908.779048][T18711] sctp_sendmsg+0x15b0/0x2940 [ 908.783957][T18711] ? sctp_getsockopt+0x8a0/0x8a0 [ 908.789258][T18711] ? __lock_acquire+0x7d10/0x7d10 [ 908.795035][T18711] ? aa_af_perm+0x340/0x340 [ 908.799596][T18711] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 908.806541][T18711] ? inet_sendmsg+0xe5/0x2f0 [ 908.812736][T18711] ? inet_send_prepare+0x260/0x260 [ 908.818182][T18711] ____sys_sendmsg+0x5be/0x970 [ 908.823136][T18711] ? __sys_sendmsg_sock+0x30/0x30 [ 908.828371][T18711] ? __import_iovec+0x315/0x500 [ 908.833656][T18711] ? import_iovec+0x6f/0xa0 [ 908.838416][T18711] ___sys_sendmsg+0x2a2/0x360 [ 908.843292][T18711] ? __sys_sendmsg+0x290/0x290 [ 908.848300][T18711] ? __lock_acquire+0x7d10/0x7d10 [ 908.853825][T18711] __se_sys_sendmsg+0x1bb/0x2a0 [ 908.859334][T18711] ? __x64_sys_sendmsg+0x80/0x80 [ 908.864329][T18711] ? lockdep_hardirqs_on+0x94/0x140 [ 908.869668][T18711] do_syscall_64+0x4c/0xa0 [ 908.874239][T18711] ? clear_bhb_loop+0x60/0xb0 [ 908.879047][T18711] ? clear_bhb_loop+0x60/0xb0 [ 908.883788][T18711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.889871][T18711] RIP: 0033:0x7fc3bcf9aeb9 [ 908.894601][T18711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.915887][T18711] RSP: 002b:00007fc3bddd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.925684][T18711] RAX: ffffffffffffffda RBX: 00007fc3bd215fa0 RCX: 00007fc3bcf9aeb9 [ 908.935062][T18711] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003 [ 908.943353][T18711] RBP: 00007fc3bddd4090 R08: 0000000000000000 R09: 0000000000000000 [ 908.951364][T18711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.959363][T18711] R13: 00007fc3bd216038 R14: 00007fc3bd215fa0 R15: 00007fff98c93388 [ 908.968284][T18711] [ 909.341471][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 909.358657][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 909.367515][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 909.377838][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 909.385659][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 909.393771][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 910.194729][T18743] netlink: 'syz.4.4645': attribute type 11 has an invalid length. [ 910.599526][T18722] chnl_net:caif_netlink_parms(): no params data found [ 911.195440][T18722] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.226346][T18722] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.258515][T18722] device bridge_slave_0 entered promiscuous mode [ 911.300996][T18722] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.318763][T18722] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.327155][T18722] device bridge_slave_1 entered promiscuous mode [ 911.337724][T17244] device .*! left promiscuous mode [ 911.470192][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 911.548418][T18722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.739007][T18776] netlink: 'syz.1.4654': attribute type 10 has an invalid length. [ 911.771911][T18776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4654'. [ 911.825859][T18776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 911.859315][T18722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.815490][T18722] team0: Port device team_slave_0 added [ 912.836223][T18808] FAULT_INJECTION: forcing a failure. [ 912.836223][T18808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.866586][T18799] netlink: 'syz.4.4659': attribute type 5 has an invalid length. [ 912.893932][T18804] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4659'. [ 912.910758][T18808] CPU: 0 PID: 18808 Comm: syz.2.4660 Not tainted syzkaller #0 [ 912.918312][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 912.928421][T18808] Call Trace: [ 912.931751][T18808] [ 912.934740][T18808] dump_stack_lvl+0x188/0x24e [ 912.939571][T18808] ? show_regs_print_info+0x12/0x12 [ 912.944821][T18808] ? load_image+0x400/0x400 [ 912.949359][T18808] ? __lock_acquire+0x7d10/0x7d10 [ 912.954417][T18808] ? __fget_files+0x28/0x4b0 [ 912.959058][T18808] should_fail_ex+0x399/0x4d0 [ 912.963787][T18808] _copy_from_user+0x2c/0x170 [ 912.968781][T18808] generic_map_update_batch+0x4f3/0x810 [ 912.974567][T18808] ? rcu_read_unlock+0xa0/0xa0 [ 912.979376][T18808] ? __fdget+0x17c/0x200 [ 912.983761][T18808] ? rcu_read_unlock+0xa0/0xa0 [ 912.988754][T18808] bpf_map_do_batch+0x466/0x600 [ 912.993655][T18808] __sys_bpf+0x6f7/0x780 [ 912.997940][T18808] ? bpf_link_show_fdinfo+0x380/0x380 [ 913.003365][T18808] ? lock_chain_count+0x20/0x20 [ 913.008297][T18808] __x64_sys_bpf+0x78/0x90 [ 913.012776][T18808] do_syscall_64+0x4c/0xa0 [ 913.017239][T18808] ? clear_bhb_loop+0x60/0xb0 [ 913.021977][T18808] ? clear_bhb_loop+0x60/0xb0 [ 913.026723][T18808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.032671][T18808] RIP: 0033:0x7f8a3259aeb9 [ 913.037255][T18808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.056910][T18808] RSP: 002b:00007f8a334a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.065446][T18808] RAX: ffffffffffffffda RBX: 00007f8a32815fa0 RCX: 00007f8a3259aeb9 [ 913.073535][T18808] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 913.081537][T18808] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 913.089533][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.097537][T18808] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 913.105625][T18808] [ 913.202776][T18722] team0: Port device team_slave_1 added [ 913.435787][T18722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.453913][T18722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.530994][T18722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.542309][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 913.607577][T18722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.616461][T18722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.655490][T18722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.972745][T18722] device hsr_slave_0 entered promiscuous mode [ 914.055345][T18722] device hsr_slave_1 entered promiscuous mode [ 914.225077][T18722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.260991][T18722] Cannot create hsr debugfs directory [ 915.203992][T17244] device wlan1 left promiscuous mode [ 915.266233][T17244] team0: Port device wlan1 removed [ 915.608462][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 916.277531][T17244] device hsr_slave_0 left promiscuous mode [ 916.295013][T17244] device hsr_slave_1 left promiscuous mode [ 916.333019][T17244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.387923][T17244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.465913][T17244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.489619][T17244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.551212][T17244] bridge0: port 3(team0) entered disabled state [ 916.578101][T17244] device bridge_slave_1 left promiscuous mode [ 916.614019][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.669771][T17244] device bridge_slave_0 left promiscuous mode [ 916.677606][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.772758][T17244] device veth1_macvtap left promiscuous mode [ 917.121739][T17244] device geneve1 left promiscuous mode [ 917.153050][T17244] team0 (unregistering): Port device geneve1 removed [ 917.694894][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 917.817749][T17244] device team_slave_1 left promiscuous mode [ 917.825872][T17244] team0 (unregistering): Port device team_slave_1 removed [ 917.943932][T17244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.002429][T17244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.397266][T17244] bond0 (unregistering): Released all slaves [ 918.528768][T18876] netlink: 'syz.0.4678': attribute type 10 has an invalid length. [ 918.536866][T18876] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4678'. [ 918.787221][T18876] team0: Port device vlan0 removed [ 919.012246][T18882] netlink: 'syz.1.4680': attribute type 21 has an invalid length. [ 919.024137][T18882] netlink: 'syz.1.4680': attribute type 5 has an invalid length. [ 919.078737][T18890] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.4683'. [ 919.164932][T18897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4685'. [ 920.530644][T18897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4685'. [ 921.318472][T18722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 921.364010][T18722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 921.437562][T18722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 921.502472][T18722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 921.759182][T18916] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4690'. [ 922.051177][T18722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.119548][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 922.141124][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.188946][T18722] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.231721][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 922.306439][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 922.338191][T17239] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.345580][T17239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.379051][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 922.463495][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 922.497484][T17239] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.505600][T17239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.572877][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 922.604661][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 922.630848][T18941] netlink: 'syz.4.4695': attribute type 10 has an invalid length. [ 922.654079][T18941] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4695'. [ 922.709348][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 922.730213][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 922.784077][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 922.854673][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.057224][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.074606][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.294190][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.308951][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.329969][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.360789][T17240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.681717][T18955] netlink: 'syz.1.4698': attribute type 10 has an invalid length. [ 925.742390][T18968] netlink: 'syz.4.4702': attribute type 21 has an invalid length. [ 926.031619][T18980] FAULT_INJECTION: forcing a failure. [ 926.031619][T18980] name failslab, interval 1, probability 0, space 0, times 0 [ 926.098362][T18980] CPU: 1 PID: 18980 Comm: syz.1.4704 Not tainted syzkaller #0 [ 926.105907][T18980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.116310][T18980] Call Trace: [ 926.119735][T18980] [ 926.122723][T18980] dump_stack_lvl+0x188/0x24e [ 926.127857][T18980] ? sctp_sendmsg+0x15b0/0x2940 [ 926.132866][T18980] ? ___sys_sendmsg+0x2a2/0x360 [ 926.137786][T18980] ? show_regs_print_info+0x12/0x12 [ 926.143365][T18980] ? load_image+0x400/0x400 [ 926.148027][T18980] should_fail_ex+0x399/0x4d0 [ 926.152980][T18980] should_failslab+0x5/0x20 [ 926.157554][T18980] slab_pre_alloc_hook+0x59/0x310 [ 926.162911][T18980] ? sctp_add_bind_addr+0x89/0x350 [ 926.168353][T18980] __kmem_cache_alloc_node+0x4f/0x260 [ 926.173791][T18980] ? sctp_add_bind_addr+0x89/0x350 [ 926.178965][T18980] kmalloc_trace+0x26/0xe0 [ 926.183525][T18980] sctp_add_bind_addr+0x89/0x350 [ 926.188794][T18980] sctp_copy_local_addr_list+0x311/0x4e0 [ 926.194493][T18980] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 926.200367][T18980] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 926.206510][T18980] ? sctp_v4_is_any+0x31/0x50 [ 926.211270][T18980] ? sctp_copy_one_addr+0x93/0x660 [ 926.216487][T18980] sctp_bind_addr_copy+0xaf/0x3c0 [ 926.221710][T18980] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 926.228108][T18980] sctp_connect_new_asoc+0x2f5/0x6a0 [ 926.233459][T18980] ? __sctp_connect+0xd80/0xd80 [ 926.238449][T18980] ? __local_bh_enable_ip+0x136/0x1c0 [ 926.243878][T18980] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 926.249564][T18980] ? security_sctp_bind_connect+0x85/0xb0 [ 926.255547][T18980] sctp_sendmsg+0x15b0/0x2940 [ 926.260473][T18980] ? sctp_getsockopt+0x8a0/0x8a0 [ 926.265679][T18980] ? __lock_acquire+0x7d10/0x7d10 [ 926.270774][T18980] ? aa_af_perm+0x340/0x340 [ 926.275348][T18980] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 926.282012][T18980] ? inet_sendmsg+0xe5/0x2f0 [ 926.286749][T18980] ? inet_send_prepare+0x260/0x260 [ 926.292116][T18980] ____sys_sendmsg+0x5be/0x970 [ 926.296981][T18980] ? __sys_sendmsg_sock+0x30/0x30 [ 926.302069][T18980] ? __import_iovec+0x315/0x500 [ 926.307004][T18980] ? import_iovec+0x6f/0xa0 [ 926.311655][T18980] ___sys_sendmsg+0x2a2/0x360 [ 926.316454][T18980] ? __sys_sendmsg+0x290/0x290 [ 926.321289][T18980] ? __lock_acquire+0x7d10/0x7d10 [ 926.326379][T18980] __se_sys_sendmsg+0x1bb/0x2a0 [ 926.331286][T18980] ? __x64_sys_sendmsg+0x80/0x80 [ 926.336457][T18980] ? lockdep_hardirqs_on+0x94/0x140 [ 926.341717][T18980] do_syscall_64+0x4c/0xa0 [ 926.346185][T18980] ? clear_bhb_loop+0x60/0xb0 [ 926.351000][T18980] ? clear_bhb_loop+0x60/0xb0 [ 926.356119][T18980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.362173][T18980] RIP: 0033:0x7fc3bcf9aeb9 [ 926.366679][T18980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.386425][T18980] RSP: 002b:00007fc3bddd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.394901][T18980] RAX: ffffffffffffffda RBX: 00007fc3bd215fa0 RCX: 00007fc3bcf9aeb9 [ 926.403006][T18980] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003 [ 926.411136][T18980] RBP: 00007fc3bddd4090 R08: 0000000000000000 R09: 0000000000000000 [ 926.419199][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.427845][T18980] R13: 00007fc3bd216038 R14: 00007fc3bd215fa0 R15: 00007fff98c93388 [ 926.435918][T18980] [ 927.236944][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 927.276248][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 927.306462][T18722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.347151][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.358073][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.396951][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.416785][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 927.431238][T18722] device veth0_vlan entered promiscuous mode [ 927.449338][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 927.487125][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 927.544700][T18722] device veth1_vlan entered promiscuous mode [ 927.675421][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 927.733572][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 927.759914][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 927.780734][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 927.795746][T18722] device veth0_macvtap entered promiscuous mode [ 927.816564][T18722] device veth1_macvtap entered promiscuous mode [ 927.935397][T18722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.988989][T18722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.030402][T18722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.064278][T18722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.114237][T18722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.152304][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.172976][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 928.194014][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 928.211817][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.235153][T18722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.255793][T18722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.267484][T18722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.285106][T18722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.297536][T18722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.317157][T18722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.336483][T18722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.384613][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.429425][T17239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.447837][T18722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.498444][T18722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.507914][T18722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.562882][T18722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.797223][T17237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.837917][T17237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.875580][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 928.910156][T19033] netlink: 'syz.1.4718': attribute type 11 has an invalid length. [ 928.932527][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.978400][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.993984][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 928.999719][T19033] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4718'. [ 929.159280][T19033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.990723][T19067] netlink: 'syz.0.4725': attribute type 10 has an invalid length. [ 929.991569][T19065] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4631'. [ 930.048417][T19067] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4725'. [ 931.578356][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.584770][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.370258][T19140] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4751'. [ 935.436793][T19140] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4751'. [ 935.488996][T19140] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4751'. [ 935.579580][T19148] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4751'. [ 935.734354][T19153] netlink: 'syz.2.4755': attribute type 10 has an invalid length. [ 935.748738][T19153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.759065][T19153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.769199][T19153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.786632][T19153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.835138][T19153] device geneve1 entered promiscuous mode [ 935.869315][T19153] team0: Port device geneve1 added [ 936.200175][T19166] netlink: 'syz.2.4760': attribute type 10 has an invalid length. [ 936.232895][T19166] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4760'. [ 936.872466][T19181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4767'. [ 937.001590][T19187] IPv6: Can't replace route, no match found [ 940.589967][T19236] netlink: 'syz.4.4786': attribute type 10 has an invalid length. [ 940.691316][T19236] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4786'. [ 941.482648][T19240] netlink: 'syz.0.4787': attribute type 10 has an invalid length. [ 941.722360][T19241] netlink: 'syz.0.4787': attribute type 10 has an invalid length. [ 942.545645][T19261] sctp: [Deprecated]: syz.2.4793 (pid 19261) Use of int in maxseg socket option. [ 942.545645][T19261] Use struct sctp_assoc_value instead [ 942.676135][T19269] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 944.012320][T19285] netlink: 'syz.4.4799': attribute type 21 has an invalid length. [ 944.028571][T19285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4799'. [ 944.048633][T19285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4799'. [ 944.423515][T19293] netlink: 'syz.3.4803': attribute type 10 has an invalid length. [ 944.503745][T19293] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4803'. [ 945.345633][T19299] netlink: 'syz.2.4805': attribute type 10 has an invalid length. [ 945.368564][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4805'. [ 945.707634][T19324] FAULT_INJECTION: forcing a failure. [ 945.707634][T19324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 945.785503][T19324] CPU: 1 PID: 19324 Comm: syz.0.4813 Not tainted syzkaller #0 [ 945.793086][T19324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.804358][T19324] Call Trace: [ 945.808049][T19324] [ 945.811074][T19324] dump_stack_lvl+0x188/0x24e [ 945.816167][T19324] ? show_regs_print_info+0x12/0x12 [ 945.821563][T19324] ? load_image+0x400/0x400 [ 945.826255][T19324] ? __lock_acquire+0x7d10/0x7d10 [ 945.831987][T19324] ? slab_post_alloc_hook+0x4b/0x480 [ 945.837388][T19324] should_fail_ex+0x399/0x4d0 [ 945.842186][T19324] prepare_alloc_pages+0x1e2/0x5f0 [ 945.847520][T19324] __alloc_pages+0x130/0x4f0 [ 945.852302][T19324] ? trace_event_raw_event_lock+0x250/0x250 [ 945.858277][T19324] ? zone_statistics+0x170/0x170 [ 945.863364][T19324] __get_free_pages+0x8/0x30 [ 945.868048][T19324] kasan_populate_vmalloc_pte+0x31/0xf0 [ 945.873676][T19324] ? __apply_to_page_range+0x977/0xd10 [ 945.879329][T19324] __apply_to_page_range+0x989/0xd10 [ 945.884746][T19324] ? kasan_populate_vmalloc+0x70/0x70 [ 945.890233][T19324] alloc_vmap_area+0x178f/0x18c0 [ 945.895494][T19324] ? vm_map_ram+0xab0/0xab0 [ 945.900976][T19324] ? rcu_is_watching+0x11/0xa0 [ 945.906387][T19324] __get_vm_area_node+0x158/0x330 [ 945.911541][T19324] vmap+0xf5/0x2c0 [ 945.915406][T19324] ? bpf_ringbuf_alloc+0x33b/0x560 [ 945.920685][T19324] bpf_ringbuf_alloc+0x33b/0x560 [ 945.925776][T19324] ringbuf_map_alloc+0x1ac/0x2d0 [ 945.930817][T19324] map_create+0x534/0x1000 [ 945.935418][T19324] ? bpf_lsm_bpf+0x5/0x10 [ 945.939856][T19324] __sys_bpf+0x38b/0x780 [ 945.944282][T19324] ? bpf_link_show_fdinfo+0x380/0x380 [ 945.950066][T19324] ? lock_chain_count+0x20/0x20 [ 945.955412][T19324] __x64_sys_bpf+0x78/0x90 [ 945.960026][T19324] do_syscall_64+0x4c/0xa0 [ 945.964803][T19324] ? clear_bhb_loop+0x60/0xb0 [ 945.969570][T19324] ? clear_bhb_loop+0x60/0xb0 [ 945.974345][T19324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.980327][T19324] RIP: 0033:0x7fd2b159aeb9 [ 945.984818][T19324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.004857][T19324] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 946.013633][T19324] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 946.021780][T19324] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 946.030102][T19324] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 946.037793][T19317] sctp: [Deprecated]: syz.4.4811 (pid 19317) Use of int in maxseg socket option. [ 946.037793][T19317] Use struct sctp_assoc_value instead [ 946.038560][T19324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.038586][T19324] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 946.038729][T19324] [ 946.156499][T19327] netlink: 'syz.3.4814': attribute type 3 has an invalid length. [ 946.196105][T19327] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4814'. [ 946.596814][T19344] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4818'. [ 946.648787][T19346] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.4829'. [ 946.661138][T19345] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.4829'. [ 946.913993][T19353] netlink: 'syz.1.4818': attribute type 10 has an invalid length. [ 946.963136][T19353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4818'. [ 947.076068][T19353] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 947.934557][T19373] sctp: [Deprecated]: syz.2.4825 (pid 19373) Use of int in maxseg socket option. [ 947.934557][T19373] Use struct sctp_assoc_value instead [ 949.348412][T19406] netlink: 'syz.2.4839': attribute type 2 has an invalid length. [ 949.369219][T19406] netlink: 'syz.2.4839': attribute type 8 has an invalid length. [ 949.404823][T19406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4839'. [ 949.435288][T19408] netlink: 'syz.1.4838': attribute type 19 has an invalid length. [ 949.879411][T19424] netlink: 'syz.2.4842': attribute type 3 has an invalid length. [ 949.907742][T19424] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4842'. [ 953.082639][T19459] netlink: 'syz.4.4853': attribute type 7 has an invalid length. [ 953.391394][T19466] FAULT_INJECTION: forcing a failure. [ 953.391394][T19466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.448542][T19466] CPU: 1 PID: 19466 Comm: syz.1.4855 Not tainted syzkaller #0 [ 953.456140][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.466606][T19466] Call Trace: [ 953.469952][T19466] [ 953.473492][T19466] dump_stack_lvl+0x188/0x24e [ 953.479469][T19466] ? show_regs_print_info+0x12/0x12 [ 953.486015][T19466] ? load_image+0x400/0x400 [ 953.490599][T19466] ? __lock_acquire+0x7d10/0x7d10 [ 953.496252][T19466] ? perf_trace_lock_acquire+0x100/0x3e0 [ 953.502649][T19466] should_fail_ex+0x399/0x4d0 [ 953.507869][T19466] strncpy_from_user+0x32/0x350 [ 953.512905][T19466] bpf_prog_load+0x1f3/0x1560 [ 953.518057][T19466] ? map_freeze+0x390/0x390 [ 953.522814][T19466] ? rcu_is_watching+0x11/0xa0 [ 953.527856][T19466] ? __sys_bpf+0x343/0x780 [ 953.532566][T19466] __sys_bpf+0x5b8/0x780 [ 953.537014][T19466] ? bpf_link_show_fdinfo+0x380/0x380 [ 953.542875][T19466] __x64_sys_bpf+0x78/0x90 [ 953.547371][T19466] do_syscall_64+0x4c/0xa0 [ 953.551946][T19466] ? clear_bhb_loop+0x60/0xb0 [ 953.557047][T19466] ? clear_bhb_loop+0x60/0xb0 [ 953.562388][T19466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.568526][T19466] RIP: 0033:0x7fc3bcf9aeb9 [ 953.573456][T19466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.594609][T19466] RSP: 002b:00007fc3bddd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 953.603185][T19466] RAX: ffffffffffffffda RBX: 00007fc3bd215fa0 RCX: 00007fc3bcf9aeb9 [ 953.611587][T19466] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 953.620853][T19466] RBP: 00007fc3bddd4090 R08: 0000000000000000 R09: 0000000000000000 [ 953.629679][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.638077][T19466] R13: 00007fc3bd216038 R14: 00007fc3bd215fa0 R15: 00007fff98c93388 [ 953.646502][T19466] [ 956.520997][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4870'. [ 956.578589][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4870'. [ 956.608988][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4870'. [ 956.650125][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4870'. [ 957.585127][T19533] netlink: 'syz.3.4874': attribute type 2 has an invalid length. [ 957.624897][T19533] netlink: 'syz.3.4874': attribute type 1 has an invalid length. [ 957.664615][T19533] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4874'. [ 957.857087][T19535] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.4874'. [ 957.939466][T19535] netlink: zone id is out of range [ 958.734680][T19547] FAULT_INJECTION: forcing a failure. [ 958.734680][T19547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.785533][T19547] CPU: 1 PID: 19547 Comm: syz.4.4880 Not tainted syzkaller #0 [ 958.793789][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.803906][T19547] Call Trace: [ 958.807236][T19547] [ 958.810224][T19547] dump_stack_lvl+0x188/0x24e [ 958.814963][T19547] ? show_regs_print_info+0x12/0x12 [ 958.820311][T19547] ? load_image+0x400/0x400 [ 958.825344][T19547] ? __lock_acquire+0x7d10/0x7d10 [ 958.830643][T19547] should_fail_ex+0x399/0x4d0 [ 958.835845][T19547] _copy_from_user+0x2c/0x170 [ 958.840945][T19547] generic_map_update_batch+0x4f3/0x810 [ 958.846780][T19547] ? rcu_read_unlock+0xa0/0xa0 [ 958.851641][T19547] ? __fdget+0x17c/0x200 [ 958.856055][T19547] ? rcu_read_unlock+0xa0/0xa0 [ 958.861640][T19547] bpf_map_do_batch+0x466/0x600 [ 958.866625][T19547] __sys_bpf+0x6f7/0x780 [ 958.870948][T19547] ? bpf_link_show_fdinfo+0x380/0x380 [ 958.876439][T19547] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 958.882702][T19547] __x64_sys_bpf+0x78/0x90 [ 958.887192][T19547] do_syscall_64+0x4c/0xa0 [ 958.891777][T19547] ? clear_bhb_loop+0x60/0xb0 [ 958.896530][T19547] ? clear_bhb_loop+0x60/0xb0 [ 958.901281][T19547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.907386][T19547] RIP: 0033:0x7ffa6179aeb9 [ 958.911917][T19547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.931590][T19547] RSP: 002b:00007ffa62662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 958.940328][T19547] RAX: ffffffffffffffda RBX: 00007ffa61a15fa0 RCX: 00007ffa6179aeb9 [ 958.948540][T19547] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 958.956576][T19547] RBP: 00007ffa62662090 R08: 0000000000000000 R09: 0000000000000000 [ 958.964705][T19547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.972735][T19547] R13: 00007ffa61a16038 R14: 00007ffa61a15fa0 R15: 00007ffc48528b68 [ 958.980789][T19547] [ 959.193824][T19555] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4882'. [ 959.219336][T19555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4882'. [ 959.268415][T19555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4882'. [ 959.296992][T19556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4882'. [ 960.793077][T19586] netlink: 'syz.2.4895': attribute type 2 has an invalid length. [ 960.841271][T19586] netlink: 'syz.2.4895': attribute type 1 has an invalid length. [ 960.914958][T19593] netlink: 'syz.4.4897': attribute type 21 has an invalid length. [ 961.051901][T19594] netlink: zone id is out of range [ 967.688038][T19646] __nla_validate_parse: 4 callbacks suppressed [ 967.688061][T19646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4915'. [ 970.468684][T19646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4915'. [ 971.323372][T19678] netlink: 'syz.1.4925': attribute type 2 has an invalid length. [ 971.382486][T19678] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4925'. [ 972.077213][T19696] netlink: 'syz.3.4933': attribute type 27 has an invalid length. [ 972.109543][T19696] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4933'. [ 972.700732][T19717] netlink: 'syz.3.4941': attribute type 2 has an invalid length. [ 972.711134][T19717] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4941'. [ 973.917417][T19738] netlink: 'syz.0.4947': attribute type 1 has an invalid length. [ 979.943123][T19779] netlink: 'syz.0.4961': attribute type 6 has an invalid length. [ 980.557736][T19791] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.4966'. [ 980.586747][T19791] netlink: zone id is out of range [ 980.597543][T19791] netlink: get zone limit has 8 unknown bytes [ 981.242315][T19794] tun0: tun_chr_ioctl cmd 1074025694 [ 985.021503][T19824] netlink: 'syz.1.4978': attribute type 21 has an invalid length. [ 985.032268][T19824] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4978'. [ 987.404774][T19900] FAULT_INJECTION: forcing a failure. [ 987.404774][T19900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.478631][T19900] CPU: 0 PID: 19900 Comm: syz.0.5006 Not tainted syzkaller #0 [ 987.486370][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.496483][T19900] Call Trace: [ 987.499790][T19900] [ 987.502855][T19900] dump_stack_lvl+0x188/0x24e [ 987.507578][T19900] ? show_regs_print_info+0x12/0x12 [ 987.512816][T19900] ? load_image+0x400/0x400 [ 987.517369][T19900] ? __lock_acquire+0x7d10/0x7d10 [ 987.522522][T19900] should_fail_ex+0x399/0x4d0 [ 987.527258][T19900] _copy_from_user+0x2c/0x170 [ 987.531983][T19900] __sys_bpf+0x2ea/0x780 [ 987.536355][T19900] ? bpf_link_show_fdinfo+0x380/0x380 [ 987.542121][T19900] ? lock_chain_count+0x20/0x20 [ 987.547014][T19900] __x64_sys_bpf+0x78/0x90 [ 987.551675][T19900] do_syscall_64+0x4c/0xa0 [ 987.556151][T19900] ? clear_bhb_loop+0x60/0xb0 [ 987.560879][T19900] ? clear_bhb_loop+0x60/0xb0 [ 987.565680][T19900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.571631][T19900] RIP: 0033:0x7fd2b159aeb9 [ 987.576078][T19900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.595904][T19900] RSP: 002b:00007fd2b2469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 987.604363][T19900] RAX: ffffffffffffffda RBX: 00007fd2b1816090 RCX: 00007fd2b159aeb9 [ 987.612668][T19900] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 987.620803][T19900] RBP: 00007fd2b2469090 R08: 0000000000000000 R09: 0000000000000000 [ 987.629520][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.637891][T19900] R13: 00007fd2b1816128 R14: 00007fd2b1816090 R15: 00007ffdf1036218 [ 987.645928][T19900] [ 992.983708][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.990226][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.195900][T19997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5036'. [ 995.211249][T20000] netlink: 'syz.0.5036': attribute type 39 has an invalid length. [ 995.225123][T20017] netlink: 'syz.2.5043': attribute type 19 has an invalid length. [ 1000.441185][T20077] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1000.450578][T20078] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1000.470696][T20086] netlink: 'syz.2.5064': attribute type 10 has an invalid length. [ 1000.485996][T20086] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5064'. [ 1000.839358][T20098] netlink: 'syz.2.5065': attribute type 29 has an invalid length. [ 1000.847905][T20098] netlink: 'syz.2.5065': attribute type 29 has an invalid length. [ 1000.907297][T20093] netlink: 'syz.2.5065': attribute type 1 has an invalid length. [ 1000.992400][T20093] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1001.452539][T20110] netlink: 'syz.1.5071': attribute type 10 has an invalid length. [ 1004.020594][T20160] FAULT_INJECTION: forcing a failure. [ 1004.020594][T20160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.039883][T20160] CPU: 0 PID: 20160 Comm: syz.2.5089 Not tainted syzkaller #0 [ 1004.047614][T20160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1004.057725][T20160] Call Trace: [ 1004.061056][T20160] [ 1004.064120][T20160] dump_stack_lvl+0x188/0x24e [ 1004.068887][T20160] ? show_regs_print_info+0x12/0x12 [ 1004.074143][T20160] ? load_image+0x400/0x400 [ 1004.078707][T20160] ? __lock_acquire+0x7d10/0x7d10 [ 1004.083793][T20160] ? snprintf+0xe5/0x140 [ 1004.088086][T20160] should_fail_ex+0x399/0x4d0 [ 1004.092811][T20160] _copy_to_user+0x2c/0x130 [ 1004.097397][T20160] simple_read_from_buffer+0xe3/0x150 [ 1004.102852][T20160] proc_fail_nth_read+0x1a6/0x220 [ 1004.107932][T20160] ? proc_fault_inject_write+0x310/0x310 [ 1004.113617][T20160] ? fsnotify_perm+0x248/0x550 [ 1004.118434][T20160] ? proc_fault_inject_write+0x310/0x310 [ 1004.124129][T20160] vfs_read+0x2de/0xa00 [ 1004.128351][T20160] ? kernel_read+0x1e0/0x1e0 [ 1004.133003][T20160] ? __fget_files+0x28/0x4b0 [ 1004.137680][T20160] ? __fget_files+0x28/0x4b0 [ 1004.142327][T20160] ? __fget_files+0x43d/0x4b0 [ 1004.147082][T20160] ? __fdget_pos+0x2ae/0x360 [ 1004.151732][T20160] ? ksys_read+0x71/0x250 [ 1004.156123][T20160] ksys_read+0x14c/0x250 [ 1004.160431][T20160] ? vfs_write+0xa30/0xa30 [ 1004.164905][T20160] ? lockdep_hardirqs_on+0x94/0x140 [ 1004.170179][T20160] do_syscall_64+0x4c/0xa0 [ 1004.174646][T20160] ? clear_bhb_loop+0x60/0xb0 [ 1004.179364][T20160] ? clear_bhb_loop+0x60/0xb0 [ 1004.184063][T20160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.189968][T20160] RIP: 0033:0x7f8a3255b78e [ 1004.194403][T20160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1004.214067][T20160] RSP: 002b:00007f8a334a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.222542][T20160] RAX: ffffffffffffffda RBX: 00007f8a334a86c0 RCX: 00007f8a3255b78e [ 1004.230581][T20160] RDX: 000000000000000f RSI: 00007f8a334a80a0 RDI: 0000000000000005 [ 1004.238607][T20160] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.246635][T20160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.254661][T20160] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 1004.262733][T20160] [ 1004.481070][T20169] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1004.493571][T20169] openvswitch: netlink: Flow actions attr not present in new flow. [ 1006.043286][T20146] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1006.053078][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.060708][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.070442][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.077913][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.148028][T20150] team0: Port device batadv0 removed [ 1006.202584][T20179] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 1006.217020][T20171] Ÿë: port 1(veth0_to_team) entered blocking state [ 1006.225587][T20171] Ÿë: port 1(veth0_to_team) entered disabled state [ 1006.240539][T20171] device veth0_to_team entered promiscuous mode [ 1007.851795][T20220] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5105'. [ 1008.341080][T20236] netlink: 'syz.3.5110': attribute type 12 has an invalid length. [ 1008.425725][T20236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5110'. [ 1008.912789][T20255] netlink: 'syz.0.5118': attribute type 10 has an invalid length. [ 1009.234312][T20265] sctp: [Deprecated]: syz.1.5121 (pid 20265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.234312][T20265] Use struct sctp_sack_info instead [ 1010.198599][T20291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5131'. [ 1010.452552][T20298] IPv6: Can't replace route, no match found [ 1010.549490][T20301] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1010.555377][T20301] pim6reg0: linktype set to 0 [ 1012.639270][T20370] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5159'. [ 1012.755207][T20365] netlink: 15990 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1014.553788][T20394] netlink: 'syz.2.5167': attribute type 10 has an invalid length. [ 1014.688464][T20394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1015.710213][T20428] netlink: 'syz.0.5180': attribute type 3 has an invalid length. [ 1015.732785][T20428] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5180'. [ 1017.333840][T20440] FAULT_INJECTION: forcing a failure. [ 1017.333840][T20440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.347751][T20440] CPU: 0 PID: 20440 Comm: syz.0.5184 Not tainted syzkaller #0 [ 1017.355330][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1017.365481][T20440] Call Trace: [ 1017.368836][T20440] [ 1017.371867][T20440] dump_stack_lvl+0x188/0x24e [ 1017.376652][T20440] ? show_regs_print_info+0x12/0x12 [ 1017.381929][T20440] ? load_image+0x400/0x400 [ 1017.386605][T20440] ? __lock_acquire+0x7d10/0x7d10 [ 1017.391747][T20440] should_fail_ex+0x399/0x4d0 [ 1017.396494][T20440] prepare_alloc_pages+0x1e2/0x5f0 [ 1017.401779][T20440] __alloc_pages+0x130/0x4f0 [ 1017.406453][T20440] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 1017.412217][T20440] ? zone_statistics+0x170/0x170 [ 1017.417251][T20440] ? __rwlock_init+0x140/0x140 [ 1017.422063][T20440] ? do_raw_spin_unlock+0x11d/0x230 [ 1017.427317][T20440] __get_free_pages+0x8/0x30 [ 1017.432167][T20440] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1017.437871][T20440] ? __apply_to_page_range+0x977/0xd10 [ 1017.443401][T20440] __apply_to_page_range+0x989/0xd10 [ 1017.449271][T20440] ? kasan_populate_vmalloc+0x70/0x70 [ 1017.454788][T20440] alloc_vmap_area+0x178f/0x18c0 [ 1017.459849][T20440] ? vm_map_ram+0xab0/0xab0 [ 1017.464433][T20440] ? rcu_is_watching+0x11/0xa0 [ 1017.469274][T20440] __get_vm_area_node+0x158/0x330 [ 1017.474357][T20440] vmap+0xf5/0x2c0 [ 1017.478146][T20440] ? bpf_ringbuf_alloc+0x33b/0x560 [ 1017.483394][T20440] bpf_ringbuf_alloc+0x33b/0x560 [ 1017.488425][T20440] ringbuf_map_alloc+0x1ac/0x2d0 [ 1017.493521][T20440] map_create+0x534/0x1000 [ 1017.498014][T20440] ? bpf_lsm_bpf+0x5/0x10 [ 1017.502438][T20440] __sys_bpf+0x38b/0x780 [ 1017.506734][T20440] ? bpf_link_show_fdinfo+0x380/0x380 [ 1017.512183][T20440] ? lock_chain_count+0x20/0x20 [ 1017.517101][T20440] __x64_sys_bpf+0x78/0x90 [ 1017.521563][T20440] do_syscall_64+0x4c/0xa0 [ 1017.526039][T20440] ? clear_bhb_loop+0x60/0xb0 [ 1017.530805][T20440] ? clear_bhb_loop+0x60/0xb0 [ 1017.535555][T20440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.541497][T20440] RIP: 0033:0x7fd2b159aeb9 [ 1017.546080][T20440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.566257][T20440] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1017.574712][T20440] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 1017.582752][T20440] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 1017.590995][T20440] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.599010][T20440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.607032][T20440] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 1017.615096][T20440] [ 1018.671661][T20418] netlink: 'syz.3.5176': attribute type 10 has an invalid length. [ 1018.679693][T20418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1018.689265][T20423] netlink: 'syz.2.5178': attribute type 10 has an invalid length. [ 1018.702254][T20423] device team0 left promiscuous mode [ 1018.707732][T20423] device team_slave_0 left promiscuous mode [ 1018.716436][T20423] device team_slave_1 left promiscuous mode [ 1018.725302][T20423] device dummy0 left promiscuous mode [ 1018.733381][T20423] device wlan1 left promiscuous mode [ 1018.745180][T20423] device geneve1 left promiscuous mode [ 1018.770836][T20423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.823160][T20423] bond0: (slave team0): Enslaving as an active interface with an up link [ 1018.850523][T20444] netlink: 'syz.3.5186': attribute type 29 has an invalid length. [ 1018.862677][T20442] netlink: 'syz.0.5185': attribute type 25 has an invalid length. [ 1018.885919][T20444] netlink: 'syz.3.5186': attribute type 29 has an invalid length. [ 1018.917701][T20447] netlink: 'syz.3.5186': attribute type 29 has an invalid length. [ 1018.972759][T20444] netlink: 'syz.3.5186': attribute type 29 has an invalid length. [ 1019.032589][T20444] netlink: 'syz.3.5186': attribute type 29 has an invalid length. [ 1023.861573][T20499] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1023.867477][T20499] pim6reg0: linktype set to 0 [ 1025.770707][T20547] tipc: Started in network mode [ 1025.848674][T20547] tipc: Node identity 9215a268, cluster identity 4711 [ 1025.855529][T20547] tipc: Node number set to 2450891368 [ 1025.921332][T20548] netlink: 'syz.1.5221': attribute type 10 has an invalid length. [ 1026.048058][T20548] team0: Device veth1_vlan failed to register rx_handler [ 1027.094594][T20593] FAULT_INJECTION: forcing a failure. [ 1027.094594][T20593] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.113833][T20593] CPU: 0 PID: 20593 Comm: syz.2.5234 Not tainted syzkaller #0 [ 1027.121375][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.131486][T20593] Call Trace: [ 1027.134804][T20593] [ 1027.137768][T20593] dump_stack_lvl+0x188/0x24e [ 1027.142511][T20593] ? show_regs_print_info+0x12/0x12 [ 1027.147779][T20593] ? load_image+0x400/0x400 [ 1027.152347][T20593] ? __might_sleep+0xd0/0xd0 [ 1027.157071][T20593] ? __lock_acquire+0x7d10/0x7d10 [ 1027.162165][T20593] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1027.168215][T20593] should_fail_ex+0x399/0x4d0 [ 1027.172970][T20593] should_failslab+0x5/0x20 [ 1027.177530][T20593] slab_pre_alloc_hook+0x59/0x310 [ 1027.182613][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.187875][T20593] ? __get_vm_area_node+0x122/0x330 [ 1027.193143][T20593] __kmem_cache_alloc_node+0x4f/0x260 [ 1027.198584][T20593] ? __get_vm_area_node+0x122/0x330 [ 1027.203848][T20593] kmalloc_node_trace+0x22/0xe0 [ 1027.208774][T20593] __get_vm_area_node+0x122/0x330 [ 1027.213876][T20593] __vmalloc_node_range+0x357/0x13b0 [ 1027.219229][T20593] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.225018][T20593] ? perf_trace_preemptirq_template+0x268/0x320 [ 1027.231321][T20593] ? free_vm_area+0x50/0x50 [ 1027.235863][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.241106][T20593] ? end_current_label_crit_section+0x170/0x170 [ 1027.247380][T20593] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.252972][T20593] __vmalloc+0x76/0x80 [ 1027.257193][T20593] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.262791][T20593] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.268236][T20593] ? bpf_lsm_capable+0x5/0x10 [ 1027.272972][T20593] bpf_prog_alloc+0x1c/0x1b0 [ 1027.277629][T20593] bpf_prog_load+0x7c9/0x1560 [ 1027.282373][T20593] ? map_freeze+0x390/0x390 [ 1027.286921][T20593] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1027.293199][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.298449][T20593] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1027.304467][T20593] ? bpf_lsm_bpf+0x5/0x10 [ 1027.308829][T20593] ? security_bpf+0x7a/0xa0 [ 1027.313373][T20593] __sys_bpf+0x5b8/0x780 [ 1027.317658][T20593] ? bpf_link_show_fdinfo+0x380/0x380 [ 1027.323097][T20593] ? lock_chain_count+0x20/0x20 [ 1027.327993][T20593] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1027.334110][T20593] __x64_sys_bpf+0x78/0x90 [ 1027.338567][T20593] do_syscall_64+0x4c/0xa0 [ 1027.343024][T20593] ? clear_bhb_loop+0x60/0xb0 [ 1027.347932][T20593] ? clear_bhb_loop+0x60/0xb0 [ 1027.352645][T20593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1027.358617][T20593] RIP: 0033:0x7f8a3259aeb9 [ 1027.363066][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.382883][T20593] RSP: 002b:00007f8a334a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.391346][T20593] RAX: ffffffffffffffda RBX: 00007f8a32815fa0 RCX: 00007f8a3259aeb9 [ 1027.399368][T20593] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1027.407394][T20593] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.415399][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.423415][T20593] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 1027.431446][T20593] [ 1027.491957][T20593] syz.2.5234: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1027.542220][T20593] CPU: 1 PID: 20593 Comm: syz.2.5234 Not tainted syzkaller #0 [ 1027.549870][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.560096][T20593] Call Trace: [ 1027.563438][T20593] [ 1027.566416][T20593] dump_stack_lvl+0x188/0x24e [ 1027.571165][T20593] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1027.577637][T20593] ? show_regs_print_info+0x12/0x12 [ 1027.582894][T20593] ? load_image+0x400/0x400 [ 1027.587483][T20593] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1027.593992][T20593] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1027.600547][T20593] warn_alloc+0x242/0x330 [ 1027.605202][T20593] ? __get_vm_area_node+0x122/0x330 [ 1027.610462][T20593] ? zone_watermark_ok_safe+0x270/0x270 [ 1027.616068][T20593] ? rcu_is_watching+0x11/0xa0 [ 1027.620904][T20593] ? __get_vm_area_node+0x318/0x330 [ 1027.626173][T20593] __vmalloc_node_range+0x37c/0x13b0 [ 1027.631541][T20593] ? perf_trace_preemptirq_template+0x268/0x320 [ 1027.637862][T20593] ? free_vm_area+0x50/0x50 [ 1027.642508][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.647774][T20593] ? end_current_label_crit_section+0x170/0x170 [ 1027.654075][T20593] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.659728][T20593] __vmalloc+0x76/0x80 [ 1027.663855][T20593] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.669463][T20593] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1027.674888][T20593] ? bpf_lsm_capable+0x5/0x10 [ 1027.679613][T20593] bpf_prog_alloc+0x1c/0x1b0 [ 1027.684272][T20593] bpf_prog_load+0x7c9/0x1560 [ 1027.689037][T20593] ? map_freeze+0x390/0x390 [ 1027.693601][T20593] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1027.699791][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.705091][T20593] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1027.711130][T20593] ? bpf_lsm_bpf+0x5/0x10 [ 1027.715509][T20593] ? security_bpf+0x7a/0xa0 [ 1027.720148][T20593] __sys_bpf+0x5b8/0x780 [ 1027.724442][T20593] ? bpf_link_show_fdinfo+0x380/0x380 [ 1027.729871][T20593] ? lock_chain_count+0x20/0x20 [ 1027.734940][T20593] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1027.740969][T20593] __x64_sys_bpf+0x78/0x90 [ 1027.745426][T20593] do_syscall_64+0x4c/0xa0 [ 1027.749907][T20593] ? clear_bhb_loop+0x60/0xb0 [ 1027.754631][T20593] ? clear_bhb_loop+0x60/0xb0 [ 1027.759540][T20593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1027.765483][T20593] RIP: 0033:0x7f8a3259aeb9 [ 1027.770026][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.789660][T20593] RSP: 002b:00007f8a334a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1027.798152][T20593] RAX: ffffffffffffffda RBX: 00007f8a32815fa0 RCX: 00007f8a3259aeb9 [ 1027.806272][T20593] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1027.814272][T20593] RBP: 00007f8a334a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.822269][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.830271][T20593] R13: 00007f8a32816038 R14: 00007f8a32815fa0 R15: 00007ffe3cca9a78 [ 1027.838293][T20593] [ 1028.085073][T20593] Mem-Info: [ 1028.088700][T20593] active_anon:20412 inactive_anon:0 isolated_anon:0 [ 1028.088700][T20593] active_file:21716 inactive_file:40301 isolated_file:0 [ 1028.088700][T20593] unevictable:768 dirty:128 writeback:0 [ 1028.088700][T20593] slab_reclaimable:21091 slab_unreclaimable:102037 [ 1028.088700][T20593] mapped:42332 shmem:14002 pagetables:689 [ 1028.088700][T20593] sec_pagetables:0 bounce:0 [ 1028.088700][T20593] kernel_misc_reclaimable:0 [ 1028.088700][T20593] free:1302125 free_pcp:4385 free_cma:0 [ 1028.145214][T20593] Node 0 active_anon:82048kB inactive_anon:0kB active_file:86864kB inactive_file:161000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169528kB dirty:508kB writeback:0kB shmem:54972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11624kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no [ 1028.228339][T20593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1028.288677][T20593] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.387856][T20593] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1028.399466][T20593] Node 0 DMA32 free:1270684kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:87848kB inactive_anon:0kB active_file:86864kB inactive_file:161000kB unevictable:1536kB writepending:508kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:13024kB local_pcp:1616kB free_cma:0kB [ 1028.506375][T20593] lowmem_reserve[]: 0 0 1 1 1 [ 1028.516518][T20593] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1028.558298][T20593] lowmem_reserve[]: 0 0 0 0 0 [ 1028.563230][T20593] Node 1 Normal free:3915916kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:5888kB local_pcp:1920kB free_cma:0kB [ 1028.624527][T20593] lowmem_reserve[]: 0 0 0 0 0 [ 1028.638266][T20593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1028.676461][T20593] Node 0 DMA32: 1849*4kB (UME) 822*8kB (UE) 914*16kB (UE) 22*32kB (UE) 27*64kB (UME) 247*128kB (UME) 131*256kB (UME) 91*512kB (UME) 29*1024kB (UM) 16*2048kB (UME) 258*4096kB (UM) = 1262004kB [ 1028.709433][T20593] Node 0 Normal: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1028.734474][T20593] Node 1 Normal: 225*4kB (UE) 35*8kB (UME) 39*16kB (UE) 166*32kB (UME) 61*64kB (UME) 23*128kB (UME) 14*256kB (UM) 4*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3915916kB [ 1028.768891][T20593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.800824][T20593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1028.820561][T20593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.847351][T20593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1028.868313][T20593] 80996 total pagecache pages [ 1028.873202][T20593] 0 pages in swap cache [ 1028.877490][T20593] Free swap = 124996kB [ 1028.888398][T20593] Total swap = 124996kB [ 1028.893068][T20593] 2097051 pages RAM [ 1028.896921][T20593] 0 pages HighMem/MovableOnly [ 1028.909257][T20593] 415205 pages reserved [ 1028.913494][T20593] 0 pages cma reserved [ 1030.911665][T20634] netlink: 'syz.4.5250': attribute type 41 has an invalid length. [ 1033.504688][T20649] FAULT_INJECTION: forcing a failure. [ 1033.504688][T20649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.518618][T20649] CPU: 1 PID: 20649 Comm: syz.0.5255 Not tainted syzkaller #0 [ 1033.526153][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.536261][T20649] Call Trace: [ 1033.539610][T20649] [ 1033.542609][T20649] dump_stack_lvl+0x188/0x24e [ 1033.547347][T20649] ? show_regs_print_info+0x12/0x12 [ 1033.552614][T20649] ? load_image+0x400/0x400 [ 1033.557182][T20649] ? __lock_acquire+0x7d10/0x7d10 [ 1033.562261][T20649] ? lockdep_hardirqs_on+0x94/0x140 [ 1033.567529][T20649] should_fail_ex+0x399/0x4d0 [ 1033.572253][T20649] _copy_from_user+0x2c/0x170 [ 1033.576980][T20649] generic_map_update_batch+0x4a1/0x810 [ 1033.582583][T20649] ? rcu_read_unlock+0xa0/0xa0 [ 1033.587395][T20649] ? __fdget+0x17c/0x200 [ 1033.591670][T20649] ? rcu_read_unlock+0xa0/0xa0 [ 1033.596473][T20649] bpf_map_do_batch+0x466/0x600 [ 1033.601385][T20649] __sys_bpf+0x6f7/0x780 [ 1033.605690][T20649] ? bpf_link_show_fdinfo+0x380/0x380 [ 1033.611131][T20649] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1033.617334][T20649] __x64_sys_bpf+0x78/0x90 [ 1033.621880][T20649] do_syscall_64+0x4c/0xa0 [ 1033.626351][T20649] ? clear_bhb_loop+0x60/0xb0 [ 1033.631064][T20649] ? clear_bhb_loop+0x60/0xb0 [ 1033.635784][T20649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.641707][T20649] RIP: 0033:0x7fd2b159aeb9 [ 1033.646174][T20649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.666003][T20649] RSP: 002b:00007fd2b248a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.674466][T20649] RAX: ffffffffffffffda RBX: 00007fd2b1815fa0 RCX: 00007fd2b159aeb9 [ 1033.682493][T20649] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1033.690513][T20649] RBP: 00007fd2b248a090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.698619][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.706630][T20649] R13: 00007fd2b1816038 R14: 00007fd2b1815fa0 R15: 00007ffdf1036218 [ 1033.714644][T20649] [ 1035.124517][T20634] netlink: 'syz.4.5250': attribute type 41 has an invalid length. [ 1036.010247][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.202396][T20734] netlink: 'syz.1.5284': attribute type 10 has an invalid length. [ 1040.215859][T20743] device bond0 entered promiscuous mode [ 1040.224523][T20743] device bond_slave_0 entered promiscuous mode [ 1040.231355][T20743] device bond_slave_1 entered promiscuous mode [ 1040.237839][T20743] device netdevsim0 entered promiscuous mode [ 1041.629512][T20789] device syzkaller0 entered promiscuous mode [ 1045.912977][T20833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1045.969433][T20833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1045.989757][T20834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1046.016057][T20833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1047.387026][T20859] device syzkaller0 entered promiscuous mode [ 1049.888964][ T4353] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1049.896877][ T4353] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1049.973327][ T4353] ------------[ cut here ]------------ [ 1049.979355][ T4353] WARNING: CPU: 1 PID: 4353 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1049.989480][ T4353] Modules linked in: [ 1049.993431][ T4353] CPU: 1 PID: 4353 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1050.001096][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.011233][ T4353] Workqueue: cfg80211 cfg80211_event_work [ 1050.017030][ T4353] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1050.023311][ T4353] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 f2 ee f7 0f 0b eb bb e8 58 f2 ee f7 <0f> 0b eb b2 e8 4f f2 ee f7 0f 0b e9 77 fd ff ff e8 43 f2 ee f7 0f [ 1050.043170][ T4353] RSP: 0000:ffffc90004657aa0 EFLAGS: 00010293 [ 1050.049592][ T4353] RAX: ffffffff89938018 RBX: dffffc0000000000 RCX: ffff88801cbfd940 [ 1050.057719][ T4353] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 1050.065965][ T4353] RBP: ffffc90004657b70 R08: ffffffff90af32a7 R09: 1ffffffff215e654 [ 1050.074033][ T4353] R10: dffffc0000000000 R11: fffffbfff215e655 R12: ffff88805a373618 [ 1050.082109][ T4353] R13: 1ffff920008caf5c R14: 000000000000001f R15: ffff888056ed0c90 [ 1050.090177][ T4353] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1050.099204][ T4353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.105841][ T4353] CR2: 00007ffe3cca9c88 CR3: 00000000629eb000 CR4: 00000000003506e0 [ 1050.113910][ T4353] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1050.121979][ T4353] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1050.130059][ T4353] Call Trace: [ 1050.133385][ T4353] [ 1050.136453][ T4353] ? mutex_lock_nested+0x10/0x10 [ 1050.141502][ T4353] ? trace_rdev_return_void+0x240/0x240 [ 1050.147148][ T4353] cfg80211_process_wdev_events+0x3ad/0x550 [ 1050.153165][ T4353] cfg80211_process_rdev_events+0x9d/0x110 [ 1050.159094][ T4353] ? process_one_work+0x7b0/0x1160 [ 1050.164273][ T4353] cfg80211_event_work+0x2b/0x40 [ 1050.169312][ T4353] process_one_work+0x8a2/0x1160 [ 1050.174348][ T4353] ? worker_detach_from_pool+0x240/0x240 [ 1050.180104][ T4353] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1050.185204][ T4353] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1050.190849][ T4353] ? kthread_data+0x4b/0xc0 [ 1050.195433][ T4353] worker_thread+0xaa2/0x1270 [ 1050.200243][ T4353] kthread+0x29d/0x330 [ 1050.204375][ T4353] ? worker_clr_flags+0x1a0/0x1a0 [ 1050.209496][ T4353] ? kthread_blkcg+0xd0/0xd0 [ 1050.214165][ T4353] ret_from_fork+0x1f/0x30 [ 1050.218693][ T4353] [ 1050.221885][ T4353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1050.229227][ T4353] CPU: 1 PID: 4353 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1050.236824][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.246932][ T4353] Workqueue: cfg80211 cfg80211_event_work [ 1050.252725][ T4353] Call Trace: [ 1050.256113][ T4353] [ 1050.259096][ T4353] dump_stack_lvl+0x188/0x24e [ 1050.263837][ T4353] ? memcpy+0x3c/0x60 [ 1050.267874][ T4353] ? show_regs_print_info+0x12/0x12 [ 1050.273137][ T4353] ? load_image+0x400/0x400 [ 1050.277682][ T4353] panic+0x2e5/0x730 [ 1050.281623][ T4353] ? bpf_jit_dump+0xd0/0xd0 [ 1050.286174][ T4353] ? ret_from_fork+0x1f/0x30 [ 1050.290806][ T4353] __warn+0x2f8/0x4f0 [ 1050.294834][ T4353] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1050.300543][ T4353] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1050.306215][ T4353] report_bug+0x2ba/0x4f0 [ 1050.310581][ T4353] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1050.316166][ T4353] handle_bug+0x3a/0x70 [ 1050.320358][ T4353] exc_invalid_op+0x16/0x40 [ 1050.324900][ T4353] asm_exc_invalid_op+0x16/0x20 [ 1050.329780][ T4353] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1050.335972][ T4353] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 f2 ee f7 0f 0b eb bb e8 58 f2 ee f7 <0f> 0b eb b2 e8 4f f2 ee f7 0f 0b e9 77 fd ff ff e8 43 f2 ee f7 0f [ 1050.355608][ T4353] RSP: 0000:ffffc90004657aa0 EFLAGS: 00010293 [ 1050.361967][ T4353] RAX: ffffffff89938018 RBX: dffffc0000000000 RCX: ffff88801cbfd940 [ 1050.370010][ T4353] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 1050.378098][ T4353] RBP: ffffc90004657b70 R08: ffffffff90af32a7 R09: 1ffffffff215e654 [ 1050.386096][ T4353] R10: dffffc0000000000 R11: fffffbfff215e655 R12: ffff88805a373618 [ 1050.394098][ T4353] R13: 1ffff920008caf5c R14: 000000000000001f R15: ffff888056ed0c90 [ 1050.402114][ T4353] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1050.407881][ T4353] ? mutex_lock_nested+0x10/0x10 [ 1050.412856][ T4353] ? trace_rdev_return_void+0x240/0x240 [ 1050.418458][ T4353] cfg80211_process_wdev_events+0x3ad/0x550 [ 1050.424410][ T4353] cfg80211_process_rdev_events+0x9d/0x110 [ 1050.430254][ T4353] ? process_one_work+0x7b0/0x1160 [ 1050.435402][ T4353] cfg80211_event_work+0x2b/0x40 [ 1050.440375][ T4353] process_one_work+0x8a2/0x1160 [ 1050.445364][ T4353] ? worker_detach_from_pool+0x240/0x240 [ 1050.451034][ T4353] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1050.456102][ T4353] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1050.461948][ T4353] ? kthread_data+0x4b/0xc0 [ 1050.466495][ T4353] worker_thread+0xaa2/0x1270 [ 1050.471316][ T4353] kthread+0x29d/0x330 [ 1050.475416][ T4353] ? worker_clr_flags+0x1a0/0x1a0 [ 1050.480467][ T4353] ? kthread_blkcg+0xd0/0xd0 [ 1050.485091][ T4353] ret_from_fork+0x1f/0x30 [ 1050.489585][ T4353] [ 1050.493225][ T4353] Kernel Offset: disabled [ 1050.497640][ T4353] Rebooting in 86400 seconds..