last executing test programs: 9.312815855s ago: executing program 1 (id=2342): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x4, r0, 0xd55160605ad1493f) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000400), 0x0}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000", @ANYBLOB="ac141410e0000001000000002c00"], 0x50}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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"/2705, 0xa91}], 0x3}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002940)={r3, 0xe0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000026c0)=[0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0], 0x0, 0x3c, &(0x7f0000002740)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000027c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000002800)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000003fc0)}, 0xffffff3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffae}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x200, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a40)=@bpf_tracing={0x1a, 0x26, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x38, 0x8, 0xa, 0x3, 0xdd}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x4, 0x1, 0x2, 0x0, 0x9, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000001680)=""/4096, 0x41000, 0x40, '\x00', r7, 0x4, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x156c7, r3, 0x0, &(0x7f0000000200)=[r2, r4], &(0x7f00000029c0), 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 9.155237692s ago: executing program 1 (id=2343): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x9b, 0xd}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x84) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x79}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) 9.047406938s ago: executing program 1 (id=2344): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x10000, 0x9e4, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x42, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000e70000850000003100000095000000000000008f4c7603a53dbb29f436863ae1e342cd00b17b462ec4ba8b8f26be994e69434343865f5bdffcc598688ba705095e5d49a099f4cd7f9655ecadffc8d6e0596725988470be1695db7a59709e481fbf1b62699c03110a87591a79ba1378aaf9de120b6965c05d9c8b52598cfa013391cae67648132bb04cace15c62d422e5fd10184cc2b7c230f77fb27cbfa0655796074fc8518f50073f1d3787bdc7f7fb8d6e2cfa84d6338794be36a6379823c77e30d5c2df069466997dd24eb9d225e77e93e0123ac9eb8751daf930c271ac24fccfbe6a"], &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xd4e}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0xc004) sendmsg(r5, &(0x7f0000000800)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="d5ff1f9de7", 0x5}], 0x1}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) 8.754038021s ago: executing program 1 (id=2345): r0 = syz_clone(0x2da10680, &(0x7f0000000240)="acf9da865737044bef210e7ae65c011a44b196a0ad59d8383b3a3063898daaa02610c6f481c1691d3a326c954e0470ab5adfdab40be70a245c962f7b40322a90df9651f553d937f352225cf616f746f2a3ea6f630159ef1e197fbfbe23a6ef71fc8b6e2bcdec41a965ba6de4ffb800a7431b94fbf8cef56ff9b8cb4ca9be3fc93b3fd9c4f6bad7767c63e7c71f29dea09921480ba0b3", 0x96, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000500)="45e5f3c3e055e75e0bcb89af6fbc8a49c23bc8a74555346dc4cb2789c5942db7cd9a538801af250e65d78fc1a635c59593f6e398a9b66dd5c59390d3e161e422c73a161bff9eaba8285ed8cf02f006cdd45261bcb5368ce7920161f2e31c79b6838ba652257399e9aa") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfff, 0x1}, 0x840}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) socket$kcm(0x29, 0x2, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400aaac94e640000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x200000000000003, 0x106) 7.551467117s ago: executing program 0 (id=2346): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_fd, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x0, 0x6f, &(0x7f00000003c0)=""/111, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x0, 0x4, 0x0, 0x9}, {0x2, 0x3, 0xe, 0x7}, {0x1, 0x2, 0xe, 0x1}, {0x0, 0x1, 0x6, 0x4}, {0x5, 0x4, 0xd, 0x7}], 0x10, 0x800}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080003036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r3, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 7.550453077s ago: executing program 2 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ce", 0x71}, {0x0}, {&(0x7f0000000e40), 0x6000}], 0x3, 0x0, 0xff97}, 0x800) 7.415335174s ago: executing program 2 (id=2348): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x8, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 7.374945486s ago: executing program 2 (id=2349): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688655846", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/29, 0x1d}, 0x0) 4.222993783s ago: executing program 2 (id=2350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000d000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.115253208s ago: executing program 2 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7897, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x3, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x482, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000ffffffe50000000000008100180000000700000000000000e808000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r2, 0x2f}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x80000000005}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122f00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x36) socket$kcm(0x1e, 0x4, 0x0) 2.115326252s ago: executing program 0 (id=2352): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x9b, 0xd}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x84) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x79}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) 1.951378639s ago: executing program 2 (id=2354): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000320", 0x33fe0}], 0x1}, 0x0) 1.913226491s ago: executing program 0 (id=2355): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b07, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="10000000000000000100000002"], 0x20}, 0x8000) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x36000}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.898848412s ago: executing program 1 (id=2356): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004"], 0x0, 0x3, 0xfa, &(0x7f0000000a00)=""/250}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000c40)}, 0x0, 0x3, 0x0, 0x3, 0x100000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="3211a72152495810ffffff7f000000000000000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="00000000020000000300"/27], 0x50) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xd, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='GPL\x00', 0xa, 0x4c, &(0x7f0000000780)=""/76, 0x41000, 0x72, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000800)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x1, 0xffff, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000f0ffff0000007347000000850000002700000300000000d0000000950000000014f800"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) 1.439772233s ago: executing program 3 (id=2358): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa000000001100711010000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.08123225s ago: executing program 3 (id=2359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000300)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x541b, &(0x7f00000000c0)) sendmsg$kcm(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="bae3780cd9dcec180767483815baa562215561f1025b66d19a8a31f5ce97679a557f4e1b3c15d611f8335403d77e8fc5a58f9b3a0a45bf746216ffa2b6be57731445a8c5b1554bc236f9cfcf58910e32560416b0921fd9bd3faa6a780b9c3a6371e9a0d22957864a48bb09b9cee69a7c54d75850d03e06cbf88812788c003ccfb96e9298917b0125c1ba6a7ccb65f4a8e78be2b10ebe89618d435d1c806fc7511e67aa4dbb932e", 0xa7}, {&(0x7f0000000140)="5de2fd5cd474c64887012614d7c35ab4eef909e5deffbbb62d24df57e2e26423971ec081ba0bcda50b963d9109c0efbf8aedf1be80611027172c5705d19dc85df9a2462a9a9826b83aada62b29ba865c8bdd5837b5c3ee193dbc6980e12f2dbf38f1d745f5a93d81dabb5c4a887ce53effd02961749308cae5cb0e7a64ca77c9dca3eae197bc1787a81bbfc28b13b6ec763dc9", 0x93}, {&(0x7f0000000240)="6543e0c6339e427562b6d25b2c73", 0xe}, {&(0x7f00000004c0)="a403a4a7160d4fb160cbeb7021b0045773ca053b146ef60da5afc81c8c25ccd1bae6233d7940210f24164cb3797304b7e1d61e309378927f13509c86d1abd526e213a7ce7e7298529810fb34141cb77613abfdb8d0642842aa36bcfae68b494bf8bbc8a18f37e17a6ffe344c38a04921263a5d0b660640ab5ae27e322c1cdaa82323cc682dd63d", 0x87}, {&(0x7f0000000580)="acff12030133fa815560e58202be992847be1c5748e1fee4d7c8f172c624feb6d921e56dd9285b89b3263accd01ea6053ca7ce5c76fe7b32c7899bc7e6666ef0e2bda9caee02d93c9e5a79005e3e2ffef75bada5e981075801cf73054b7b75e1af6edbbafddfee2bd71a2fc26c2d507dd5609df9863bcb943c151e453c19d0", 0x7f}, {&(0x7f0000000680)="c91ab9e7ffb1dc80932f14b7fa99e1a61584d15ab964cc60a2e509813e9a7e6084277a4c1fd62239148b38546327edcb423f1993531be064ef08daa97fb6065ade44bf1acfa7c4fc1941a9922267688c434673bc8dc33e1c918ea3d2ac234158354afd32ebcae41f27da7f9c8428cd1be7b4f42079770b9c1232ffc8bed36f7e6efbd6483bbbb548695297f78e674a11f3bbea8d16ac9013ea4610461bb6a9b7866d75b08c4ca06bf7128a5982e0b336f6593321b05cb0c8fdfd26850c9f0f2185ce172c2ca0111f6b7d2c0afd8db06377b498930d707a306339ef1dc81cefb5db0e", 0xe2}, {&(0x7f0000000780)="33af07a011cea9741827da0874e1b51a9cd20244e949c9b82dd50d1561e79f7888fdbcf74e72fc51c17e8dd772583bc1ba0e2609101453b7cac2421aa98d9c3f847246c56d5dd25ee2855ff7413f01f43b96e5c4274225cba1f1445a51a55c74194f7fa7656a917bdae27959e2cb641e744edb0a69f2095d0dd78a3d489ee68793ff528b889b48827540ce7d011bb8180f085e6048e9a3b3", 0x98}], 0x7, &(0x7f0000000b00)=[{0x1010, 0x185, 0x1, "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"}], 0x1010}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 835.288751ms ago: executing program 3 (id=2361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000b007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 830.884011ms ago: executing program 1 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80b04402000000", @ANYRESDEC], 0xffdd) 688.590158ms ago: executing program 0 (id=2363): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x9b, 0xd}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x84) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x79}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) 531.144966ms ago: executing program 3 (id=2364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e000000100081881c0f80ec59acbc041389810039000000060fe30c00fffd000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 379.450193ms ago: executing program 0 (id=2365): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x10000, 0x9e4, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x42, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000e70000850000003100000095000000000000008f4c7603a53dbb29f436863ae1e342cd00b17b462ec4ba8b8f26be994e69434343865f5bdffcc598688ba705095e5d49a099f4cd7f9655ecadffc8d6e0596725988470be1695db7a59709e481fbf1b62699c03110a87591a79ba1378aaf9de120b6965c05d9c8b52598cfa013391cae67648132bb04cace15c62d422e5fd10184cc2b7c230f77fb27cbfa0655796074fc8518f50073f1d3787bdc7f7fb8d6e2cfa84d6338794be36a6379823c77e30d5c2df069466997dd24eb9d225e77e93e0123ac9eb8751daf930c271ac24fccfbe6a"], &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xd4e}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0xc004) sendmsg(r5, &(0x7f0000000800)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="d5ff1f9de7", 0x5}], 0x1}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) 259.301968ms ago: executing program 3 (id=2366): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x4a, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x8, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed16"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 84.411187ms ago: executing program 3 (id=2367): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0xfffffffffffffc73, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x20}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb017f65e4f63af61b656f061b590a902b182d9b198400180000000000000018000000180000000300000004a93f1c810dcd16c1bd8c01fa7608000000000a0000040000000000000001000000000000"], 0x0, 0x33}, 0x28) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="d8000000100081044e81f782db44b904021d080005000000d7fe552603600e1209000d0000000401a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d1ca4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000004b", 0xd9}], 0x1}, 0x0) 0s ago: executing program 0 (id=2368): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x300, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 355.842313][ T9922] CPU: 1 PID: 9922 Comm: syz.1.1328 Not tainted syzkaller #0 [ 355.849789][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.859927][ T9922] Call Trace: [ 355.863252][ T9922] [ 355.866223][ T9922] dump_stack_lvl+0x18c/0x250 [ 355.870960][ T9922] ? show_regs_print_info+0x20/0x20 [ 355.876226][ T9922] ? load_image+0x420/0x420 [ 355.880785][ T9922] ? __might_sleep+0xe0/0xe0 [ 355.885432][ T9922] ? __lock_acquire+0x7d80/0x7d80 [ 355.890522][ T9922] should_fail_ex+0x394/0x4c0 [ 355.895265][ T9922] should_failslab+0x9/0x20 [ 355.899825][ T9922] slab_pre_alloc_hook+0x59/0x300 [ 355.905043][ T9922] ? lockdep_hardirqs_on+0x98/0x150 [ 355.910317][ T9922] kmem_cache_alloc_node+0x5e/0x310 [ 355.915589][ T9922] ? __alloc_skb+0x103/0x2c0 [ 355.920251][ T9922] __alloc_skb+0x103/0x2c0 [ 355.924734][ T9922] pfkey_sendmsg+0x1a2/0x11a0 [ 355.929482][ T9922] ? lock_chain_count+0x20/0x20 [ 355.934389][ T9922] ? mark_lock+0x94/0x320 [ 355.938787][ T9922] ? pfkey_release+0x340/0x340 [ 355.943615][ T9922] ? aa_sk_perm+0x83c/0x970 [ 355.948180][ T9922] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.954404][ T9922] ? aa_af_perm+0x330/0x330 [ 355.958973][ T9922] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 355.965438][ T9922] ? aa_sock_msg_perm+0x94/0x150 [ 355.970436][ T9922] ? apparmor_socket_sendmsg+0x8e/0x330 [ 355.976038][ T9922] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 355.981388][ T9922] ? security_socket_sendmsg+0x80/0xa0 [ 355.986894][ T9922] ? pfkey_release+0x340/0x340 [ 355.991721][ T9922] ____sys_sendmsg+0x61b/0x980 [ 355.996554][ T9922] ? __asan_memset+0x22/0x40 [ 356.001208][ T9922] ? __sys_sendmsg_sock+0x30/0x30 [ 356.006290][ T9922] ? __import_iovec+0x5f2/0x850 [ 356.011212][ T9922] ? import_iovec+0x73/0xa0 [ 356.015771][ T9922] ___sys_sendmsg+0x2a6/0x360 [ 356.020517][ T9922] ? __sys_sendmsg+0x2b0/0x2b0 [ 356.025386][ T9922] __se_sys_sendmsg+0x1d0/0x2c0 [ 356.030345][ T9922] ? __x64_sys_sendmsg+0x80/0x80 [ 356.035360][ T9922] ? syscall_enter_from_user_mode+0x2e/0x80 [ 356.041317][ T9922] do_syscall_64+0x55/0xb0 [ 356.045794][ T9922] ? clear_bhb_loop+0x40/0x90 [ 356.050530][ T9922] ? clear_bhb_loop+0x40/0x90 [ 356.055271][ T9922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.061230][ T9922] RIP: 0033:0x7ff43879e159 [ 356.065737][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.085406][ T9922] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.093877][ T9922] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 356.101900][ T9922] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 356.109953][ T9922] RBP: 00007ff4395e2090 R08: 0000000000000000 R09: 0000000000000000 [ 356.117973][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.125994][ T9922] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 356.134045][ T9922] [ 356.580328][ T9917] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1327'. [ 357.476918][ T9943] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1335'. [ 357.868731][ T9949] TCP: TCP_TX_DELAY enabled [ 357.925870][ T9952] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1340'. [ 358.090343][ T9959] validate_nla: 2 callbacks suppressed [ 358.090362][ T9959] netlink: 'syz.3.1342': attribute type 46 has an invalid length. [ 358.112163][ T9959] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1342'. [ 358.237449][ T9963] netlink: 'syz.1.1343': attribute type 9 has an invalid length. [ 358.262514][ T9963] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1343'. [ 358.874059][ T9977] netlink: 'syz.0.1347': attribute type 9 has an invalid length. [ 358.885716][ T9977] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1347'. [ 359.549123][ T9985] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1350'. [ 360.563369][T10007] FAULT_INJECTION: forcing a failure. [ 360.563369][T10007] name failslab, interval 1, probability 0, space 0, times 0 [ 360.596317][T10007] CPU: 1 PID: 10007 Comm: syz.3.1359 Not tainted syzkaller #0 [ 360.603889][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.614006][T10007] Call Trace: [ 360.617383][T10007] [ 360.620382][T10007] dump_stack_lvl+0x18c/0x250 [ 360.625137][T10007] ? sctp_sendmsg+0x1519/0x27b0 [ 360.630062][T10007] ? ___sys_sendmsg+0x2a6/0x360 [ 360.634982][T10007] ? show_regs_print_info+0x20/0x20 [ 360.640254][T10007] ? load_image+0x420/0x420 [ 360.644857][T10007] should_fail_ex+0x394/0x4c0 [ 360.649616][T10007] should_failslab+0x9/0x20 [ 360.654190][T10007] slab_pre_alloc_hook+0x59/0x300 [ 360.659298][T10007] ? sctp_add_bind_addr+0x8c/0x360 [ 360.664491][T10007] __kmem_cache_alloc_node+0x53/0x250 [ 360.669948][T10007] ? sctp_add_bind_addr+0x8c/0x360 [ 360.675126][T10007] kmalloc_trace+0x2a/0xe0 [ 360.679612][T10007] sctp_add_bind_addr+0x8c/0x360 [ 360.684632][T10007] sctp_copy_local_addr_list+0x31b/0x4e0 [ 360.690354][T10007] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 360.696156][T10007] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 360.702300][T10007] ? sctp_v6_is_any+0x64/0x70 [ 360.707060][T10007] ? sctp_copy_one_addr+0x8c/0x350 [ 360.712256][T10007] sctp_bind_addr_copy+0xb3/0x3c0 [ 360.717359][T10007] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 360.723756][T10007] sctp_connect_new_asoc+0x2f9/0x6a0 [ 360.729119][T10007] ? __sctp_connect+0xd80/0xd80 [ 360.734026][T10007] ? __local_bh_enable_ip+0x13a/0x1c0 [ 360.739482][T10007] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 360.745094][T10007] ? security_sctp_bind_connect+0x89/0xb0 [ 360.750898][T10007] sctp_sendmsg+0x1519/0x27b0 [ 360.755778][T10007] ? sctp_getsockopt+0xb60/0xb60 [ 360.760811][T10007] ? aa_af_perm+0x330/0x330 [ 360.765386][T10007] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 360.771867][T10007] ? sock_rps_record_flow+0x19/0x3f0 [ 360.777501][T10007] ? inet_sendmsg+0xce/0x2a0 [ 360.782136][T10007] ? inet_send_prepare+0x250/0x250 [ 360.787327][T10007] ____sys_sendmsg+0x61b/0x980 [ 360.792153][T10007] ? __sys_sendmsg_sock+0x30/0x30 [ 360.797223][T10007] ? __import_iovec+0x5f2/0x850 [ 360.802146][T10007] ? import_iovec+0x73/0xa0 [ 360.806702][T10007] ___sys_sendmsg+0x2a6/0x360 [ 360.811437][T10007] ? __sys_sendmsg+0x2b0/0x2b0 [ 360.816280][T10007] ? __lock_acquire+0x7d80/0x7d80 [ 360.821393][T10007] __se_sys_sendmsg+0x1d0/0x2c0 [ 360.826297][T10007] ? __x64_sys_sendmsg+0x80/0x80 [ 360.831319][T10007] ? lockdep_hardirqs_on+0x98/0x150 [ 360.836562][T10007] do_syscall_64+0x55/0xb0 [ 360.841040][T10007] ? clear_bhb_loop+0x40/0x90 [ 360.845856][T10007] ? clear_bhb_loop+0x40/0x90 [ 360.850595][T10007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.856544][T10007] RIP: 0033:0x7efd7459e159 [ 360.861095][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.880748][T10007] RSP: 002b:00007efd727f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.889207][T10007] RAX: ffffffffffffffda RBX: 00007efd74825fa0 RCX: 00007efd7459e159 [ 360.897237][T10007] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 360.905266][T10007] RBP: 00007efd727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.913281][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.921319][T10007] R13: 00007efd74826038 R14: 00007efd74825fa0 R15: 00007ffe71486148 [ 360.929365][T10007] [ 361.318217][T10024] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1362'. [ 361.654107][T10039] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 361.683045][T10039] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1370'. [ 361.701621][T10039] openvswitch: netlink: Flow key attr not present in new flow. [ 361.713604][T10034] netlink: 'syz.2.1368': attribute type 9 has an invalid length. [ 361.726012][T10034] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1368'. [ 362.672141][T10048] FAULT_INJECTION: forcing a failure. [ 362.672141][T10048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.707493][T10048] CPU: 0 PID: 10048 Comm: syz.2.1372 Not tainted syzkaller #0 [ 362.715052][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.725163][T10048] Call Trace: [ 362.728531][T10048] [ 362.731508][T10048] dump_stack_lvl+0x18c/0x250 [ 362.736258][T10048] ? show_regs_print_info+0x20/0x20 [ 362.741520][T10048] ? load_image+0x420/0x420 [ 362.746077][T10048] ? __might_fault+0xaa/0x120 [ 362.750803][T10048] ? __lock_acquire+0x7d80/0x7d80 [ 362.755893][T10048] should_fail_ex+0x394/0x4c0 [ 362.760799][T10048] _copy_to_user+0x2f/0xa0 [ 362.765294][T10048] bpf_prog_test_run_raw_tp+0x4e2/0x680 [ 362.770952][T10048] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 362.776493][T10048] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 362.782018][T10048] bpf_prog_test_run+0x31f/0x390 [ 362.787017][T10048] __sys_bpf+0x49d/0x890 [ 362.791312][T10048] ? bpf_link_show_fdinfo+0x560/0x560 [ 362.796769][T10048] ? lock_chain_count+0x20/0x20 [ 362.801687][T10048] __x64_sys_bpf+0x7c/0x90 [ 362.806190][T10048] do_syscall_64+0x55/0xb0 [ 362.810661][T10048] ? clear_bhb_loop+0x40/0x90 [ 362.815392][T10048] ? clear_bhb_loop+0x40/0x90 [ 362.820130][T10048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.826089][T10048] RIP: 0033:0x7fd0a759e159 [ 362.830551][T10048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.850217][T10048] RSP: 002b:00007fd0a83ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.858695][T10048] RAX: ffffffffffffffda RBX: 00007fd0a7825fa0 RCX: 00007fd0a759e159 [ 362.866728][T10048] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 362.874749][T10048] RBP: 00007fd0a83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 362.882772][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.890879][T10048] R13: 00007fd0a7826038 R14: 00007fd0a7825fa0 R15: 00007ffcb6713ad8 [ 362.898914][T10048] [ 363.804971][T10072] netlink: 'syz.0.1381': attribute type 9 has an invalid length. [ 363.816395][T10072] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1381'. [ 364.259564][T10079] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1383'. [ 364.912859][T10086] syzkaller0: entered promiscuous mode [ 364.923954][T10086] syzkaller0: entered allmulticast mode [ 364.932333][T10088] netlink: 'syz.0.1388': attribute type 39 has an invalid length. [ 365.043649][T10092] netlink: 'syz.0.1388': attribute type 39 has an invalid length. [ 365.231152][T10095] syzkaller0: entered promiscuous mode [ 365.236726][T10095] syzkaller0: entered allmulticast mode [ 368.278057][T10108] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1392'. [ 368.287540][T10112] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 370.955035][T10136] FAULT_INJECTION: forcing a failure. [ 370.955035][T10136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.976094][T10136] CPU: 1 PID: 10136 Comm: syz.0.1400 Not tainted syzkaller #0 [ 370.983648][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.993765][T10136] Call Trace: [ 370.997085][T10136] [ 371.000056][T10136] dump_stack_lvl+0x18c/0x250 [ 371.004834][T10136] ? show_regs_print_info+0x20/0x20 [ 371.010107][T10136] ? load_image+0x420/0x420 [ 371.015011][T10136] ? __might_fault+0xaa/0x120 [ 371.019746][T10136] ? __lock_acquire+0x7d80/0x7d80 [ 371.024829][T10136] ? __virt_addr_valid+0x10c/0x380 [ 371.030169][T10136] should_fail_ex+0x394/0x4c0 [ 371.034944][T10136] _copy_from_user+0x2f/0xe0 [ 371.039615][T10136] generic_map_update_batch+0x58c/0x800 [ 371.045255][T10136] ? rcu_read_unlock+0xa0/0xa0 [ 371.050088][T10136] ? __fdget+0x180/0x210 [ 371.054396][T10136] ? rcu_read_unlock+0xa0/0xa0 [ 371.059219][T10136] bpf_map_do_batch+0x3f2/0x600 [ 371.064131][T10136] ? bpf_lsm_key_free+0x10/0x10 [ 371.069046][T10136] __sys_bpf+0x381/0x890 [ 371.073379][T10136] ? bpf_link_show_fdinfo+0x560/0x560 [ 371.078832][T10136] ? lock_chain_count+0x20/0x20 [ 371.083759][T10136] __x64_sys_bpf+0x7c/0x90 [ 371.088238][T10136] do_syscall_64+0x55/0xb0 [ 371.092759][T10136] ? clear_bhb_loop+0x40/0x90 [ 371.097537][T10136] ? clear_bhb_loop+0x40/0x90 [ 371.102103][T10134] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1403'. [ 371.111577][T10136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.111617][T10136] RIP: 0033:0x7ff04db9e159 [ 371.111637][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.111656][T10136] RSP: 002b:00007ff04eadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.111680][T10136] RAX: ffffffffffffffda RBX: 00007ff04de25fa0 RCX: 00007ff04db9e159 [ 371.111697][T10136] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 371.111712][T10136] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 371.111728][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.111742][T10136] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 371.111777][T10136] [ 371.802809][T10161] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1409'. [ 372.008832][T10161] netlink: 'syz.3.1409': attribute type 10 has an invalid length. [ 372.017218][T10161] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1409'. [ 372.070427][T10166] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1411'. [ 372.087026][T10166] openvswitch: netlink: Key type 29 is not supported [ 372.099761][T10166] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 372.115054][T10166] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1411'. [ 372.965666][T10186] syzkaller0: entered promiscuous mode [ 372.971437][T10186] syzkaller0: entered allmulticast mode [ 373.636461][T10195] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1420'. [ 374.214499][T10200] FAULT_INJECTION: forcing a failure. [ 374.214499][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 374.228264][T10200] CPU: 1 PID: 10200 Comm: syz.3.1422 Not tainted syzkaller #0 [ 374.235839][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.246752][T10200] Call Trace: [ 374.250105][T10200] [ 374.253105][T10200] dump_stack_lvl+0x18c/0x250 [ 374.257889][T10200] ? show_regs_print_info+0x20/0x20 [ 374.263181][T10200] ? load_image+0x420/0x420 [ 374.267793][T10200] ? __might_sleep+0xe0/0xe0 [ 374.272480][T10200] ? __lock_acquire+0x7d80/0x7d80 [ 374.277626][T10200] should_fail_ex+0x394/0x4c0 [ 374.282444][T10200] should_failslab+0x9/0x20 [ 374.287044][T10200] slab_pre_alloc_hook+0x59/0x300 [ 374.292171][T10200] ? __ns_get_path+0x2e/0x5f0 [ 374.296952][T10200] kmem_cache_alloc_lru+0x4d/0x2b0 [ 374.302151][T10200] ? new_inode_pseudo+0x82/0x1d0 [ 374.307197][T10200] new_inode_pseudo+0x82/0x1d0 [ 374.312059][T10200] __ns_get_path+0x249/0x5f0 [ 374.316765][T10200] ns_get_path+0x54/0x90 [ 374.321105][T10200] proc_ns_get_link+0x16c/0x2d0 [ 374.326064][T10200] ? proc_ns_instantiate+0xf0/0xf0 [ 374.331280][T10200] ? try_to_unlazy+0x33e/0x5c0 [ 374.336142][T10200] ? proc_ns_instantiate+0xf0/0xf0 [ 374.341340][T10200] pick_link+0x666/0xdd0 [ 374.345710][T10200] step_into+0xc18/0xee0 [ 374.350060][T10200] ? pid_revalidate+0x22/0x260 [ 374.354928][T10200] ? set_root+0x3a0/0x3a0 [ 374.359352][T10200] ? pid_revalidate+0x20d/0x260 [ 374.364309][T10200] ? lookup_fast+0x494/0x4c0 [ 374.369030][T10200] path_openat+0x1656/0x3270 [ 374.373712][T10200] ? trace_call_bpf+0xc3/0x6c0 [ 374.378851][T10200] ? do_filp_open+0x430/0x430 [ 374.383729][T10200] ? perf_trace_lock+0x303/0x3b0 [ 374.388807][T10200] do_filp_open+0x1f2/0x430 [ 374.393421][T10200] ? vfs_tmpfile+0x620/0x620 [ 374.398300][T10200] ? _raw_spin_unlock+0x28/0x40 [ 374.403246][T10200] ? alloc_fd+0x590/0x640 [ 374.407691][T10200] do_sys_openat2+0x134/0x1d0 [ 374.412467][T10200] ? do_sys_open+0xe0/0xe0 [ 374.416975][T10200] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 374.423039][T10200] ? srcu_init_notifier_head+0x90/0x90 [ 374.428589][T10200] ? lock_chain_count+0x20/0x20 [ 374.433549][T10200] __x64_sys_openat+0x139/0x160 [ 374.438509][T10200] do_syscall_64+0x55/0xb0 [ 374.443012][T10200] ? clear_bhb_loop+0x40/0x90 [ 374.447782][T10200] ? clear_bhb_loop+0x40/0x90 [ 374.452565][T10200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.458551][T10200] RIP: 0033:0x7efd7455e98e [ 374.463046][T10200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.482734][T10200] RSP: 002b:00007efd727f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.491240][T10200] RAX: ffffffffffffffda RBX: 00007efd727f66c0 RCX: 00007efd7455e98e [ 374.499281][T10200] RDX: 0000000000000000 RSI: 00007efd727f5f90 RDI: ffffffffffffff9c [ 374.507327][T10200] RBP: 00007efd727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.515502][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.523553][T10200] R13: 00007efd74826038 R14: 00007efd74825fa0 R15: 00007ffe71486148 [ 374.531672][T10200] [ 375.867886][T10211] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1426'. [ 375.978709][T10211] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 375.987016][T10211] CPU: 1 PID: 10211 Comm: syz.1.1426 Not tainted syzkaller #0 [ 375.994506][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.004626][T10211] Call Trace: [ 376.007969][T10211] [ 376.010940][T10211] dump_stack_lvl+0x18c/0x250 [ 376.015654][T10211] ? show_regs_print_info+0x20/0x20 [ 376.020897][T10211] ? load_image+0x420/0x420 [ 376.025436][T10211] sysfs_warn_dup+0x8e/0xa0 [ 376.029980][T10211] sysfs_do_create_link_sd+0xc0/0x110 [ 376.035496][T10211] device_add_class_symlinks+0x1cf/0x240 [ 376.041207][T10211] device_add+0x4f9/0xc40 [ 376.045605][T10211] wiphy_register+0x1d99/0x2ac0 [ 376.050529][T10211] ? cfg80211_event_work+0x40/0x40 [ 376.055688][T10211] ? minstrel_ht_alloc+0x88a/0x990 [ 376.060853][T10211] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 376.066971][T10211] ieee80211_register_hw+0x2dd8/0x3b30 [ 376.072490][T10211] ? ieee80211_register_hw+0xfb1/0x3b30 [ 376.078091][T10211] ? ieee80211_tasklet_handler+0x20/0x20 [ 376.083760][T10211] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 376.089690][T10211] ? __debug_object_init+0xec/0x450 [ 376.094927][T10211] ? __asan_memset+0x22/0x40 [ 376.099590][T10211] ? __hrtimer_init+0x189/0x270 [ 376.104473][T10211] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 376.110259][T10211] ? mac80211_hwsim_free+0x220/0x220 [ 376.115583][T10211] ? rcu_is_watching+0x15/0xb0 [ 376.120392][T10211] ? kstrndup+0xbd/0x140 [ 376.124678][T10211] hwsim_new_radio_nl+0xdad/0x1a70 [ 376.129823][T10211] ? __nla_validate+0x50/0x50 [ 376.134544][T10211] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 376.140928][T10211] ? __nla_parse+0x40/0x50 [ 376.145385][T10211] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 376.151752][T10211] genl_family_rcv_msg_doit+0x21a/0x310 [ 376.157353][T10211] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 376.163309][T10211] ? bpf_lsm_capable+0x9/0x10 [ 376.168018][T10211] ? security_capable+0x89/0xb0 [ 376.172902][T10211] genl_rcv_msg+0x611/0x7a0 [ 376.177439][T10211] ? genl_bind+0x360/0x360 [ 376.181888][T10211] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 376.188276][T10211] ? ref_tracker_free+0x686/0x830 [ 376.193330][T10211] ? __kasan_kmalloc_large+0x8b/0xa0 [ 376.198654][T10211] netlink_rcv_skb+0x235/0x4c0 [ 376.203449][T10211] ? genl_bind+0x360/0x360 [ 376.207892][T10211] ? netlink_ack+0x1160/0x1160 [ 376.212695][T10211] ? __lock_acquire+0x7d80/0x7d80 [ 376.217757][T10211] ? down_read+0x1ac/0x2e0 [ 376.222208][T10211] genl_rcv+0x28/0x40 [ 376.226253][T10211] netlink_unicast+0x7b1/0x930 [ 376.231061][T10211] netlink_sendmsg+0x8d0/0xbf0 [ 376.235860][T10211] ? netlink_getsockopt+0x590/0x590 [ 376.241108][T10211] ? apparmor_socket_sendmsg+0x8e/0x330 [ 376.246685][T10211] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 376.251998][T10211] ? security_socket_sendmsg+0x80/0xa0 [ 376.257482][T10211] ? netlink_getsockopt+0x590/0x590 [ 376.262708][T10211] ____sys_sendmsg+0x61b/0x980 [ 376.267515][T10211] ? __asan_memset+0x22/0x40 [ 376.272144][T10211] ? __sys_sendmsg_sock+0x30/0x30 [ 376.277211][T10211] ? __import_iovec+0x5f2/0x850 [ 376.282103][T10211] ? import_iovec+0x73/0xa0 [ 376.286646][T10211] ___sys_sendmsg+0x2a6/0x360 [ 376.291357][T10211] ? __sys_sendmsg+0x2b0/0x2b0 [ 376.296198][T10211] __se_sys_sendmsg+0x1d0/0x2c0 [ 376.301089][T10211] ? __x64_sys_sendmsg+0x80/0x80 [ 376.306073][T10211] ? lockdep_hardirqs_on+0x98/0x150 [ 376.311306][T10211] do_syscall_64+0x55/0xb0 [ 376.315766][T10211] ? clear_bhb_loop+0x40/0x90 [ 376.320486][T10211] ? clear_bhb_loop+0x40/0x90 [ 376.325214][T10211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.331143][T10211] RIP: 0033:0x7ff43879e159 [ 376.335598][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.355334][T10211] RSP: 002b:00007ff4395c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.363776][T10211] RAX: ffffffffffffffda RBX: 00007ff438a26090 RCX: 00007ff43879e159 [ 376.371779][T10211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 376.379785][T10211] RBP: 00007ff43883506b R08: 0000000000000000 R09: 0000000000000000 [ 376.387785][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.395781][T10211] R13: 00007ff438a26128 R14: 00007ff438a26090 R15: 00007fff4ab24558 [ 376.403799][T10211] [ 376.437751][T10210] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1426'. [ 376.501951][T10210] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 376.548876][T10210] CPU: 0 PID: 10210 Comm: syz.1.1426 Not tainted syzkaller #0 [ 376.556432][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.566576][T10210] Call Trace: [ 376.569903][T10210] [ 376.572874][T10210] dump_stack_lvl+0x18c/0x250 [ 376.577618][T10210] ? show_regs_print_info+0x20/0x20 [ 376.582883][T10210] ? load_image+0x420/0x420 [ 376.587452][T10210] sysfs_warn_dup+0x8e/0xa0 [ 376.592017][T10210] sysfs_do_create_link_sd+0xc0/0x110 [ 376.597452][T10210] device_add_class_symlinks+0x1cf/0x240 [ 376.603168][T10210] device_add+0x4f9/0xc40 [ 376.607561][T10210] wiphy_register+0x1d99/0x2ac0 [ 376.612589][T10210] ? cfg80211_event_work+0x40/0x40 [ 376.617818][T10210] ? minstrel_ht_alloc+0x88a/0x990 [ 376.623001][T10210] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 376.629157][T10210] ieee80211_register_hw+0x2dd8/0x3b30 [ 376.634697][T10210] ? ieee80211_register_hw+0xfb1/0x3b30 [ 376.640328][T10210] ? ieee80211_tasklet_handler+0x20/0x20 [ 376.646117][T10210] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 376.652069][T10210] ? __debug_object_init+0xec/0x450 [ 376.657327][T10210] ? __asan_memset+0x22/0x40 [ 376.661994][T10210] ? __hrtimer_init+0x189/0x270 [ 376.666908][T10210] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 376.672703][T10210] ? mac80211_hwsim_free+0x220/0x220 [ 376.678054][T10210] ? rcu_is_watching+0x15/0xb0 [ 376.682890][T10210] ? kstrndup+0xbd/0x140 [ 376.687195][T10210] hwsim_new_radio_nl+0xdad/0x1a70 [ 376.692346][T10210] ? __nla_validate+0x50/0x50 [ 376.697082][T10210] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 376.703451][T10210] ? __nla_parse+0x40/0x50 [ 376.707905][T10210] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 376.714277][T10210] genl_family_rcv_msg_doit+0x21a/0x310 [ 376.719861][T10210] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 376.725815][T10210] ? bpf_lsm_capable+0x9/0x10 [ 376.730543][T10210] ? security_capable+0x89/0xb0 [ 376.735426][T10210] genl_rcv_msg+0x611/0x7a0 [ 376.739959][T10210] ? genl_bind+0x360/0x360 [ 376.744394][T10210] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 376.750768][T10210] netlink_rcv_skb+0x235/0x4c0 [ 376.755568][T10210] ? genl_bind+0x360/0x360 [ 376.760030][T10210] ? netlink_ack+0x1160/0x1160 [ 376.764915][T10210] ? __lock_acquire+0x7d80/0x7d80 [ 376.770131][T10210] ? down_read+0x1ac/0x2e0 [ 376.774595][T10210] genl_rcv+0x28/0x40 [ 376.778628][T10210] netlink_unicast+0x7b1/0x930 [ 376.783470][T10210] netlink_sendmsg+0x8d0/0xbf0 [ 376.788305][T10210] ? netlink_getsockopt+0x590/0x590 [ 376.793561][T10210] ? apparmor_socket_sendmsg+0x8e/0x330 [ 376.799178][T10210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 376.804546][T10210] ? security_socket_sendmsg+0x80/0xa0 [ 376.810044][T10210] ? netlink_getsockopt+0x590/0x590 [ 376.815284][T10210] ____sys_sendmsg+0x61b/0x980 [ 376.820098][T10210] ? __asan_memset+0x22/0x40 [ 376.824760][T10210] ? __sys_sendmsg_sock+0x30/0x30 [ 376.829930][T10210] ? __import_iovec+0x5f2/0x850 [ 376.834851][T10210] ? import_iovec+0x73/0xa0 [ 376.839477][T10210] ___sys_sendmsg+0x2a6/0x360 [ 376.844281][T10210] ? __sys_sendmsg+0x2b0/0x2b0 [ 376.849124][T10210] __se_sys_sendmsg+0x1d0/0x2c0 [ 376.854012][T10210] ? __x64_sys_sendmsg+0x80/0x80 [ 376.858998][T10210] ? lockdep_hardirqs_on+0x98/0x150 [ 376.864234][T10210] do_syscall_64+0x55/0xb0 [ 376.868686][T10210] ? clear_bhb_loop+0x40/0x90 [ 376.873401][T10210] ? clear_bhb_loop+0x40/0x90 [ 376.878116][T10210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.884054][T10210] RIP: 0033:0x7ff43879e159 [ 376.888502][T10210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.908142][T10210] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.916593][T10210] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 376.924636][T10210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 376.932813][T10210] RBP: 00007ff43883506b R08: 0000000000000000 R09: 0000000000000000 [ 376.940816][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.948811][T10210] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 376.956827][T10210] [ 377.429551][T10225] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1430'. [ 377.563130][T10226] netlink: 'syz.2.1430': attribute type 9 has an invalid length. [ 377.759768][T10226] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1430'. [ 377.760579][T10223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.444966][T10234] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 378.585926][T10242] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 378.595503][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1435'. [ 378.615271][T10242] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 378.630064][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1435'. [ 378.781001][T10246] netlink: 'syz.1.1437': attribute type 21 has an invalid length. [ 378.790119][T10246] netlink: 'syz.1.1437': attribute type 6 has an invalid length. [ 378.798927][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1437'. [ 378.818736][T10244] pim6reg1: entered promiscuous mode [ 378.852702][T10244] netlink: 539 bytes leftover after parsing attributes in process `syz.2.1436'. [ 378.865690][T10250] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 378.892739][T10249] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 378.924833][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.933278][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.710900][T10262] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1441'. [ 379.738172][T10262] openvswitch: netlink: Key type 29 is not supported [ 379.801172][T10262] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 379.827254][T10262] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1441'. [ 381.208879][T10305] netlink: 'syz.3.1451': attribute type 9 has an invalid length. [ 381.248539][T10305] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1451'. [ 381.394144][T10296] syzkaller0: entered promiscuous mode [ 381.405256][T10296] syzkaller0: entered allmulticast mode [ 384.383394][T10308] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 384.400524][T10308] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1460'. [ 384.496168][T10309] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1460'. [ 384.695253][T10325] netlink: 'syz.2.1459': attribute type 2 has an invalid length. [ 384.779232][T10328] netlink: 'syz.1.1458': attribute type 21 has an invalid length. [ 384.787170][T10328] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1458'. [ 384.871790][T10330] netlink: 'syz.0.1461': attribute type 39 has an invalid length. [ 384.891882][T10330] macvlan0: entered promiscuous mode [ 384.928203][T10330] macvlan0: entered allmulticast mode [ 384.947205][T10330] veth1_vlan: entered allmulticast mode [ 385.458796][T10350] netlink: 'syz.1.1467': attribute type 21 has an invalid length. [ 385.483030][T10350] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1467'. [ 385.624834][T10348] syzkaller0: entered promiscuous mode [ 385.633380][T10348] syzkaller0: entered allmulticast mode [ 385.665393][T10359] netlink: 'syz.3.1470': attribute type 10 has an invalid length. [ 385.684266][T10359] team0: Port device hsr_slave_0 added [ 386.012851][T10367] netlink: 'syz.3.1471': attribute type 9 has an invalid length. [ 386.033715][T10367] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1471'. [ 388.085129][T10366] netlink: 'syz.2.1472': attribute type 7 has an invalid length. [ 388.093563][T10366] netlink: 'syz.2.1472': attribute type 6 has an invalid length. [ 388.103135][T10364] netlink: 'syz.2.1472': attribute type 7 has an invalid length. [ 388.111037][T10369] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1473'. [ 388.222648][T10384] €Â0: renamed from batadv_slave_1 (while UP) [ 388.344461][T10388] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1479'. [ 388.486605][T10391] syzkaller0: entered promiscuous mode [ 388.511172][T10391] syzkaller0: entered allmulticast mode [ 388.539868][T10397] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1481'. [ 388.701258][T10400] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1484'. [ 390.790643][T10403] validate_nla: 5 callbacks suppressed [ 390.790656][T10403] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 390.804584][T10403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1485'. [ 390.814201][T10403] caif0: entered promiscuous mode [ 390.820363][T10403] caif0: entered allmulticast mode [ 390.825536][T10403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.089091][T10416] netlink: 'syz.2.1490': attribute type 21 has an invalid length. [ 391.201399][T10421] netlink: 'syz.0.1492': attribute type 9 has an invalid length. [ 391.211470][T10421] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1492'. [ 391.554105][T10429] netlink: 'syz.0.1495': attribute type 2 has an invalid length. [ 391.563870][T10429] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1495'. [ 391.743979][T10438] netlink: 'syz.0.1497': attribute type 2 has an invalid length. [ 391.825236][T10440] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1498'. [ 392.236342][T10448] FAULT_INJECTION: forcing a failure. [ 392.236342][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 392.251506][T10448] CPU: 1 PID: 10448 Comm: syz.0.1501 Not tainted syzkaller #0 [ 392.259071][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.269204][T10448] Call Trace: [ 392.272562][T10448] [ 392.275566][T10448] dump_stack_lvl+0x18c/0x250 [ 392.280354][T10448] ? show_regs_print_info+0x20/0x20 [ 392.285654][T10448] ? load_image+0x420/0x420 [ 392.290304][T10448] ? __might_sleep+0xe0/0xe0 [ 392.295028][T10448] ? __lock_acquire+0x7d80/0x7d80 [ 392.300166][T10448] should_fail_ex+0x394/0x4c0 [ 392.304981][T10448] should_failslab+0x9/0x20 [ 392.309582][T10448] slab_pre_alloc_hook+0x59/0x300 [ 392.314798][T10448] ? update_flag+0xa5/0x580 [ 392.319398][T10448] ? update_flag+0xa5/0x580 [ 392.324020][T10448] __kmem_cache_alloc_node+0x53/0x250 [ 392.329484][T10448] ? __mutex_trylock_common+0x160/0x270 [ 392.335135][T10448] ? update_flag+0xa5/0x580 [ 392.339728][T10448] __kmalloc_node_track_caller+0xa4/0x230 [ 392.345562][T10448] kmemdup+0x2b/0x70 [ 392.349556][T10448] update_flag+0xa5/0x580 [ 392.354003][T10448] ? update_prstate+0x770/0x770 [ 392.358940][T10448] ? cpuset_write_u64+0x56/0x250 [ 392.363996][T10448] ? mutex_lock_nested+0x20/0x20 [ 392.369033][T10448] ? rcu_read_lock_any_held+0xb4/0x140 [ 392.374602][T10448] ? rcu_read_lock_bh_held+0x100/0x100 [ 392.380161][T10448] ? _parse_integer_limit+0x19c/0x1e0 [ 392.385659][T10448] cpuset_write_u64+0x1fd/0x250 [ 392.390616][T10448] cgroup_file_write+0x59a/0x6a0 [ 392.395648][T10448] ? kernfs_fop_write_iter+0x1dc/0x520 [ 392.401219][T10448] ? cgroup_seqfile_stop+0xd0/0xd0 [ 392.406431][T10448] ? __virt_addr_valid+0x10c/0x380 [ 392.411635][T10448] ? __virt_addr_valid+0x10c/0x380 [ 392.416880][T10448] ? cgroup_seqfile_stop+0xd0/0xd0 [ 392.422079][T10448] kernfs_fop_write_iter+0x3a4/0x520 [ 392.427475][T10448] vfs_write+0x474/0x9a0 [ 392.431846][T10448] ? file_end_write+0x250/0x250 [ 392.436802][T10448] ? __fget_files+0x3fc/0x460 [ 392.436937][T10446] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1500'. [ 392.441574][T10448] ? __fdget_pos+0x2a3/0x330 [ 392.441676][T10448] ? ksys_write+0x74/0x260 [ 392.441729][T10448] ksys_write+0x151/0x260 [ 392.441781][T10448] ? __ia32_sys_read+0x90/0x90 [ 392.441839][T10448] ? lockdep_hardirqs_on+0x98/0x150 [ 392.441885][T10448] do_syscall_64+0x55/0xb0 [ 392.441916][T10448] ? clear_bhb_loop+0x40/0x90 [ 392.441953][T10448] ? clear_bhb_loop+0x40/0x90 [ 392.441997][T10448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.442035][T10448] RIP: 0033:0x7ff04db9e159 [ 392.442066][T10448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.442089][T10448] RSP: 002b:00007ff04eadc028 EFLAGS: 00000246 [ 392.498443][T10446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.499133][T10448] ORIG_RAX: 0000000000000001 [ 392.499150][T10448] RAX: ffffffffffffffda RBX: 00007ff04de25fa0 RCX: 00007ff04db9e159 [ 392.499175][T10448] RDX: 0000000000000012 RSI: 00002000000003c0 RDI: 000000000000000b [ 392.499193][T10448] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 392.499215][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.499232][T10448] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 392.499317][T10448] [ 392.607888][T10448] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 392.619963][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1501'. [ 392.970380][T10460] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1506'. [ 393.340227][T10469] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 393.364421][T10469] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1507'. [ 395.242134][T10471] netlink: 'syz.0.1508': attribute type 39 has an invalid length. [ 395.253113][T10473] netlink: 'syz.0.1508': attribute type 39 has an invalid length. [ 395.254126][T10471] FAULT_INJECTION: forcing a failure. [ 395.254126][T10471] name fail_futex, interval 1, probability 0, space 0, times 1 [ 395.296896][T10471] CPU: 1 PID: 10471 Comm: syz.0.1508 Not tainted syzkaller #0 [ 395.304461][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.314575][T10471] Call Trace: [ 395.317899][T10471] [ 395.320870][T10471] dump_stack_lvl+0x18c/0x250 [ 395.325648][T10471] ? show_regs_print_info+0x20/0x20 [ 395.330911][T10471] ? load_image+0x420/0x420 [ 395.335489][T10471] ? __lock_acquire+0x1336/0x7d80 [ 395.340581][T10471] should_fail_ex+0x394/0x4c0 [ 395.345325][T10471] get_futex_key+0x136/0x1030 [ 395.350064][T10471] ? futex_setup_timer+0xc0/0xc0 [ 395.355063][T10471] futex_wake+0x127/0x4f0 [ 395.359454][T10471] ? futex_wake_mark+0x150/0x150 [ 395.364470][T10471] do_futex+0x35d/0x3e0 [ 395.368846][T10471] ? __might_fault+0xaa/0x120 [ 395.373584][T10471] ? __ia32_sys_get_robust_list+0x110/0x110 [ 395.379523][T10471] ? __might_fault+0xc6/0x120 [ 395.384273][T10471] mm_release+0x184/0x3a0 [ 395.388654][T10471] ? exit_mm_release+0x30/0x30 [ 395.393466][T10471] ? lockdep_hardirqs_on+0x98/0x150 [ 395.398794][T10471] exit_mm+0xa4/0x340 [ 395.402814][T10471] ? sysctl_delayacct+0x220/0x220 [ 395.407885][T10471] ? do_exit+0x2530/0x2530 [ 395.412347][T10471] do_exit+0x909/0x2530 [ 395.416554][T10471] ? put_task_struct+0xc0/0xc0 [ 395.421360][T10471] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 395.427380][T10471] ? get_signal+0x100e/0x1390 [ 395.432088][T10471] ? lock_chain_count+0x20/0x20 [ 395.436972][T10471] ? _raw_spin_lock_irq+0xbb/0xf0 [ 395.442028][T10471] do_group_exit+0x22d/0x2f0 [ 395.446643][T10471] ? lockdep_hardirqs_on+0x98/0x150 [ 395.451872][T10471] get_signal+0x12a6/0x1390 [ 395.456416][T10471] arch_do_signal_or_restart+0xc2/0x7b0 [ 395.462001][T10471] ? get_sigframe_size+0x20/0x20 [ 395.466991][T10471] ? exit_to_user_mode_loop+0x3b/0x110 [ 395.472501][T10471] exit_to_user_mode_loop+0x70/0x110 [ 395.477827][T10471] exit_to_user_mode_prepare+0xee/0x180 [ 395.483405][T10471] syscall_exit_to_user_mode+0x1a/0x50 [ 395.488898][T10471] do_syscall_64+0x61/0xb0 [ 395.493372][T10471] ? clear_bhb_loop+0x40/0x90 [ 395.498089][T10471] ? clear_bhb_loop+0x40/0x90 [ 395.502820][T10471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.508772][T10471] RIP: 0033:0x7ff04db9e159 [ 395.513219][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.532856][T10471] RSP: 002b:00007ff04eadc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.541305][T10471] RAX: 000000000000002e RBX: 00007ff04de25fa0 RCX: 00007ff04db9e159 [ 395.549327][T10471] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 000000000000000b [ 395.557322][T10471] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 395.565335][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.573329][T10471] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 395.581341][T10471] [ 395.844121][T10484] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 396.107477][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1516'. [ 398.216558][T10520] netlink: set zone limit has 8 unknown bytes [ 398.239090][T10520] netlink: 'syz.3.1526': attribute type 21 has an invalid length. [ 398.278355][T10520] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.465612][T10520] netlink: 'syz.3.1526': attribute type 9 has an invalid length. [ 398.476907][T10520] netlink: 'syz.3.1526': attribute type 23 has an invalid length. [ 398.485097][T10520] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.1526'. [ 398.661908][T10537] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 398.787019][T10539] sit0: entered promiscuous mode [ 398.798424][T10539] sit0: entered allmulticast mode [ 398.917821][T10546] syzkaller0: entered promiscuous mode [ 398.928933][T10546] syzkaller0: entered allmulticast mode [ 399.384336][T10564] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1537'. [ 399.694568][T10574] netlink: 'syz.0.1541': attribute type 63 has an invalid length. [ 399.725780][T10574] netlink: 'syz.0.1541': attribute type 63 has an invalid length. [ 399.942363][T10577] netlink: 'syz.1.1542': attribute type 21 has an invalid length. [ 400.240582][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1546'. [ 400.254783][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1546'. [ 400.284610][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1546'. [ 400.320874][T10586] netlink: 'syz.0.1546': attribute type 3 has an invalid length. [ 400.345148][T10586] netlink: 'syz.0.1546': attribute type 6 has an invalid length. [ 400.365956][T10586] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1546'. [ 400.570854][T10593] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1548'. [ 400.583914][T10595] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1548'. [ 400.719551][T10597] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1550'. [ 400.967413][T10608] validate_nla: 2 callbacks suppressed [ 400.967432][T10608] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 400.981510][T10606] netlink: 'syz.2.1553': attribute type 63 has an invalid length. [ 401.017020][T10606] netlink: 'syz.2.1553': attribute type 63 has an invalid length. [ 401.417768][T10617] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 401.446694][T10617] __nla_validate_parse: 1 callbacks suppressed [ 401.446714][T10617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1559'. [ 401.530136][T10617] batman_adv: batadv0: Adding interface: virt_wifi0 [ 401.548406][T10617] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.626079][T10617] batman_adv: batadv0: Interface activated: virt_wifi0 [ 401.667320][T10620] netlink: 'syz.3.1557': attribute type 46 has an invalid length. [ 401.706305][T10620] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1557'. [ 401.776657][T10622] netlink: 'syz.2.1560': attribute type 9 has an invalid length. [ 401.801115][T10622] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1560'. [ 402.115587][T10625] sit0: entered allmulticast mode [ 402.392513][T10624] netlink: 'syz.1.1561': attribute type 2 has an invalid length. [ 402.408343][T10624] netlink: 'syz.1.1561': attribute type 1 has an invalid length. [ 402.417489][T10624] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1561'. [ 402.529440][T10636] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 402.663352][T10640] netlink: 'syz.0.1566': attribute type 63 has an invalid length. [ 403.762893][T10666] Ù: renamed from bond_slave_1 (while UP) [ 403.816031][T10669] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1576'. [ 403.958836][T10673] FAULT_INJECTION: forcing a failure. [ 403.958836][T10673] name failslab, interval 1, probability 0, space 0, times 0 [ 403.979872][T10673] CPU: 0 PID: 10673 Comm: syz.1.1585 Not tainted syzkaller #0 [ 403.987444][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.997569][T10673] Call Trace: [ 404.000914][T10673] [ 404.003907][T10673] dump_stack_lvl+0x18c/0x250 [ 404.008707][T10673] ? sctp_sendmsg+0x1519/0x27b0 [ 404.013633][T10673] ? ___sys_sendmsg+0x2a6/0x360 [ 404.018564][T10673] ? show_regs_print_info+0x20/0x20 [ 404.023842][T10673] ? load_image+0x420/0x420 [ 404.028469][T10673] should_fail_ex+0x394/0x4c0 [ 404.033260][T10673] should_failslab+0x9/0x20 [ 404.037845][T10673] slab_pre_alloc_hook+0x59/0x300 [ 404.042964][T10673] ? sctp_add_bind_addr+0x8c/0x360 [ 404.048165][T10673] __kmem_cache_alloc_node+0x53/0x250 [ 404.053633][T10673] ? sctp_add_bind_addr+0x8c/0x360 [ 404.058842][T10673] kmalloc_trace+0x2a/0xe0 [ 404.063360][T10673] sctp_add_bind_addr+0x8c/0x360 [ 404.068387][T10673] sctp_copy_local_addr_list+0x31b/0x4e0 [ 404.074108][T10673] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 404.079896][T10673] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 404.086051][T10673] ? sctp_v6_is_any+0x64/0x70 [ 404.090809][T10673] ? sctp_copy_one_addr+0x8c/0x350 [ 404.096003][T10673] sctp_bind_addr_copy+0xb3/0x3c0 [ 404.101119][T10673] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 404.107527][T10673] sctp_connect_new_asoc+0x2f9/0x6a0 [ 404.112885][T10673] ? __sctp_connect+0xd80/0xd80 [ 404.117794][T10673] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.123252][T10673] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 404.128861][T10673] ? security_sctp_bind_connect+0x89/0xb0 [ 404.134655][T10673] sctp_sendmsg+0x1519/0x27b0 [ 404.139445][T10673] ? sctp_getsockopt+0xb60/0xb60 [ 404.144476][T10673] ? aa_af_perm+0x330/0x330 [ 404.149071][T10673] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 404.155565][T10673] ? sock_rps_record_flow+0x19/0x3f0 [ 404.160927][T10673] ? inet_sendmsg+0xce/0x2a0 [ 404.165577][T10673] ? inet_send_prepare+0x250/0x250 [ 404.170755][T10673] ____sys_sendmsg+0x61b/0x980 [ 404.175618][T10673] ? __sys_sendmsg_sock+0x30/0x30 [ 404.180717][T10673] ? __import_iovec+0x5f2/0x850 [ 404.185660][T10673] ? import_iovec+0x73/0xa0 [ 404.190270][T10673] ___sys_sendmsg+0x2a6/0x360 [ 404.195026][T10673] ? __sys_sendmsg+0x2b0/0x2b0 [ 404.199929][T10673] ? __lock_acquire+0x7d80/0x7d80 [ 404.205086][T10673] __se_sys_sendmsg+0x1d0/0x2c0 [ 404.210018][T10673] ? __x64_sys_sendmsg+0x80/0x80 [ 404.215167][T10673] ? lockdep_hardirqs_on+0x98/0x150 [ 404.220445][T10673] do_syscall_64+0x55/0xb0 [ 404.224939][T10673] ? clear_bhb_loop+0x40/0x90 [ 404.229698][T10673] ? clear_bhb_loop+0x40/0x90 [ 404.234469][T10673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.240454][T10673] RIP: 0033:0x7ff43879e159 [ 404.244942][T10673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.264627][T10673] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.273149][T10673] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 404.281232][T10673] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 404.289270][T10673] RBP: 00007ff4395e2090 R08: 0000000000000000 R09: 0000000000000000 [ 404.297340][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.305413][T10673] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 404.313566][T10673] [ 404.753000][T10681] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1581'. [ 406.048400][T10681] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 406.146598][T10681] batman_adv: batadv0: Removing interface: virt_wifi0 [ 406.545778][T10708] validate_nla: 6 callbacks suppressed [ 406.545817][T10708] netlink: 'syz.3.1591': attribute type 63 has an invalid length. [ 406.573019][T10708] netlink: 'syz.3.1591': attribute type 63 has an invalid length. [ 406.860247][T10716] netlink: 'syz.0.1602': attribute type 63 has an invalid length. [ 406.884864][T10716] netlink: 'syz.0.1602': attribute type 63 has an invalid length. [ 407.229836][T10725] netlink: 'syz.1.1596': attribute type 27 has an invalid length. [ 407.237761][T10725] netlink: 'syz.1.1596': attribute type 4 has an invalid length. [ 407.306115][T10727] FAULT_INJECTION: forcing a failure. [ 407.306115][T10727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.315001][T10725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1596'. [ 407.329090][T10727] CPU: 1 PID: 10727 Comm: syz.0.1597 Not tainted syzkaller #0 [ 407.336611][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.346707][T10727] Call Trace: [ 407.350045][T10727] [ 407.353024][T10727] dump_stack_lvl+0x18c/0x250 [ 407.357765][T10727] ? show_regs_print_info+0x20/0x20 [ 407.363027][T10727] ? load_image+0x420/0x420 [ 407.367582][T10727] ? __lock_acquire+0x7d80/0x7d80 [ 407.372658][T10727] ? snprintf+0xe9/0x140 [ 407.376953][T10727] should_fail_ex+0x394/0x4c0 [ 407.381694][T10727] _copy_to_user+0x2f/0xa0 [ 407.386215][T10727] simple_read_from_buffer+0xe7/0x150 [ 407.391640][T10727] proc_fail_nth_read+0x1e8/0x260 [ 407.396735][T10727] ? proc_fault_inject_write+0x360/0x360 [ 407.402433][T10727] ? fsnotify_perm+0x271/0x5e0 [ 407.407253][T10727] ? proc_fault_inject_write+0x360/0x360 [ 407.412946][T10727] vfs_read+0x298/0x990 [ 407.417166][T10727] ? kernel_read+0x1e0/0x1e0 [ 407.421806][T10727] ? __fget_files+0x28/0x460 [ 407.426453][T10727] ? __fget_files+0x3fc/0x460 [ 407.431241][T10727] ? __fdget_pos+0x2a3/0x330 [ 407.435886][T10727] ? ksys_read+0x74/0x260 [ 407.440273][T10727] ksys_read+0x151/0x260 [ 407.444571][T10727] ? vfs_write+0x9a0/0x9a0 [ 407.449043][T10727] ? lockdep_hardirqs_on+0x98/0x150 [ 407.454296][T10727] do_syscall_64+0x55/0xb0 [ 407.458765][T10727] ? clear_bhb_loop+0x40/0x90 [ 407.463496][T10727] ? clear_bhb_loop+0x40/0x90 [ 407.468226][T10727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.474176][T10727] RIP: 0033:0x7ff04db5e98e [ 407.478637][T10727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.498298][T10727] RSP: 002b:00007ff04eadbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.506765][T10727] RAX: ffffffffffffffda RBX: 00007ff04eadc6c0 RCX: 00007ff04db5e98e [ 407.514800][T10727] RDX: 000000000000000f RSI: 00007ff04eadc0a0 RDI: 0000000000000005 [ 407.522832][T10727] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 407.530845][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.538852][T10727] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 407.546923][T10727] [ 407.862011][T10729] netlink: 'syz.0.1598': attribute type 28 has an invalid length. [ 407.880764][T10729] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1598'. [ 408.925781][T10745] netlink: 'syz.2.1606': attribute type 63 has an invalid length. [ 408.945159][T10745] netlink: 'syz.2.1606': attribute type 63 has an invalid length. [ 409.457470][T10755] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 409.472308][T10755] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1618'. [ 410.222274][T10765] bond0: (slave syz_tun): Releasing backup interface [ 410.234271][T10765] syz_tun (unregistering): left allmulticast mode [ 410.726821][T10793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 410.750472][T10793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 410.809613][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 410.983795][T10795] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1626'. [ 411.211820][T10805] syzkaller0: entered promiscuous mode [ 411.225366][T10805] syzkaller0: entered allmulticast mode [ 411.261667][T10799] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1627'. [ 413.691919][T10830] validate_nla: 7 callbacks suppressed [ 413.691936][T10830] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 413.878214][T10836] netlink: 'syz.0.1639': attribute type 63 has an invalid length. [ 413.886921][T10836] netlink: 'syz.0.1639': attribute type 63 has an invalid length. [ 413.991737][T10838] netlink: 'syz.1.1640': attribute type 15 has an invalid length. [ 414.279735][T10846] syzkaller0: entered promiscuous mode [ 414.285306][T10846] syzkaller0: entered allmulticast mode [ 414.293384][T10842] netlink: 'syz.3.1642': attribute type 10 has an invalid length. [ 414.815096][T10859] FAULT_INJECTION: forcing a failure. [ 414.815096][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 414.862279][T10859] CPU: 1 PID: 10859 Comm: syz.1.1650 Not tainted syzkaller #0 [ 414.869841][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.879968][T10859] Call Trace: [ 414.883298][T10859] [ 414.886271][T10859] dump_stack_lvl+0x18c/0x250 [ 414.891010][T10859] ? sctp_sendmsg+0x1519/0x27b0 [ 414.895924][T10859] ? ___sys_sendmsg+0x2a6/0x360 [ 414.900831][T10859] ? show_regs_print_info+0x20/0x20 [ 414.906094][T10859] ? load_image+0x420/0x420 [ 414.910714][T10859] should_fail_ex+0x394/0x4c0 [ 414.915447][T10859] should_failslab+0x9/0x20 [ 414.919986][T10859] slab_pre_alloc_hook+0x59/0x300 [ 414.925055][T10859] ? sctp_add_bind_addr+0x8c/0x360 [ 414.930211][T10859] __kmem_cache_alloc_node+0x53/0x250 [ 414.935656][T10859] ? sctp_add_bind_addr+0x8c/0x360 [ 414.940797][T10859] kmalloc_trace+0x2a/0xe0 [ 414.945252][T10859] sctp_add_bind_addr+0x8c/0x360 [ 414.950231][T10859] sctp_copy_local_addr_list+0x31b/0x4e0 [ 414.956009][T10859] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 414.961761][T10859] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 414.967865][T10859] ? sctp_v4_is_any+0x35/0x60 [ 414.972574][T10859] ? sctp_copy_one_addr+0x8c/0x350 [ 414.977737][T10859] sctp_bind_addr_copy+0xb3/0x3c0 [ 414.982804][T10859] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 414.989166][T10859] sctp_connect_new_asoc+0x2f9/0x6a0 [ 414.994499][T10859] ? __sctp_connect+0xd80/0xd80 [ 414.999375][T10859] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.004779][T10859] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 415.010357][T10859] ? security_sctp_bind_connect+0x89/0xb0 [ 415.016105][T10859] sctp_sendmsg+0x1519/0x27b0 [ 415.020826][T10859] ? sctp_getsockopt+0xb60/0xb60 [ 415.025810][T10859] ? aa_af_perm+0x330/0x330 [ 415.030375][T10859] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 415.036818][T10859] ? sock_rps_record_flow+0x19/0x3f0 [ 415.042144][T10859] ? inet_sendmsg+0xce/0x2a0 [ 415.046758][T10859] ? inet_send_prepare+0x250/0x250 [ 415.051918][T10859] ____sys_sendmsg+0x61b/0x980 [ 415.056728][T10859] ? __asan_memset+0x22/0x40 [ 415.061354][T10859] ? __sys_sendmsg_sock+0x30/0x30 [ 415.066429][T10859] ? __import_iovec+0x5f2/0x850 [ 415.071322][T10859] ? import_iovec+0x73/0xa0 [ 415.075864][T10859] ___sys_sendmsg+0x2a6/0x360 [ 415.080575][T10859] ? __sys_sendmsg+0x2b0/0x2b0 [ 415.085473][T10859] ? ktime_get+0x7f/0x280 [ 415.089832][T10859] ? trace_call_bpf+0xc3/0x6c0 [ 415.094645][T10859] __se_sys_sendmsg+0x1d0/0x2c0 [ 415.099549][T10859] ? __x64_sys_sendmsg+0x80/0x80 [ 415.104538][T10859] ? lockdep_hardirqs_on+0x98/0x150 [ 415.109765][T10859] do_syscall_64+0x55/0xb0 [ 415.114221][T10859] ? clear_bhb_loop+0x40/0x90 [ 415.118931][T10859] ? clear_bhb_loop+0x40/0x90 [ 415.123640][T10859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.129574][T10859] RIP: 0033:0x7ff43879e159 [ 415.134020][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.153649][T10859] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.162088][T10859] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 415.170086][T10859] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000048 [ 415.178085][T10859] RBP: 00007ff4395e2090 R08: 0000000000000000 R09: 0000000000000000 [ 415.186078][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.194072][T10859] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 415.202084][T10859] [ 415.430270][T10865] netlink: 'syz.0.1652': attribute type 63 has an invalid length. [ 417.000104][T10868] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1653'. [ 417.009708][T10865] netlink: 'syz.0.1652': attribute type 63 has an invalid length. [ 417.268534][T10880] netlink: 'syz.2.1657': attribute type 21 has an invalid length. [ 417.291493][T10883] netlink: 'syz.2.1657': attribute type 21 has an invalid length. [ 417.302343][T10883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1657'. [ 417.855418][T10898] netlink: 'syz.3.1664': attribute type 63 has an invalid length. [ 418.049742][T10904] FAULT_INJECTION: forcing a failure. [ 418.049742][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 418.079125][T10904] CPU: 0 PID: 10904 Comm: syz.0.1667 Not tainted syzkaller #0 [ 418.086703][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.096848][T10904] Call Trace: [ 418.100209][T10904] [ 418.103225][T10904] dump_stack_lvl+0x18c/0x250 [ 418.108014][T10904] ? show_regs_print_info+0x20/0x20 [ 418.113316][T10904] ? load_image+0x420/0x420 [ 418.117921][T10904] ? __lock_acquire+0x7d80/0x7d80 [ 418.123070][T10904] ? __asan_memset+0x22/0x40 [ 418.127770][T10904] should_fail_ex+0x394/0x4c0 [ 418.132571][T10904] should_failslab+0x9/0x20 [ 418.137157][T10904] slab_pre_alloc_hook+0x59/0x300 [ 418.142325][T10904] kmem_cache_alloc+0x5a/0x2c0 [ 418.147183][T10904] ? security_inode_alloc+0x34/0x110 [ 418.152592][T10904] security_inode_alloc+0x34/0x110 [ 418.157815][T10904] inode_init_always+0x914/0xc90 [ 418.162859][T10904] new_inode_pseudo+0x95/0x1d0 [ 418.167723][T10904] __ns_get_path+0x249/0x5f0 [ 418.172426][T10904] ns_get_path+0x54/0x90 [ 418.176761][T10904] proc_ns_get_link+0x16c/0x2d0 [ 418.181703][T10904] ? proc_ns_instantiate+0xf0/0xf0 [ 418.186904][T10904] ? do_raw_spin_unlock+0x121/0x230 [ 418.192247][T10904] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 418.197878][T10904] ? security_inode_follow_link+0xb7/0x100 [ 418.203779][T10904] ? proc_ns_instantiate+0xf0/0xf0 [ 418.208976][T10904] pick_link+0x666/0xdd0 [ 418.213346][T10904] step_into+0xc18/0xee0 [ 418.217713][T10904] ? pid_revalidate+0x22/0x260 [ 418.222581][T10904] ? set_root+0x3a0/0x3a0 [ 418.226991][T10904] ? pid_revalidate+0x20d/0x260 [ 418.231940][T10904] ? lookup_fast+0x494/0x4c0 [ 418.236642][T10904] path_openat+0x1656/0x3270 [ 418.241315][T10904] ? trace_call_bpf+0xc3/0x6c0 [ 418.246264][T10904] ? do_filp_open+0x430/0x430 [ 418.251051][T10904] ? perf_trace_lock+0x303/0x3b0 [ 418.256128][T10904] do_filp_open+0x1f2/0x430 [ 418.260740][T10904] ? vfs_tmpfile+0x620/0x620 [ 418.265509][T10904] ? _raw_spin_unlock+0x28/0x40 [ 418.270443][T10904] ? alloc_fd+0x590/0x640 [ 418.274905][T10904] do_sys_openat2+0x134/0x1d0 [ 418.279694][T10904] ? do_sys_open+0xe0/0xe0 [ 418.284210][T10904] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 418.290303][T10904] ? lock_chain_count+0x20/0x20 [ 418.295271][T10904] __x64_sys_openat+0x139/0x160 [ 418.300263][T10904] do_syscall_64+0x55/0xb0 [ 418.304769][T10904] ? clear_bhb_loop+0x40/0x90 [ 418.309537][T10904] ? clear_bhb_loop+0x40/0x90 [ 418.314318][T10904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.320294][T10904] RIP: 0033:0x7ff04db5e98e [ 418.324789][T10904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.344491][T10904] RSP: 002b:00007ff04eadbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.353009][T10904] RAX: ffffffffffffffda RBX: 00007ff04eadc6c0 RCX: 00007ff04db5e98e [ 418.361054][T10904] RDX: 0000000000000000 RSI: 00007ff04eadbf90 RDI: ffffffffffffff9c [ 418.369105][T10904] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 418.377170][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.385219][T10904] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 418.393336][T10904] [ 418.415641][T10906] tun0: tun_chr_ioctl cmd 1074025675 [ 418.421257][T10906] tun0: persist enabled [ 418.429304][T10906] tun0: tun_chr_ioctl cmd 1074025675 [ 418.434692][T10906] tun0: persist disabled [ 418.522792][T10910] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1670'. [ 418.616505][T10910] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 419.385403][T10933] validate_nla: 2 callbacks suppressed [ 419.385441][T10933] netlink: 'syz.1.1678': attribute type 63 has an invalid length. [ 419.423203][T10933] netlink: 'syz.1.1678': attribute type 63 has an invalid length. [ 420.236103][T10951] netlink: 'syz.3.1683': attribute type 2 has an invalid length. [ 422.210126][T10959] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 422.219419][T10967] netlink: 'syz.2.1687': attribute type 19 has an invalid length. [ 422.393377][T10972] netlink: 'syz.0.1689': attribute type 63 has an invalid length. [ 422.437465][T10972] netlink: 'syz.0.1689': attribute type 63 has an invalid length. [ 422.690533][T10984] netlink: 'syz.2.1695': attribute type 10 has an invalid length. [ 423.048333][T10992] netlink: 'syz.1.1698': attribute type 2 has an invalid length. [ 424.010149][T11007] netlink: 'syz.2.1701': attribute type 46 has an invalid length. [ 424.028575][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1701'. [ 424.537171][T11020] validate_nla: 2 callbacks suppressed [ 424.537191][T11020] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 426.914370][T11020] team0: Port device netdevsim0 added [ 426.932803][T11023] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 427.015778][T11023] team0: Port device netdevsim0 removed [ 427.051724][T11023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 427.092128][T11041] netlink: 'syz.0.1713': attribute type 2 has an invalid length. [ 427.734920][T11048] netlink: 'syz.3.1716': attribute type 63 has an invalid length. [ 427.782587][T11048] netlink: 'syz.3.1716': attribute type 63 has an invalid length. [ 428.333110][T11062] netlink: 171476 bytes leftover after parsing attributes in process `syz.1.1721'. [ 428.442132][T11064] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 428.484753][T11064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1723'. [ 428.975902][T11074] netlink: 'syz.1.1726': attribute type 2 has an invalid length. [ 429.351103][T11082] netlink: 'syz.3.1729': attribute type 10 has an invalid length. [ 430.183227][T11105] netlink: 'syz.2.1739': attribute type 21 has an invalid length. [ 430.211275][T11105] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1739'. [ 430.310848][T11107] netlink: 'syz.0.1738': attribute type 63 has an invalid length. [ 430.347440][T11107] netlink: 'syz.0.1738': attribute type 63 has an invalid length. [ 430.657749][T11119] netlink: 'syz.3.1743': attribute type 2 has an invalid length. [ 430.845736][T11124] netlink: 'syz.1.1744': attribute type 21 has an invalid length. [ 430.862669][T11124] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1744'. [ 430.954353][T11128] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 431.022282][T11128] team0: Device hsr_slave_0 failed to register rx_handler [ 431.259198][T11131] tap0: tun_chr_ioctl cmd 2147767520 [ 431.270516][T11131] tap0: tun_chr_ioctl cmd 1074025684 [ 431.353042][T11136] netlink: 'syz.0.1750': attribute type 63 has an invalid length. [ 431.385241][T11136] netlink: 'syz.0.1750': attribute type 63 has an invalid length. [ 432.192560][T11159] netlink: 'syz.0.1759': attribute type 2 has an invalid length. [ 432.294196][T11162] netlink: 'syz.0.1760': attribute type 2 has an invalid length. [ 432.763572][T11171] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1764'. [ 433.662208][T11193] tap0: tun_chr_ioctl cmd 2147767520 [ 433.698875][T11193] tap0: tun_chr_ioctl cmd 1074025684 [ 435.923142][T11207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1778'. [ 435.984653][T11211] syzkaller0: entered promiscuous mode [ 435.995743][T11211] syzkaller0: entered allmulticast mode [ 436.135996][T11222] validate_nla: 6 callbacks suppressed [ 436.136036][T11222] netlink: 'syz.2.1781': attribute type 63 has an invalid length. [ 437.726137][T11220] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 437.735085][T11222] netlink: 'syz.2.1781': attribute type 63 has an invalid length. [ 437.945735][T11229] netlink: 'syz.3.1783': attribute type 8 has an invalid length. [ 437.967436][T11229] netlink: 'syz.3.1783': attribute type 6 has an invalid length. [ 437.991455][T11229] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1783'. [ 438.214646][T11239] team0: Port device team_slave_0 removed [ 438.261672][T11245] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 438.281361][T11244] netlink: 'syz.1.1786': attribute type 2 has an invalid length. [ 438.434406][T11249] tap0: tun_chr_ioctl cmd 2147767520 [ 438.447211][T11249] tap0: tun_chr_ioctl cmd 1074025684 [ 438.477252][T11252] netlink: 'syz.1.1791': attribute type 2 has an invalid length. [ 438.768862][T11254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.567569][T11257] netlink: 'syz.3.1792': attribute type 63 has an invalid length. [ 439.658525][T11257] netlink: 'syz.3.1792': attribute type 63 has an invalid length. [ 440.588236][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.594646][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.174534][T11261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1793'. [ 441.687872][T11277] netlink: 'syz.3.1801': attribute type 2 has an invalid length. [ 441.876690][T11286] netlink: 'syz.2.1804': attribute type 63 has an invalid length. [ 441.889327][T11286] netlink: 'syz.2.1804': attribute type 63 has an invalid length. [ 444.807164][T11295] netlink: 'syz.0.1814': attribute type 63 has an invalid length. [ 444.839328][T11295] netlink: 'syz.0.1814': attribute type 63 has an invalid length. [ 444.905475][T11299] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 444.932138][T11300] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1806'. [ 444.998173][T11302] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1808'. [ 445.769212][T11308] FAULT_INJECTION: forcing a failure. [ 445.769212][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.838597][T11308] CPU: 1 PID: 11308 Comm: syz.2.1810 Not tainted syzkaller #0 [ 445.846188][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.856327][T11308] Call Trace: [ 445.859734][T11308] [ 445.862738][T11308] dump_stack_lvl+0x18c/0x250 [ 445.867523][T11308] ? show_regs_print_info+0x20/0x20 [ 445.872818][T11308] ? load_image+0x420/0x420 [ 445.877413][T11308] ? __lock_acquire+0x7d80/0x7d80 [ 445.882521][T11308] ? snprintf+0xe9/0x140 [ 445.886863][T11308] should_fail_ex+0x394/0x4c0 [ 445.891657][T11308] _copy_to_user+0x2f/0xa0 [ 445.896167][T11308] simple_read_from_buffer+0xe7/0x150 [ 445.901632][T11308] proc_fail_nth_read+0x1e8/0x260 [ 445.906756][T11308] ? proc_fault_inject_write+0x360/0x360 [ 445.912500][T11308] ? fsnotify_perm+0x271/0x5e0 [ 445.917381][T11308] ? proc_fault_inject_write+0x360/0x360 [ 445.923148][T11308] vfs_read+0x298/0x990 [ 445.927413][T11308] ? kernel_read+0x1e0/0x1e0 [ 445.932095][T11308] ? __fget_files+0x28/0x460 [ 445.936774][T11308] ? __fget_files+0x3fc/0x460 [ 445.941573][T11308] ? __fdget_pos+0x2a3/0x330 [ 445.946384][T11308] ? ksys_read+0x74/0x260 [ 445.950926][T11308] ksys_read+0x151/0x260 [ 445.955275][T11308] ? vfs_write+0x9a0/0x9a0 [ 445.959799][T11308] ? lockdep_hardirqs_on+0x98/0x150 [ 445.965110][T11308] do_syscall_64+0x55/0xb0 [ 445.969613][T11308] ? clear_bhb_loop+0x40/0x90 [ 445.974415][T11308] ? clear_bhb_loop+0x40/0x90 [ 445.979186][T11308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.985171][T11308] RIP: 0033:0x7fd0a755e98e [ 445.989672][T11308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.009380][T11308] RSP: 002b:00007fd0a83fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.017904][T11308] RAX: ffffffffffffffda RBX: 00007fd0a83ff6c0 RCX: 00007fd0a755e98e [ 446.025975][T11308] RDX: 000000000000000f RSI: 00007fd0a83ff0a0 RDI: 000000000000000c [ 446.034026][T11308] RBP: 00007fd0a83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 446.042167][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.050226][T11308] R13: 00007fd0a7826038 R14: 00007fd0a7825fa0 R15: 00007ffcb6713ad8 [ 446.058340][T11308] [ 446.141850][T11312] netlink: 'syz.2.1810': attribute type 10 has an invalid length. [ 446.161934][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1810'. [ 446.513014][T11320] netlink: 'syz.1.1813': attribute type 21 has an invalid length. [ 446.772983][T11331] netlink: 'syz.0.1818': attribute type 63 has an invalid length. [ 446.802296][T11331] netlink: 'syz.0.1818': attribute type 63 has an invalid length. [ 446.998983][ T5783] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 450.040123][T11344] syzkaller0: entered allmulticast mode [ 450.101520][T11344] syzkaller0: entered promiscuous mode [ 450.304825][T11350] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 451.160531][T11360] wlan0: mtu greater than device maximum [ 451.302981][T11365] netlink: 'syz.3.1828': attribute type 63 has an invalid length. [ 451.341497][T11365] netlink: 'syz.3.1828': attribute type 63 has an invalid length. [ 451.419368][T11370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 451.440152][T11370] netlink: 'syz.0.1831': attribute type 19 has an invalid length. [ 451.463210][T11370] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1831'. [ 451.510009][T11370] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1831'. [ 452.461908][T11389] netlink: 'syz.3.1836': attribute type 2 has an invalid length. [ 452.708865][T11368] delete_channel: no stack [ 453.003569][T11400] netlink: 'syz.0.1840': attribute type 63 has an invalid length. [ 453.018833][T11400] netlink: 'syz.0.1840': attribute type 63 has an invalid length. [ 453.065581][T11396] netlink: 'syz.2.1838': attribute type 10 has an invalid length. [ 453.368001][T11408] syzkaller0: entered promiscuous mode [ 453.373604][T11408] syzkaller0: entered allmulticast mode [ 453.644109][T11419] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 453.753543][T11421] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 453.785432][T11422] netlink: 'syz.0.1847': attribute type 2 has an invalid length. [ 454.013165][T11432] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 454.057570][T11432] bridge_slave_1: left allmulticast mode [ 454.061835][T11433] netlink: 'syz.1.1850': attribute type 63 has an invalid length. [ 454.063513][T11432] bridge_slave_1: left promiscuous mode [ 454.077183][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.100059][T11433] netlink: 'syz.1.1850': attribute type 63 has an invalid length. [ 454.477606][T11439] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1853'. [ 454.513244][T11439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1853'. [ 454.544737][T11443] FAULT_INJECTION: forcing a failure. [ 454.544737][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.569633][T11443] CPU: 1 PID: 11443 Comm: syz.3.1854 Not tainted syzkaller #0 [ 454.577189][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.587301][T11443] Call Trace: [ 454.590672][T11443] [ 454.593651][T11443] dump_stack_lvl+0x18c/0x250 [ 454.598394][T11443] ? show_regs_print_info+0x20/0x20 [ 454.603655][T11443] ? load_image+0x420/0x420 [ 454.608210][T11443] ? __might_fault+0xaa/0x120 [ 454.612940][T11443] ? __lock_acquire+0x7d80/0x7d80 [ 454.618032][T11443] should_fail_ex+0x394/0x4c0 [ 454.622769][T11443] _copy_from_iter+0x1cd/0x1290 [ 454.627689][T11443] ? rcu_is_watching+0x15/0xb0 [ 454.632515][T11443] ? copyout_mc+0x70/0x70 [ 454.636896][T11443] ? __virt_addr_valid+0x10c/0x380 [ 454.642072][T11443] ? __virt_addr_valid+0x10c/0x380 [ 454.647329][T11443] ? __virt_addr_valid+0x10c/0x380 [ 454.652522][T11443] ? __check_object_size+0x4fc/0xa40 [ 454.657873][T11443] pfkey_sendmsg+0x1fd/0x11a0 [ 454.662629][T11443] ? pfkey_release+0x340/0x340 [ 454.667454][T11443] ? aa_sk_perm+0x83c/0x970 [ 454.672042][T11443] ? aa_af_perm+0x330/0x330 [ 454.676624][T11443] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.682843][T11443] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 454.689305][T11443] ? aa_sock_msg_perm+0x94/0x150 [ 454.694286][T11443] ? apparmor_socket_sendmsg+0x8e/0x330 [ 454.699871][T11443] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 454.705200][T11443] ? security_socket_sendmsg+0x80/0xa0 [ 454.710701][T11443] ? pfkey_release+0x340/0x340 [ 454.715514][T11443] ____sys_sendmsg+0x61b/0x980 [ 454.720330][T11443] ? __asan_memset+0x22/0x40 [ 454.724960][T11443] ? __sys_sendmsg_sock+0x30/0x30 [ 454.730027][T11443] ? __import_iovec+0x5f2/0x850 [ 454.734949][T11443] ? import_iovec+0x73/0xa0 [ 454.739511][T11443] ___sys_sendmsg+0x2a6/0x360 [ 454.744238][T11443] ? __sys_sendmsg+0x2b0/0x2b0 [ 454.749084][T11443] __se_sys_sendmsg+0x1d0/0x2c0 [ 454.753975][T11443] ? __x64_sys_sendmsg+0x80/0x80 [ 454.758985][T11443] do_syscall_64+0x55/0xb0 [ 454.763449][T11443] ? clear_bhb_loop+0x40/0x90 [ 454.768170][T11443] ? clear_bhb_loop+0x40/0x90 [ 454.772888][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.778828][T11443] RIP: 0033:0x7efd7459e159 [ 454.783276][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.802931][T11443] RSP: 002b:00007efd727f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.811408][T11443] RAX: ffffffffffffffda RBX: 00007efd74825fa0 RCX: 00007efd7459e159 [ 454.819421][T11443] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 454.827422][T11443] RBP: 00007efd727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.835418][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.843442][T11443] R13: 00007efd74826038 R14: 00007efd74825fa0 R15: 00007ffe71486148 [ 454.851455][T11443] [ 454.966117][T11450] netlink: 150428 bytes leftover after parsing attributes in process `syz.1.1856'. [ 455.403173][T11463] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1861'. [ 457.137373][T11487] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 457.259271][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'. [ 457.284404][T11496] veth0_vlan: entered allmulticast mode [ 457.501305][T11501] validate_nla: 8 callbacks suppressed [ 457.501326][T11501] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 457.548360][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1873'. [ 457.582831][T11501] batman_adv: batadv0: Adding interface: virt_wifi0 [ 457.621435][T11501] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.690225][T11503] netlink: 'syz.1.1872': attribute type 63 has an invalid length. [ 457.747167][T11501] batman_adv: batadv0: Interface activated: virt_wifi0 [ 457.757446][T11503] netlink: 'syz.1.1872': attribute type 63 has an invalid length. [ 457.827168][T11508] syzkaller0: entered promiscuous mode [ 457.843208][T11508] syzkaller0: entered allmulticast mode [ 458.124101][T11516] netlink: 'syz.3.1878': attribute type 9 has an invalid length. [ 458.138304][T11516] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1878'. [ 459.237328][T11536] netlink: 'syz.3.1883': attribute type 10 has an invalid length. [ 459.369864][T11536] team0: Port device dummy0 added [ 459.658411][T11543] netlink: 'syz.0.1885': attribute type 63 has an invalid length. [ 459.667648][T11543] netlink: 'syz.0.1885': attribute type 63 has an invalid length. [ 460.469996][T11559] FAULT_INJECTION: forcing a failure. [ 460.469996][T11559] name failslab, interval 1, probability 0, space 0, times 0 [ 460.498137][T11559] CPU: 0 PID: 11559 Comm: syz.0.1892 Not tainted syzkaller #0 [ 460.505723][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.515815][T11559] Call Trace: [ 460.519134][T11559] [ 460.522105][T11559] dump_stack_lvl+0x18c/0x250 [ 460.526831][T11559] ? sctp_sendmsg+0x1519/0x27b0 [ 460.531734][T11559] ? ___sys_sendmsg+0x2a6/0x360 [ 460.536626][T11559] ? show_regs_print_info+0x20/0x20 [ 460.541870][T11559] ? load_image+0x420/0x420 [ 460.546444][T11559] should_fail_ex+0x394/0x4c0 [ 460.551180][T11559] should_failslab+0x9/0x20 [ 460.555728][T11559] slab_pre_alloc_hook+0x59/0x300 [ 460.560805][T11559] ? sctp_add_bind_addr+0x8c/0x360 [ 460.565970][T11559] __kmem_cache_alloc_node+0x53/0x250 [ 460.571403][T11559] ? sctp_add_bind_addr+0x8c/0x360 [ 460.576571][T11559] kmalloc_trace+0x2a/0xe0 [ 460.581036][T11559] sctp_add_bind_addr+0x8c/0x360 [ 460.586024][T11559] sctp_copy_local_addr_list+0x31b/0x4e0 [ 460.591809][T11559] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 460.597605][T11559] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 460.603768][T11559] ? sctp_v6_is_any+0x64/0x70 [ 460.608509][T11559] ? sctp_copy_one_addr+0x8c/0x350 [ 460.613691][T11559] sctp_bind_addr_copy+0xb3/0x3c0 [ 460.618849][T11559] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 460.625222][T11559] sctp_connect_new_asoc+0x2f9/0x6a0 [ 460.630558][T11559] ? __sctp_connect+0xd80/0xd80 [ 460.635525][T11559] ? __local_bh_enable_ip+0x13a/0x1c0 [ 460.640945][T11559] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 460.646533][T11559] ? security_sctp_bind_connect+0x89/0xb0 [ 460.652302][T11559] sctp_sendmsg+0x1519/0x27b0 [ 460.657053][T11559] ? sctp_getsockopt+0xb60/0xb60 [ 460.662060][T11559] ? aa_af_perm+0x330/0x330 [ 460.666620][T11559] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 460.673091][T11559] ? sock_rps_record_flow+0x19/0x3f0 [ 460.678420][T11559] ? inet_sendmsg+0xce/0x2a0 [ 460.683051][T11559] ? inet_send_prepare+0x250/0x250 [ 460.688204][T11559] ____sys_sendmsg+0x61b/0x980 [ 460.693028][T11559] ? __sys_sendmsg_sock+0x30/0x30 [ 460.698102][T11559] ? __import_iovec+0x5f2/0x850 [ 460.703012][T11559] ? import_iovec+0x73/0xa0 [ 460.707570][T11559] ___sys_sendmsg+0x2a6/0x360 [ 460.712300][T11559] ? __sys_sendmsg+0x2b0/0x2b0 [ 460.717143][T11559] ? __lock_acquire+0x7d80/0x7d80 [ 460.722253][T11559] __se_sys_sendmsg+0x1d0/0x2c0 [ 460.727161][T11559] ? __x64_sys_sendmsg+0x80/0x80 [ 460.732173][T11559] ? lockdep_hardirqs_on+0x98/0x150 [ 460.737414][T11559] do_syscall_64+0x55/0xb0 [ 460.741877][T11559] ? clear_bhb_loop+0x40/0x90 [ 460.746597][T11559] ? clear_bhb_loop+0x40/0x90 [ 460.751328][T11559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.757263][T11559] RIP: 0033:0x7ff04db9e159 [ 460.761718][T11559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.781359][T11559] RSP: 002b:00007ff04eadc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.789816][T11559] RAX: ffffffffffffffda RBX: 00007ff04de25fa0 RCX: 00007ff04db9e159 [ 460.797821][T11559] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 460.805822][T11559] RBP: 00007ff04eadc090 R08: 0000000000000000 R09: 0000000000000000 [ 460.813837][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.821837][T11559] R13: 00007ff04de26038 R14: 00007ff04de25fa0 R15: 00007ffdb1f67088 [ 460.829879][T11559] [ 460.941705][T11561] netlink: 'syz.1.1891': attribute type 10 has an invalid length. [ 460.997373][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1891'. [ 461.348459][T11573] netlink: 'syz.1.1894': attribute type 2 has an invalid length. [ 461.554383][T11574] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 461.628565][T11574] netlink: 13854 bytes leftover after parsing attributes in process `syz.3.1895'. [ 461.990122][T11563] delete_channel: no stack [ 462.794064][T11604] validate_nla: 2 callbacks suppressed [ 462.794100][T11604] netlink: 'syz.0.1906': attribute type 63 has an invalid length. [ 462.837045][T11604] netlink: 'syz.0.1906': attribute type 63 has an invalid length. [ 464.022449][T11632] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 464.032877][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1914'. [ 464.059340][T11632] veth0_vlan: left allmulticast mode [ 464.069371][T11631] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1915'. [ 464.205398][T11642] netlink: 'syz.1.1918': attribute type 63 has an invalid length. [ 464.250753][T11642] netlink: 'syz.1.1918': attribute type 63 has an invalid length. [ 464.415425][T11649] netlink: 'syz.0.1920': attribute type 3 has an invalid length. [ 464.446983][T11649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1920'. [ 464.500909][T11650] netlink: 'syz.3.1921': attribute type 2 has an invalid length. [ 464.735482][T11657] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1922'. [ 464.848080][T11657] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1922'. [ 464.951091][T11657] tipc: Started in network mode [ 464.993616][T11657] tipc: Node identity b, cluster identity 57 [ 465.078190][T11657] tipc: Node number set to 11 [ 465.828653][T11676] netlink: 'syz.2.1929': attribute type 10 has an invalid length. [ 465.847687][T11675] netlink: 'syz.0.1931': attribute type 63 has an invalid length. [ 466.076980][T11676] team0 (unregistering): Port device team_slave_0 removed [ 466.255096][T11676] team0 (unregistering): Port device team_slave_1 removed [ 466.529666][T11676] team0 (unregistering): Port device hsr_slave_0 removed [ 466.678903][T11675] netlink: 'syz.0.1931': attribute type 63 has an invalid length. [ 467.093921][T11696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1936'. [ 467.708283][T11712] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1939'. [ 468.030473][T11720] validate_nla: 3 callbacks suppressed [ 468.030541][T11720] netlink: 'syz.1.1942': attribute type 63 has an invalid length. [ 468.112248][T11720] netlink: 'syz.1.1942': attribute type 63 has an invalid length. [ 468.187387][T11724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1943'. [ 468.846986][T11736] netlink: 'syz.1.1947': attribute type 2 has an invalid length. [ 469.211190][T11747] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1949'. [ 469.656639][T11771] netlink: 'syz.0.1955': attribute type 63 has an invalid length. [ 469.718690][T11771] netlink: 'syz.0.1955': attribute type 63 has an invalid length. [ 470.070615][T11782] netlink: 'syz.3.1960': attribute type 2 has an invalid length. [ 470.463718][T11786] syzkaller0: entered promiscuous mode [ 470.472198][T11786] syzkaller0: entered allmulticast mode [ 471.029242][T11799] netlink: 'syz.0.1966': attribute type 63 has an invalid length. [ 471.877613][T11816] FAULT_INJECTION: forcing a failure. [ 471.877613][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 471.892755][T11816] CPU: 1 PID: 11816 Comm: syz.2.1970 Not tainted syzkaller #0 [ 471.900340][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.910490][T11816] Call Trace: [ 471.913843][T11816] [ 471.916851][T11816] dump_stack_lvl+0x18c/0x250 [ 471.921749][T11816] ? show_regs_print_info+0x20/0x20 [ 471.927055][T11816] ? load_image+0x420/0x420 [ 471.931718][T11816] ? __lock_acquire+0x7d80/0x7d80 [ 471.936924][T11816] should_fail_ex+0x394/0x4c0 [ 471.941760][T11816] should_failslab+0x9/0x20 [ 471.946418][T11816] slab_pre_alloc_hook+0x59/0x300 [ 471.951646][T11816] kmem_cache_alloc_lru+0x4d/0x2b0 [ 471.956868][T11816] ? __d_alloc+0x31/0x710 [ 471.961402][T11816] ? inode_update_timestamps+0x600/0x600 [ 471.967143][T11816] __d_alloc+0x31/0x710 [ 471.971490][T11816] __ns_get_path+0x3b7/0x5f0 [ 471.976223][T11816] ns_get_path+0x54/0x90 [ 471.980604][T11816] proc_ns_get_link+0x16c/0x2d0 [ 471.985586][T11816] ? proc_ns_instantiate+0xf0/0xf0 [ 471.990810][T11816] ? try_to_unlazy+0x33e/0x5c0 [ 471.995676][T11816] ? proc_ns_instantiate+0xf0/0xf0 [ 472.000877][T11816] pick_link+0x666/0xdd0 [ 472.005254][T11816] step_into+0xc18/0xee0 [ 472.009593][T11816] ? pid_revalidate+0x22/0x260 [ 472.014430][T11816] ? set_root+0x3a0/0x3a0 [ 472.018836][T11816] ? pid_revalidate+0x20d/0x260 [ 472.023765][T11816] ? lookup_fast+0x494/0x4c0 [ 472.028435][T11816] path_openat+0x1656/0x3270 [ 472.033090][T11816] ? trace_call_bpf+0xc3/0x6c0 [ 472.038050][T11816] ? do_filp_open+0x430/0x430 [ 472.042801][T11816] ? perf_trace_lock+0x303/0x3b0 [ 472.047838][T11816] do_filp_open+0x1f2/0x430 [ 472.052438][T11816] ? vfs_tmpfile+0x620/0x620 [ 472.057169][T11816] ? _raw_spin_unlock+0x28/0x40 [ 472.062332][T11816] ? alloc_fd+0x590/0x640 [ 472.066760][T11816] do_sys_openat2+0x134/0x1d0 [ 472.071518][T11816] ? do_sys_open+0xe0/0xe0 [ 472.076004][T11816] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 472.082059][T11816] ? lock_chain_count+0x20/0x20 [ 472.086986][T11816] __x64_sys_openat+0x139/0x160 [ 472.092018][T11816] do_syscall_64+0x55/0xb0 [ 472.096490][T11816] ? clear_bhb_loop+0x40/0x90 [ 472.101334][T11816] ? clear_bhb_loop+0x40/0x90 [ 472.106073][T11816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.112020][T11816] RIP: 0033:0x7fd0a755e98e [ 472.116516][T11816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 472.136196][T11816] RSP: 002b:00007fd0a83feec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.144677][T11816] RAX: ffffffffffffffda RBX: 00007fd0a83ff6c0 RCX: 00007fd0a755e98e [ 472.152701][T11816] RDX: 0000000000000000 RSI: 00007fd0a83fef90 RDI: ffffffffffffff9c [ 472.160721][T11816] RBP: 00007fd0a83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 472.168744][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.176764][T11816] R13: 00007fd0a7826038 R14: 00007fd0a7825fa0 R15: 00007ffcb6713ad8 [ 472.184831][T11816] [ 473.507506][T11799] netlink: 'syz.0.1966': attribute type 63 has an invalid length. [ 473.521009][T11821] netlink: 'syz.2.1972': attribute type 2 has an invalid length. [ 473.649649][T11824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1973'. [ 473.743125][T11826] netlink: 'syz.1.1974': attribute type 4 has an invalid length. [ 473.768083][T11826] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1974'. [ 474.016023][T11826] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 474.223073][T11844] netlink: 'syz.0.1981': attribute type 63 has an invalid length. [ 474.268776][T11844] netlink: 'syz.0.1981': attribute type 63 has an invalid length. [ 474.392588][T11850] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 474.765996][T11854] netlink: 'syz.1.1984': attribute type 10 has an invalid length. [ 474.867241][T11854] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 475.241553][ T5776] cgroup: fork rejected by pids controller in /syz0 [ 475.434639][T11860] syzkaller0: entered promiscuous mode [ 475.441709][T11860] syzkaller0: entered allmulticast mode [ 476.531205][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.549166][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.564967][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.580993][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.604175][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 476.626041][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.688291][T11873] netlink: 'syz.2.1992': attribute type 2 has an invalid length. [ 477.784693][ T2917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.884061][T11879] netlink: 'syz.1.1993': attribute type 63 has an invalid length. [ 478.668323][ T5783] Bluetooth: hci0: command tx timeout [ 478.850002][ T2917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.870716][T11879] netlink: 'syz.1.1993': attribute type 63 has an invalid length. [ 478.979086][ T2917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.179730][ T2917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.213052][T11890] netlink: 'syz.2.1997': attribute type 2 has an invalid length. [ 479.241647][T11900] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 479.263171][T11900] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2001'. [ 479.441803][T11903] netlink: 'syz.1.2002': attribute type 10 has an invalid length. [ 479.483919][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2002'. [ 479.611130][T11875] chnl_net:caif_netlink_parms(): no params data found [ 480.074580][T11923] netlink: 'syz.1.2005': attribute type 3 has an invalid length. [ 480.098127][T11923] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2005'. [ 480.514876][T11935] netlink: 'syz.2.2008': attribute type 21 has an invalid length. [ 480.550464][T11935] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2008'. [ 480.748338][ T5783] Bluetooth: hci0: command tx timeout [ 480.816659][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.845494][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.876069][T11875] bridge_slave_0: entered allmulticast mode [ 480.900592][T11875] bridge_slave_0: entered promiscuous mode [ 480.938550][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.967101][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.995203][T11875] bridge_slave_1: entered allmulticast mode [ 481.032762][T11875] bridge_slave_1: entered promiscuous mode [ 481.195957][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.273590][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.315268][T11952] netlink: 'syz.3.2011': attribute type 21 has an invalid length. [ 481.327353][T11952] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2011'. [ 481.404757][T11875] team0: Port device team_slave_0 added [ 481.450536][T11875] team0: Port device team_slave_1 added [ 481.754765][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.808487][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.908140][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.963045][T11961] netlink: 'syz.1.2014': attribute type 9 has an invalid length. [ 481.998497][T11961] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2014'. [ 482.024131][T11957] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 482.047714][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.079375][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.141335][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.160984][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.168392][T11966] IPv6: NLM_F_CREATE should be set when creating new route [ 482.175726][T11966] IPv6: NLM_F_CREATE should be set when creating new route [ 482.183057][T11966] IPv6: NLM_F_CREATE should be set when creating new route [ 482.472196][T11875] hsr_slave_0: entered promiscuous mode [ 482.489526][T11875] hsr_slave_1: entered promiscuous mode [ 482.828071][ T5783] Bluetooth: hci0: command tx timeout [ 482.918812][T11977] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 482.948230][T11977] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2017'. [ 483.880093][ T5783] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 484.763617][T12025] netlink: 'syz.3.2027': attribute type 2 has an invalid length. [ 484.910766][ T5783] Bluetooth: hci0: command tx timeout [ 485.123756][T12032] netlink: 'syz.3.2031': attribute type 13 has an invalid length. [ 485.175732][T12032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2031'. [ 485.607518][ T2917] hsr_slave_0: left promiscuous mode [ 485.617565][ T2917] hsr_slave_1: left promiscuous mode [ 485.625341][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.635336][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.648198][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.655919][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.669737][ T2917] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 485.677104][ T2917] batman_adv: batadv0: Removing interface: virt_wifi0 [ 485.686093][ T2917] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 485.693988][ T2917] batman_adv: batadv0: Removing interface: veth0_vlan [ 485.705832][ T2917] bridge0: port 2(team0) entered disabled state [ 485.719504][ T2917] bridge_slave_0: left allmulticast mode [ 485.725444][ T2917] bridge_slave_0: left promiscuous mode [ 485.732823][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.769617][ T2917] veth1_macvtap: left allmulticast mode [ 485.775719][ T2917] veth1_macvtap: left promiscuous mode [ 485.784037][ T2917] veth0_macvtap: left promiscuous mode [ 485.790333][ T2917] veth1_vlan: left allmulticast mode [ 485.796034][ T2917] veth1_vlan: left promiscuous mode [ 485.803543][ T2917] veth0_vlan: left promiscuous mode [ 486.184533][T12055] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2033'. [ 487.305762][ T2917] team_slave_1 (unregistering): left promiscuous mode [ 487.313297][ T2917] team_slave_1 (unregistering): left allmulticast mode [ 487.326889][ T2917] team0 (unregistering): Port device team_slave_1 removed [ 487.368316][ T2917] team_slave_0 (unregistering): left promiscuous mode [ 487.375175][ T2917] team_slave_0 (unregistering): left allmulticast mode [ 487.386273][ T2917] team0 (unregistering): Port device team_slave_0 removed [ 487.434455][ T2917] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 487.776516][ T2917] bond0 (unregistering): Released all slaves [ 487.945254][T12071] netlink: 'syz.2.2037': attribute type 10 has an invalid length. [ 487.981854][T12071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2037'. [ 488.011109][T12071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.064402][T12073] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2038'. [ 488.102773][T12073] openvswitch: netlink: Key type 4112 is out of range max 32 [ 488.183467][T11875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.216012][T12079] netlink: 'syz.2.2040': attribute type 2 has an invalid length. [ 491.248462][T11875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.319863][T11875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.377819][T11875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.764828][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.814033][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.837736][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.845041][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.896277][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.903591][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.650473][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.791148][T11875] veth0_vlan: entered promiscuous mode [ 492.824913][T11875] veth1_vlan: entered promiscuous mode [ 492.959099][T11875] veth0_macvtap: entered promiscuous mode [ 493.000002][T11875] veth1_macvtap: entered promiscuous mode [ 493.059126][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.086669][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.120426][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.163277][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.198487][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.231428][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.275734][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.335454][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.369529][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.423824][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.456403][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.498627][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 493.534924][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.587257][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.667501][T11875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.738090][T11875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.770698][T11875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.799971][T11875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.126275][T12155] netlink: 'syz.1.2052': attribute type 2 has an invalid length. [ 494.317084][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.334430][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.471586][ T7288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.491548][ T7288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.990258][T12177] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 496.339549][T12201] netlink: 'syz.3.2064': attribute type 2 has an invalid length. [ 497.165729][T12224] netlink: 'syz.2.2067': attribute type 46 has an invalid length. [ 497.212151][T12224] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2067'. [ 497.419971][T12235] netlink: 'syz.0.2071': attribute type 19 has an invalid length. [ 497.576930][T12240] netlink: 'syz.2.2073': attribute type 2 has an invalid length. [ 499.102260][T12259] FAULT_INJECTION: forcing a failure. [ 499.102260][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 499.137401][T12259] CPU: 1 PID: 12259 Comm: syz.0.2077 Not tainted syzkaller #0 [ 499.144974][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.155119][T12259] Call Trace: [ 499.158456][T12259] [ 499.161466][T12259] dump_stack_lvl+0x18c/0x250 [ 499.166252][T12259] ? sctp_sendmsg+0x1519/0x27b0 [ 499.171346][T12259] ? ___sys_sendmsg+0x2a6/0x360 [ 499.176356][T12259] ? show_regs_print_info+0x20/0x20 [ 499.181625][T12259] ? load_image+0x420/0x420 [ 499.186229][T12259] should_fail_ex+0x394/0x4c0 [ 499.190991][T12259] should_failslab+0x9/0x20 [ 499.195648][T12259] slab_pre_alloc_hook+0x59/0x300 [ 499.200745][T12259] ? sctp_add_bind_addr+0x8c/0x360 [ 499.206034][T12259] __kmem_cache_alloc_node+0x53/0x250 [ 499.211493][T12259] ? sctp_add_bind_addr+0x8c/0x360 [ 499.216679][T12259] kmalloc_trace+0x2a/0xe0 [ 499.221195][T12259] sctp_add_bind_addr+0x8c/0x360 [ 499.226220][T12259] sctp_copy_local_addr_list+0x31b/0x4e0 [ 499.232018][T12259] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 499.237821][T12259] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 499.243965][T12259] ? sctp_v6_is_any+0x64/0x70 [ 499.248796][T12259] ? sctp_copy_one_addr+0x8c/0x350 [ 499.253999][T12259] sctp_bind_addr_copy+0xb3/0x3c0 [ 499.259114][T12259] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 499.265521][T12259] sctp_connect_new_asoc+0x2f9/0x6a0 [ 499.270885][T12259] ? __sctp_connect+0xd80/0xd80 [ 499.275816][T12259] ? __local_bh_enable_ip+0x13a/0x1c0 [ 499.281319][T12259] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 499.286949][T12259] ? security_sctp_bind_connect+0x89/0xb0 [ 499.292788][T12259] sctp_sendmsg+0x1519/0x27b0 [ 499.297564][T12259] ? sctp_getsockopt+0xb60/0xb60 [ 499.302596][T12259] ? aa_af_perm+0x330/0x330 [ 499.307237][T12259] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 499.313764][T12259] ? sock_rps_record_flow+0x19/0x3f0 [ 499.319190][T12259] ? inet_sendmsg+0xce/0x2a0 [ 499.323848][T12259] ? inet_send_prepare+0x250/0x250 [ 499.329033][T12259] ____sys_sendmsg+0x61b/0x980 [ 499.333897][T12259] ? __sys_sendmsg_sock+0x30/0x30 [ 499.338990][T12259] ? __import_iovec+0x5f2/0x850 [ 499.343938][T12259] ? import_iovec+0x73/0xa0 [ 499.348563][T12259] ___sys_sendmsg+0x2a6/0x360 [ 499.353342][T12259] ? __sys_sendmsg+0x2b0/0x2b0 [ 499.358232][T12259] ? __lock_acquire+0x7d80/0x7d80 [ 499.363388][T12259] __se_sys_sendmsg+0x1d0/0x2c0 [ 499.368314][T12259] ? __x64_sys_sendmsg+0x80/0x80 [ 499.373403][T12259] ? lockdep_hardirqs_on+0x98/0x150 [ 499.378754][T12259] do_syscall_64+0x55/0xb0 [ 499.383237][T12259] ? clear_bhb_loop+0x40/0x90 [ 499.387980][T12259] ? clear_bhb_loop+0x40/0x90 [ 499.392753][T12259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.398724][T12259] RIP: 0033:0x7fe4b3d9e159 [ 499.403202][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.422874][T12259] RSP: 002b:00007fe4b4c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.431387][T12259] RAX: ffffffffffffffda RBX: 00007fe4b4025fa0 RCX: 00007fe4b3d9e159 [ 499.439426][T12259] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 499.447457][T12259] RBP: 00007fe4b4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 499.455493][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.463533][T12259] R13: 00007fe4b4026038 R14: 00007fe4b4025fa0 R15: 00007fff486e4cf8 [ 499.471608][T12259] [ 499.847683][T12263] netlink: 'syz.1.2079': attribute type 9 has an invalid length. [ 499.862329][T12265] netlink: 'syz.2.2080': attribute type 4 has an invalid length. [ 499.878348][T12263] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2079'. [ 499.918145][T12265] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2080'. [ 500.019393][T12265] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 500.572336][T12276] netlink: 'syz.0.2082': attribute type 9 has an invalid length. [ 500.588143][T12276] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2082'. [ 501.394270][T12295] netlink: 'syz.2.2088': attribute type 2 has an invalid length. [ 501.658622][T12299] netlink: 'syz.1.2090': attribute type 30 has an invalid length. [ 501.857137][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.872622][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.179276][T12315] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2093'. [ 503.232540][T12315] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2093'. [ 503.283699][T12315] tipc: Started in network mode [ 503.289531][T12315] tipc: Node identity b, cluster identity 57 [ 503.296575][T12315] tipc: Node number set to 11 [ 503.583328][T12324] netlink: 'syz.2.2098': attribute type 9 has an invalid length. [ 503.605484][T12324] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2098'. [ 504.445028][T12334] netlink: 'syz.2.2102': attribute type 2 has an invalid length. [ 505.924944][T12371] bridge0: port 2(ip6gretap0) entered blocking state [ 505.973000][T12371] bridge0: port 2(ip6gretap0) entered disabled state [ 505.993619][T12371] ip6gretap0: entered allmulticast mode [ 506.027021][T12371] ip6gretap0: entered promiscuous mode [ 506.046051][T12371] bridge0: port 2(ip6gretap0) entered blocking state [ 506.053345][T12371] bridge0: port 2(ip6gretap0) entered forwarding state [ 506.413982][T12383] netlink: 'syz.2.2117': attribute type 2 has an invalid length. [ 506.833449][T12389] sock: sock_set_timeout: `syz.0.2122' (pid 12389) tries to set negative timeout [ 507.785718][T12421] netlink: 'syz.2.2131': attribute type 2 has an invalid length. [ 508.805998][T12440] syzkaller0: entered promiscuous mode [ 508.855129][T12440] syzkaller0: entered allmulticast mode [ 509.133689][T12449] netlink: 'syz.1.2141': attribute type 12 has an invalid length. [ 509.158413][T12449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2141'. [ 511.881534][T12464] netlink: 'syz.0.2146': attribute type 2 has an invalid length. [ 511.894647][T12467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2147'. [ 512.131494][T12484] netlink: 'syz.1.2153': attribute type 4 has an invalid length. [ 512.139844][T12484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2153'. [ 512.154470][T12484] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 512.891336][T12501] netlink: 'syz.0.2158': attribute type 2 has an invalid length. [ 513.266126][T12503] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 513.310346][T12503] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 513.368647][T12503] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 513.414445][T12503] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 513.477542][T12507] FAULT_INJECTION: forcing a failure. [ 513.477542][T12507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.500985][T12507] CPU: 0 PID: 12507 Comm: syz.1.2160 Not tainted syzkaller #0 [ 513.508643][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.520974][T12507] Call Trace: [ 513.524313][T12507] [ 513.527302][T12507] dump_stack_lvl+0x18c/0x250 [ 513.532078][T12507] ? show_regs_print_info+0x20/0x20 [ 513.537369][T12507] ? load_image+0x420/0x420 [ 513.541952][T12507] ? __might_fault+0xaa/0x120 [ 513.546690][T12507] ? __lock_acquire+0x7d80/0x7d80 [ 513.551783][T12507] should_fail_ex+0x394/0x4c0 [ 513.556537][T12507] _copy_from_user+0x2f/0xe0 [ 513.561205][T12507] ___sys_sendmsg+0x1c7/0x360 [ 513.565961][T12507] ? get_pid_task+0x20/0x1e0 [ 513.570631][T12507] ? __sys_sendmsg+0x2b0/0x2b0 [ 513.575475][T12507] ? __lock_acquire+0x7d80/0x7d80 [ 513.580586][T12507] __se_sys_sendmsg+0x1d0/0x2c0 [ 513.585513][T12507] ? __x64_sys_sendmsg+0x80/0x80 [ 513.590639][T12507] ? lockdep_hardirqs_on+0x98/0x150 [ 513.595907][T12507] do_syscall_64+0x55/0xb0 [ 513.600385][T12507] ? clear_bhb_loop+0x40/0x90 [ 513.605215][T12507] ? clear_bhb_loop+0x40/0x90 [ 513.610040][T12507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.616181][T12507] RIP: 0033:0x7ff43879e159 [ 513.620652][T12507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.640408][T12507] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.648887][T12507] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 513.656961][T12507] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 513.664998][T12507] RBP: 00007ff4395e2090 R08: 0000000000000000 R09: 0000000000000000 [ 513.673029][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.681060][T12507] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 513.689118][T12507] [ 513.864989][T12508] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 513.916495][T12510] netlink: 'syz.1.2161': attribute type 2 has an invalid length. [ 514.216838][T12520] ip6gretap0: left allmulticast mode [ 514.222721][T12520] ip6gretap0: left promiscuous mode [ 514.229578][T12520] bridge0: port 2(ip6gretap0) entered disabled state [ 514.820668][T12520] bridge_slave_0: left allmulticast mode [ 514.826448][T12520] bridge_slave_0: left promiscuous mode [ 514.872649][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.422108][T12525] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2166'. [ 515.473007][T12525] bridge_slave_1: default FDB implementation only supports local addresses [ 515.610853][T12536] netlink: 'syz.1.2170': attribute type 21 has an invalid length. [ 515.671116][T12536] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2170'. [ 515.942453][T12525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.071571][T12545] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.2173'. [ 516.117807][T12548] netlink: 142336 bytes leftover after parsing attributes in process `syz.3.2173'. [ 516.591885][T12564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2179'. [ 516.652008][T12564] batman_adv: batadv0: Adding interface: veth0_vlan [ 516.695999][T12564] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.803826][T12564] batman_adv: batadv0: Interface activated: veth0_vlan [ 516.888610][T12571] validate_nla: 2 callbacks suppressed [ 516.888633][T12571] netlink: 'syz.3.2182': attribute type 21 has an invalid length. [ 516.907037][T12571] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2182'. [ 517.056063][T12572] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 517.079231][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 517.146804][T12576] syzkaller0: entered promiscuous mode [ 517.190432][T12576] syzkaller0: entered allmulticast mode [ 517.202715][T12572] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 517.210956][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 517.224776][T12586] netlink: 'syz.0.2186': attribute type 21 has an invalid length. [ 517.248097][T12586] netlink: 'syz.0.2186': attribute type 6 has an invalid length. [ 517.256312][T12586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2186'. [ 517.272606][T12585] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 517.308104][T12570] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 517.348401][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 519.772014][T12603] netlink: 'syz.2.2191': attribute type 28 has an invalid length. [ 519.780890][T12606] netlink: 'syz.3.2192': attribute type 10 has an invalid length. [ 519.973660][T12612] netlink: 'syz.3.2194': attribute type 39 has an invalid length. [ 520.007859][T12612] macvlan0: entered promiscuous mode [ 520.028191][T12612] macvlan0: entered allmulticast mode [ 520.033653][T12612] veth1_vlan: entered allmulticast mode [ 520.622455][T12632] FAULT_INJECTION: forcing a failure. [ 520.622455][T12632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.641827][T12632] CPU: 0 PID: 12632 Comm: syz.1.2203 Not tainted syzkaller #0 [ 520.649378][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.659496][T12632] Call Trace: [ 520.662823][T12632] [ 520.665790][T12632] dump_stack_lvl+0x18c/0x250 [ 520.670526][T12632] ? show_regs_print_info+0x20/0x20 [ 520.675791][T12632] ? load_image+0x420/0x420 [ 520.680352][T12632] ? __might_fault+0xaa/0x120 [ 520.685074][T12632] ? __lock_acquire+0x7d80/0x7d80 [ 520.690158][T12632] should_fail_ex+0x394/0x4c0 [ 520.694896][T12632] _copy_from_iter+0x1cd/0x1290 [ 520.699811][T12632] ? copyout_mc+0x70/0x70 [ 520.704197][T12632] ? __virt_addr_valid+0x10c/0x380 [ 520.709394][T12632] ? __virt_addr_valid+0x10c/0x380 [ 520.714581][T12632] ? __virt_addr_valid+0x10c/0x380 [ 520.719746][T12632] ? __check_object_size+0x4fc/0xa40 [ 520.725089][T12632] sctp_user_addto_chunk+0x84/0x220 [ 520.730350][T12632] sctp_datamsg_from_user+0x74d/0xee0 [ 520.735793][T12632] sctp_sendmsg_to_asoc+0xfdd/0x17f0 [ 520.741157][T12632] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 520.747022][T12632] ? __sctp_connect+0xd80/0xd80 [ 520.751919][T12632] ? __local_bh_enable_ip+0x13a/0x1c0 [ 520.757357][T12632] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 520.762969][T12632] ? security_sctp_bind_connect+0x89/0xb0 [ 520.768753][T12632] sctp_sendmsg+0x1afa/0x27b0 [ 520.773516][T12632] ? sctp_getsockopt+0xb60/0xb60 [ 520.778535][T12632] ? aa_af_perm+0x330/0x330 [ 520.783099][T12632] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 520.789576][T12632] ? sock_rps_record_flow+0x19/0x3f0 [ 520.794916][T12632] ? inet_sendmsg+0xce/0x2a0 [ 520.799556][T12632] ? inet_send_prepare+0x250/0x250 [ 520.804715][T12632] ____sys_sendmsg+0x61b/0x980 [ 520.809632][T12632] ? __asan_memset+0x22/0x40 [ 520.814288][T12632] ? __sys_sendmsg_sock+0x30/0x30 [ 520.819371][T12632] ? __import_iovec+0x5f2/0x850 [ 520.824310][T12632] ? import_iovec+0x73/0xa0 [ 520.828878][T12632] ___sys_sendmsg+0x2a6/0x360 [ 520.833604][T12632] ? get_pid_task+0x20/0x1e0 [ 520.838250][T12632] ? __sys_sendmsg+0x2b0/0x2b0 [ 520.843118][T12632] __se_sys_sendmsg+0x1d0/0x2c0 [ 520.848022][T12632] ? __x64_sys_sendmsg+0x80/0x80 [ 520.853030][T12632] ? lockdep_hardirqs_on+0x98/0x150 [ 520.858284][T12632] do_syscall_64+0x55/0xb0 [ 520.862759][T12632] ? clear_bhb_loop+0x40/0x90 [ 520.867489][T12632] ? clear_bhb_loop+0x40/0x90 [ 520.872233][T12632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.878187][T12632] RIP: 0033:0x7ff43879e159 [ 520.882656][T12632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.902321][T12632] RSP: 002b:00007ff4395e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.910793][T12632] RAX: ffffffffffffffda RBX: 00007ff438a25fa0 RCX: 00007ff43879e159 [ 520.918820][T12632] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 520.926838][T12632] RBP: 00007ff4395e2090 R08: 0000000000000000 R09: 0000000000000000 [ 520.934852][T12632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.942867][T12632] R13: 00007ff438a26038 R14: 00007ff438a25fa0 R15: 00007fff4ab24558 [ 520.950907][T12632] [ 521.261122][T12639] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2206'. [ 521.905609][T12656] validate_nla: 2 callbacks suppressed [ 521.905630][T12656] netlink: 'syz.3.2211': attribute type 2 has an invalid length. [ 522.231649][T12668] syz.3.2215[12668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.231861][T12668] syz.3.2215[12668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.466334][T12676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2216'. [ 522.604298][T12680] netlink: 'syz.2.2218': attribute type 4 has an invalid length. [ 522.855596][T12687] syzkaller0: entered promiscuous mode [ 522.866524][T12687] syzkaller0: entered allmulticast mode [ 524.803274][T12694] netlink: 'syz.2.2223': attribute type 2 has an invalid length. [ 524.985540][T12703] netlink: 'syz.2.2226': attribute type 39 has an invalid length. [ 525.081441][T12711] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2228'. [ 525.097314][T12711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.696797][T12734] netlink: 'syz.0.2234': attribute type 2 has an invalid length. [ 525.877663][T12737] netlink: 'syz.3.2235': attribute type 4 has an invalid length. [ 526.419256][T12744] netlink: 'syz.0.2238': attribute type 10 has an invalid length. [ 526.438151][T12744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2238'. [ 526.489887][T12747] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 526.596245][T12747] bridge_slave_1: entered promiscuous mode [ 526.609545][T12747] bridge_slave_1: entered allmulticast mode [ 527.021293][T12758] netlink: 'syz.3.2244': attribute type 10 has an invalid length. [ 527.124309][T12764] netlink: 'syz.2.2246': attribute type 2 has an invalid length. [ 527.147419][T12763] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2247'. [ 527.287206][T12760] syzkaller0: entered promiscuous mode [ 527.321679][T12760] syzkaller0: entered allmulticast mode [ 527.792836][T12783] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2251'. [ 528.155715][T12788] netlink: 'syz.0.2252': attribute type 29 has an invalid length. [ 528.178795][T12788] netlink: 'syz.0.2252': attribute type 29 has an invalid length. [ 528.203931][T12789] netlink: 'syz.0.2252': attribute type 29 has an invalid length. [ 528.473210][T12793] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 528.567769][T12798] netlink: 'syz.2.2256': attribute type 10 has an invalid length. [ 528.581340][T12798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2256'. [ 528.882698][T12801] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 528.938002][T12801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 529.106667][T12805] netlink: 'syz.0.2258': attribute type 2 has an invalid length. [ 529.158105][T12810] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2260'. [ 529.666331][T12817] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2261'. [ 529.692875][T12822] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2263'. [ 529.861499][T12825] netlink: 'syz.3.2264': attribute type 29 has an invalid length. [ 530.453512][T12837] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2269'. [ 531.530000][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2273'. [ 531.688715][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2273'. [ 531.973693][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2273'. [ 532.680684][T12866] validate_nla: 7 callbacks suppressed [ 532.680704][T12866] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 532.745592][T12866] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 532.755954][T12867] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 532.773160][T12866] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 533.044268][T12866] netlink: 'syz.0.2278': attribute type 21 has an invalid length. [ 533.054386][T12866] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2278'. [ 533.735472][T12882] netlink: 'syz.0.2285': attribute type 2 has an invalid length. [ 534.389664][T12900] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 534.408597][T12900] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 534.429517][T12900] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 534.703313][T12906] veth1_to_bond: entered allmulticast mode [ 534.722463][T12914] FAULT_INJECTION: forcing a failure. [ 534.722463][T12914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.775615][T12914] CPU: 1 PID: 12914 Comm: syz.0.2296 Not tainted syzkaller #0 [ 534.783160][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.793270][T12914] Call Trace: [ 534.796591][T12914] [ 534.799574][T12914] dump_stack_lvl+0x18c/0x250 [ 534.804320][T12914] ? show_regs_print_info+0x20/0x20 [ 534.809576][T12914] ? load_image+0x420/0x420 [ 534.814129][T12914] ? __might_fault+0xaa/0x120 [ 534.818860][T12914] ? __lock_acquire+0x7d80/0x7d80 [ 534.823974][T12914] should_fail_ex+0x394/0x4c0 [ 534.828722][T12914] _copy_from_user+0x2f/0xe0 [ 534.833377][T12914] ___sys_sendmsg+0x1c7/0x360 [ 534.838125][T12914] ? __sys_sendmsg+0x2b0/0x2b0 [ 534.842999][T12914] __se_sys_sendmsg+0x1d0/0x2c0 [ 534.847907][T12914] ? __x64_sys_sendmsg+0x80/0x80 [ 534.852914][T12914] ? syscall_enter_from_user_mode+0x2e/0x80 [ 534.858867][T12914] do_syscall_64+0x55/0xb0 [ 534.863348][T12914] ? clear_bhb_loop+0x40/0x90 [ 534.868088][T12914] ? clear_bhb_loop+0x40/0x90 [ 534.872820][T12914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.878762][T12914] RIP: 0033:0x7fe4b3d9e159 [ 534.883217][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.902868][T12914] RSP: 002b:00007fe4b4c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.911314][T12914] RAX: ffffffffffffffda RBX: 00007fe4b4025fa0 RCX: 00007fe4b3d9e159 [ 534.919313][T12914] RDX: 5605744c5c979ca6 RSI: 0000200000000040 RDI: 0000000000000008 [ 534.927321][T12914] RBP: 00007fe4b4c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 534.935322][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.943325][T12914] R13: 00007fe4b4026038 R14: 00007fe4b4025fa0 R15: 00007fff486e4cf8 [ 534.951342][T12914] [ 535.361410][T12923] netlink: 'syz.0.2298': attribute type 63 has an invalid length. [ 538.851583][T12944] delete_channel: no stack [ 539.328936][T12970] validate_nla: 2 callbacks suppressed [ 539.328978][T12970] netlink: 'syz.0.2313': attribute type 2 has an invalid length. [ 541.157748][T13003] netlink: 'syz.3.2326': attribute type 2 has an invalid length. [ 541.317854][T13004] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2327'. [ 541.327803][T13004] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2327'. [ 543.444675][T13024] syzkaller0: entered promiscuous mode [ 543.451501][T13024] syzkaller0: entered allmulticast mode [ 543.912504][T13032] syzkaller0: entered promiscuous mode [ 543.937489][T13032] syzkaller0: entered allmulticast mode [ 546.351182][T13041] netlink: 'syz.2.2340': attribute type 2 has an invalid length. [ 551.805080][T13066] netlink: 'syz.0.2346': attribute type 4 has an invalid length. [ 551.813110][T13066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2346'. [ 552.186172][T13091] netlink: 'syz.2.2354': attribute type 9 has an invalid length. [ 552.203059][T13091] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2354'. [ 552.226978][T13095] netlink: 'syz.1.2356': attribute type 2 has an invalid length. [ 553.288319][T13110] netlink: 'syz.3.2361': attribute type 21 has an invalid length. [ 553.296302][T13110] netlink: 'syz.3.2361': attribute type 6 has an invalid length. [ 553.328026][T13110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2361'. [ 553.467297][T13109] syzkaller0: entered promiscuous mode [ 553.521831][T13109] syzkaller0: entered allmulticast mode [ 553.545752][T13117] netlink: 'syz.3.2364': attribute type 39 has an invalid length. [ 553.996720][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.009195][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.032017][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.053210][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.069532][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.076966][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.110887][T13125] ================================================================== [ 554.119068][T13125] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 554.126942][T13125] Write of size 56 at addr ffff88801ab47910 by task syz.3.2367/13125 [ 554.135044][T13125] [ 554.137408][T13125] CPU: 0 PID: 13125 Comm: syz.3.2367 Not tainted syzkaller #0 [ 554.144893][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.155067][T13125] Call Trace: [ 554.158474][T13125] [ 554.161436][T13125] dump_stack_lvl+0x18c/0x250 [ 554.166177][T13125] ? read_lock_is_recursive+0x20/0x20 [ 554.171594][T13125] ? show_regs_print_info+0x20/0x20 [ 554.176825][T13125] ? load_image+0x420/0x420 [ 554.181354][T13125] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 554.186846][T13125] ? __virt_addr_valid+0x10c/0x380 [ 554.191993][T13125] ? __virt_addr_valid+0x10c/0x380 [ 554.197142][T13125] ? __virt_addr_valid+0x10c/0x380 [ 554.202283][T13125] print_report+0xa8/0x210 [ 554.206754][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 554.211897][T13125] kasan_report+0x117/0x150 [ 554.216439][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 554.221601][T13125] kasan_check_range+0x241/0x290 [ 554.226594][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 554.231762][T13125] __asan_memcpy+0x40/0x70 [ 554.236246][T13125] __bpf_get_stackid+0x6c7/0x900 [ 554.241252][T13125] bpf_get_stackid_pe+0x343/0x410 [ 554.246318][T13125] bpf_prog_17c1eeeef5c88f07+0x30/0x51 [ 554.251814][T13125] bpf_overflow_handler+0x1fc/0x510 [ 554.257077][T13125] ? bpf_overflow_handler+0xde/0x510 [ 554.262417][T13125] ? tp_perf_event_destroy+0x20/0x20 [ 554.267748][T13125] ? verify_lock_unused+0x140/0x140 [ 554.272983][T13125] ? __perf_event_account_interrupt+0x187/0x280 [ 554.279263][T13125] __perf_event_overflow+0x461/0x660 [ 554.284603][T13125] perf_swevent_overflow+0x274/0x340 [ 554.289928][T13125] ? perf_event_switch_output+0x790/0x790 [ 554.295683][T13125] ? rcu_is_watching+0x15/0xb0 [ 554.300506][T13125] perf_swevent_event+0x45c/0x570 [ 554.305564][T13125] ? perf_tp_event+0x1550/0x1550 [ 554.310532][T13125] ? finish_task_switch+0x262/0x8f0 [ 554.315768][T13125] ___perf_sw_event+0x4ab/0x730 [ 554.320656][T13125] ? ___perf_sw_event+0x19e/0x730 [ 554.325709][T13125] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 554.332150][T13125] ? __lock_acquire+0x1336/0x7d80 [ 554.337218][T13125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.343233][T13125] ? schedule+0xc7/0x170 [ 554.347510][T13125] ? lock_chain_count+0x20/0x20 [ 554.352383][T13125] ? futex_unqueue+0xcb/0xf0 [ 554.357031][T13125] __perf_sw_event+0x139/0x270 [ 554.361847][T13125] do_user_addr_fault+0x1242/0x12d0 [ 554.367079][T13125] ? rcu_is_watching+0x15/0xb0 [ 554.371884][T13125] exc_page_fault+0x64/0x100 [ 554.376507][T13125] asm_exc_page_fault+0x26/0x30 [ 554.381408][T13125] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 554.387249][T13125] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 554.406891][T13125] RSP: 0018:ffffc90003927d50 EFLAGS: 00050202 [ 554.412996][T13125] RAX: ffffffff84342b01 RBX: 0000000000000050 RCX: 0000000000000050 [ 554.421005][T13125] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003927dc0 [ 554.429000][T13125] RBP: ffffc90003927ee8 R08: ffffc90003927e0f R09: 1ffff92000724fc1 [ 554.436987][T13125] R10: dffffc0000000000 R11: fffff52000724fc2 R12: 0000000000000050 [ 554.445016][T13125] R13: 0000000000000050 R14: ffffc90003927dc0 R15: 0000000000000000 [ 554.453028][T13125] ? rcuref_put_slowpath+0x101/0x150 [ 554.458370][T13125] _copy_from_user+0x8b/0xe0 [ 554.462986][T13125] __sys_bpf+0x23e/0x890 [ 554.467248][T13125] ? bpf_link_show_fdinfo+0x560/0x560 [ 554.472650][T13125] ? lock_chain_count+0x20/0x20 [ 554.477532][T13125] __x64_sys_bpf+0x7c/0x90 [ 554.481978][T13125] do_syscall_64+0x55/0xb0 [ 554.486416][T13125] ? clear_bhb_loop+0x40/0x90 [ 554.491118][T13125] ? clear_bhb_loop+0x40/0x90 [ 554.495829][T13125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.501777][T13125] RIP: 0033:0x7efd7459e159 [ 554.506210][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.525844][T13125] RSP: 002b:00007efd727f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.534284][T13125] RAX: ffffffffffffffda RBX: 00007efd74825fa0 RCX: 00007efd7459e159 [ 554.542280][T13125] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.550276][T13125] RBP: 00007efd7463506b R08: 0000000000000000 R09: 0000000000000000 [ 554.558256][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.566240][T13125] R13: 00007efd74826038 R14: 00007efd74825fa0 R15: 00007ffe71486148 [ 554.574257][T13125] [ 554.577293][T13125] [ 554.579637][T13125] Allocated by task 13125: [ 554.584063][T13125] kasan_set_track+0x4e/0x70 [ 554.588675][T13125] __kasan_kmalloc+0x8f/0xa0 [ 554.593311][T13125] __kmalloc_node+0xb6/0x240 [ 554.597936][T13125] bpf_map_area_alloc+0x5e/0x110 [ 554.602924][T13125] prealloc_elems_and_freelist+0x86/0x1c0 [ 554.608685][T13125] stack_map_alloc+0x32b/0x4b0 [ 554.613488][T13125] map_create+0x877/0x12f0 [ 554.617927][T13125] __sys_bpf+0x651/0x890 [ 554.622197][T13125] __x64_sys_bpf+0x7c/0x90 [ 554.626637][T13125] do_syscall_64+0x55/0xb0 [ 554.631085][T13125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.637007][T13125] [ 554.639345][T13125] Last potentially related work creation: [ 554.645071][T13125] kasan_save_stack+0x3e/0x60 [ 554.649771][T13125] __kasan_record_aux_stack+0xaf/0xc0 [ 554.655171][T13125] call_rcu+0x153/0x900 [ 554.659353][T13125] nf_unregister_net_hooks+0xcb/0x130 [ 554.664863][T13125] cleanup_net+0x6f7/0xb00 [ 554.669401][T13125] process_scheduled_works+0xa60/0x1600 [ 554.674978][T13125] worker_thread+0xa5e/0xfe0 [ 554.679593][T13125] kthread+0x2fa/0x390 [ 554.683685][T13125] ret_from_fork+0x48/0x80 [ 554.688132][T13125] ret_from_fork_asm+0x11/0x20 [ 554.692985][T13125] [ 554.695324][T13125] Second to last potentially related work creation: [ 554.701918][T13125] kasan_save_stack+0x3e/0x60 [ 554.706625][T13125] __kasan_record_aux_stack+0xaf/0xc0 [ 554.712022][T13125] call_rcu+0x153/0x900 [ 554.716203][T13125] nf_unregister_net_hooks+0xcb/0x130 [ 554.721609][T13125] nf_ct_netns_put+0x36d/0x520 [ 554.726393][T13125] nf_conncount_destroy+0x41/0x150 [ 554.731631][T13125] ovs_ct_exit_finish+0xa5/0x210 [ 554.736621][T13125] ovs_exit_net+0xed/0x7a0 [ 554.741106][T13125] setup_net+0x7e5/0xa20 [ 554.745411][T13125] copy_net_ns+0x361/0x530 [ 554.749866][T13125] create_new_namespaces+0x3ce/0x700 [ 554.755197][T13125] copy_namespaces+0x42a/0x4a0 [ 554.760004][T13125] copy_process+0x16f6/0x3da0 [ 554.764731][T13125] kernel_clone+0x24b/0x8a0 [ 554.769273][T13125] __x64_sys_clone+0x1b7/0x230 [ 554.774077][T13125] do_syscall_64+0x55/0xb0 [ 554.778554][T13125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.784500][T13125] [ 554.786851][T13125] The buggy address belongs to the object at ffff88801ab47900 [ 554.786851][T13125] which belongs to the cache kmalloc-cg-64 of size 64 [ 554.801041][T13125] The buggy address is located 16 bytes inside of [ 554.801041][T13125] allocated 40-byte region [ffff88801ab47900, ffff88801ab47928) [ 554.815041][T13125] [ 554.817391][T13125] The buggy address belongs to the physical page: [ 554.823835][T13125] page:ffffea00006ad1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801ab47f80 pfn:0x1ab47 [ 554.835329][T13125] memcg:ffff88801fbe2c01 [ 554.839620][T13125] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 554.847205][T13125] page_type: 0xffffffff() [ 554.851571][T13125] raw: 00fff00000000800 ffff888017c4da00 ffffea00009fc000 0000000000000004 [ 554.860196][T13125] raw: ffff88801ab47f80 000000008020001f 00000001ffffffff ffff88801fbe2c01 [ 554.868822][T13125] page dumped because: kasan: bad access detected [ 554.875257][T13125] page_owner tracks the page as allocated [ 554.880995][T13125] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 7310391401, free_ts 0 [ 554.897685][T13125] post_alloc_hook+0x1c1/0x200 [ 554.902509][T13125] get_page_from_freelist+0x2181/0x22a0 [ 554.908092][T13125] __alloc_pages+0x1f0/0x460 [ 554.912740][T13125] alloc_page_interleave+0x24/0x1e0 [ 554.917973][T13125] alloc_slab_page+0x5d/0x180 [ 554.922684][T13125] new_slab+0x87/0x2d0 [ 554.926783][T13125] ___slab_alloc+0xc5c/0x12f0 [ 554.931490][T13125] __kmem_cache_alloc_node+0x11f/0x250 [ 554.936987][T13125] __kmalloc_node+0xa6/0x240 [ 554.941603][T13125] kvmalloc_node+0x70/0x180 [ 554.946134][T13125] nf_hook_entries_grow+0x27c/0x710 [ 554.951361][T13125] __nf_register_net_hook+0x2c9/0x910 [ 554.956769][T13125] nf_register_net_hook+0xb2/0x190 [ 554.961929][T13125] nf_register_net_hooks+0x44/0x1b0 [ 554.967263][T13125] ops_init+0x391/0x640 [ 554.971449][T13125] register_pernet_operations+0x2a7/0x610 [ 554.977206][T13125] page_owner free stack trace missing [ 554.982595][T13125] [ 554.984935][T13125] Memory state around the buggy address: [ 554.990585][T13125] ffff88801ab47800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 554.998669][T13125] ffff88801ab47880: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 555.006746][T13125] >ffff88801ab47900: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 555.014826][T13125] ^ [ 555.020211][T13125] ffff88801ab47980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 555.028307][T13125] ffff88801ab47a00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 555.036379][T13125] ================================================================== [ 555.044469][T13125] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 555.051673][T13125] CPU: 0 PID: 13125 Comm: syz.3.2367 Not tainted syzkaller #0 [ 555.059149][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.069223][T13125] Call Trace: [ 555.072523][T13125] [ 555.075475][T13125] dump_stack_lvl+0x18c/0x250 [ 555.080188][T13125] ? show_regs_print_info+0x20/0x20 [ 555.085417][T13125] ? load_image+0x420/0x420 [ 555.089946][T13125] panic+0x2ca/0x720 [ 555.093886][T13125] ? __lock_acquire+0x7d80/0x7d80 [ 555.098936][T13125] ? bpf_jit_dump+0xd0/0xd0 [ 555.103459][T13125] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 555.109384][T13125] ? _raw_spin_unlock+0x40/0x40 [ 555.114273][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 555.119422][T13125] check_panic_on_warn+0x84/0xa0 [ 555.124393][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 555.129528][T13125] end_report+0x6f/0x130 [ 555.133801][T13125] kasan_report+0x128/0x150 [ 555.138351][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 555.143499][T13125] kasan_check_range+0x241/0x290 [ 555.148461][T13125] ? __bpf_get_stackid+0x6c7/0x900 [ 555.153595][T13125] __asan_memcpy+0x40/0x70 [ 555.158044][T13125] __bpf_get_stackid+0x6c7/0x900 [ 555.163019][T13125] bpf_get_stackid_pe+0x343/0x410 [ 555.168100][T13125] bpf_prog_17c1eeeef5c88f07+0x30/0x51 [ 555.173576][T13125] bpf_overflow_handler+0x1fc/0x510 [ 555.178801][T13125] ? bpf_overflow_handler+0xde/0x510 [ 555.184116][T13125] ? tp_perf_event_destroy+0x20/0x20 [ 555.189446][T13125] ? verify_lock_unused+0x140/0x140 [ 555.194671][T13125] ? __perf_event_account_interrupt+0x187/0x280 [ 555.200935][T13125] __perf_event_overflow+0x461/0x660 [ 555.206260][T13125] perf_swevent_overflow+0x274/0x340 [ 555.211575][T13125] ? perf_event_switch_output+0x790/0x790 [ 555.217342][T13125] ? rcu_is_watching+0x15/0xb0 [ 555.222142][T13125] perf_swevent_event+0x45c/0x570 [ 555.227189][T13125] ? perf_tp_event+0x1550/0x1550 [ 555.232148][T13125] ? finish_task_switch+0x262/0x8f0 [ 555.237381][T13125] ___perf_sw_event+0x4ab/0x730 [ 555.242257][T13125] ? ___perf_sw_event+0x19e/0x730 [ 555.247302][T13125] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 555.253741][T13125] ? __lock_acquire+0x1336/0x7d80 [ 555.258805][T13125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 555.264809][T13125] ? schedule+0xc7/0x170 [ 555.269082][T13125] ? lock_chain_count+0x20/0x20 [ 555.273950][T13125] ? futex_unqueue+0xcb/0xf0 [ 555.278559][T13125] __perf_sw_event+0x139/0x270 [ 555.283360][T13125] do_user_addr_fault+0x1242/0x12d0 [ 555.288598][T13125] ? rcu_is_watching+0x15/0xb0 [ 555.293396][T13125] exc_page_fault+0x64/0x100 [ 555.298013][T13125] asm_exc_page_fault+0x26/0x30 [ 555.302886][T13125] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 555.308722][T13125] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 555.328351][T13125] RSP: 0018:ffffc90003927d50 EFLAGS: 00050202 [ 555.334468][T13125] RAX: ffffffff84342b01 RBX: 0000000000000050 RCX: 0000000000000050 [ 555.342463][T13125] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003927dc0 [ 555.350449][T13125] RBP: ffffc90003927ee8 R08: ffffc90003927e0f R09: 1ffff92000724fc1 [ 555.358437][T13125] R10: dffffc0000000000 R11: fffff52000724fc2 R12: 0000000000000050 [ 555.366423][T13125] R13: 0000000000000050 R14: ffffc90003927dc0 R15: 0000000000000000 [ 555.374413][T13125] ? rcuref_put_slowpath+0x101/0x150 [ 555.379733][T13125] _copy_from_user+0x8b/0xe0 [ 555.384341][T13125] __sys_bpf+0x23e/0x890 [ 555.388629][T13125] ? bpf_link_show_fdinfo+0x560/0x560 [ 555.394031][T13125] ? lock_chain_count+0x20/0x20 [ 555.398914][T13125] __x64_sys_bpf+0x7c/0x90 [ 555.403349][T13125] do_syscall_64+0x55/0xb0 [ 555.407794][T13125] ? clear_bhb_loop+0x40/0x90 [ 555.412497][T13125] ? clear_bhb_loop+0x40/0x90 [ 555.417223][T13125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.423149][T13125] RIP: 0033:0x7efd7459e159 [ 555.427585][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.447219][T13125] RSP: 002b:00007efd727f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.455653][T13125] RAX: ffffffffffffffda RBX: 00007efd74825fa0 RCX: 00007efd7459e159 [ 555.463651][T13125] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.471641][T13125] RBP: 00007efd7463506b R08: 0000000000000000 R09: 0000000000000000 [ 555.479630][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.487620][T13125] R13: 00007efd74826038 R14: 00007efd74825fa0 R15: 00007ffe71486148 [ 555.495632][T13125] [ 555.499270][T13125] Kernel Offset: disabled [ 555.503602][T13125] Rebooting in 86400 seconds..