last executing test programs: 14.869407978s ago: executing program 2 (id=2202): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000003900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000000000040000000000000"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003020000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r7}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffd93}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000002000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00'}, 0x18) r12 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0xec, &(0x7f00000002c0)=""/236, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x1, r4, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x7, 0x9, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, r6, r7, r9, r10, r12], 0x0, 0x10, 0x2}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)="1a", 0x1a000}], 0x1}, 0x0) 13.841703341s ago: executing program 2 (id=2203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f00000000c0)) sendmsg(r3, &(0x7f0000001880)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="595c8347cbd82e5cb80929580e7a67d338a1941b5578c09919e58fb0eb537819e489c89466a648b1c74688424fe948f48ce90fbe8c68811d562af673a24b697656e17a9b0b540a7d7edd5f88f077", 0x4e}], 0x1, &(0x7f0000000640)=[{0x1010, 0x117, 0x800, "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"}, {0x48, 0x103, 0xfff, "a0f9ed993349c06d9e1ba7cad24eb276f6db842879d5b774760f8af9d240eb71f21633bf3ba59e9e07bd4a026cb9694b4a"}, {0xb0, 0xaee642d4173cba98, 0xbd20, "cb62792bb9c7d1a7262f04312960ca3c003e77c72504204996bf3dbca3910ccf6621ea05588f69c35b2b7832f7c3e6d876e0db7bc574fc6d6f39e1f05fde8cfbc6fec088c0eb4efdf8527b8e32d4f05ed73a2608b2428424c201e01d2e55bd08a065aa7c04ff5b7188d0b9e962963737935976d994fdb42b83c7b62c623df3144dd56df8036d6aeeed6b02c5b2be76bab91e31110708eb65d87f5b"}, {0x28, 0x108, 0x0, "b823c7ab5b6df3cf1f94aaca84ac491a03"}, {0xf8, 0x10e, 0xce8, "24d177592e369b57e620a1cad224ae62cedaedebda50867db7747826a2694c0200e1029d8e28759c248cf1e5ecabe4724bf1aa3d64be92a4ee216300e48c9b61433d73132bebaccbb0f47783331a3c192b96e7d18cf909c94236e86181dd0dedc4d4a075458b9e7d0604c323dced17d6b2629f868f04a1a6291589d4121c5e694a87797ab67d6afa090771e1b860478622ab96f68a83b5f9fb641cb2d47c194ba3dc05dfd3cf224b6741c909151135289b830691f88372235f9c3cb27b65353c3859d6a724b6dc3b01996e57ef2c51142d9399bc72db0155a7dda4bb1643e3cd953dfdc0a38ac766"}], 0x1228}, 0x4000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x8, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000400000004000000020000008c000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000070000001b821eca5b44e5da3eca36c781b62b4a6f5ce2dfd3980107bbedc153", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x86101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x100904, 0x0, 0x80000001, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 12.465060075s ago: executing program 2 (id=2205): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200300000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.269324806s ago: executing program 2 (id=2208): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf5ffffff}, 0x48) 11.147986087s ago: executing program 2 (id=2212): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0xbc00) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@o_path={&(0x7f00000000c0)='./file0\x00', r0, 0x4000, r1}, 0x18) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8050, 0x4, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg(r1, 0x0, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x3d, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfef8}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/13, @ANYRES32], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 10.751293139s ago: executing program 2 (id=2217): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4002, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 7.1165297s ago: executing program 0 (id=2225): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="c736382c96a953ae4259f30040000000429dda00f585e61826e8d05ab0b04fa30197b09fab54b53deb6e62a6e358cf1263b076a7cccacb17d17fffd7d752824ef0d7625693cb7d7e7efc81c57745f67b9e055d2b2e0ba38aa9cddf6f0e5a7e078b27f0a85b78e2942b8c7232291c2e1fb3d4bcecd6f79cf57b577d1a3df025119f8eae8b874b7704221f1f9418811bb12722aee9ea01b5d7667d5cf4108ab8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0xfffffffffffffffc, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000100), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xa3, 0x8, 0x5, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xc48}, 0x8282, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xad, 0x7, 0x0, 0x0, 0x0, 0x80000001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xfffffffffffffffd}, 0x0, 0x0, 0xcd, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40001fb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000440)=ANY=[@ANYBLOB="3f5fdd6e8675b17c276f6694fe5e04ef26cb46c8d10e8c755a3709ea2b4c6a00000000000000000000567f802f046fa17c0981329bb1baf7a7da4229ed7ab84d4a0d364620757e31c9603428e6e6f4a7b94ea82fc39aaffb3e6d41f3bdd31f67aa1c2a78633944df7a3942a245145a73ff266914bf6bead29a98227a89318dc008f024cb09fbd6dfd8b6ace8ed332ff3fee24a916f2940d868a4a05b551a57d2c05ab615b0c4f6c7"]) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4803e}, 0x8000) 6.87288925s ago: executing program 1 (id=2227): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4002, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 6.732520959s ago: executing program 0 (id=2228): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x60000000, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.694579587s ago: executing program 1 (id=2229): socket$kcm(0x1e, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x12c, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0xf5}, 0x3e8) 3.513614114s ago: executing program 3 (id=2232): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f8a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 3.464362364s ago: executing program 1 (id=2233): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, 0x0) 3.412779365s ago: executing program 0 (id=2234): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x5c9}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f0000000200)="7d28d2304688109cca5ced9e386538d770b826618f1f73eff0e6839a0f6cb2d8d28be966b3cdc0aeb623336d372364128115eb5b9b32cf8e4ca10b9a4b63efcbae1669e3c53d96f50da4699d0e09d23fbd4e0d7750dd84952010c93147da9454a0f3eb5e227ed4f2ff2585d8962604c4c22b9bedf4e06a8d4383d64bd13ac38903a070d722006ec019d0e7afb17aae08fe97c5f46e76dc4bc94f57aa7e26cff1db9bc0892440fdcc6c58f5ceec81dc7f2ba7e2739f58426e", 0xb8}, {&(0x7f0000000080)="e5065b0e3dd0955af731a76f87cc4b76d33ceba7a1f2b42d1f", 0x19}], 0x3}, 0x240440c0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c081) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000840)="1cc0f7cae0fa43ccacf02560399005265781b1ae663d9e2e94f6b735c5a3aa0e02cac039c6", 0x25}], 0x1}, 0x14018184) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+', 0xfebf}], 0x1}, 0x4044004) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0), 0x4) 3.321451564s ago: executing program 1 (id=2235): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf5ffffff}, 0x48) 2.998902181s ago: executing program 3 (id=2236): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4002, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 2.431526498s ago: executing program 0 (id=2237): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000200)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000700), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000020a00000000000000181ef3e2a2d39d0c186744c194289e49952623692a34ba44ef70ab78fb1663f898aa6e00f5ea65c305c05d03ad976c9bc7b61077bd9626c3db2bb411e68cc8ad40dc1fc7db0f507dd6121f75569fbfc7490dfa1a43a768363adedf34a2267e2eefe9", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000400000000099aa000018150000", @ANYBLOB="0000000000000000b7080000a200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000085000000050000009500000000000000", @ANYBLOB="188236d46b39cc6bd022315d25d4177d17728720e694ca3acee49273ce7ca21cfa4f81a41c1fb66d2b063b9b5525dd7e559ffe7ed29220f7d7397fea5fed32fd81c13aa315b9312520c213175f03c61bbb63c5327fab913c9af1c7116d699d1e0cee64460727eec591ea1f4cc9012d19d50e397b1c0c6d8d609c338d864b14cbccc37dbe48b50b98d7b161545d4ea46e1c56865ebecaa91aac3a82eda25e0bf4046dca08600d73024901866464aacbfebda89c20ba797e873bce0336ad146dd1977b1a", @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18510000070000000000000011000000295301000100000018290000", @ANYRES32=r2, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000006c0)=[{0x6, 0x4, 0x9}, {0x2, 0x5, 0x10, 0x2}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x40107446, &(0x7f0000000180)) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) 2.365046311s ago: executing program 3 (id=2238): socket$kcm(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3c66a669a3130620f215d4e8594baab19e7bac64985ac428919be94fb5dd1e1fac95f624c4ecc5599faf6d37a3b81a1e77eff84ac4d1e8b6d1aa90806612de63e67340f3b19e84aa4e76e58b4092149ea74f2750ffe204afaef3ed563faf5be5dacb00f941c534fc68fce266ad87aa000000000000000000", @ANYRES16], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)="eeeb87cc9fd14169a5384a4c27f6c1d59e9d11c357b4dab1661b8bb0088de5caf6723d1bbc28623ce1bf6763c58c92227d20b82a6e69c6e18b800a84b7d119d587bb4e933d8a1cbf9156ea390fe729fb67e0757d1d443cbc250a7f60f31e71f9ded2345d710df2d5023cf49d3f49f8b2ca3708d2291a386b9dc0ac4ef2e48722c426ba5e83b4fa7674bde7af49d3c93f06a2152be650a8e19d8d9baf2410e7afd9f5a9b505be3c813e14ddfc7835ef6b8fc02dd152fd8c8ee2f4cf4b0d1febdb6ee796146e1a54338e5085e5f10fb40e266389aa4edd7a3b4557634f640ec47de2e0960e1126692e0bc42f66cd34f6199c27f94eeca004", 0xf7}, {&(0x7f0000000840)="3ad8f8849a08ded438c1112c0ff2cf62b9e56c817c3ab3b642d79683da5f9bf46c8cf289a094f528fd5494030b1e4e4abc2563", 0x33}], 0x2, &(0x7f00000008c0)=[{0xe0, 0x29, 0xa, "78ebc4fbc89b9d1ced36bd39df5ae4cadd0beeb4074b63fe3a2d3766125860b9d7675835ff4ea3d0208934c35299b4087f8b5958eab39b485a7eeea0a14adc543a3aa70e368c58b73a60c98f6bfb85d134adbf5b4b570cb233ff66a7bbc41c7826a76881127e80d8a58774250486cbd311feb2cb4a85b015ce9ce10418dcb66f659ce979cd341b9a72418923a13f812b9018a215ac48e6ef1890ac352d249e85826aabfc66807e47b1e28a04ff392ba5f66f45b6eb401e05b0431a8ad270be6dc8ae8fb6bae57eac04f2831e0e18d8"}], 0xe0}, 0x4) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500)="7a0560167369201a45d54ceea47efbe2b85d2e36ba6a72dcf7b733e8783da2bee07c14593dbdf5cbc63496eeae0b781bbf88b3a4940727bf33caef49afe902dda08f1703d07b96dc9e5ca587af993cf6d31012fb84fb3a9bdede4abd95655550ca28cf5871bcbacf6009ada1e1cc5c252fefb6c62000425410757f3ca24d8347169aea493d4fbff72062b7096050a2d06287fc9e1ce243993083e6bef282f8919e", 0xd1, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.180082139s ago: executing program 1 (id=2239): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xffbffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8b", 0x7}], 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4, @ANYRESOCT], 0x0, 0x42, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x16}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000010, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x4, 0x0, 0x2, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020502500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0ff97c1f4b42fe94e7e62fd814f96fcc4f21fe59b6af9e6441dbfc656a519f890b5d36cf581bb890ed0a0008e7b791ef9a85d1079246808a99f393f8221a1338b0262ec5542ef27c04800ba67b7b33ef4a04a8f99e10e7c5c89bba57ee7f8f0f2eb7bb28c3b0a0c5071621d6dc0acf2cd50de34286aa71cb48496707", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r7, 0x15, 0x1, 0xffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)}, 0xfdec) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRESDEC], 0x20) close(r9) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.601064309s ago: executing program 3 (id=2240): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640a9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f", 0x7}, {0x0}], 0x2}, 0x4000000) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0000000000000021000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1.391542942s ago: executing program 3 (id=2241): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x60000000, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.318274228s ago: executing program 1 (id=2242): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000000000000000002020732500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000"], 0x0, 0x56}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r1}, 0x20) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb6, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32, @ANYBLOB="00000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000007e0d0000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000d25fe8561000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0xa3, &(0x7f0000000540)=""/163, 0x41100, 0x32, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x2, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000680)=[{0x2, 0x4, 0xd, 0x5}, {0x0, 0x1, 0xc}, {0x0, 0x3, 0x6, 0x4}, {0x2, 0x1, 0xe, 0xa}, {0x1, 0x2, 0xb, 0x4}, {0x1, 0x4, 0x10, 0x3}, {0x3, 0x4, 0x8, 0xa}, {0x3, 0x2, 0x1, 0x3}]}, 0x94) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) r12 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r12, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="fbd2b97fb9736e79add8dd7cbeedfb50f9cc221c3e9721218a8bbd2f6894d8ddcdd854c9bf41dc6a81272d0f", 0x2c}], 0x1}, 0x4000040) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000400)={r12}) (rerun: 64) 1.277163566s ago: executing program 0 (id=2243): bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b0800000000000000f934a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, 0x0, 0x4000040) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f500000000000000006bf4c5792c4a6c844a52316ce3414a867f3e972ca96e0114d683e8e678bf8e585ed91b0d007708e5367b51828b8a19d62df1682680388dd3eb0177d69623d69be4e2"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e92f4ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) 989.050766ms ago: executing program 0 (id=2244): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20009000) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1000, 0x3fff8000}, 0x0, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x10, 0x3, 0xffff, &(0x7f0000000100)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}], {0x95, 0x0, 0x8004}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44}, 0x94) 0s ago: executing program 3 (id=2245): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4002, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 73.427609][ T5766] cgroup: Unknown subsys name 'net' [ 73.562620][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.915717][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.277089][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.286156][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.294213][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.303744][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.312762][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.320241][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.329518][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.338064][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.346354][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.358091][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.364069][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.377598][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.377746][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.393937][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.401256][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.410670][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.420665][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.440157][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.449071][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.458327][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.468971][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.479352][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.487452][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.494827][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.835455][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.915222][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.997344][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 77.064146][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.100421][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.109712][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.117553][ T5777] bridge_slave_0: entered allmulticast mode [ 77.124304][ T5777] bridge_slave_0: entered promiscuous mode [ 77.133552][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.141503][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.148978][ T5784] bridge_slave_0: entered allmulticast mode [ 77.155725][ T5784] bridge_slave_0: entered promiscuous mode [ 77.164274][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.171575][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.178802][ T5784] bridge_slave_1: entered allmulticast mode [ 77.185491][ T5784] bridge_slave_1: entered promiscuous mode [ 77.211491][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.219320][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.228478][ T5777] bridge_slave_1: entered allmulticast mode [ 77.235290][ T5777] bridge_slave_1: entered promiscuous mode [ 77.321465][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.333935][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.345163][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.358045][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.368208][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.375326][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.382840][ T5787] bridge_slave_0: entered allmulticast mode [ 77.390083][ T5787] bridge_slave_0: entered promiscuous mode [ 77.399356][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.406600][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.413776][ T5787] bridge_slave_1: entered allmulticast mode [ 77.420748][ T5787] bridge_slave_1: entered promiscuous mode [ 77.493914][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.501155][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.508847][ T5780] bridge_slave_0: entered allmulticast mode [ 77.515536][ T5780] bridge_slave_0: entered promiscuous mode [ 77.528770][ T5784] team0: Port device team_slave_0 added [ 77.544502][ T5777] team0: Port device team_slave_0 added [ 77.553334][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.560923][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.568364][ T5780] bridge_slave_1: entered allmulticast mode [ 77.575089][ T5780] bridge_slave_1: entered promiscuous mode [ 77.583578][ T5784] team0: Port device team_slave_1 added [ 77.593753][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.604335][ T5777] team0: Port device team_slave_1 added [ 77.642251][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.683652][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.690831][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.717354][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.749232][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.756311][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.782282][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.795240][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.802645][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.828917][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.843110][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.853305][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.860473][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.887018][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.901910][ T5787] team0: Port device team_slave_0 added [ 77.923431][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.943171][ T5787] team0: Port device team_slave_1 added [ 78.026408][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.033436][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.059803][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.075202][ T5780] team0: Port device team_slave_0 added [ 78.086587][ T5777] hsr_slave_0: entered promiscuous mode [ 78.093118][ T5777] hsr_slave_1: entered promiscuous mode [ 78.104972][ T5784] hsr_slave_0: entered promiscuous mode [ 78.111979][ T5784] hsr_slave_1: entered promiscuous mode [ 78.118468][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.126527][ T5784] Cannot create hsr debugfs directory [ 78.132648][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.141820][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.168139][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.180862][ T5780] team0: Port device team_slave_1 added [ 78.244971][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.252188][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.278445][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.317210][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.324202][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.350669][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.407197][ T5779] Bluetooth: hci0: command tx timeout [ 78.473222][ T5787] hsr_slave_0: entered promiscuous mode [ 78.479663][ T5787] hsr_slave_1: entered promiscuous mode [ 78.485976][ T51] Bluetooth: hci2: command tx timeout [ 78.487109][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.491662][ T5779] Bluetooth: hci1: command tx timeout [ 78.499146][ T5787] Cannot create hsr debugfs directory [ 78.521217][ T5780] hsr_slave_0: entered promiscuous mode [ 78.527962][ T5780] hsr_slave_1: entered promiscuous mode [ 78.534015][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.542784][ T5780] Cannot create hsr debugfs directory [ 78.566031][ T5779] Bluetooth: hci3: command tx timeout [ 78.827302][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.849871][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.862697][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.891718][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.936546][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.961087][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.001953][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.027248][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.053365][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.063782][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.074870][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.087554][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.183132][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.194405][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.205388][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.226371][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.293116][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.347518][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.412313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.419803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.431461][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.438587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.453273][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.515600][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.540708][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.577726][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.592776][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.599925][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.622619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.629805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.641432][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.668812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.676017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.701940][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.709143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.731045][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.767976][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.775106][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.853095][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.860373][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.990284][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.003194][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.155627][ T5784] veth0_vlan: entered promiscuous mode [ 80.194891][ T5784] veth1_vlan: entered promiscuous mode [ 80.269080][ T5784] veth0_macvtap: entered promiscuous mode [ 80.311823][ T5784] veth1_macvtap: entered promiscuous mode [ 80.384456][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.414331][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.428334][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.452339][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.463119][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.474672][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.483625][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.493288][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.496356][ T5779] Bluetooth: hci0: command tx timeout [ 80.528644][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.568679][ T51] Bluetooth: hci2: command tx timeout [ 80.574234][ T5779] Bluetooth: hci1: command tx timeout [ 80.637601][ T5777] veth0_vlan: entered promiscuous mode [ 80.646348][ T5779] Bluetooth: hci3: command tx timeout [ 80.658149][ T5777] veth1_vlan: entered promiscuous mode [ 80.694782][ T5780] veth0_vlan: entered promiscuous mode [ 80.754238][ T5787] veth0_vlan: entered promiscuous mode [ 80.763887][ T5780] veth1_vlan: entered promiscuous mode [ 80.777278][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.785344][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.813911][ T5787] veth1_vlan: entered promiscuous mode [ 80.827344][ T5777] veth0_macvtap: entered promiscuous mode [ 80.858852][ T5777] veth1_macvtap: entered promiscuous mode [ 80.880263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.900086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.917665][ T5780] veth0_macvtap: entered promiscuous mode [ 80.938200][ T5780] veth1_macvtap: entered promiscuous mode [ 80.951755][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.973990][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.989987][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.006248][ T5787] veth0_macvtap: entered promiscuous mode [ 81.043365][ T5787] veth1_macvtap: entered promiscuous mode [ 81.061746][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.075173][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.087455][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.109690][ C1] hrtimer: interrupt took 68115 ns [ 81.122679][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.148451][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.159088][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.169851][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.182209][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.205720][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.218265][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.228939][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.239526][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.251933][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.264563][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.275702][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.288795][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.300112][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322680][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.337739][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.348662][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.360901][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.371634][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.383179][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.397618][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.478157][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.487130][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.496298][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.505045][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.529300][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.549761][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.563139][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.573671][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.584359][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.595581][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.608842][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.638939][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.656382][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.665147][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675142][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.836444][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.844408][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.896784][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.904657][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.959615][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.981624][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.051977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.061894][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.095352][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.129856][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.230234][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.259390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.447401][ T5851] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 82.568934][ T5779] Bluetooth: hci0: command tx timeout [ 82.666459][ T5779] Bluetooth: hci1: command tx timeout [ 82.671923][ T5779] Bluetooth: hci2: command tx timeout [ 82.741104][ T5779] Bluetooth: hci3: command tx timeout [ 82.772090][ T5857] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6'. [ 84.646246][ T5779] Bluetooth: hci0: command tx timeout [ 84.665082][ T5879] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12'. [ 84.726692][ T5779] Bluetooth: hci2: command tx timeout [ 84.727174][ T51] Bluetooth: hci1: command tx timeout [ 84.789018][ T5884] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.806132][ T51] Bluetooth: hci3: command tx timeout [ 84.867488][ T5886] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15'. [ 86.411259][ T5918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.26'. [ 87.018328][ T23] cfg80211: failed to load regulatory.db [ 88.660833][ T5952] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35'. [ 88.794597][ T5955] netlink: 'syz.3.36': attribute type 21 has an invalid length. [ 90.334875][ T5974] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.43'. [ 90.391374][ T5976] netlink: 'syz.0.43': attribute type 4 has an invalid length. [ 90.401904][ T5976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.43'. [ 90.768506][ T5989] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.46'. [ 91.068106][ T5996] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 91.086611][ T5999] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.094777][ T5996] netlink: 2 bytes leftover after parsing attributes in process `syz.3.50'. [ 91.108982][ T5996] bond0: entered promiscuous mode [ 91.114234][ T5996] bond_slave_0: entered promiscuous mode [ 91.120909][ T5996] bond_slave_1: entered promiscuous mode [ 91.135319][ T5996] bridge0: port 3(bond0) entered blocking state [ 91.148171][ T5996] bridge0: port 3(bond0) entered disabled state [ 91.158694][ T5996] bond0: entered allmulticast mode [ 91.163870][ T5996] bond_slave_0: entered allmulticast mode [ 91.172147][ T5996] bond_slave_1: entered allmulticast mode [ 91.194052][ T5996] bridge0: port 3(bond0) entered blocking state [ 91.201397][ T5996] bridge0: port 3(bond0) entered forwarding state [ 91.284679][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 91.646322][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.62'. [ 91.649519][ T6016] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.61'. [ 91.726916][ T6015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.62'. [ 91.757609][ T6017] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.61'. [ 91.774230][ T6020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.62'. [ 92.477483][ T6009] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 93.599910][ T6043] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 93.870657][ T6059] netlink: 'syz.0.68': attribute type 8 has an invalid length. [ 93.871881][ T6051] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 93.896167][ T6059] __nla_validate_parse: 4 callbacks suppressed [ 93.896184][ T6059] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.68'. [ 93.896405][ T6051] netlink: 'syz.2.65': attribute type 3 has an invalid length. [ 93.934668][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 93.940204][ T6061] netlink: 'syz.1.67': attribute type 25 has an invalid length. [ 93.947848][ T6051] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 93.959293][ T6061] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 93.991626][ T6052] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 93.998416][ T6051] netlink: 'syz.2.65': attribute type 3 has an invalid length. [ 94.015609][ T6052] netlink: 168 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.053219][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.075004][ T6051] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 94.083496][ T6051] netlink: 'syz.2.65': attribute type 3 has an invalid length. [ 94.092087][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.097207][ T6052] netlink: 168 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.119126][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.126484][ T6052] netlink: 168 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.141844][ T6064] Zero length message leads to an empty skb [ 94.148846][ T6052] netlink: 168 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.149248][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 95.169993][ T6093] macvlan1: entered allmulticast mode [ 95.188897][ T6093] veth1_vlan: entered allmulticast mode [ 95.219761][ T6093] team0: Port device macvlan1 added [ 96.280119][ T6131] FAULT_INJECTION: forcing a failure. [ 96.280119][ T6131] name failslab, interval 1, probability 0, space 0, times 1 [ 96.296190][ T6131] CPU: 0 PID: 6131 Comm: syz.3.91 Not tainted syzkaller #0 [ 96.303407][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.313944][ T6131] Call Trace: [ 96.317301][ T6131] [ 96.320268][ T6131] dump_stack_lvl+0x18c/0x250 [ 96.324992][ T6131] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.331190][ T6131] ? show_regs_print_info+0x20/0x20 [ 96.336432][ T6131] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.342636][ T6131] should_fail_ex+0x394/0x4c0 [ 96.347355][ T6131] should_failslab+0x9/0x20 [ 96.351903][ T6131] slab_pre_alloc_hook+0x59/0x300 [ 96.356969][ T6131] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 96.362899][ T6131] __kmem_cache_alloc_node+0x53/0x250 [ 96.368324][ T6131] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 96.374260][ T6131] kmalloc_trace+0x2a/0xe0 [ 96.378715][ T6131] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 96.384468][ T6131] ? sctp_stream_interleave_init+0x55/0x90 [ 96.390283][ T6131] sctp_association_new+0x15be/0x25b0 [ 96.395659][ T6131] sctp_connect_new_asoc+0x2de/0x6a0 [ 96.400942][ T6131] ? __sctp_connect+0xd80/0xd80 [ 96.405885][ T6131] ? sctp_sendmsg+0xb7e/0x27b0 [ 96.410658][ T6131] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 96.416316][ T6131] ? security_sctp_bind_connect+0x89/0xb0 [ 96.422033][ T6131] sctp_sendmsg+0x1519/0x27b0 [ 96.426721][ T6131] ? sctp_getsockopt+0xb60/0xb60 [ 96.431666][ T6131] ? aa_af_perm+0x330/0x330 [ 96.436171][ T6131] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 96.442583][ T6131] ? sock_rps_record_flow+0x19/0x3f0 [ 96.447886][ T6131] ? inet_sendmsg+0xce/0x2a0 [ 96.452473][ T6131] ? inet_send_prepare+0x250/0x250 [ 96.457579][ T6131] ____sys_sendmsg+0x61b/0x980 [ 96.462355][ T6131] ? __asan_memset+0x22/0x40 [ 96.466947][ T6131] ? __sys_sendmsg_sock+0x30/0x30 [ 96.471965][ T6131] ? __import_iovec+0x5f2/0x850 [ 96.476833][ T6131] ? import_iovec+0x73/0xa0 [ 96.481348][ T6131] ___sys_sendmsg+0x2a6/0x360 [ 96.486031][ T6131] ? get_pid_task+0x20/0x1e0 [ 96.490658][ T6131] ? __sys_sendmsg+0x2b0/0x2b0 [ 96.495454][ T6131] ? __lock_acquire+0x7d80/0x7d80 [ 96.500507][ T6131] __se_sys_sendmsg+0x1d0/0x2c0 [ 96.505362][ T6131] ? __x64_sys_sendmsg+0x80/0x80 [ 96.510312][ T6131] do_syscall_64+0x55/0xb0 [ 96.514727][ T6131] ? clear_bhb_loop+0x40/0x90 [ 96.519401][ T6131] ? clear_bhb_loop+0x40/0x90 [ 96.524077][ T6131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.529969][ T6131] RIP: 0033:0x7f239639e159 [ 96.534392][ T6131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.554017][ T6131] RSP: 002b:00007f23972fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.562475][ T6131] RAX: ffffffffffffffda RBX: 00007f2396625fa0 RCX: 00007f239639e159 [ 96.570452][ T6131] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 96.578423][ T6131] RBP: 00007f23972fb090 R08: 0000000000000000 R09: 0000000000000000 [ 96.586404][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.594376][ T6131] R13: 00007f2396626038 R14: 00007f2396625fa0 R15: 00007ffc73ad10b8 [ 96.602355][ T6131] [ 97.767189][ T6168] delete_channel: no stack [ 98.185925][ T6185] tipc: Publication distribution failure [ 99.385984][ T6218] validate_nla: 195 callbacks suppressed [ 99.386004][ T6218] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 99.482938][ T6218] team0: Port device wlan1 added [ 99.639177][ T6223] FAULT_INJECTION: forcing a failure. [ 99.639177][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.665989][ T6223] CPU: 0 PID: 6223 Comm: syz.3.123 Not tainted syzkaller #0 [ 99.673349][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.683426][ T6223] Call Trace: [ 99.686720][ T6223] [ 99.689676][ T6223] dump_stack_lvl+0x18c/0x250 [ 99.694388][ T6223] ? show_regs_print_info+0x20/0x20 [ 99.699612][ T6223] ? load_image+0x420/0x420 [ 99.704139][ T6223] ? __might_fault+0xaa/0x120 [ 99.708837][ T6223] ? __lock_acquire+0x7d80/0x7d80 [ 99.713888][ T6223] ? __virt_addr_valid+0x10c/0x380 [ 99.719119][ T6223] should_fail_ex+0x394/0x4c0 [ 99.723830][ T6223] _copy_to_user+0x2f/0xa0 [ 99.728311][ T6223] bpf_verifier_vlog+0x5ac/0x840 [ 99.733373][ T6223] __btf_verifier_log+0xe3/0x140 [ 99.738341][ T6223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.744526][ T6223] ? lockdep_hardirqs_on+0x98/0x150 [ 99.749752][ T6223] ? btf_check_sec_info+0x350/0x350 [ 99.754993][ T6223] __btf_verifier_log_type+0x4f7/0x690 [ 99.760498][ T6223] ? sort_r+0x17f5/0x1810 [ 99.764858][ T6223] ? btf_int_show+0x2810/0x2810 [ 99.769860][ T6223] btf_datasec_check_meta+0x46d/0xb50 [ 99.775261][ T6223] btf_check_all_metas+0x371/0xaf0 [ 99.780404][ T6223] btf_parse_type_sec+0xfc/0x1960 [ 99.785440][ T6223] ? __virt_addr_valid+0x10c/0x380 [ 99.790559][ T6223] ? btf_verifier_log+0x1a0/0x1a0 [ 99.795586][ T6223] ? btf_parse_hdr+0x545/0x700 [ 99.800347][ T6223] ? btf_parse_str_sec+0x20d/0x2a0 [ 99.805457][ T6223] btf_new_fd+0x440/0x9e0 [ 99.809790][ T6223] ? bpf_btf_show_fdinfo+0x80/0x80 [ 99.814900][ T6223] ? capable+0x88/0xe0 [ 99.818970][ T6223] __sys_bpf+0x670/0x890 [ 99.823214][ T6223] ? bpf_link_show_fdinfo+0x560/0x560 [ 99.828622][ T6223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.834898][ T6223] __x64_sys_bpf+0x7c/0x90 [ 99.839329][ T6223] do_syscall_64+0x55/0xb0 [ 99.843763][ T6223] ? clear_bhb_loop+0x40/0x90 [ 99.848462][ T6223] ? clear_bhb_loop+0x40/0x90 [ 99.853158][ T6223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.859060][ T6223] RIP: 0033:0x7f239639e159 [ 99.863474][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.883111][ T6223] RSP: 002b:00007f23972fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.891544][ T6223] RAX: ffffffffffffffda RBX: 00007f2396625fa0 RCX: 00007f239639e159 [ 99.899535][ T6223] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 99.907534][ T6223] RBP: 00007f23972fb090 R08: 0000000000000000 R09: 0000000000000000 [ 99.915505][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.923490][ T6223] R13: 00007f2396626038 R14: 00007f2396625fa0 R15: 00007ffc73ad10b8 [ 99.931474][ T6223] [ 99.991866][ T6227] __nla_validate_parse: 129 callbacks suppressed [ 99.991883][ T6227] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.124'. [ 100.313358][ T6236] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 101.124416][ T6254] syzkaller0: entered promiscuous mode [ 101.134067][ T6254] syzkaller0: entered allmulticast mode [ 101.381774][ T6270] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.136'. [ 101.874429][ T6279] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.140'. [ 102.714263][ T6281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.141'. [ 102.799020][ T6283] syzkaller0: entered promiscuous mode [ 102.804768][ T6283] syzkaller0: entered allmulticast mode [ 102.935229][ T6296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.145'. [ 104.742070][ T6329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.154'. [ 105.035741][ T6337] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.157'. [ 105.915069][ T6353] sit0: entered allmulticast mode [ 105.961640][ T6356] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 106.034771][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.049155][ T6356] bridge_slave_1: left allmulticast mode [ 106.066427][ T6356] bridge_slave_1: left promiscuous mode [ 106.075911][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.129324][ T6356] bridge_slave_1: entered promiscuous mode [ 106.129366][ T6361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.165'. [ 106.152725][ T6356] bridge_slave_1: entered allmulticast mode [ 106.160543][ T6356] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 106.287631][ T6364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.300066][ T6351] sit0: entered promiscuous mode [ 106.319246][ T6356] syz.3.163 (6356) used greatest stack depth: 19624 bytes left [ 107.479884][ T6384] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.174'. [ 107.490925][ T6386] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 107.754630][ T6398] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.179'. [ 107.797278][ T6398] netlink: zone id is out of range [ 107.802545][ T6398] netlink: zone id is out of range [ 107.813156][ T6398] netlink: zone id is out of range [ 107.818898][ T6398] netlink: zone id is out of range [ 107.824411][ T6398] netlink: zone id is out of range [ 107.829976][ T6398] netlink: zone id is out of range [ 107.840860][ T6398] netlink: zone id is out of range [ 107.881900][ T6398] netlink: zone id is out of range [ 107.891639][ T6398] netlink: zone id is out of range [ 107.898666][ T6398] netlink: zone id is out of range [ 107.973254][ T6406] sit0: left promiscuous mode [ 107.973389][ T6396] netlink: 124112 bytes leftover after parsing attributes in process `syz.2.179'. [ 108.310000][ T6416] netlink: 144 bytes leftover after parsing attributes in process `syz.0.184'. [ 108.410888][ T6419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.185'. [ 108.707222][ T6428] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.188'. [ 108.736376][ T6431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.196'. [ 109.180451][ T6436] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.189'. [ 109.323315][ T6442] netlink: 'syz.2.191': attribute type 21 has an invalid length. [ 109.334440][ T6442] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.342741][ T6442] IPv6: Can't replace route, no match found [ 110.694171][ T6480] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 110.778980][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.796050][ T6480] bridge_slave_1: left allmulticast mode [ 110.802783][ T6480] bridge_slave_1: left promiscuous mode [ 110.813294][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.869714][ T6480] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 111.282304][ T6493] __nla_validate_parse: 4 callbacks suppressed [ 111.282407][ T6493] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.210'. [ 111.487214][ T6502] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.211'. [ 111.811040][ T6509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.214'. [ 111.825335][ T6509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.214'. [ 112.141241][ T6516] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.216'. [ 112.368138][ T6519] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 112.517576][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.544005][ T6519] bridge_slave_1: left allmulticast mode [ 112.555314][ T6519] bridge_slave_1: left promiscuous mode [ 112.566007][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.631124][ T6519] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.784286][ T6531] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.222'. [ 112.858174][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 112.926272][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.066650][ T6542] netlink: 105940 bytes leftover after parsing attributes in process `syz.3.226'. [ 113.097012][ T6529] bridge_slave_0 (unregistering): left allmulticast mode [ 113.111319][ T6529] bridge_slave_0 (unregistering): left promiscuous mode [ 113.120428][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.200700][ T6546] netlink: 'syz.3.226': attribute type 28 has an invalid length. [ 113.210280][ T6546] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 113.218766][ T6546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.226'. [ 113.301187][ T6542] netlink: 156 bytes leftover after parsing attributes in process `syz.3.226'. [ 114.378410][ T6567] net_ratelimit: 198 callbacks suppressed [ 114.378458][ T6567] openvswitch: netlink: Key type 8208 is out of range max 32 [ 115.304178][ T6581] netlink: 'syz.2.237': attribute type 28 has an invalid length. [ 115.312458][ T6581] netlink: 'syz.2.237': attribute type 29 has an invalid length. [ 115.723013][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.846542][ T6593] bridge_slave_0 (unregistering): left allmulticast mode [ 115.853899][ T6593] bridge_slave_0 (unregistering): left promiscuous mode [ 115.863688][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.972314][ T6595] netlink: 'syz.2.243': attribute type 9 has an invalid length. [ 116.256856][ T6609] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 116.287601][ T6609] netlink: 'syz.0.247': attribute type 3 has an invalid length. [ 116.295551][ T6609] __nla_validate_parse: 9 callbacks suppressed [ 116.295622][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.247'. [ 116.342922][ T6611] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 116.379751][ T6611] netlink: 168 bytes leftover after parsing attributes in process `syz.0.247'. [ 116.875162][ T6627] netlink: 105940 bytes leftover after parsing attributes in process `syz.0.250'. [ 116.931787][ T6627] netlink: 156 bytes leftover after parsing attributes in process `syz.0.250'. [ 116.953827][ T6627] netlink: 'syz.0.250': attribute type 28 has an invalid length. [ 116.971049][ T6627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.250'. [ 117.079766][ T6637] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.254'. [ 117.254768][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.255'. [ 117.259824][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.258'. [ 117.329417][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.459841][ T6641] bridge_slave_0 (unregistering): left allmulticast mode [ 117.468461][ T6641] bridge_slave_0 (unregistering): left promiscuous mode [ 117.494042][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.705635][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.258'. [ 117.733447][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.258'. [ 118.103939][ T6671] bridge_slave_1: default FDB implementation only supports local addresses [ 118.558628][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.648740][ T6682] bridge_slave_0 (unregistering): left allmulticast mode [ 118.656650][ T6682] bridge_slave_0 (unregistering): left promiscuous mode [ 118.693078][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.310082][ T6702] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.494443][ T6739] __nla_validate_parse: 14 callbacks suppressed [ 121.494454][ T6739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 121.511634][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 121.535680][ T6744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 122.244572][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 122.298035][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 122.322379][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 122.353754][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 122.417398][ T6788] FAULT_INJECTION: forcing a failure. [ 122.417398][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.447958][ T6788] CPU: 1 PID: 6788 Comm: syz.2.308 Not tainted syzkaller #0 [ 122.455300][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.465387][ T6788] Call Trace: [ 122.468691][ T6788] [ 122.471639][ T6788] dump_stack_lvl+0x18c/0x250 [ 122.476369][ T6788] ? show_regs_print_info+0x20/0x20 [ 122.481597][ T6788] ? load_image+0x420/0x420 [ 122.486125][ T6788] ? __lock_acquire+0x7d80/0x7d80 [ 122.491174][ T6788] should_fail_ex+0x394/0x4c0 [ 122.495880][ T6788] _copy_from_user+0x2f/0xe0 [ 122.500505][ T6788] __copy_msghdr+0x388/0x560 [ 122.505102][ T6788] ___sys_sendmsg+0x214/0x360 [ 122.509773][ T6788] ? get_pid_task+0x20/0x1e0 [ 122.514368][ T6788] ? __sys_sendmsg+0x2b0/0x2b0 [ 122.519140][ T6788] ? __lock_acquire+0x7d80/0x7d80 [ 122.524177][ T6788] __se_sys_sendmsg+0x1d0/0x2c0 [ 122.529038][ T6788] ? __x64_sys_sendmsg+0x80/0x80 [ 122.533982][ T6788] ? lockdep_hardirqs_on+0x98/0x150 [ 122.539192][ T6788] do_syscall_64+0x55/0xb0 [ 122.543611][ T6788] ? clear_bhb_loop+0x40/0x90 [ 122.548302][ T6788] ? clear_bhb_loop+0x40/0x90 [ 122.552983][ T6788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.558905][ T6788] RIP: 0033:0x7f339a19e159 [ 122.563326][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.582936][ T6788] RSP: 002b:00007f339b05c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.591357][ T6788] RAX: ffffffffffffffda RBX: 00007f339a425fa0 RCX: 00007f339a19e159 [ 122.599331][ T6788] RDX: 0000000000008014 RSI: 0000200000001800 RDI: 0000000000000003 [ 122.607299][ T6788] RBP: 00007f339b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 122.615261][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.623221][ T6788] R13: 00007f339a426038 R14: 00007f339a425fa0 R15: 00007ffffa5892a8 [ 122.631197][ T6788] [ 122.825793][ T6794] netlink: 10 bytes leftover after parsing attributes in process `syz.0.309'. [ 123.075155][ T6808] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.314'. [ 123.261885][ T6808] netlink: 196 bytes leftover after parsing attributes in process `syz.2.314'. [ 124.571964][ T6847] validate_nla: 1 callbacks suppressed [ 124.572007][ T6847] netlink: 'syz.3.329': attribute type 32 has an invalid length. [ 125.375158][ T6872] netlink: 'syz.1.335': attribute type 17 has an invalid length. [ 125.394827][ T6872] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 126.655833][ T6887] netlink: 'syz.3.343': attribute type 21 has an invalid length. [ 126.897815][ T6897] __nla_validate_parse: 15 callbacks suppressed [ 126.897834][ T6897] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.345'. [ 127.173844][ T6900] syzkaller0: entered promiscuous mode [ 127.181476][ T6900] syzkaller0: entered allmulticast mode [ 127.315532][ T6902] netlink: 'syz.1.348': attribute type 9 has an invalid length. [ 127.325328][ T6902] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.348'. [ 127.423189][ T6909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.351'. [ 127.433008][ T6909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.351'. [ 127.443990][ T6909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.351'. [ 127.480046][ T6909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.351'. [ 127.735402][ T6921] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.356'. [ 127.840145][ T6918] netlink: 'syz.0.355': attribute type 32 has an invalid length. [ 127.870331][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'. [ 128.063247][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.359'. [ 128.153592][ T6929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.359'. [ 128.828326][ T6956] netlink: 'syz.2.367': attribute type 33 has an invalid length. [ 132.674102][ T7011] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 132.686619][ T7011] __nla_validate_parse: 18 callbacks suppressed [ 132.686746][ T7011] netlink: 2 bytes leftover after parsing attributes in process `syz.2.386'. [ 132.704378][ T7011] hsr0: entered promiscuous mode [ 132.716753][ T7011] bridge0: port 1(hsr0) entered blocking state [ 132.748006][ T7011] bridge0: port 1(hsr0) entered disabled state [ 132.768685][ T7011] hsr0: entered allmulticast mode [ 132.769921][ T7020] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.389'. [ 132.774917][ T7011] hsr_slave_0: entered allmulticast mode [ 132.796192][ T7011] hsr_slave_1: entered allmulticast mode [ 132.847353][ T7011] bridge0: port 1(hsr0) entered blocking state [ 132.855188][ T7011] bridge0: port 1(hsr0) entered forwarding state [ 133.095448][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102347][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.351198][ T7056] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.400'. [ 134.640762][ T7075] FAULT_INJECTION: forcing a failure. [ 134.640762][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 134.654329][ T7075] CPU: 0 PID: 7075 Comm: syz.1.406 Not tainted syzkaller #0 [ 134.661654][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.671723][ T7075] Call Trace: [ 134.675024][ T7075] [ 134.677968][ T7075] dump_stack_lvl+0x18c/0x250 [ 134.682679][ T7075] ? show_regs_print_info+0x20/0x20 [ 134.687904][ T7075] ? load_image+0x420/0x420 [ 134.692429][ T7075] ? __might_sleep+0xe0/0xe0 [ 134.697050][ T7075] ? __lock_acquire+0x7d80/0x7d80 [ 134.702101][ T7075] should_fail_ex+0x394/0x4c0 [ 134.706815][ T7075] should_failslab+0x9/0x20 [ 134.711341][ T7075] slab_pre_alloc_hook+0x59/0x300 [ 134.716388][ T7075] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 134.722127][ T7075] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 134.727864][ T7075] __kmem_cache_alloc_node+0x53/0x250 [ 134.733262][ T7075] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 134.738998][ T7075] __kmalloc+0xa7/0x240 [ 134.743194][ T7075] tomoyo_realpath_from_path+0xe6/0x5c0 [ 134.748768][ T7075] ? tomoyo_domain+0xd6/0x120 [ 134.753471][ T7075] tomoyo_path_number_perm+0x248/0x5e0 [ 134.758957][ T7075] ? tomoyo_path_number_perm+0x217/0x5e0 [ 134.764607][ T7075] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 134.770087][ T7075] ? ksys_write+0x1d2/0x260 [ 134.774641][ T7075] ? __fget_files+0x28/0x460 [ 134.779259][ T7075] security_file_ioctl+0x70/0xa0 [ 134.784219][ T7075] __se_sys_ioctl+0x48/0x170 [ 134.788827][ T7075] do_syscall_64+0x55/0xb0 [ 134.793255][ T7075] ? clear_bhb_loop+0x40/0x90 [ 134.797942][ T7075] ? clear_bhb_loop+0x40/0x90 [ 134.802630][ T7075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.808537][ T7075] RIP: 0033:0x7f85c0f9e159 [ 134.812966][ T7075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.832592][ T7075] RSP: 002b:00007f85c1dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.841038][ T7075] RAX: ffffffffffffffda RBX: 00007f85c1225fa0 RCX: 00007f85c0f9e159 [ 134.849028][ T7075] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 134.857023][ T7075] RBP: 00007f85c1dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.865009][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.872991][ T7075] R13: 00007f85c1226038 R14: 00007f85c1225fa0 R15: 00007ffd68f4eff8 [ 134.880993][ T7075] [ 134.886310][ T7075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.240120][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 135.249518][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 135.259839][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 135.269766][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 135.515720][ T7095] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.412'. [ 136.213950][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.418'. [ 136.363249][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.418'. [ 136.668007][ T7137] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 136.678115][ T7137] macvlan1: entered allmulticast mode [ 136.692894][ T7137] veth1_vlan: entered allmulticast mode [ 136.714914][ T7137] team0: Port device macvlan1 added [ 136.721576][ T7139] netlink: 'syz.0.425': attribute type 33 has an invalid length. [ 137.920414][ T7179] __nla_validate_parse: 10 callbacks suppressed [ 137.920426][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 137.942194][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 137.966455][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 137.992768][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 138.121927][ T7185] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.445'. [ 138.320658][ T7197] FAULT_INJECTION: forcing a failure. [ 138.320658][ T7197] name failslab, interval 1, probability 0, space 0, times 0 [ 138.339705][ T7197] CPU: 0 PID: 7197 Comm: syz.2.449 Not tainted syzkaller #0 [ 138.347043][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.357123][ T7197] Call Trace: [ 138.360420][ T7197] [ 138.363366][ T7197] dump_stack_lvl+0x18c/0x250 [ 138.368068][ T7197] ? show_regs_print_info+0x20/0x20 [ 138.373293][ T7197] ? load_image+0x420/0x420 [ 138.377820][ T7197] ? perf_trace_lock_acquire+0x105/0x400 [ 138.383484][ T7197] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 138.390105][ T7197] should_fail_ex+0x394/0x4c0 [ 138.394815][ T7197] should_failslab+0x9/0x20 [ 138.399347][ T7197] slab_pre_alloc_hook+0x59/0x300 [ 138.404408][ T7197] kmem_cache_alloc_node+0x5e/0x310 [ 138.409636][ T7197] ? __alloc_skb+0x103/0x2c0 [ 138.414251][ T7197] __alloc_skb+0x103/0x2c0 [ 138.418696][ T7197] tipc_msg_create+0x4a/0x4c0 [ 138.423394][ T7197] ? tipc_own_addr+0x45/0x2a0 [ 138.428099][ T7197] tipc_group_proto_xmit+0xce/0x790 [ 138.433332][ T7197] tipc_group_join+0x149/0x6f0 [ 138.438199][ T7197] ? tipc_nametbl_publish+0x12d/0x1f0 [ 138.443583][ T7197] ? tipc_own_addr+0x2a0/0x2a0 [ 138.448353][ T7197] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 138.453986][ T7197] ? tipc_nametbl_build_group+0x482/0x4c0 [ 138.459703][ T7197] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 138.465342][ T7197] tipc_sk_join+0x47d/0x6a0 [ 138.469871][ T7197] ? __tipc_sendstream+0x1290/0x1290 [ 138.475187][ T7197] tipc_setsockopt+0x73f/0x990 [ 138.479969][ T7197] ? tipc_shutdown+0x4d0/0x4d0 [ 138.484737][ T7197] ? __fget_files+0x28/0x460 [ 138.489329][ T7197] ? aa_sock_opt_perm+0x74/0x100 [ 138.494271][ T7197] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 138.499816][ T7197] ? security_socket_setsockopt+0x7e/0xa0 [ 138.505534][ T7197] ? tipc_shutdown+0x4d0/0x4d0 [ 138.510294][ T7197] do_sock_setsockopt+0x175/0x1a0 [ 138.515321][ T7197] ? __fdget+0x180/0x210 [ 138.519568][ T7197] __x64_sys_setsockopt+0x182/0x200 [ 138.524768][ T7197] do_syscall_64+0x55/0xb0 [ 138.529183][ T7197] ? clear_bhb_loop+0x40/0x90 [ 138.533857][ T7197] ? clear_bhb_loop+0x40/0x90 [ 138.538538][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.544429][ T7197] RIP: 0033:0x7f339a19e159 [ 138.548841][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.568537][ T7197] RSP: 002b:00007f339b05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.576950][ T7197] RAX: ffffffffffffffda RBX: 00007f339a425fa0 RCX: 00007f339a19e159 [ 138.584918][ T7197] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 138.592887][ T7197] RBP: 00007f339b05c090 R08: 00000000000004bd R09: 0000000000000000 [ 138.600856][ T7197] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 138.608825][ T7197] R13: 00007f339a426038 R14: 00007f339a425fa0 R15: 00007ffffa5892a8 [ 138.616805][ T7197] [ 139.257611][ T7208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.673830][ T7208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.731137][ T7210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.753627][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'. [ 140.535103][ T7248] netlink: 'syz.0.464': attribute type 9 has an invalid length. [ 140.544911][ T7248] netlink: 178076 bytes leftover after parsing attributes in process `syz.0.464'. [ 141.278589][ T7267] syzkaller0: entered promiscuous mode [ 141.297385][ T7267] syzkaller0: entered allmulticast mode [ 143.074344][ T7275] netlink: 'syz.0.475': attribute type 21 has an invalid length. [ 143.083332][ T7275] __nla_validate_parse: 1 callbacks suppressed [ 143.083346][ T7275] netlink: 9622 bytes leftover after parsing attributes in process `syz.0.475'. [ 143.536693][ T7301] syzkaller0: entered promiscuous mode [ 143.559448][ T7301] syzkaller0: entered allmulticast mode [ 144.193337][ T7325] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.487'. [ 144.266663][ T7325] netlink: zone id is out of range [ 145.691410][ T7325] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 146.184679][ T7349] netlink: 'syz.3.495': attribute type 3 has an invalid length. [ 146.200916][ T7349] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.495'. [ 146.539328][ T7357] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 146.566659][ T7357] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.667400][ T7363] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 146.716149][ T7363] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.498'. [ 148.360437][ T7416] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 148.396342][ T7416] netlink: 'syz.2.516': attribute type 6 has an invalid length. [ 148.404317][ T7416] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.516'. [ 148.575042][ T7423] netlink: 'syz.2.519': attribute type 2 has an invalid length. [ 148.583715][ T7423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.519'. [ 148.783334][ T7425] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 148.803664][ T7425] netlink: 'syz.0.520': attribute type 3 has an invalid length. [ 148.827381][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 149.090310][ T7434] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 149.098906][ T7434] netlink: 168 bytes leftover after parsing attributes in process `syz.0.520'. [ 149.256357][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.265913][ T7441] bridge0: entered allmulticast mode [ 149.932305][ T7466] netlink: 6 bytes leftover after parsing attributes in process `syz.1.533'. [ 150.349631][ T7476] netlink: 168 bytes leftover after parsing attributes in process `syz.3.537'. [ 150.480492][ T7478] netlink: 175660 bytes leftover after parsing attributes in process `syz.0.538'. [ 151.170268][ T7501] raw_sendmsg: syz.0.545 forgot to set AF_INET. Fix it! [ 151.967400][ T7513] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.382616][ T7526] validate_nla: 1 callbacks suppressed [ 152.382654][ T7526] netlink: 'syz.1.553': attribute type 21 has an invalid length. [ 152.411627][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.553'. [ 152.773128][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 152.940039][ T7554] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.562'. [ 152.959496][ T7551] vcan0: entered allmulticast mode [ 153.477219][ T7569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.570'. [ 153.497336][ T7569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.954070][ T7577] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.572'. [ 154.531386][ T7594] netlink: 'syz.0.578': attribute type 21 has an invalid length. [ 154.559152][ T7594] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.578'. [ 154.900156][ T7606] netlink: 'syz.2.581': attribute type 9 has an invalid length. [ 154.910970][ T7606] netlink: 175660 bytes leftover after parsing attributes in process `syz.2.581'. [ 155.264536][ T7614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.583'. [ 155.572050][ T7626] FAULT_INJECTION: forcing a failure. [ 155.572050][ T7626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.591233][ T7626] CPU: 1 PID: 7626 Comm: syz.3.588 Not tainted syzkaller #0 [ 155.598559][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.608616][ T7626] Call Trace: [ 155.611887][ T7626] [ 155.614816][ T7626] dump_stack_lvl+0x18c/0x250 [ 155.619498][ T7626] ? show_regs_print_info+0x20/0x20 [ 155.624691][ T7626] ? load_image+0x420/0x420 [ 155.629195][ T7626] ? __lock_acquire+0x7d80/0x7d80 [ 155.634216][ T7626] ? snprintf+0xe9/0x140 [ 155.638463][ T7626] should_fail_ex+0x394/0x4c0 [ 155.643141][ T7626] _copy_to_user+0x2f/0xa0 [ 155.647572][ T7626] simple_read_from_buffer+0xe7/0x150 [ 155.653031][ T7626] proc_fail_nth_read+0x1e8/0x260 [ 155.658055][ T7626] ? proc_fault_inject_write+0x360/0x360 [ 155.663685][ T7626] ? fsnotify_perm+0x271/0x5e0 [ 155.668450][ T7626] ? proc_fault_inject_write+0x360/0x360 [ 155.674079][ T7626] vfs_read+0x298/0x990 [ 155.678240][ T7626] ? kernel_read+0x1e0/0x1e0 [ 155.682828][ T7626] ? __fget_files+0x28/0x460 [ 155.687500][ T7626] ? __fget_files+0x3fc/0x460 [ 155.692180][ T7626] ? __fdget_pos+0x2a3/0x330 [ 155.696772][ T7626] ? ksys_read+0x74/0x260 [ 155.701101][ T7626] ksys_read+0x151/0x260 [ 155.705345][ T7626] ? vfs_write+0x9a0/0x9a0 [ 155.709865][ T7626] ? lockdep_hardirqs_on+0x98/0x150 [ 155.715060][ T7626] do_syscall_64+0x55/0xb0 [ 155.719559][ T7626] ? clear_bhb_loop+0x40/0x90 [ 155.724234][ T7626] ? clear_bhb_loop+0x40/0x90 [ 155.728905][ T7626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.734792][ T7626] RIP: 0033:0x7f239635e98e [ 155.739203][ T7626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.758818][ T7626] RSP: 002b:00007f23972fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.767247][ T7626] RAX: ffffffffffffffda RBX: 00007f23972fb6c0 RCX: 00007f239635e98e [ 155.775221][ T7626] RDX: 000000000000000f RSI: 00007f23972fb0a0 RDI: 0000000000000004 [ 155.783189][ T7626] RBP: 00007f23972fb090 R08: 0000000000000000 R09: 0000000000000000 [ 155.791163][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.799156][ T7626] R13: 00007f2396626038 R14: 00007f2396625fa0 R15: 00007ffc73ad10b8 [ 155.807134][ T7626] [ 156.217184][ T7645] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.595'. [ 156.357647][ T7647] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.604'. [ 157.018670][ T7660] netlink: 'syz.3.601': attribute type 10 has an invalid length. [ 157.234723][ T7671] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.606'. [ 158.213599][ T7689] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 158.223364][ T7689] macvlan1: entered allmulticast mode [ 158.242468][ T7689] veth1_vlan: entered allmulticast mode [ 158.282054][ T7689] team0: Port device macvlan1 added [ 158.456456][ T7697] netlink: 100 bytes leftover after parsing attributes in process `syz.0.616'. [ 158.487281][ T7697] netlink: 'syz.0.616': attribute type 63 has an invalid length. [ 158.504589][ T7697] netlink: 'syz.0.616': attribute type 63 has an invalid length. [ 158.541721][ T7697] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.616'. [ 158.774816][ T7709] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.619'. [ 158.848099][ T7712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.620'. [ 159.137423][ T7723] netlink: 'syz.1.624': attribute type 32 has an invalid length. [ 159.145281][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.624'. [ 159.346415][ T7734] netlink: 128 bytes leftover after parsing attributes in process `syz.1.628'. [ 159.375011][ T7734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.524416][ T7742] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.630'. [ 159.960221][ T7759] netlink: 'syz.1.638': attribute type 9 has an invalid length. [ 159.986068][ T7759] netlink: 175660 bytes leftover after parsing attributes in process `syz.1.638'. [ 161.349637][ T7779] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 161.362090][ T7779] netlink: 2 bytes leftover after parsing attributes in process `syz.0.644'. [ 161.392985][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.400239][ T7779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.447080][ T7779] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.893590][ T7808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 164.447050][ T7787] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.475309][ T7787] syzkaller0: entered promiscuous mode [ 164.494046][ T7787] syzkaller0: entered allmulticast mode [ 166.124991][ T7803] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 166.133006][ T7803] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 166.143515][ T7803] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.651'. [ 166.155868][ T7808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 166.283544][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 166.294053][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 166.310880][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 166.321193][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 166.350185][ T7827] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 166.373729][ T7827] veth1_macvtap: left promiscuous mode [ 166.474608][ T7832] netlink: 'syz.0.659': attribute type 33 has an invalid length. [ 166.483847][ T7832] netlink: 152 bytes leftover after parsing attributes in process `syz.0.659'. [ 166.683407][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 166.693639][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 166.705705][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 169.047284][ T7889] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.508502][ T7898] __nla_validate_parse: 14 callbacks suppressed [ 171.508521][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 171.540763][ T7902] netlink: 830 bytes leftover after parsing attributes in process `syz.0.686'. [ 171.601903][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 171.624771][ T7903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 171.659059][ T7905] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.686'. [ 171.682952][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 171.705501][ T7902] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.686'. [ 171.747576][ T7905] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.686'. [ 171.847457][ T7909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'. [ 171.997904][ T7909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'. [ 172.037978][ T7916] FAULT_INJECTION: forcing a failure. [ 172.037978][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 172.058455][ T7916] CPU: 1 PID: 7916 Comm: syz.3.690 Not tainted syzkaller #0 [ 172.065848][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.075926][ T7916] Call Trace: [ 172.079243][ T7916] [ 172.082187][ T7916] dump_stack_lvl+0x18c/0x250 [ 172.086871][ T7916] ? show_regs_print_info+0x20/0x20 [ 172.092083][ T7916] ? load_image+0x420/0x420 [ 172.096614][ T7916] ? __might_sleep+0xe0/0xe0 [ 172.101243][ T7916] ? __lock_acquire+0x7d80/0x7d80 [ 172.106279][ T7916] should_fail_ex+0x394/0x4c0 [ 172.110975][ T7916] should_failslab+0x9/0x20 [ 172.115476][ T7916] slab_pre_alloc_hook+0x59/0x300 [ 172.120517][ T7916] ? prepend_path+0x8a7/0x950 [ 172.125185][ T7916] ? tomoyo_encode+0x2ad/0x570 [ 172.129958][ T7916] ? tomoyo_encode+0x2ad/0x570 [ 172.134734][ T7916] __kmem_cache_alloc_node+0x53/0x250 [ 172.140143][ T7916] ? tomoyo_encode+0x2ad/0x570 [ 172.144909][ T7916] __kmalloc+0xa7/0x240 [ 172.149072][ T7916] tomoyo_encode+0x2ad/0x570 [ 172.153664][ T7916] tomoyo_realpath_from_path+0x57c/0x5c0 [ 172.159295][ T7916] ? tomoyo_domain+0xd6/0x120 [ 172.163989][ T7916] tomoyo_path_number_perm+0x248/0x5e0 [ 172.169449][ T7916] ? tomoyo_path_number_perm+0x217/0x5e0 [ 172.175083][ T7916] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 172.180539][ T7916] ? ksys_write+0x1d2/0x260 [ 172.185083][ T7916] ? __fget_files+0x28/0x460 [ 172.189679][ T7916] security_file_ioctl+0x70/0xa0 [ 172.194616][ T7916] __se_sys_ioctl+0x48/0x170 [ 172.199224][ T7916] do_syscall_64+0x55/0xb0 [ 172.203636][ T7916] ? clear_bhb_loop+0x40/0x90 [ 172.208312][ T7916] ? clear_bhb_loop+0x40/0x90 [ 172.212993][ T7916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.218901][ T7916] RIP: 0033:0x7f239639e159 [ 172.223333][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.242935][ T7916] RSP: 002b:00007f23972fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.251345][ T7916] RAX: ffffffffffffffda RBX: 00007f2396625fa0 RCX: 00007f239639e159 [ 172.259400][ T7916] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 172.267386][ T7916] RBP: 00007f23972fb090 R08: 0000000000000000 R09: 0000000000000000 [ 172.275356][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.283324][ T7916] R13: 00007f2396626038 R14: 00007f2396625fa0 R15: 00007ffc73ad10b8 [ 172.291303][ T7916] [ 172.298401][ T7916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.276990][ T7964] delete_channel: no stack [ 177.257784][ T7995] __nla_validate_parse: 10 callbacks suppressed [ 177.257799][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 177.281509][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 177.293033][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 177.308047][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 177.397292][ T7997] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.721'. [ 179.434907][ T7985] delete_channel: no stack [ 179.733286][ T8012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 179.742439][ T8012] syzkaller1: linktype set to 32 [ 179.810866][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 179.831497][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 179.868147][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 179.905546][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 181.249507][ T8038] sit0: entered allmulticast mode [ 181.516041][ T8051] netlink: 'syz.2.747': attribute type 21 has an invalid length. [ 181.551418][ T8051] IPv6: Can't replace route, no match found [ 181.575660][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.741'. [ 182.354035][ T8079] __nla_validate_parse: 4 callbacks suppressed [ 182.354051][ T8079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.588979][ T8072] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 182.603555][ T8079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.633925][ T8081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.656332][ T8083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 182.757053][ T8088] netlink: 'syz.2.755': attribute type 4 has an invalid length. [ 182.764775][ T8088] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.755'. [ 182.848757][ T8094] netlink: 'syz.3.757': attribute type 63 has an invalid length. [ 182.868167][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 182.877488][ T8094] netlink: 'syz.3.757': attribute type 63 has an invalid length. [ 182.885256][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 182.908056][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 182.937097][ T8098] : renamed from virt_wifi0 (while UP) [ 183.188660][ T8113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.765'. [ 183.200071][ T8113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.765'. [ 184.384043][ T8147] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 184.392333][ T8147] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 184.400395][ T8147] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 185.125986][ T11] wlan1: Trigger new scan to find an IBSS to join [ 187.778802][ T8172] __nla_validate_parse: 10 callbacks suppressed [ 187.778818][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 187.824742][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 187.866351][ T8175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 187.914092][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 188.073934][ T8179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.081639][ T8179] IPv6: NLM_F_CREATE should be set when creating new route [ 188.089296][ T8179] IPv6: NLM_F_CREATE should be set when creating new route [ 188.096792][ T8179] IPv6: NLM_F_CREATE should be set when creating new route [ 188.136281][ T8179] netlink: 'syz.2.787': attribute type 21 has an invalid length. [ 189.032699][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.794'. [ 189.040427][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 189.045939][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.794'. [ 189.076064][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 189.090269][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.794'. [ 189.114123][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.792'. [ 189.128520][ T8200] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 189.149972][ T8200] netlink: 'syz.1.793': attribute type 3 has an invalid length. [ 189.177095][ T8200] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 190.086208][ T49] wlan1: Trigger new scan to find an IBSS to join [ 190.587290][ T8234] netlink: 'syz.3.807': attribute type 9 has an invalid length. [ 190.650595][ T8236] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.607887][ T42] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 191.656204][ T42] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 191.703607][ T8249] Dead loop on virtual device ip6_vti0, fix it urgently! [ 191.945154][ T8259] netlink: 'syz.3.818': attribute type 21 has an invalid length. [ 193.228350][ T8279] __nla_validate_parse: 17 callbacks suppressed [ 193.228390][ T8279] netlink: 132 bytes leftover after parsing attributes in process `syz.2.825'. [ 194.422919][ T8299] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 194.433883][ T8296] netlink: 'syz.3.832': attribute type 11 has an invalid length. [ 194.442720][ T8296] netlink: 140 bytes leftover after parsing attributes in process `syz.3.832'. [ 194.494495][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500960][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.624428][ T8306] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 194.633003][ T8306] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 194.642544][ T8306] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.836'. [ 195.852867][ T8345] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 196.587200][ T8354] netlink: 'syz.0.854': attribute type 11 has an invalid length. [ 196.642501][ T8354] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.854'. [ 197.006537][ T8370] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 197.015766][ T8370] veth1_vlan: left allmulticast mode [ 198.014493][ T8397] syzkaller0: entered promiscuous mode [ 198.038369][ T8397] syzkaller0: entered allmulticast mode [ 198.050964][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 198.067630][ T8397] syzkaller0: mtu less than device minimum [ 201.004728][ T8458] netlink: 152 bytes leftover after parsing attributes in process `syz.2.885'. [ 201.075349][ T8458] bond0: (slave bond_slave_0): Releasing backup interface [ 201.178276][ T8458] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 201.246308][ T8457] netlink: 152 bytes leftover after parsing attributes in process `syz.2.885'. [ 201.696862][ T8430] Bluetooth: hci1: command 0x0406 tx timeout [ 201.699829][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 201.703619][ T8430] Bluetooth: hci3: command 0x0406 tx timeout [ 201.709066][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 203.614542][ T8495] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 203.759899][ T8495] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.896'. [ 204.119358][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 204.156165][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 204.185523][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 204.195693][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 204.316114][ T8515] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 204.574747][ T8519] FAULT_INJECTION: forcing a failure. [ 204.574747][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 204.646232][ T8519] CPU: 0 PID: 8519 Comm: syz.1.906 Not tainted syzkaller #0 [ 204.653596][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.663675][ T8519] Call Trace: [ 204.666971][ T8519] [ 204.669925][ T8519] dump_stack_lvl+0x18c/0x250 [ 204.674636][ T8519] ? show_regs_print_info+0x20/0x20 [ 204.679901][ T8519] ? load_image+0x420/0x420 [ 204.684440][ T8519] ? __asan_memset+0x22/0x40 [ 204.689100][ T8519] should_fail_ex+0x394/0x4c0 [ 204.693793][ T8519] should_failslab+0x9/0x20 [ 204.698321][ T8519] slab_pre_alloc_hook+0x59/0x300 [ 204.703367][ T8519] ? __debug_object_init+0xec/0x450 [ 204.708606][ T8519] kmem_cache_alloc+0x5a/0x2c0 [ 204.713387][ T8519] ? slab_build_skb+0x28/0x3e0 [ 204.718166][ T8519] slab_build_skb+0x28/0x3e0 [ 204.722763][ T8519] bpf_prog_test_run_skb+0x38f/0x18f0 [ 204.728135][ T8519] ? __fget_files+0x28/0x460 [ 204.732723][ T8519] ? __fget_files+0x3fc/0x460 [ 204.737403][ T8519] ? cpu_online+0x60/0x60 [ 204.741731][ T8519] bpf_prog_test_run+0x31f/0x390 [ 204.746672][ T8519] __sys_bpf+0x49d/0x890 [ 204.750907][ T8519] ? bpf_link_show_fdinfo+0x560/0x560 [ 204.756293][ T8519] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.762477][ T8519] __x64_sys_bpf+0x7c/0x90 [ 204.766906][ T8519] do_syscall_64+0x55/0xb0 [ 204.771341][ T8519] ? clear_bhb_loop+0x40/0x90 [ 204.776020][ T8519] ? clear_bhb_loop+0x40/0x90 [ 204.780702][ T8519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.786604][ T8519] RIP: 0033:0x7f85c0f9e159 [ 204.791014][ T8519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.810617][ T8519] RSP: 002b:00007f85c1dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.819032][ T8519] RAX: ffffffffffffffda RBX: 00007f85c1225fa0 RCX: 00007f85c0f9e159 [ 204.827002][ T8519] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 204.834966][ T8519] RBP: 00007f85c1dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.842935][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.850903][ T8519] R13: 00007f85c1226038 R14: 00007f85c1225fa0 R15: 00007ffd68f4eff8 [ 204.858896][ T8519] [ 206.057896][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.910'. [ 206.157391][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.910'. [ 206.176770][ T8535] netlink: 60 bytes leftover after parsing attributes in process `syz.2.910'. [ 206.906198][ T11] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 206.956030][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 207.032714][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.257248][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.267234][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.287692][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.918'. [ 207.511826][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 207.648389][ T8569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 207.721551][ T8572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 208.511012][ T8368] syz.0.854 (8368) used greatest stack depth: 18824 bytes left [ 208.886061][ T8365] syz.0.854 (8365) used greatest stack depth: 18792 bytes left [ 209.230151][ T8364] syz.0.854 (8364) used greatest stack depth: 18376 bytes left [ 209.463766][ T8366] syz.0.854 (8366) used greatest stack depth: 18032 bytes left [ 211.566817][ T8620] netlink: 'syz.2.938': attribute type 21 has an invalid length. [ 211.568487][ T8618] __nla_validate_parse: 4 callbacks suppressed [ 211.568502][ T8618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.937'. [ 211.629444][ T8621] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.937'. [ 211.782733][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.942'. [ 211.802038][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.942'. [ 211.822192][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.942'. [ 211.842012][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.942'. [ 212.107487][ T8647] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 212.115481][ T8647] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.946'. [ 212.132566][ T8645] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.947'. [ 212.149994][ T8645] netlink: 'syz.2.947': attribute type 4 has an invalid length. [ 212.160628][ T8645] netlink: 152 bytes leftover after parsing attributes in process `syz.2.947'. [ 212.269189][ T8651] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 212.285948][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.948'. [ 212.308915][ T8651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.389834][ T8682] sctp: [Deprecated]: syz.2.958 (pid 8682) Use of int in maxseg socket option. [ 213.389834][ T8682] Use struct sctp_assoc_value instead [ 216.590180][ T8695] __nla_validate_parse: 4 callbacks suppressed [ 216.590198][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'. [ 216.622725][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'. [ 216.666051][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'. [ 216.820007][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'. [ 218.613804][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 218.635958][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 218.653950][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 218.665398][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 219.622737][ T8731] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.978'. [ 220.921557][ T8747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.983'. [ 222.032900][ T8764] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 222.041011][ T8764] __nla_validate_parse: 3 callbacks suppressed [ 222.041029][ T8764] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.989'. [ 222.057683][ T8764] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 226.439878][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.994'. [ 226.449060][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.994'. [ 226.479125][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.994'. [ 226.508984][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.994'. [ 226.798041][ T8798] FAULT_INJECTION: forcing a failure. [ 226.798041][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 226.814869][ T8798] CPU: 0 PID: 8798 Comm: syz.0.1002 Not tainted syzkaller #0 [ 226.822297][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.832380][ T8798] Call Trace: [ 226.835684][ T8798] [ 226.838635][ T8798] dump_stack_lvl+0x18c/0x250 [ 226.843336][ T8798] ? sctp_sendmsg+0x1519/0x27b0 [ 226.848217][ T8798] ? ___sys_sendmsg+0x2a6/0x360 [ 226.853095][ T8798] ? show_regs_print_info+0x20/0x20 [ 226.858322][ T8798] ? load_image+0x420/0x420 [ 226.862890][ T8798] ? mark_lock+0x94/0x320 [ 226.867252][ T8798] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 226.873265][ T8798] should_fail_ex+0x394/0x4c0 [ 226.878078][ T8798] should_failslab+0x9/0x20 [ 226.882613][ T8798] slab_pre_alloc_hook+0x59/0x300 [ 226.887675][ T8798] ? lockdep_hardirqs_on+0x98/0x150 [ 226.892907][ T8798] ? sctp_add_bind_addr+0x8c/0x360 [ 226.898054][ T8798] __kmem_cache_alloc_node+0x53/0x250 [ 226.903462][ T8798] ? sctp_add_bind_addr+0x8c/0x360 [ 226.908608][ T8798] kmalloc_trace+0x2a/0xe0 [ 226.913053][ T8798] sctp_add_bind_addr+0x8c/0x360 [ 226.918035][ T8798] sctp_copy_local_addr_list+0x31b/0x4e0 [ 226.923701][ T8798] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 226.929467][ T8798] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 226.935575][ T8798] ? sctp_v4_is_any+0x35/0x60 [ 226.940289][ T8798] ? sctp_copy_one_addr+0x8c/0x350 [ 226.945482][ T8798] sctp_bind_addr_copy+0xb3/0x3c0 [ 226.950535][ T8798] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 226.956895][ T8798] sctp_connect_new_asoc+0x2f9/0x6a0 [ 226.962218][ T8798] ? __sctp_connect+0xd80/0xd80 [ 226.967092][ T8798] ? __local_bh_enable_ip+0x13a/0x1c0 [ 226.972499][ T8798] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 226.978070][ T8798] ? security_sctp_bind_connect+0x89/0xb0 [ 226.983822][ T8798] sctp_sendmsg+0x1519/0x27b0 [ 226.988543][ T8798] ? sctp_getsockopt+0xb60/0xb60 [ 226.993513][ T8798] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.999696][ T8798] ? lockdep_hardirqs_on+0x98/0x150 [ 227.004943][ T8798] ? sock_rps_record_flow+0x19/0x3f0 [ 227.010271][ T8798] ? inet_sendmsg+0xce/0x2a0 [ 227.014880][ T8798] ? inet_send_prepare+0x250/0x250 [ 227.020013][ T8798] ____sys_sendmsg+0x61b/0x980 [ 227.024810][ T8798] ? __asan_memset+0x22/0x40 [ 227.029433][ T8798] ? __sys_sendmsg_sock+0x30/0x30 [ 227.034502][ T8798] ? __import_iovec+0x5f2/0x850 [ 227.039401][ T8798] ? import_iovec+0x73/0xa0 [ 227.043938][ T8798] ___sys_sendmsg+0x2a6/0x360 [ 227.048658][ T8798] ? __sys_sendmsg+0x2b0/0x2b0 [ 227.053512][ T8798] ? ktime_get+0x7f/0x280 [ 227.057893][ T8798] __se_sys_sendmsg+0x1d0/0x2c0 [ 227.062776][ T8798] ? __x64_sys_sendmsg+0x80/0x80 [ 227.067756][ T8798] ? lockdep_hardirqs_on+0x98/0x150 [ 227.072993][ T8798] do_syscall_64+0x55/0xb0 [ 227.077482][ T8798] ? clear_bhb_loop+0x40/0x90 [ 227.082186][ T8798] ? clear_bhb_loop+0x40/0x90 [ 227.086892][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.092826][ T8798] RIP: 0033:0x7fb39619e159 [ 227.097294][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.116930][ T8798] RSP: 002b:00007fb397013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.125398][ T8798] RAX: ffffffffffffffda RBX: 00007fb396425fa0 RCX: 00007fb39619e159 [ 227.133451][ T8798] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 227.141526][ T8798] RBP: 00007fb397013090 R08: 0000000000000000 R09: 0000000000000000 [ 227.149521][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.157509][ T8798] R13: 00007fb396426038 R14: 00007fb396425fa0 R15: 00007fffee1a19d8 [ 227.165494][ T8798] [ 227.605320][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'. [ 227.629060][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'. [ 227.648008][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'. [ 227.663635][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'. [ 229.110335][ T8842] FAULT_INJECTION: forcing a failure. [ 229.110335][ T8842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.138286][ T8842] CPU: 0 PID: 8842 Comm: syz.2.1016 Not tainted syzkaller #0 [ 229.145727][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.155828][ T8842] Call Trace: [ 229.159127][ T8842] [ 229.162110][ T8842] dump_stack_lvl+0x18c/0x250 [ 229.166817][ T8842] ? show_regs_print_info+0x20/0x20 [ 229.172310][ T8842] ? load_image+0x420/0x420 [ 229.176857][ T8842] ? __might_fault+0xaa/0x120 [ 229.181585][ T8842] ? __lock_acquire+0x7d80/0x7d80 [ 229.186664][ T8842] ? __virt_addr_valid+0x10c/0x380 [ 229.191844][ T8842] should_fail_ex+0x394/0x4c0 [ 229.196644][ T8842] _copy_to_user+0x2f/0xa0 [ 229.201257][ T8842] bpf_verifier_vlog+0x5ac/0x840 [ 229.206229][ T8842] __btf_verifier_log+0xe3/0x140 [ 229.212763][ T8842] ? btf_check_sec_info+0x350/0x350 [ 229.218349][ T8842] btf_verifier_log_vsi+0x23c/0x3d0 [ 229.223852][ T8842] ? sort_r+0x17f5/0x1810 [ 229.228252][ T8842] ? btf_datasec_show+0x970/0x970 [ 229.233758][ T8842] btf_datasec_check_meta+0x9c2/0xb50 [ 229.239184][ T8842] btf_check_all_metas+0x371/0xaf0 [ 229.244783][ T8842] btf_parse_type_sec+0xfc/0x1960 [ 229.249945][ T8842] ? btf_check_sec_info+0x350/0x350 [ 229.255202][ T8842] ? rcuref_put_slowpath+0x101/0x150 [ 229.260852][ T8842] ? btf_verifier_log+0x1a0/0x1a0 [ 229.266356][ T8842] ? btf_parse_hdr+0x545/0x700 [ 229.271248][ T8842] ? btf_parse_str_sec+0x20d/0x2a0 [ 229.276411][ T8842] btf_new_fd+0x440/0x9e0 [ 229.281036][ T8842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.287240][ T8842] ? bpf_btf_show_fdinfo+0x80/0x80 [ 229.293347][ T8842] ? bpf_btf_load+0x4e/0x90 [ 229.298450][ T8842] __sys_bpf+0x670/0x890 [ 229.302720][ T8842] ? bpf_link_show_fdinfo+0x560/0x560 [ 229.308242][ T8842] ? lock_chain_count+0x20/0x20 [ 229.313144][ T8842] __x64_sys_bpf+0x7c/0x90 [ 229.317594][ T8842] do_syscall_64+0x55/0xb0 [ 229.322037][ T8842] ? clear_bhb_loop+0x40/0x90 [ 229.326734][ T8842] ? clear_bhb_loop+0x40/0x90 [ 229.331430][ T8842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.337340][ T8842] RIP: 0033:0x7f339a19e159 [ 229.341773][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.361571][ T8842] RSP: 002b:00007f339b05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.370004][ T8842] RAX: ffffffffffffffda RBX: 00007f339a425fa0 RCX: 00007f339a19e159 [ 229.377996][ T8842] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 229.385980][ T8842] RBP: 00007f339b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.393982][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.401963][ T8842] R13: 00007f339a426038 R14: 00007f339a425fa0 R15: 00007ffffa5892a8 [ 229.409974][ T8842] [ 229.620245][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 229.633123][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 229.643790][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 229.657290][ T8850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 230.549615][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1029'. [ 230.621105][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1029'. [ 230.914068][ T8885] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 230.922714][ T8885] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.836231][ T8918] netlink: 'syz.3.1045': attribute type 21 has an invalid length. [ 231.844198][ T8918] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.856208][ T8918] IPv6: Can't replace route, no match found [ 232.903154][ T8935] __nla_validate_parse: 12 callbacks suppressed [ 232.903174][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 233.153182][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 233.163693][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 233.194430][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 233.384622][ T8959] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 233.393456][ T8959] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1061'. [ 233.459559][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 233.469328][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 233.480831][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 233.496671][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 234.359183][ T8975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1067'. [ 240.217421][ T9034] __nla_validate_parse: 9 callbacks suppressed [ 240.217433][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 240.233916][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 240.263266][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 240.273150][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1083'. [ 240.375012][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'. [ 240.385383][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'. [ 240.402138][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'. [ 240.412555][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'. [ 241.078577][ T9055] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1092'. [ 241.109751][ T9055] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1092'. [ 248.075363][ T9115] netlink: 'syz.1.1113': attribute type 2 has an invalid length. [ 248.110964][ T9115] __nla_validate_parse: 16 callbacks suppressed [ 248.110976][ T9115] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1113'. [ 248.206698][ T9118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.214262][ T9118] IPv6: NLM_F_CREATE should be set when creating new route [ 248.221985][ T9118] IPv6: NLM_F_CREATE should be set when creating new route [ 248.229549][ T9118] IPv6: NLM_F_CREATE should be set when creating new route [ 248.299536][ T9118] netlink: 'syz.0.1114': attribute type 21 has an invalid length. [ 248.300196][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 248.317816][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 248.384123][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 248.395602][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 248.547450][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1116'. [ 248.560587][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1116'. [ 248.571759][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1116'. [ 248.586172][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1116'. [ 252.209140][ T9152] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1127'. [ 254.075802][ T9180] __nla_validate_parse: 10 callbacks suppressed [ 254.082999][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1137'. [ 254.103585][ T9182] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1136'. [ 254.131578][ T9182] hsr_slave_0: left promiscuous mode [ 254.156656][ T9182] hsr_slave_1: left promiscuous mode [ 254.190021][ T9182] bridge0: port 1(hsr0) entered disabled state [ 254.251963][ T9182] hsr0 (unregistering): left allmulticast mode [ 254.258685][ T9182] bridge0: port 1(hsr0) entered disabled state [ 254.302309][ T9183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1136'. [ 255.270294][ T9200] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1145'. [ 255.969299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986018][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.542722][ T9217] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1150'. [ 256.554997][ T9217] hsr_slave_0: left promiscuous mode [ 256.562337][ T9217] hsr_slave_1: left promiscuous mode [ 256.631452][ T9218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1150'. [ 256.821888][ T9233] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1156'. [ 256.898273][ T9233] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1156'. [ 257.298670][ T9245] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1159'. [ 257.308781][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 258.536176][ T9253] netlink: 'syz.3.1163': attribute type 10 has an invalid length. [ 258.825199][ T9253] team0 (unregistering): Port device team_slave_0 removed [ 258.880242][ T9253] team0 (unregistering): Port device team_slave_1 removed [ 258.918453][ T9253] team0 (unregistering): Port device wlan1 removed [ 258.941276][ T9259] @0Ù: renamed from syz_tun (while UP) [ 261.956693][ T9289] __nla_validate_parse: 4 callbacks suppressed [ 261.956706][ T9289] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1174'. [ 262.158449][ T9296] netlink: 'syz.3.1177': attribute type 2 has an invalid length. [ 262.200927][ T9304] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 262.389130][ T9306] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1181'. [ 262.399476][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 263.913878][ T9323] netlink: 'syz.2.1187': attribute type 10 has an invalid length. [ 263.959819][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1187'. [ 264.020142][ T9323] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.100922][ T9333] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1192'. [ 264.165597][ T9336] netlink: 'syz.0.1191': attribute type 153 has an invalid length. [ 264.205939][ T9336] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1191'. [ 264.289907][ T9339] sit0: entered promiscuous mode [ 267.281628][ T9358] delete_channel: no stack [ 267.296916][ T9358] delete_channel: no stack [ 271.279556][ T9425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1223'. [ 271.299402][ T9425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1223'. [ 271.439731][ T9427] ipvlan1: entered promiscuous mode [ 271.445002][ T9427] ipvlan1: entered allmulticast mode [ 271.455967][ T9427] veth0_vlan: entered allmulticast mode [ 271.468900][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1223'. [ 271.479804][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1223'. [ 272.658461][ T9435] netlink: 'syz.0.1227': attribute type 33 has an invalid length. [ 272.667145][ T9435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1227'. [ 278.867426][ T9496] netlink: 'syz.2.1245': attribute type 17 has an invalid length. [ 278.905759][ T9496] netlink: 'syz.2.1245': attribute type 16 has an invalid length. [ 278.917368][ T9496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1245'. [ 278.921628][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 278.949298][ T9494] netlink: 'syz.3.1246': attribute type 21 has an invalid length. [ 278.961875][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 278.974279][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 279.013244][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 279.046301][ T9501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 280.329673][ T9530] netlink: 'syz.0.1257': attribute type 2 has an invalid length. [ 280.361302][ T9530] netlink: 'syz.0.1257': attribute type 2 has an invalid length. [ 283.032190][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1259'. [ 283.064118][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1259'. [ 283.096816][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1259'. [ 283.111098][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1259'. [ 283.275737][ T9548] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 286.919672][ T9575] __nla_validate_parse: 1 callbacks suppressed [ 286.919686][ T9575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'. [ 286.935741][ T9575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'. [ 286.950418][ T9575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'. [ 286.979728][ T9575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'. [ 287.185125][ T9582] syzkaller0: entered promiscuous mode [ 287.202327][ T9582] syzkaller0: entered allmulticast mode [ 287.314065][ T9588] delete_channel: no stack [ 296.035739][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 296.046378][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 296.057961][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 296.061665][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1301'. [ 296.073187][ T9672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 296.101507][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1301'. [ 296.113875][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1301'. [ 296.158391][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1301'. [ 296.292013][ T9679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1311'. [ 296.370387][ T9679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1311'. [ 297.177292][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 53 [ 301.138080][ T9713] __nla_validate_parse: 2 callbacks suppressed [ 301.138097][ T9713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1313'. [ 301.177771][ T9713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1313'. [ 301.207935][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1313'. [ 301.238389][ T9713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1313'. [ 301.701901][ T9724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 301.714177][ T9724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 301.730751][ T9724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 301.745965][ T9725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1315'. [ 301.769313][ T9725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1315'. [ 301.786050][ T9724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 302.187890][ T9745] netlink: 'syz.3.1324': attribute type 2 has an invalid length. [ 305.941961][ T9769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.949478][ T9769] IPv6: NLM_F_CREATE should be set when creating new route [ 305.957134][ T9769] IPv6: NLM_F_CREATE should be set when creating new route [ 305.964512][ T9769] IPv6: NLM_F_CREATE should be set when creating new route [ 306.103358][ T9772] netlink: 'syz.3.1330': attribute type 21 has an invalid length. [ 308.975533][ T9782] __nla_validate_parse: 10 callbacks suppressed [ 308.975550][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 309.043920][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 309.087756][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 309.121508][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 309.357518][ T1331] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 309.368398][ T9797] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.378268][ T1331] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 312.086268][ T7068] wlan1: Trigger new scan to find an IBSS to join [ 312.786206][ T9823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 313.339164][ T9823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 313.353223][ T9825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 313.364783][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 313.860768][ T9845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1351'. [ 314.856934][ T9853] netlink: 'syz.0.1355': attribute type 3 has an invalid length. [ 314.877331][ T9853] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1355'. [ 314.944900][ T9857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 315.078766][ T9858] netlink: 'syz.0.1355': attribute type 3 has an invalid length. [ 315.087070][ T9858] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1355'. [ 315.103278][ T9857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 315.114252][ T9861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 315.127145][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 315.229403][ T9868] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 315.237724][ T9868] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1359'. [ 315.572491][ T9871] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1360'. [ 316.083783][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1367'. [ 316.094279][ T11] wlan1: Trigger new scan to find an IBSS to join [ 316.109145][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1367'. [ 316.195757][ T9897] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 316.244682][ T9895] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 316.263553][ T9895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.969382][ T9925] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 317.275994][ T9932] syzkaller0: entered promiscuous mode [ 317.281649][ T9932] syzkaller0: entered allmulticast mode [ 317.371439][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.384584][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.121975][ T7069] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 319.129645][ T9934] sit0: left promiscuous mode [ 319.290563][ T9933] sit0: entered promiscuous mode [ 319.564162][ T9943] sock: sock_set_timeout: `syz.1.1387' (pid 9943) tries to set negative timeout [ 320.027509][ T9961] netlink: 'syz.3.1395': attribute type 6 has an invalid length. [ 320.035298][ T9961] netlink: 'syz.3.1395': attribute type 3 has an invalid length. [ 320.097536][ T9961] __nla_validate_parse: 17 callbacks suppressed [ 320.097551][ T9961] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.1395'. [ 320.190896][ T9962] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 320.215422][ T9962] syzkaller0: linktype set to 768 [ 323.032376][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1399'. [ 323.048619][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1399'. [ 323.061531][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1399'. [ 323.080771][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 323.099855][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1399'. [ 323.121914][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 323.143416][ T9978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.150953][ T9978] IPv6: NLM_F_CREATE should be set when creating new route [ 323.215309][ T9978] netlink: 'syz.2.1401': attribute type 21 has an invalid length. [ 323.569091][T10002] netlink: 'syz.2.1408': attribute type 21 has an invalid length. [ 323.691115][T10004] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1409'. [ 323.893559][T10010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 323.908118][T10010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 326.453829][T10042] __nla_validate_parse: 2 callbacks suppressed [ 326.453850][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 326.481818][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 326.495405][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 326.514203][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 326.678341][T10034] netlink: 'syz.3.1418': attribute type 41 has an invalid length. [ 326.688786][T10034] netlink: 'syz.3.1418': attribute type 41 has an invalid length. [ 326.741221][T10034] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1418'. [ 332.428752][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 332.472677][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 332.496674][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 332.516831][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 333.598121][T10095] netlink: 'syz.2.1438': attribute type 4 has an invalid length. [ 333.628499][T10095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1438'. [ 336.059249][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1441'. [ 336.101643][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1441'. [ 336.131311][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1441'. [ 336.220275][T10105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1440'. [ 336.278095][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1441'. [ 339.984274][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 340.011577][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 340.037075][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 340.047115][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 340.102238][T10131] delete_channel: no stack [ 340.929063][T10160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.943350][T10160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.961386][T10160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.987496][T10160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1463'. [ 343.722612][T10174] netlink: 'syz.2.1467': attribute type 21 has an invalid length. [ 343.746005][T10174] IPv6: Can't replace route, no match found [ 343.929109][T10180] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1469'. [ 344.126175][T10186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1472'. [ 346.669121][T10210] __nla_validate_parse: 9 callbacks suppressed [ 346.669138][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1482'. [ 346.688112][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1482'. [ 346.698979][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1482'. [ 346.712431][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1482'. [ 346.716212][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'. [ 346.742092][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'. [ 346.773037][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'. [ 347.003284][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'. [ 347.414637][T10231] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1490'. [ 349.701169][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1494'. [ 349.942845][T10251] syzkaller0: entered promiscuous mode [ 349.966215][T10251] syzkaller0: entered allmulticast mode [ 350.038118][T10255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.288862][ T1331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.858829][T10280] __nla_validate_parse: 4 callbacks suppressed [ 351.858848][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1505'. [ 351.896012][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1505'. [ 351.917661][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1505'. [ 351.960098][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1505'. [ 352.423527][T10298] delete_channel: no stack [ 352.480409][T10287] syzkaller0: entered promiscuous mode [ 352.511492][T10287] syzkaller0: entered allmulticast mode [ 352.571961][T10307] netlink: 'syz.2.1514': attribute type 2 has an invalid length. [ 352.734847][T10307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1514'. [ 352.993778][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1517'. [ 355.321837][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1517'. [ 358.375269][T10350] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1524'. [ 358.481318][T10356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1525'. [ 358.664545][T10358] Dead loop on virtual device ip6_vti0, fix it urgently! [ 358.809058][T10361] tap0: tun_chr_ioctl cmd 1074025677 [ 358.814828][T10361] tap0: linktype set to 1 [ 358.848828][T10361] tap0: tun_chr_ioctl cmd 21731 [ 359.056967][T10372] netlink: 'syz.3.1533': attribute type 3 has an invalid length. [ 359.075644][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1533'. [ 359.122989][T10374] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1534'. [ 359.152856][T10370] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1532'. [ 361.601404][T10379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.679031][T10385] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1538'. [ 363.011800][T10406] netlink: 'syz.0.1546': attribute type 3 has an invalid length. [ 363.019876][T10406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1546'. [ 364.688157][T10408] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1547'. [ 367.479918][T10430] syzkaller0: entered promiscuous mode [ 367.485487][T10430] syzkaller0: entered allmulticast mode [ 369.256375][T10452] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1561'. [ 371.924287][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1569'. [ 371.940841][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1569'. [ 371.954538][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1569'. [ 371.969070][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1569'. [ 372.477415][T10488] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1572'. [ 375.950055][T10501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1578'. [ 376.002642][T10501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1578'. [ 376.014254][T10502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1578'. [ 376.064665][T10501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1578'. [ 376.504317][T10525] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 376.514941][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1586'. [ 376.531907][T10525] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.820274][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.827202][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.873844][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1589'. [ 378.926869][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1589'. [ 378.944332][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1589'. [ 378.959687][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1589'. [ 381.980099][T10554] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 381.988375][T10554] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 381.996870][T10554] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1597'. [ 382.012895][T10555] pim6reg1: entered promiscuous mode [ 382.022184][T10555] pim6reg1: entered allmulticast mode [ 382.081162][T10560] syz.1.1599[10560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.203205][T10567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1601'. [ 382.249838][T10567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1601'. [ 382.278873][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1601'. [ 382.324239][T10567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1601'. [ 382.646156][ T3499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.146877][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 385.186390][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 385.241655][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 385.471847][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 385.543465][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 385.560510][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 385.575173][T10605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 385.585053][T10599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 385.605272][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 385.867910][T10612] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1616'. [ 386.133550][T10622] netlink: 'syz.1.1620': attribute type 21 has an invalid length. [ 388.689509][T10633] netlink: 'syz.2.1625': attribute type 33 has an invalid length. [ 388.715950][T10633] `: renamed from ip6tnl0 (while UP) [ 391.629552][T10633] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 391.645991][T10639] netlink: 'syz.2.1625': attribute type 21 has an invalid length. [ 391.653845][T10639] __nla_validate_parse: 4 callbacks suppressed [ 391.653857][T10639] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1625'. [ 391.671465][T10639] netlink: 'syz.2.1625': attribute type 4 has an invalid length. [ 391.680260][T10639] netlink: 'syz.2.1625': attribute type 5 has an invalid length. [ 391.692202][T10639] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1625'. [ 391.792314][T10651] Dead loop on virtual device ip6_vti0, fix it urgently! [ 391.885799][T10654] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1628'. [ 395.951251][T10717] FAULT_INJECTION: forcing a failure. [ 395.951251][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 395.991542][T10717] CPU: 0 PID: 10717 Comm: syz.1.1649 Not tainted syzkaller #0 [ 395.999071][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.009176][T10717] Call Trace: [ 396.012472][T10717] [ 396.015937][T10717] dump_stack_lvl+0x18c/0x250 [ 396.020642][T10717] ? sctp_sendmsg+0x1519/0x27b0 [ 396.025513][T10717] ? ___sys_sendmsg+0x2a6/0x360 [ 396.030384][T10717] ? show_regs_print_info+0x20/0x20 [ 396.035604][T10717] ? load_image+0x420/0x420 [ 396.040184][T10717] should_fail_ex+0x394/0x4c0 [ 396.044891][T10717] should_failslab+0x9/0x20 [ 396.049418][T10717] slab_pre_alloc_hook+0x59/0x300 [ 396.054525][T10717] ? sctp_add_bind_addr+0x8c/0x360 [ 396.059663][T10717] __kmem_cache_alloc_node+0x53/0x250 [ 396.065062][T10717] ? sctp_add_bind_addr+0x8c/0x360 [ 396.070200][T10717] kmalloc_trace+0x2a/0xe0 [ 396.074640][T10717] sctp_add_bind_addr+0x8c/0x360 [ 396.079600][T10717] sctp_copy_local_addr_list+0x31b/0x4e0 [ 396.085256][T10717] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 396.091036][T10717] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 396.097171][T10717] ? sctp_v4_is_any+0x35/0x60 [ 396.101920][T10717] ? sctp_copy_one_addr+0x8c/0x350 [ 396.107065][T10717] sctp_bind_addr_copy+0xb3/0x3c0 [ 396.112210][T10717] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 396.118566][T10717] sctp_connect_new_asoc+0x2f9/0x6a0 [ 396.123873][T10717] ? __sctp_connect+0xd80/0xd80 [ 396.128736][T10717] ? __local_bh_enable_ip+0x13a/0x1c0 [ 396.134133][T10717] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 396.139709][T10717] ? security_sctp_bind_connect+0x89/0xb0 [ 396.145448][T10717] sctp_sendmsg+0x1519/0x27b0 [ 396.150206][T10717] ? sctp_getsockopt+0xb60/0xb60 [ 396.155211][T10717] ? aa_af_perm+0x330/0x330 [ 396.159871][T10717] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 396.166325][T10717] ? sock_rps_record_flow+0x19/0x3f0 [ 396.171629][T10717] ? inet_sendmsg+0xce/0x2a0 [ 396.176235][T10717] ? inet_send_prepare+0x250/0x250 [ 396.181626][T10717] ____sys_sendmsg+0x61b/0x980 [ 396.186418][T10717] ? __asan_memset+0x22/0x40 [ 396.191038][T10717] ? __sys_sendmsg_sock+0x30/0x30 [ 396.196093][T10717] ? __import_iovec+0x5f2/0x850 [ 396.200995][T10717] ? import_iovec+0x73/0xa0 [ 396.205529][T10717] ___sys_sendmsg+0x2a6/0x360 [ 396.210229][T10717] ? get_pid_task+0x20/0x1e0 [ 396.214845][T10717] ? __sys_sendmsg+0x2b0/0x2b0 [ 396.219651][T10717] ? __lock_acquire+0x7d80/0x7d80 [ 396.224719][T10717] __se_sys_sendmsg+0x1d0/0x2c0 [ 396.229680][T10717] ? __x64_sys_sendmsg+0x80/0x80 [ 396.234676][T10717] ? lockdep_hardirqs_on+0x98/0x150 [ 396.239895][T10717] do_syscall_64+0x55/0xb0 [ 396.244354][T10717] ? clear_bhb_loop+0x40/0x90 [ 396.249119][T10717] ? clear_bhb_loop+0x40/0x90 [ 396.253822][T10717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.259772][T10717] RIP: 0033:0x7f85c0f9e159 [ 396.264205][T10717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.283834][T10717] RSP: 002b:00007f85bf1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.292294][T10717] RAX: ffffffffffffffda RBX: 00007f85c1226360 RCX: 00007f85c0f9e159 [ 396.300309][T10717] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 396.308306][T10717] RBP: 00007f85bf1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 396.316340][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.324523][T10717] R13: 00007f85c12263f8 R14: 00007f85c1226360 R15: 00007ffd68f4eff8 [ 396.332531][T10717] [ 398.613090][T10723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1651'. [ 398.911201][T10732] netlink: 'syz.3.1656': attribute type 8 has an invalid length. [ 398.930784][T10732] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1656'. [ 402.201040][T10826] netlink: 'syz.0.1671': attribute type 33 has an invalid length. [ 402.247669][T10826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1671'. [ 402.317611][T10825] delete_channel: no stack [ 405.059832][T10843] netlink: 'syz.0.1675': attribute type 29 has an invalid length. [ 405.082635][T10843] netlink: 'syz.0.1675': attribute type 29 has an invalid length. [ 406.319432][T10864] netlink: 'syz.3.1682': attribute type 4 has an invalid length. [ 406.336044][T10864] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1682'. [ 409.866147][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1689'. [ 409.885996][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1689'. [ 409.914660][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1689'. [ 409.949618][T10885] netlink: 'syz.2.1691': attribute type 21 has an invalid length. [ 409.959363][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1689'. [ 410.036557][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1693'. [ 410.046167][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1693'. [ 410.066820][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1693'. [ 410.077088][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1693'. [ 410.158536][T10899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1695'. [ 413.018734][T10926] __nla_validate_parse: 3 callbacks suppressed [ 413.018751][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 413.034871][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 413.057049][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 413.076315][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1698'. [ 415.287757][ T1331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.799203][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1702'. [ 415.808616][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1702'. [ 415.836487][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1702'. [ 415.859254][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1702'. [ 416.126983][T10959] netlink: 'syz.0.1710': attribute type 10 has an invalid length. [ 416.147475][T10959] veth1_macvtap: left promiscuous mode [ 416.523089][T10972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1712'. [ 416.539903][T10972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1712'. [ 419.159888][T10977] __nla_validate_parse: 1 callbacks suppressed [ 419.159903][T10977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1712'. [ 419.336891][T10987] netlink: 'syz.2.1718': attribute type 39 has an invalid length. [ 419.405096][T10983] syzkaller0: entered promiscuous mode [ 419.410972][T10983] syzkaller0: entered allmulticast mode [ 419.421383][T10983] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 419.571994][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'. [ 419.581189][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'. [ 419.595056][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'. [ 419.616937][T10990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'. [ 419.733144][T10992] syzkaller0: entered promiscuous mode [ 419.739071][T10992] syzkaller0: entered allmulticast mode [ 420.389650][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1726'. [ 423.942276][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1726'. [ 424.087030][T11020] netlink: 'syz.1.1730': attribute type 2 has an invalid length. [ 424.095695][T11020] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1730'. [ 424.728224][T11043] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 424.935304][T11051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1738'. [ 427.236510][T11045] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 427.272105][T11051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1738'. [ 427.418140][T11059] netlink: 'syz.2.1740': attribute type 21 has an invalid length. [ 427.427453][T11059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1740'. [ 427.467122][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 427.485440][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 427.497405][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 427.509486][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 427.677194][T11078] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1745'. [ 431.170896][T11106] netlink: 'syz.1.1752': attribute type 10 has an invalid length. [ 431.192985][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1752'. [ 431.203375][T11106] vcan0: entered promiscuous mode [ 431.208862][T11107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1751'. [ 431.208977][T11106] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 431.243571][T11107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1751'. [ 431.308615][T11107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1751'. [ 431.330284][T11107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1751'. [ 431.388024][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1755'. [ 431.584123][T11123] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1759'. [ 431.594990][T11123] bridge_slave_1: default FDB implementation only supports local addresses [ 431.689748][T11124] netlink: 'syz.0.1761': attribute type 2 has an invalid length. [ 431.719111][T11124] netlink: 'syz.0.1761': attribute type 8 has an invalid length. [ 431.768747][T11124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 431.784363][T11114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1756'. [ 431.979893][T11136] netlink: 'syz.1.1765': attribute type 21 has an invalid length. [ 431.991436][T11136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1765'. [ 432.001262][T11136] netlink: 'syz.1.1765': attribute type 4 has an invalid length. [ 432.148197][T11143] FAULT_INJECTION: forcing a failure. [ 432.148197][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 432.164267][T11143] CPU: 1 PID: 11143 Comm: syz.0.1767 Not tainted syzkaller #0 [ 432.171787][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.181869][T11143] Call Trace: [ 432.185150][T11143] [ 432.188078][T11143] dump_stack_lvl+0x18c/0x250 [ 432.192763][T11143] ? show_regs_print_info+0x20/0x20 [ 432.197986][T11143] ? load_image+0x420/0x420 [ 432.202494][T11143] ? __might_sleep+0xe0/0xe0 [ 432.207104][T11143] ? __lock_acquire+0x7d80/0x7d80 [ 432.212130][T11143] should_fail_ex+0x394/0x4c0 [ 432.216810][T11143] should_failslab+0x9/0x20 [ 432.221321][T11143] slab_pre_alloc_hook+0x59/0x300 [ 432.226359][T11143] ? tomoyo_encode+0x2ad/0x570 [ 432.231113][T11143] ? tomoyo_encode+0x2ad/0x570 [ 432.235871][T11143] __kmem_cache_alloc_node+0x53/0x250 [ 432.241253][T11143] ? tomoyo_encode+0x2ad/0x570 [ 432.246013][T11143] __kmalloc+0xa7/0x240 [ 432.250175][T11143] tomoyo_encode+0x2ad/0x570 [ 432.254765][T11143] tomoyo_realpath_from_path+0x57c/0x5c0 [ 432.260393][T11143] ? tomoyo_domain+0xd6/0x120 [ 432.265071][T11143] tomoyo_path_number_perm+0x248/0x5e0 [ 432.270541][T11143] ? tomoyo_path_number_perm+0x217/0x5e0 [ 432.276192][T11143] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 432.281697][T11143] ? __fget_files+0x28/0x460 [ 432.286307][T11143] security_file_ioctl+0x70/0xa0 [ 432.291264][T11143] __se_sys_ioctl+0x48/0x170 [ 432.295859][T11143] do_syscall_64+0x55/0xb0 [ 432.300278][T11143] ? clear_bhb_loop+0x40/0x90 [ 432.304952][T11143] ? clear_bhb_loop+0x40/0x90 [ 432.309627][T11143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.315608][T11143] RIP: 0033:0x7fb39619e159 [ 432.320020][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.339631][T11143] RSP: 002b:00007fb397013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.348046][T11143] RAX: ffffffffffffffda RBX: 00007fb396425fa0 RCX: 00007fb39619e159 [ 432.356013][T11143] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000012 [ 432.363979][T11143] RBP: 00007fb397013090 R08: 0000000000000000 R09: 0000000000000000 [ 432.372204][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.380169][T11143] R13: 00007fb396426038 R14: 00007fb396425fa0 R15: 00007fffee1a19d8 [ 432.388149][T11143] [ 432.446088][T11143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.706451][T11156] bridge_slave_1: default FDB implementation only supports local addresses [ 435.264702][T11169] netlink: 'syz.1.1776': attribute type 2 has an invalid length. [ 435.376024][T11170] syz.0.1774 (11170) used obsolete PPPIOCDETACH ioctl [ 438.667287][T11206] netlink: 'syz.3.1784': attribute type 2 has an invalid length. [ 438.717931][T11206] netlink: 'syz.3.1784': attribute type 8 has an invalid length. [ 438.736684][T11206] __nla_validate_parse: 1 callbacks suppressed [ 438.736720][T11206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1784'. [ 439.450881][T11224] netlink: 'syz.3.1789': attribute type 3 has an invalid length. [ 439.462393][T11224] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 439.474141][T11224] netlink: 'syz.3.1789': attribute type 7 has an invalid length. [ 439.484554][T11224] netlink: 'syz.3.1789': attribute type 8 has an invalid length. [ 439.495446][T11224] netlink: 'syz.3.1789': attribute type 7 has an invalid length. [ 439.509242][T11224] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.1789'. [ 440.256519][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.263108][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.994713][T11242] tun0: tun_chr_ioctl cmd 1074812118 [ 443.013107][T11242] tun0: tun_chr_ioctl cmd 35108 [ 443.025719][T11244] netlink: 'syz.1.1798': attribute type 2 has an invalid length. [ 443.064709][T11244] netlink: 'syz.1.1798': attribute type 8 has an invalid length. [ 443.113642][T11244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1798'. [ 445.680404][T11261] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1802'. [ 445.691535][T11261] veth1_vlan: left allmulticast mode [ 445.962343][T11276] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1808'. [ 446.015366][T11276] team0: Port device team_slave_0 removed [ 446.029095][T11276] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 447.291345][ T1331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.459197][T11300] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 447.486232][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1816'. [ 447.509192][T11300] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 449.981666][T11321] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 449.990152][T11321] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1821'. [ 450.226923][T11324] lo: entered promiscuous mode [ 450.231838][T11324] lo: entered allmulticast mode [ 450.500505][T11336] syz.3.1828[11336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.746957][T11345] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 450.803508][T11345] netlink: 'syz.0.1831': attribute type 4 has an invalid length. [ 450.820200][T11345] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1831'. [ 456.231468][T11379] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1843'. [ 458.126078][T11414] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1854'. [ 458.141497][T11416] netlink: 'syz.3.1854': attribute type 4 has an invalid length. [ 458.195983][T11416] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1854'. [ 458.275587][T11416] bridge0: port 3(bond0) entered disabled state [ 459.428653][T11427] netlink: 'syz.3.1859': attribute type 21 has an invalid length. [ 459.441650][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 459.509916][T11435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.517238][T11435] IPv6: NLM_F_CREATE should be set when creating new route [ 459.718439][T11447] Dead loop on virtual device ip6_vti0, fix it urgently! [ 460.638249][T11461] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1872'. [ 460.801728][T11465] netlink: 'syz.1.1874': attribute type 21 has an invalid length. [ 460.837435][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 461.094038][T11477] FAULT_INJECTION: forcing a failure. [ 461.094038][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.107609][T11477] CPU: 0 PID: 11477 Comm: syz.1.1879 Not tainted syzkaller #0 [ 461.115095][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.125164][T11477] Call Trace: [ 461.128449][T11477] [ 461.131380][T11477] dump_stack_lvl+0x18c/0x250 [ 461.136084][T11477] ? show_regs_print_info+0x20/0x20 [ 461.141309][T11477] ? load_image+0x420/0x420 [ 461.145817][T11477] ? __lock_acquire+0x7d80/0x7d80 [ 461.150867][T11477] ? snprintf+0xe9/0x140 [ 461.155119][T11477] should_fail_ex+0x394/0x4c0 [ 461.159806][T11477] _copy_to_user+0x2f/0xa0 [ 461.164225][T11477] simple_read_from_buffer+0xe7/0x150 [ 461.169625][T11477] proc_fail_nth_read+0x1e8/0x260 [ 461.174659][T11477] ? proc_fault_inject_write+0x360/0x360 [ 461.181618][T11477] ? fsnotify_perm+0x271/0x5e0 [ 461.186388][T11477] ? proc_fault_inject_write+0x360/0x360 [ 461.192025][T11477] vfs_read+0x298/0x990 [ 461.196297][T11477] ? kernel_read+0x1e0/0x1e0 [ 461.200913][T11477] ? __fget_files+0x28/0x460 [ 461.205509][T11477] ? __fget_files+0x3fc/0x460 [ 461.210201][T11477] ? __fdget_pos+0x2a3/0x330 [ 461.214824][T11477] ? ksys_read+0x74/0x260 [ 461.219165][T11477] ksys_read+0x151/0x260 [ 461.223414][T11477] ? vfs_write+0x9a0/0x9a0 [ 461.227870][T11477] ? lockdep_hardirqs_on+0x98/0x150 [ 461.233083][T11477] do_syscall_64+0x55/0xb0 [ 461.237518][T11477] ? clear_bhb_loop+0x40/0x90 [ 461.242201][T11477] ? clear_bhb_loop+0x40/0x90 [ 461.246883][T11477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.252779][T11477] RIP: 0033:0x7f85c0f5e98e [ 461.257194][T11477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.276893][T11477] RSP: 002b:00007f85c1dcffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.285318][T11477] RAX: ffffffffffffffda RBX: 00007f85c1dd06c0 RCX: 00007f85c0f5e98e [ 461.293401][T11477] RDX: 000000000000000f RSI: 00007f85c1dd00a0 RDI: 0000000000000004 [ 461.301389][T11477] RBP: 00007f85c1dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 461.309444][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.317413][T11477] R13: 00007f85c1226038 R14: 00007f85c1225fa0 R15: 00007ffd68f4eff8 [ 461.325402][T11477] [ 465.437206][T11521] netlink: 'syz.2.1896': attribute type 19 has an invalid length. [ 465.460864][T11521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1896'. [ 467.610038][T11537] delete_channel: no stack [ 467.869960][T11556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 467.886042][T11556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 467.906180][T11548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 467.915594][T11552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 467.938055][T11548] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1904'. [ 468.042573][T11561] netlink: 'syz.3.1910': attribute type 4 has an invalid length. [ 468.061576][T11561] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1910'. [ 470.495786][T11570] netlink: 'syz.2.1914': attribute type 21 has an invalid length. [ 470.499453][T11573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 470.523323][T11570] IPv6: Can't replace route, no match found [ 470.532454][T11573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 470.557860][T11573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 470.587018][T11573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 471.008964][T11598] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1919'. [ 471.174594][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1921'. [ 471.201829][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1921'. [ 471.228905][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1921'. [ 471.262269][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1921'. [ 471.960878][T11627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1929'. [ 479.290970][ T2965] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.099660][T11737] netlink: 'syz.1.1965': attribute type 2 has an invalid length. [ 480.139558][T11737] __nla_validate_parse: 7 callbacks suppressed [ 480.139578][T11737] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1965'. [ 480.326885][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1968'. [ 480.366291][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1968'. [ 480.506830][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1968'. [ 480.636657][T11745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1968'. [ 483.316364][T11747] netlink: 'syz.2.1969': attribute type 39 has an invalid length. [ 483.364729][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1971'. [ 483.381004][T11754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1972'. [ 483.427411][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1971'. [ 483.438249][T11754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1972'. [ 483.450209][T11755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1971'. [ 483.469285][T11754] FAULT_INJECTION: forcing a failure. [ 483.469285][T11754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.507210][T11754] CPU: 0 PID: 11754 Comm: syz.3.1972 Not tainted syzkaller #0 [ 483.514737][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.524800][T11754] Call Trace: [ 483.528096][T11754] [ 483.531027][T11754] dump_stack_lvl+0x18c/0x250 [ 483.535726][T11754] ? show_regs_print_info+0x20/0x20 [ 483.540933][T11754] ? load_image+0x420/0x420 [ 483.545461][T11754] ? __might_fault+0xaa/0x120 [ 483.550180][T11754] ? __lock_acquire+0x7d80/0x7d80 [ 483.555250][T11754] should_fail_ex+0x394/0x4c0 [ 483.559983][T11754] _copy_from_user+0x2f/0xe0 [ 483.564629][T11754] ___sys_recvmsg+0x174/0x590 [ 483.569344][T11754] ? __sys_recvmsg+0x2a0/0x2a0 [ 483.574119][T11754] ? ksys_write+0x1d2/0x260 [ 483.578635][T11754] ? __fget_files+0x3fc/0x460 [ 483.583323][T11754] __x64_sys_recvmsg+0x21e/0x2f0 [ 483.588291][T11754] ? ___sys_recvmsg+0x590/0x590 [ 483.593171][T11754] ? lockdep_hardirqs_on+0x98/0x150 [ 483.598403][T11754] do_syscall_64+0x55/0xb0 [ 483.602848][T11754] ? clear_bhb_loop+0x40/0x90 [ 483.607526][T11754] ? clear_bhb_loop+0x40/0x90 [ 483.612204][T11754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.618099][T11754] RIP: 0033:0x7f239639e159 [ 483.622511][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.642116][T11754] RSP: 002b:00007f23972fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 483.650534][T11754] RAX: ffffffffffffffda RBX: 00007f2396625fa0 RCX: 00007f239639e159 [ 483.658514][T11754] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 483.666481][T11754] RBP: 00007f23972fb090 R08: 0000000000000000 R09: 0000000000000000 [ 483.674443][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.682408][T11754] R13: 00007f2396626038 R14: 00007f2396625fa0 R15: 00007ffc73ad10b8 [ 483.690384][T11754] [ 484.231467][T11775] netlink: 'syz.2.1980': attribute type 29 has an invalid length. [ 484.258718][T11775] netlink: 'syz.2.1980': attribute type 29 has an invalid length. [ 489.515741][T11799] netlink: 'syz.1.1988': attribute type 13 has an invalid length. [ 489.556072][T11799] __nla_validate_parse: 4 callbacks suppressed [ 489.556090][T11799] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1988'. [ 489.726096][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 489.749057][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 489.811585][T11804] netlink: 'syz.0.1987': attribute type 39 has an invalid length. [ 492.044822][T11814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 492.056266][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1991'. [ 492.198846][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1993'. [ 492.226035][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1993'. [ 492.238122][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1993'. [ 492.250446][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1993'. [ 495.256483][T11868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2001'. [ 495.284848][T11876] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 495.307133][T11876] veth1_vlan: left allmulticast mode [ 495.592006][T11884] netlink: 'syz.0.2006': attribute type 21 has an invalid length. [ 495.606636][T11884] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2006'. [ 495.894917][T11894] sit0: entered allmulticast mode [ 498.745204][T11925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2017'. [ 498.837362][T11925] hsr_slave_0: left promiscuous mode [ 498.847292][T11925] hsr_slave_1: left promiscuous mode [ 498.911892][T11926] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 498.936245][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2018'. [ 498.980282][T11926] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 501.699930][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.715932][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.998822][T11946] netlink: 'syz.1.2025': attribute type 3 has an invalid length. [ 502.016109][T11946] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2025'. [ 502.058532][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2026'. [ 502.087738][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2026'. [ 502.134902][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2026'. [ 502.173562][T11949] netlink: 'syz.0.2026': attribute type 10 has an invalid length. [ 502.232246][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.263756][T11949] bridge_slave_1: left allmulticast mode [ 502.269676][T11949] bridge_slave_1: left promiscuous mode [ 502.276550][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.308581][T11949] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 502.491530][T11949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2026'. [ 507.540749][T11987] netlink: 'syz.3.2041': attribute type 21 has an invalid length. [ 507.570106][T11987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2041'. [ 508.040818][T11997] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2044'. [ 511.244950][T12021] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2052'. [ 511.276569][T12018] netlink: 'syz.1.2052': attribute type 4 has an invalid length. [ 511.315374][T12018] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2052'. [ 511.432392][T12031] Dead loop on virtual device ip6_vti0, fix it urgently! [ 512.214073][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.568060][T11845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 515.478367][T12060] ªªªªªª: renamed from vlan0 (while UP) [ 522.074084][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 524.445373][T12109] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2080'. [ 524.469930][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.630642][T12112] FAULT_INJECTION: forcing a failure. [ 524.630642][T12112] name failslab, interval 1, probability 0, space 0, times 0 [ 524.691855][T12112] CPU: 0 PID: 12112 Comm: syz.0.2079 Not tainted syzkaller #0 [ 524.699408][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.709495][T12112] Call Trace: [ 524.712793][T12112] [ 524.715747][T12112] dump_stack_lvl+0x18c/0x250 [ 524.720454][T12112] ? sctp_sendmsg+0x1519/0x27b0 [ 524.725348][T12112] ? ___sys_sendmsg+0x2a6/0x360 [ 524.730231][T12112] ? show_regs_print_info+0x20/0x20 [ 524.735472][T12112] ? load_image+0x420/0x420 [ 524.740024][T12112] should_fail_ex+0x394/0x4c0 [ 524.745078][T12112] should_failslab+0x9/0x20 [ 524.749892][T12112] slab_pre_alloc_hook+0x59/0x300 [ 524.755223][T12112] ? sctp_add_bind_addr+0x8c/0x360 [ 524.760636][T12112] __kmem_cache_alloc_node+0x53/0x250 [ 524.766410][T12112] ? sctp_add_bind_addr+0x8c/0x360 [ 524.771779][T12112] kmalloc_trace+0x2a/0xe0 [ 524.777296][T12112] sctp_add_bind_addr+0x8c/0x360 [ 524.782460][T12112] sctp_copy_local_addr_list+0x31b/0x4e0 [ 524.788154][T12112] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 524.793910][T12112] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 524.800019][T12112] ? sctp_v4_is_any+0x35/0x60 [ 524.804727][T12112] ? sctp_copy_one_addr+0x8c/0x350 [ 524.809877][T12112] sctp_bind_addr_copy+0xb3/0x3c0 [ 524.814933][T12112] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 524.821307][T12112] sctp_connect_new_asoc+0x2f9/0x6a0 [ 524.826644][T12112] ? __sctp_connect+0xd80/0xd80 [ 524.831528][T12112] ? __local_bh_enable_ip+0x13a/0x1c0 [ 524.836939][T12112] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 524.842521][T12112] ? security_sctp_bind_connect+0x89/0xb0 [ 524.848303][T12112] sctp_sendmsg+0x1519/0x27b0 [ 524.853130][T12112] ? sctp_getsockopt+0xb60/0xb60 [ 524.858159][T12112] ? aa_af_perm+0x330/0x330 [ 524.862806][T12112] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 524.869265][T12112] ? sock_rps_record_flow+0x19/0x3f0 [ 524.874589][T12112] ? inet_sendmsg+0xce/0x2a0 [ 524.879207][T12112] ? inet_send_prepare+0x250/0x250 [ 524.884353][T12112] ____sys_sendmsg+0x61b/0x980 [ 524.889197][T12112] ? __asan_memset+0x22/0x40 [ 524.893822][T12112] ? __sys_sendmsg_sock+0x30/0x30 [ 524.898875][T12112] ? __import_iovec+0x5f2/0x850 [ 524.903772][T12112] ? import_iovec+0x73/0xa0 [ 524.908313][T12112] ___sys_sendmsg+0x2a6/0x360 [ 524.913037][T12112] ? get_pid_task+0x20/0x1e0 [ 524.917674][T12112] ? __sys_sendmsg+0x2b0/0x2b0 [ 524.922497][T12112] ? __lock_acquire+0x7d80/0x7d80 [ 524.927581][T12112] __se_sys_sendmsg+0x1d0/0x2c0 [ 524.932507][T12112] ? __x64_sys_sendmsg+0x80/0x80 [ 524.937580][T12112] ? lockdep_hardirqs_on+0x98/0x150 [ 524.942814][T12112] do_syscall_64+0x55/0xb0 [ 524.947262][T12112] ? clear_bhb_loop+0x40/0x90 [ 524.951971][T12112] ? clear_bhb_loop+0x40/0x90 [ 524.956681][T12112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.962603][T12112] RIP: 0033:0x7fb39619e159 [ 524.967042][T12112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.986775][T12112] RSP: 002b:00007fb396ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.995238][T12112] RAX: ffffffffffffffda RBX: 00007fb396426090 RCX: 00007fb39619e159 [ 525.003241][T12112] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015 [ 525.011241][T12112] RBP: 00007fb396ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 525.019249][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.027249][T12112] R13: 00007fb396426128 R14: 00007fb396426090 R15: 00007fffee1a19d8 [ 525.035295][T12112] [ 527.738603][T12128] FAULT_INJECTION: forcing a failure. [ 527.738603][T12128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.766087][T12128] CPU: 0 PID: 12128 Comm: syz.0.2087 Not tainted syzkaller #0 [ 527.773611][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.783672][T12128] Call Trace: [ 527.786964][T12128] [ 527.789906][T12128] dump_stack_lvl+0x18c/0x250 [ 527.794614][T12128] ? show_regs_print_info+0x20/0x20 [ 527.799826][T12128] ? load_image+0x420/0x420 [ 527.804349][T12128] ? __lock_acquire+0x7d80/0x7d80 [ 527.809373][T12128] ? __virt_addr_valid+0x10c/0x380 [ 527.814503][T12128] should_fail_ex+0x394/0x4c0 [ 527.819190][T12128] _copy_from_user+0x2f/0xe0 [ 527.823779][T12128] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 527.829075][T12128] bpf_vlog_finalize+0x12b/0x3e0 [ 527.834023][T12128] btf_new_fd+0x4ca/0x9e0 [ 527.838361][T12128] ? bpf_btf_show_fdinfo+0x80/0x80 [ 527.843474][T12128] ? capable+0x88/0xe0 [ 527.847548][T12128] __sys_bpf+0x670/0x890 [ 527.851794][T12128] ? bpf_link_show_fdinfo+0x560/0x560 [ 527.857176][T12128] ? lock_chain_count+0x20/0x20 [ 527.862037][T12128] __x64_sys_bpf+0x7c/0x90 [ 527.866459][T12128] do_syscall_64+0x55/0xb0 [ 527.870872][T12128] ? clear_bhb_loop+0x40/0x90 [ 527.875549][T12128] ? clear_bhb_loop+0x40/0x90 [ 527.880259][T12128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.886160][T12128] RIP: 0033:0x7fb39619e159 [ 527.890580][T12128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.910192][T12128] RSP: 002b:00007fb397013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.918611][T12128] RAX: ffffffffffffffda RBX: 00007fb396425fa0 RCX: 00007fb39619e159 [ 527.926584][T12128] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 527.934555][T12128] RBP: 00007fb397013090 R08: 0000000000000000 R09: 0000000000000000 [ 527.942524][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.950493][T12128] R13: 00007fb396426038 R14: 00007fb396425fa0 R15: 00007fffee1a19d8 [ 527.958477][T12128] [ 527.992762][T12133] netlink: 'syz.2.2088': attribute type 4 has an invalid length. [ 528.001551][T12133] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2088'. [ 529.592912][T12157] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 531.989129][T12175] netlink: 'syz.3.2105': attribute type 10 has an invalid length. [ 537.908032][T12221] netlink: 'syz.3.2122': attribute type 2 has an invalid length. [ 537.929374][T12221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2122'. [ 540.633521][T12237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2129'. [ 540.642937][T12237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2129'. [ 540.655065][T12237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2129'. [ 540.666704][T12237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2129'. [ 543.761940][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2133'. [ 543.775643][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2133'. [ 543.796301][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2133'. [ 543.821482][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2133'. [ 544.233702][T12260] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 545.209836][T11843] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.898192][T12260] veth0_macvtap: left promiscuous mode [ 547.029663][T12265] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 547.040402][T12267] netlink: 'syz.1.2139': attribute type 21 has an invalid length. [ 547.059862][T12267] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2139'. [ 547.354970][T12278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 547.483742][T12278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 547.529175][T12281] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 547.545404][T12284] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2144'. [ 547.645309][T12278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 547.657650][T12289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.665013][T12289] IPv6: NLM_F_CREATE should be set when creating new route [ 547.735882][T12291] Dead loop on virtual device ip6_vti0, fix it urgently! [ 547.744380][T12289] netlink: 'syz.2.2145': attribute type 21 has an invalid length. [ 550.758407][T12314] FAULT_INJECTION: forcing a failure. [ 550.758407][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.791166][T12314] CPU: 0 PID: 12314 Comm: syz.2.2153 Not tainted syzkaller #0 [ 550.798692][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.808808][T12314] Call Trace: [ 550.812107][T12314] [ 550.815078][T12314] dump_stack_lvl+0x18c/0x250 [ 550.819788][T12314] ? show_regs_print_info+0x20/0x20 [ 550.825029][T12314] ? load_image+0x420/0x420 [ 550.829561][T12314] ? __might_fault+0xaa/0x120 [ 550.834264][T12314] ? __lock_acquire+0x7d80/0x7d80 [ 550.839291][T12314] ? __sanitizer_cov_trace_switch+0x65/0xe0 [ 550.845190][T12314] should_fail_ex+0x394/0x4c0 [ 550.849897][T12314] _copy_from_user+0x2f/0xe0 [ 550.854514][T12314] dev_ethtool+0xc6/0x18d0 [ 550.858940][T12314] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 550.865193][T12314] ? __lock_acquire+0x7d80/0x7d80 [ 550.870231][T12314] ? __might_fault+0xaa/0x120 [ 550.874918][T12314] ? full_name_hash+0x92/0xe0 [ 550.879609][T12314] ? dev_load+0x21/0x1f0 [ 550.883889][T12314] dev_ioctl+0x392/0x1140 [ 550.885515][T12321] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.2156'. [ 550.888262][T12314] sock_do_ioctl+0x239/0x310 [ 550.888294][T12314] ? sock_show_fdinfo+0xb0/0xb0 [ 550.888327][T12314] sock_ioctl+0x5be/0x7e0 [ 550.888349][T12314] ? sock_poll+0x3e0/0x3e0 [ 550.888378][T12314] ? bpf_lsm_file_ioctl+0x9/0x10 [ 550.888395][T12314] ? security_file_ioctl+0x80/0xa0 [ 550.888417][T12314] ? sock_poll+0x3e0/0x3e0 [ 550.888437][T12314] __se_sys_ioctl+0xfd/0x170 [ 550.888461][T12314] do_syscall_64+0x55/0xb0 [ 550.888482][T12314] ? clear_bhb_loop+0x40/0x90 [ 550.888503][T12314] ? clear_bhb_loop+0x40/0x90 [ 550.888524][T12314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.888543][T12314] RIP: 0033:0x7f339a19e159 [ 550.888561][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.978809][T12314] RSP: 002b:00007f339b05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.987328][T12314] RAX: ffffffffffffffda RBX: 00007f339a425fa0 RCX: 00007f339a19e159 [ 550.995340][T12314] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000012 [ 551.003312][T12314] RBP: 00007f339b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 551.011279][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.019243][T12314] R13: 00007f339a426038 R14: 00007f339a425fa0 R15: 00007ffffa5892a8 [ 551.027254][T12314] [ 555.038525][T12358] netlink: 'syz.1.2169': attribute type 10 has an invalid length. [ 555.217895][T12358] team0: Port device macvlan1 removed [ 558.612916][T12385] netlink: 'syz.3.2179': attribute type 33 has an invalid length. [ 558.625776][T12385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2179'. [ 558.642532][T12380] netlink: 'syz.0.2178': attribute type 10 has an invalid length. [ 558.666045][T12380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'. [ 558.690627][T12380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 560.468772][T12417] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2189'. [ 560.529841][T12417] netlink: 'syz.1.2189': attribute type 6 has an invalid length. [ 563.132093][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138581][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.200214][T12433] netlink: 'syz.0.2195': attribute type 1 has an invalid length. [ 563.208726][T12433] netlink: 'syz.0.2195': attribute type 4 has an invalid length. [ 563.217719][T12433] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2195'. [ 564.191458][T12444] veth0_vlan: entered allmulticast mode [ 566.330427][T12445] veth0_vlan: left promiscuous mode [ 566.338344][T12445] veth0_vlan: entered promiscuous mode [ 566.484326][T12462] netlink: 'syz.3.2206': attribute type 21 has an invalid length. [ 566.493254][T12462] netlink: 'syz.3.2206': attribute type 20 has an invalid length. [ 567.802921][T12481] FAULT_INJECTION: forcing a failure. [ 567.802921][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.822508][T12481] CPU: 0 PID: 12481 Comm: syz.2.2212 Not tainted syzkaller #0 [ 567.830058][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.840150][T12481] Call Trace: [ 567.843452][T12481] [ 567.846409][T12481] dump_stack_lvl+0x18c/0x250 [ 567.851130][T12481] ? show_regs_print_info+0x20/0x20 [ 567.856359][T12481] ? load_image+0x420/0x420 [ 567.860942][T12481] ? __might_fault+0xaa/0x120 [ 567.865651][T12481] ? __lock_acquire+0x7d80/0x7d80 [ 567.870729][T12481] should_fail_ex+0x394/0x4c0 [ 567.875453][T12481] _copy_from_user+0x2f/0xe0 [ 567.880070][T12481] __sys_bpf+0x23e/0x890 [ 567.884407][T12481] ? bpf_link_show_fdinfo+0x560/0x560 [ 567.889785][T12481] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.895950][T12481] __x64_sys_bpf+0x7c/0x90 [ 567.900362][T12481] do_syscall_64+0x55/0xb0 [ 567.904776][T12481] ? clear_bhb_loop+0x40/0x90 [ 567.909451][T12481] ? clear_bhb_loop+0x40/0x90 [ 567.914174][T12481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.920080][T12481] RIP: 0033:0x7f339a19e159 [ 567.924511][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.944124][T12481] RSP: 002b:00007f339b05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.952540][T12481] RAX: ffffffffffffffda RBX: 00007f339a425fa0 RCX: 00007f339a19e159 [ 567.960506][T12481] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 567.968471][T12481] RBP: 00007f339b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 567.976440][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.984409][T12481] R13: 00007f339a426038 R14: 00007f339a425fa0 R15: 00007ffffa5892a8 [ 567.992408][T12481] [ 568.264480][T12495] netlink: 'syz.1.2218': attribute type 3 has an invalid length. [ 568.272877][T12495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2218'. [ 569.127116][T11838] wlan1: Trigger new scan to find an IBSS to join [ 570.655912][T12498] netlink: 'syz.1.2220': attribute type 6 has an invalid length. [ 570.804624][T12504] netlink: 'syz.1.2222': attribute type 21 has an invalid length. [ 570.826170][T12504] netlink: 'syz.1.2222': attribute type 20 has an invalid length. [ 571.399059][T12516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.438664][T12516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.447314][T12516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.468054][T12516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.476094][T12516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 571.486257][T12516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.046786][T11840] wlan1: Trigger new scan to find an IBSS to join [ 573.686684][T12516] Bluetooth: hci4: command tx timeout Stopping sshd: stopped /usr/sbin/sshd (pid 5535) OK Stopping crond: stopped /usr/sbin/crond (pid 5517) OK Stopping dhcpcd... [ 575.203764][T11846] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 575.214991][T11838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 stopped /sbin/dhcpcd (pid 5439) [ 575.502892][T11838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.540028][T12553] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 575.556030][T12553] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2232'. Stopping network: [ 575.676105][T12555] netlink: 'syz.0.2234': attribute type 21 has an invalid length. [ 575.684182][T12555] netlink: 'syz.0.2234': attribute type 20 has an invalid length. [ 575.776098][T12516] Bluetooth: hci4: command tx timeout [ 576.402717][T11838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.671082][T11838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.963788][T12514] chnl_net:caif_netlink_parms(): no params data found [ 576.983571][T12582] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2239'. OK [ 577.053198][T12582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.073491][T12582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.092538][T12582] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 577.107659][T12582] bond0 (unregistering): Released all slaves Stopping iptables: OK Stopping system message bus: [ 577.628913][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.664375][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.686265][T12514] bridge_slave_0: entered allmulticast mode [ 577.713688][T12514] bridge_slave_0: entered promiscuous mode [ 577.722408][T12602] netlink: 'syz.1.2242': attribute type 29 has an invalid length. [ 577.791923][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.819445][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.842976][T12514] bridge_slave_1: entered allmulticast mode [ 577.852981][T12516] Bluetooth: hci4: command tx timeout [ 577.907356][T12514] bridge_slave_1: entered promiscuous mode [ 578.040551][T12602] netlink: 'syz.1.2242': attribute type 29 has an invalid length. [ 578.288239][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.365663][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.509941][T12602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2242'. [ 578.794223][T12514] team0: Port device team_slave_0 added [ 578.844923][T12514] team0: Port device team_slave_1 added done [ 579.177433][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.187996][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.241980][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.267111][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.274096][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.301996][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.442630][T12514] hsr_slave_0: entered promiscuous mode [ 579.449475][T12514] hsr_slave_1: entered promiscuous mode [ 579.925945][T12516] Bluetooth: hci4: command tx timeout Stopping klogd: OK Stopping acpid: [ 580.461698][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.470332][T11838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.482912][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.490694][T11838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.508837][T11838] veth1_macvtap: left promiscuous mode [ 580.515499][T11838] veth0_macvtap: left promiscuous mode [ 580.522085][T11838] veth1_vlan: left promiscuous mode [ 580.527723][T11838] veth0_vlan: left promiscuous mode [ 580.961203][T11838] team0 (unregistering): Port device macvlan1 removed [ 581.265314][T11838] team0 (unregistering): Port device team_slave_1 removed [ 581.312618][T11838] team0 (unregistering): Port device team_slave_0 removed [ 581.351567][T11838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.425962][T11838] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface OK Stopping syslogd: stopped /sbin/syslogd (pid 5127) OK [ 581.731620][T11838] bond0 (unregistering): Released all slaves [ 581.877812][T12514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 581.892788][T12514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 581.904858][T12514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 581.929875][T12514] netdevsim netdevsim2 netdevsim3: renamed from eth3 umount: can't remount debugfs read-only [ 582.089101][T12514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.146474][T12514] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.165229][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.172444][T11843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.219439][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.226737][T11842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.295616][T12514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.310610][T12514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.598112][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.655162][T12514] veth0_vlan: entered promiscuous mode [ 582.674740][T12514] veth1_vlan: entered promiscuous mode [ 582.732285][T12514] veth0_macvtap: entered promiscuous mode [ 582.747362][T12514] veth1_macvtap: entered promiscuous mode [ 582.776684][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.794840][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.805804][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.822348][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.833158][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.848350][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.862724][T12514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.882782][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.900932][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.912178][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.928813][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.942900][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.956678][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.978246][T12514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.999361][T12514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.011937][T12514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.022846][T12514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.037916][T12514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.150500][T11840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.173718][T11840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.209523][T11838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.218639][T11838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.3 closed by remote host. [ 584.471373][T11817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.552378][T11817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.634466][T11817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.701033][T11817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 585.823649][T11817] hsr_slave_0: left promiscuous mode [ 585.830001][T11817] hsr_slave_1: left promiscuous mode [ 585.835908][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.843324][T11817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.852144][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.859710][T11817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.877538][T11817] veth1_macvtap: left promiscuous mode [ 585.883214][T11817] veth0_macvtap: left promiscuous mode [ 585.888868][T11817] veth1_vlan: left promiscuous mode [ 585.894087][T11817] veth0_vlan: left promiscuous mode [ 586.011429][T12648] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 586.034361][T12648] ACPI: PM: Preparing to enter system sleep state S5 [ 586.063659][T12648] kvm: exiting hardware virtualization [ 586.074263][T12648] reboot: Power down serialport: VM disconnected.